last executing test programs: 43.193904091s ago: executing program 3 (id=3781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff0000000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) (fail_nth: 6) 43.135233572s ago: executing program 3 (id=3782): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @rand_addr=0x64010101, @multicast, @remote}}}}, &(0x7f0000000200)={0x0, 0x2, [0x20, 0x50b, 0x2e9, 0xd3b]}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300)='./file2/file0\x00') sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYRESOCT]) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0xfffffd6b, &(0x7f0000000880)=[{&(0x7f0000000600)="5c00000013006bcc9e3be35c6e17ab31076b876c1d0000007ea60864160af36514001af9eaa8000007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c95330d2758fc51cff323b36c13231e49dd70b2c730d6fc8d00d44bc0c94ff879bc7a0275bf1fcf426cc2a7c8ce4ef7d68ddcb8b3d2a270946d2680062d4b830ce5d0af3259cab47c34c7d", 0xa5}, {&(0x7f0000000540)="fb9f863cc063480cb61d7b2ab06d7d201976f5f7000079281f2cfe68222d931aec6e4b2eb82d041e0c69811da0f1fd2214dc41ad2ce7d60736a3559d70c136be5f86", 0x42}, {&(0x7f00000006c0)="182713e8158e5169594e66fdc57e9fd1773ae081ff2975fcd2beda1428683cffc775b8b2ef5a87a49cdf3b5f49536f8c8031ed596aa69b86eabd25234f9c603d44ecc24280feae690779b302651a602b7b1f6e32beb0700ff622bd12b88ef24d91d9255f7d2301c6bc533ce4f9725f866cf6d8ab8aa81477ac45517e9c76929ecea1c4e2d8b0ed19165d683f448313ca6426bc03ffa8f740025b2b2ace2c5ef2864e4eec8c814358f5273247203a"}, {&(0x7f00000007c0)="f64d41870be4c8db2d7c1789a8fc7bf88bc294a9852394f0486c7c08c6cdc5d0c27230d8cbf429b3fb18369c77872f6c0daf1407fb6113695f4a20304f6a510b12ef1138d18b4252630960e549e6901b737a70c02683a53e25d8488d586ea9dd45f28d5c6974e30b1f816f4c5c71d121328e7acc5097ffcc38c21b41c3855636ad6e5cc0a64befca478a1aefa0b4b3ac11c9f0115897"}], 0x2, 0x0, 0xffffffffffffff4a, 0x1f00c00e}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x4000, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(r0, 0x0, &(0x7f00000004c0)) 42.903427885s ago: executing program 3 (id=3788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x2000000000}, 0xf) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7ff}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffa, 0x3, 0x0, 0x4, 0x5}, 0x40, 0x2}, [{0x80000000, 0xfffff463, 0x10, 0x2, 0x6, 0x1}, {0x9, 0x74c7b271, 0x6, 0x7f, 0x7547, 0x7}, {0x4, 0x6, 0x7, 0xfbb, 0x3, 0x81}, {0x5, 0xd, 0xfff, 0x7fffffff, 0x8, 0xff}, {0x0, 0x4, 0x8, 0x5, 0xffff, 0x400}, {0x400, 0x45a, 0x0, 0x3, 0x0, 0x8}, {0xffffffff, 0x6, 0xa, 0x10, 0x5, 0x9}, {0x9, 0x0, 0x20, 0xfffffff7, 0x7, 0x4}, {0x7fffffff, 0xfffffff8, 0x401, 0x3, 0x8, 0x800}, {0x7, 0xfffffffe, 0x1, 0xa, 0x10, 0x3}, {0x0, 0x6, 0x7fff, 0x8, 0x3, 0x3}, {0x3, 0x1, 0x6, 0x1, 0x8, 0x7}, {0x5, 0x9, 0x0, 0xd, 0x1, 0x8}, {0x1def0a95, 0xe3b, 0xfffffffe, 0x6, 0x5, 0x6c}, {0x8, 0x464, 0x8, 0x2, 0x0, 0x9}, {0x80, 0x8, 0x2, 0x9, 0x6, 0x200}, {0x10001, 0xfffff906, 0x7, 0x0, 0xf76, 0x7}, {0x8, 0xac2, 0x80, 0x8000, 0xb70, 0x1}, {0x3, 0x6, 0x4, 0x4a, 0x3, 0x6}, {0x2, 0x7, 0x5, 0x0, 0x9, 0xf}, {0x1, 0x6, 0x6, 0x8, 0xdbb, 0xbd77}, {0xa, 0x0, 0x100, 0x7, 0x8, 0x2c}, {0x5, 0x2, 0x2, 0x9, 0x5, 0x401}, {0x27, 0x40, 0x81, 0x7, 0x2, 0x10001}, {0x5, 0x9, 0x0, 0x8, 0x7fffffff, 0x5}, {0x7, 0x5, 0xea, 0x2, 0x73c, 0x6}, {0x7, 0x2, 0x5, 0x6, 0x8001, 0x823}, {0x5, 0x8000, 0x8000, 0x4, 0x5}, {0x10001, 0x40, 0x9b97, 0x4, 0x7fffffff, 0xfffffffa}, {0x10000, 0x1, 0x4, 0x7, 0x0, 0x7}, {0x1ff, 0xfffffffd, 0x2, 0x6, 0xb, 0x7}, {0x4, 0x1, 0x6, 0xc3, 0xffffffff, 0x6}, {0xbe, 0x6, 0x8, 0x6, 0x2, 0x4}, {0xfff, 0x0, 0x60b1, 0x1, 0x200, 0x6}, {0x10, 0x6, 0x39, 0x7, 0x1, 0x10001}, {0xc3, 0x0, 0x8, 0x3, 0x10, 0xb}, {0x9, 0x7, 0x2, 0x1, 0x5, 0x92f7}, {0x8, 0x4, 0xc174, 0x7, 0x10000, 0x6e0c}, {0xfffffffa, 0xf, 0x2, 0x8, 0x5, 0x7}, {0x5, 0x7, 0x5, 0x40, 0x6, 0x1ff}, {0x9, 0x61, 0x10, 0x6, 0x401, 0xffff8000}, {0x6, 0xc8c, 0x1b4a000, 0x6, 0x200, 0xf}, {0x9, 0x4, 0xfffff800, 0xb, 0xa82, 0x18f7}, {0x9, 0x2, 0xd725, 0x800, 0x6, 0x78}, {0x3, 0x100, 0x7, 0x4, 0x4, 0x81}, {0x3, 0x8001, 0x3, 0x3, 0x6, 0x1d}, {0xfffff800, 0x6, 0x4, 0x7f, 0x80000001, 0xfa64}, {0x5721, 0x8000, 0x5, 0x3, 0x3, 0x9}, {0x8, 0x7, 0x7, 0x7, 0x2, 0x5}, {0x10000, 0xff, 0x1ac90, 0x25, 0x3, 0x4}, {0x0, 0x3, 0x100, 0x8, 0x195, 0xf49a}, {0x1, 0x8, 0x468, 0x6, 0x9, 0x9}, {0x5f81edad, 0x7, 0x2400, 0x4, 0x6, 0xfffffff8}, {0x5, 0x1, 0x8, 0x2, 0x0, 0x800}, {0x0, 0x3, 0xbb94, 0x80000000, 0x0, 0x80000000}, {0x3, 0x3, 0x1d7b, 0x4, 0x2, 0x81}, {0x7, 0x7, 0x3, 0x101, 0x6, 0x5}, {0x7, 0xd, 0x3, 0x6b89, 0x9, 0x5b}, {0x4, 0xb, 0x80000001, 0x2, 0x3ff, 0x8001}, {0x30b9, 0xf, 0x9, 0x9, 0x4}, {0xc, 0x0, 0x80000000, 0x4, 0x9, 0x4}, {0x7, 0xe30e, 0x9, 0xfffffffe, 0x0, 0x7}, {0x5, 0x3af6, 0x2f, 0x1, 0x0, 0x8}, {0x9, 0x8001, 0x10000, 0xc, 0x5, 0x3}, {0x3, 0x9091, 0x561, 0x9, 0x9, 0x80000000}, {0x6, 0x7, 0x5, 0x8f3, 0xc, 0x8e}, {0xe9a, 0x7, 0x0, 0x100, 0x7, 0x1}, {0x4, 0x7, 0x3, 0x2, 0x10001, 0x2}, {0x9, 0xec09511c, 0x4, 0x0, 0xffffffff, 0x3}, {0x4, 0xd90c, 0x5, 0x7a3, 0x4, 0x7}, {0x6, 0x1, 0x4, 0x1, 0x89b8, 0xfffffff8}, {0x5, 0x6, 0xff, 0xffffffff, 0x3, 0x8}, {0xfa00, 0xce, 0x3, 0xeb9, 0x3, 0x40}, {0x0, 0x2000, 0x81, 0x7, 0x3f8, 0xe}, {0x1, 0x7, 0x1, 0x847, 0x2, 0x5}, {0xbed00000, 0x0, 0x5, 0x566, 0x3879, 0x9}, {0x4, 0x10001, 0x3, 0xb, 0xfffffff8, 0x5}, {0x8001, 0x4, 0x4, 0x1, 0x2, 0x8}, {0x4, 0x3, 0xa3, 0x8000, 0x8, 0x104}, {0x5, 0x6, 0x5, 0xe, 0x2, 0xffff}, {0x455, 0xee37, 0x6, 0x0, 0x410a, 0x7}, {0x8, 0x5, 0x7, 0x9, 0x1, 0x7803}, {0x2, 0x3652, 0x2, 0x2366, 0x1000, 0x59fe}, {0x5a, 0x400, 0x4, 0x94f}, {0x1, 0x5, 0x10000, 0x200, 0x7, 0x81}, {0x7, 0x0, 0x6, 0xced8, 0xffffffff, 0x4}, {0x10, 0x81, 0x3, 0x0, 0x6, 0x2}, {0x1, 0xf70, 0x7, 0x7f, 0x75}, {0x20, 0xe, 0xd3, 0x7, 0x4, 0xa}, {0x2, 0x0, 0x4, 0x8001, 0x5, 0x2}, {0xff, 0x4, 0x3384, 0xb93, 0xd, 0xfffffff9}, {0xfff, 0x3, 0x5, 0x1, 0x39}, {0x8, 0xca2e, 0xfffffff1, 0x1db5, 0x401, 0xccca}, {0xeff, 0x3, 0x49, 0x2, 0xc}, {0x4, 0x2, 0x6a5, 0x35, 0x7fff, 0x6}, {0x20, 0x8, 0x200, 0x4, 0x1, 0x6d71084c}, {0xfff, 0x3, 0x32, 0x1f64, 0x6d6a, 0x4}, {0x2, 0x3, 0x75, 0x1b82, 0xfffffff9, 0x40}, {0x6, 0x7, 0xffffffff, 0x80, 0x23, 0xe}, {0x93b8, 0x0, 0x3ff, 0x1ff72eae, 0xce6b, 0x8}, {0x7fff, 0x7, 0x4, 0x0, 0x1, 0x14}, {0x9, 0x1d1bb27a, 0x4, 0x43, 0xa, 0x8}, {0x8001, 0x0, 0x8, 0x3, 0xfffffff7, 0x6}, {0x1ff, 0x864, 0x3dc, 0x7fffffff, 0x200, 0x5}, {0x2, 0x6, 0xda1, 0x9, 0x7d2, 0x10}, {0xa, 0x7fffffff, 0xfffff06b, 0x0, 0x4, 0x7f}, {0x10001, 0xfffffffa, 0xffff0001, 0x400, 0x1, 0x3}, {0x70000000, 0x5f707df2, 0x7f, 0x7fffffff, 0x9}, {0x0, 0x4, 0x9, 0x0, 0x80000001, 0x401}, {0x9, 0x2, 0x80000001, 0x2, 0x2523, 0x81}, {0x40, 0x8, 0xfff, 0x100, 0x3ff, 0xffffffff}, {0x3, 0x7, 0x56, 0x3, 0x10, 0x6}, {0x7fff, 0x40, 0xe, 0x4, 0xffff, 0xb0}, {0x2, 0xfffffffd, 0x0, 0xb21, 0x7, 0x9510}, {0xe649, 0x6, 0x7fffffff, 0x102, 0xffff, 0x4}, {0x2, 0x4, 0x1, 0x80000001, 0x7, 0x9}, {0xc, 0x200, 0x5, 0xa7e, 0x4, 0x1}, {0x6, 0x9, 0x6, 0x8, 0xd82d, 0x2}, {0x3, 0xffffff78, 0x2, 0x7, 0xfffffffa, 0x1}, {0x4, 0x80000000, 0x2, 0x3, 0x5, 0x10000}, {0x3, 0x7, 0x4, 0x7fff, 0xfff, 0xfa77}, {0x10000, 0xfffffffd, 0x80000001, 0x800, 0x400001, 0x8}, {0xefdf, 0x3, 0x5, 0x6, 0x2, 0xfff}, {0x3, 0x3, 0xffffffff, 0x6, 0x2, 0x13}, {0x1, 0x7f, 0xfffffffc, 0x5, 0x7}, {0xc, 0x3, 0x9, 0x4, 0x0, 0x7}, {0x3, 0x21, 0xad0, 0x2, 0x8, 0xffffffff}, {0x3, 0x7fffffff, 0xc8, 0x9, 0x754, 0x8}], [{0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x4, 0xcec72bcc48a97240}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x56ab6f83d6d01e6b, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0xca32b325be8497a7}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x7}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x33211dacfbee65e7, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x2a100, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) finit_module(r5, 0x0, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xffec, 0x22000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 42.656216319s ago: executing program 3 (id=3793): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdcd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 42.560491551s ago: executing program 3 (id=3794): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x7f00, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@dev, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x3a00, 0x0, 0x0, 0x1000, 0x0, 0x0]}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000540)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x448, &(0x7f00000007c0)="$eJzs3MtvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWkVQEGq5oUrcEUck/gJOcEHACYkr3FGlCuXSwslo7d3Ece3UCU5c6t9P2nZmPc7M59mxZ3biBNC3RrJ/kohdEfF7RAzVs6sLjNT/u7G0OP330uJ0EtXqW38ltXLXlxani6LF83bmmdE0Iv0siQMt6p0/f+H0VKUyey7Pjy+ceX98/vyFZ0+dmTo5e3L27OSxY0ePTLzw/ORzXYkzuRxxff9Hcwf3vfbOlTemj1959+dvkyL+pji6ZGStB5+oVrtcXW/tbkgnAz1sCOtSioisu8q18T8UpVjpvKF49dOeNg7YVNVqtbqz/cMXq8AdLIlOS57O3y+AO0PxQZ+tf4tji6Yet4VrL9UXQFncN5YWP4/l+AcizcuUm9a33TQSEccv/vNVdsTm3IcAAFjl+2z+80yr+V8a9zeUuzvfGxqOiHsiYk9E3BsReyPivoha2Qci4sF11t+8SXLz/Ce9uqHAOpTN/17M97aKI6+3KDJcynO7a/GXkxOnKrOH89dkNMrbsvzEGnX88MpvX7R7rHH+lx1Z/cVcMG/H1YFtq58zM7Uw9V9ibnTtk4j9A63iT5Z3ApKI2BcR+zv7kaXmE6ee+uZgu8Lt4i93UlMX9pmqX0c8We//i9EUfyFZe39y/K6ozB4eL66Km/3y66U329V/6/7fXFn/72h5/S/HP5w07tfOr7+OS39cbrum2ej1P5i8XUsP5uc+nFpYODcRMZi8Xm904/nJlecW+aJ8Fv/oodbjf0+svBIHIiK7iB+KiIcj4pG87Y9GxGMRcWiN+H96+fH3Nh7/5srin1lX/68kBqP5TOtE6fSP362qdHg98Wf9f7SWGs3PdPL+10m7NnY1AwAAwP9PGhG7IknHltNpOjZW/x3+vbEjrczNLzx9Yu6DszP17wgMRzkt7nQNNdwPnciX9UV+sil/JL9v/GVpey0/Nj1Xmel18NDndrYZ/5k/b7qTD9xxfF8L+pfxD/3L+If+ZfxD/2ox/rf3oh3A1mv1+f9xD9oBbL2m8W/bD/qI9T/0L+Mf+pfxD31pfnvc+kvyXUgUf6dhK+qS2IpEpLdFMyQ2KdHjNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+TcAAP//oT3fdw==") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x18}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x2b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000fbffffff000000007f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000a00ac0ff0400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300006d01000085000000060000000d7581008100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff000000000000f8ffffffb703000008000000b70400000000000085000000820000007fbb0400ffffffffd4a50c0008000000bf91000000000000b7020000020000008500000085000000b76534b400e00ac30208b89bdff0603f10000000000000009500080000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xff, 0x2a, &(0x7f0000000400)=""/42, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[r0, r0, 0xffffffffffffffff, r0, r2, r0, r0, 0xffffffffffffffff, r4], &(0x7f0000000dc0)=[{0x1, 0x3, 0xd, 0xa}], 0x10, 0x7, @void, @value}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x8016, 0x66, 0x0, 0x8b, 0x6c, 0x0, @private=0xa010100, @broadcast}, "3297e3ba"}}, 0xfdef) r7 = open(&(0x7f0000000040)='./file1\x00', 0x14927e, 0x81) fallocate(r7, 0x0, 0x0, 0x74) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0x39ea, 0x0) io_uring_enter(r7, 0x1396, 0xce22, 0x8, &(0x7f0000000380)={[0x1ff]}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r8, 0x6612) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$phonet(0x23, 0x2, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8002, 0x0, 0x0, 0x0, {0xa, 0x0, 0xfffffffe, @private1, 0x826f}}}, 0x32) mount(&(0x7f0000000280)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='iso9660\x00', 0x800004, 0x0) 42.366030774s ago: executing program 3 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x800000, 0x0, 0x0, 0x9, 0x96, 0x5, 0x50}}], 0x58, 0x20008011}, 0x0) (fail_nth: 2) 42.353274934s ago: executing program 32 (id=3801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000200)={&(0x7f0000000800)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000009c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x87, 0xd}, &(0x7f00000005c0)=0x800000, 0x0, 0x0, 0x9, 0x96, 0x5, 0x50}}], 0x58, 0x20008011}, 0x0) (fail_nth: 2) 40.338237533s ago: executing program 0 (id=3833): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x2000000000}, 0xf) mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x7ff}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfffffffa, 0x3, 0x0, 0x4, 0x5}, 0x40, 0x2}, [{0x80000000, 0xfffff463, 0x10, 0x2, 0x6, 0x1}, {0x9, 0x74c7b271, 0x6, 0x7f, 0x7547, 0x7}, {0x4, 0x6, 0x7, 0xfbb, 0x3, 0x81}, {0x5, 0xd, 0xfff, 0x7fffffff, 0x8, 0xff}, {0x0, 0x4, 0x8, 0x5, 0xffff, 0x400}, {0x400, 0x45a, 0x0, 0x3, 0x0, 0x8}, {0xffffffff, 0x6, 0xa, 0x10, 0x5, 0x9}, {0x9, 0x0, 0x20, 0xfffffff7, 0x7, 0x4}, {0x7fffffff, 0xfffffff8, 0x401, 0x3, 0x8, 0x800}, {0x7, 0xfffffffe, 0x1, 0xa, 0x10, 0x3}, {0x0, 0x6, 0x7fff, 0x8, 0x3, 0x3}, {0x3, 0x1, 0x6, 0x1, 0x8, 0x7}, {0x5, 0x9, 0x0, 0xd, 0x1, 0x8}, {0x1def0a95, 0xe3b, 0xfffffffe, 0x6, 0x5, 0x6c}, {0x8, 0x464, 0x8, 0x2, 0x0, 0x9}, {0x80, 0x8, 0x2, 0x9, 0x6, 0x200}, {0x10001, 0xfffff906, 0x7, 0x0, 0xf76, 0x7}, {0x8, 0xac2, 0x80, 0x8000, 0xb70, 0x1}, {0x3, 0x6, 0x4, 0x4a, 0x3, 0x6}, {0x2, 0x7, 0x5, 0x0, 0x9, 0xf}, {0x1, 0x6, 0x6, 0x8, 0xdbb, 0xbd77}, {0xa, 0x0, 0x100, 0x7, 0x8, 0x2c}, {0x5, 0x2, 0x2, 0x9, 0x5, 0x401}, {0x27, 0x40, 0x81, 0x7, 0x2, 0x10001}, {0x5, 0x9, 0x0, 0x8, 0x7fffffff, 0x5}, {0x7, 0x5, 0xea, 0x2, 0x73c, 0x6}, {0x7, 0x2, 0x5, 0x6, 0x8001, 0x823}, {0x5, 0x8000, 0x8000, 0x4, 0x5}, {0x10001, 0x40, 0x9b97, 0x4, 0x7fffffff, 0xfffffffa}, {0x10000, 0x1, 0x4, 0x7, 0x0, 0x7}, {0x1ff, 0xfffffffd, 0x2, 0x6, 0xb, 0x7}, {0x4, 0x1, 0x6, 0xc3, 0xffffffff, 0x6}, {0xbe, 0x6, 0x8, 0x6, 0x2, 0x4}, {0xfff, 0x0, 0x60b1, 0x1, 0x200, 0x6}, {0x10, 0x6, 0x39, 0x7, 0x1, 0x10001}, {0xc3, 0x0, 0x8, 0x3, 0x10, 0xb}, {0x9, 0x7, 0x2, 0x1, 0x5, 0x92f7}, {0x8, 0x4, 0xc174, 0x7, 0x10000, 0x6e0c}, {0xfffffffa, 0xf, 0x2, 0x8, 0x5, 0x7}, {0x5, 0x7, 0x5, 0x40, 0x6, 0x1ff}, {0x9, 0x61, 0x10, 0x6, 0x401, 0xffff8000}, {0x6, 0xc8c, 0x1b4a000, 0x6, 0x200, 0xf}, {0x9, 0x4, 0xfffff800, 0xb, 0xa82, 0x18f7}, {0x9, 0x2, 0xd725, 0x800, 0x6, 0x78}, {0x3, 0x100, 0x7, 0x4, 0x4, 0x81}, {0x3, 0x8001, 0x3, 0x3, 0x6, 0x1d}, {0xfffff800, 0x6, 0x4, 0x7f, 0x80000001, 0xfa64}, {0x5721, 0x8000, 0x5, 0x3, 0x3, 0x9}, {0x8, 0x7, 0x7, 0x7, 0x2, 0x5}, {0x10000, 0xff, 0x1ac90, 0x25, 0x3, 0x4}, {0x0, 0x3, 0x100, 0x8, 0x195, 0xf49a}, {0x1, 0x8, 0x468, 0x6, 0x9, 0x9}, {0x5f81edad, 0x7, 0x2400, 0x4, 0x6, 0xfffffff8}, {0x5, 0x1, 0x8, 0x2, 0x0, 0x800}, {0x0, 0x3, 0xbb94, 0x80000000, 0x0, 0x80000000}, {0x3, 0x3, 0x1d7b, 0x4, 0x2, 0x81}, {0x7, 0x7, 0x3, 0x101, 0x6, 0x5}, {0x7, 0xd, 0x3, 0x6b89, 0x9, 0x5b}, {0x4, 0xb, 0x80000001, 0x2, 0x3ff, 0x8001}, {0x30b9, 0xf, 0x9, 0x9, 0x4}, {0xc, 0x0, 0x80000000, 0x4, 0x9, 0x4}, {0x7, 0xe30e, 0x9, 0xfffffffe, 0x0, 0x7}, {0x5, 0x3af6, 0x2f, 0x1, 0x0, 0x8}, {0x9, 0x8001, 0x10000, 0xc, 0x5, 0x3}, {0x3, 0x9091, 0x561, 0x9, 0x9, 0x80000000}, {0x6, 0x7, 0x5, 0x8f3, 0xc, 0x8e}, {0xe9a, 0x7, 0x0, 0x100, 0x7, 0x1}, {0x4, 0x7, 0x3, 0x2, 0x10001, 0x2}, {0x9, 0xec09511c, 0x4, 0x0, 0xffffffff, 0x3}, {0x4, 0xd90c, 0x5, 0x7a3, 0x4, 0x7}, {0x6, 0x1, 0x4, 0x1, 0x89b8, 0xfffffff8}, {0x5, 0x6, 0xff, 0xffffffff, 0x3, 0x8}, {0xfa00, 0xce, 0x3, 0xeb9, 0x3, 0x40}, {0x0, 0x2000, 0x81, 0x7, 0x3f8, 0xe}, {0x1, 0x7, 0x1, 0x847, 0x2, 0x5}, {0xbed00000, 0x0, 0x5, 0x566, 0x3879, 0x9}, {0x4, 0x10001, 0x3, 0xb, 0xfffffff8, 0x5}, {0x8001, 0x4, 0x4, 0x1, 0x2, 0x8}, {0x4, 0x3, 0xa3, 0x8000, 0x8, 0x104}, {0x5, 0x6, 0x5, 0xe, 0x2, 0xffff}, {0x455, 0xee37, 0x6, 0x0, 0x410a, 0x7}, {0x8, 0x5, 0x7, 0x9, 0x1, 0x7803}, {0x2, 0x3652, 0x2, 0x2366, 0x1000, 0x59fe}, {0x5a, 0x400, 0x4, 0x94f}, {0x1, 0x5, 0x10000, 0x200, 0x7, 0x81}, {0x7, 0x0, 0x6, 0xced8, 0xffffffff, 0x4}, {0x10, 0x81, 0x3, 0x0, 0x6, 0x2}, {0x1, 0xf70, 0x7, 0x7f, 0x75}, {0x20, 0xe, 0xd3, 0x7, 0x4, 0xa}, {0x2, 0x0, 0x4, 0x8001, 0x5, 0x2}, {0xff, 0x4, 0x3384, 0xb93, 0xd, 0xfffffff9}, {0xfff, 0x3, 0x5, 0x1, 0x39}, {0x8, 0xca2e, 0xfffffff1, 0x1db5, 0x401, 0xccca}, {0xeff, 0x3, 0x49, 0x2, 0xc}, {0x4, 0x2, 0x6a5, 0x35, 0x7fff, 0x6}, {0x20, 0x8, 0x200, 0x4, 0x1, 0x6d71084c}, {0xfff, 0x3, 0x32, 0x1f64, 0x6d6a, 0x4}, {0x2, 0x3, 0x75, 0x1b82, 0xfffffff9, 0x40}, {0x6, 0x7, 0xffffffff, 0x80, 0x23, 0xe}, {0x93b8, 0x0, 0x3ff, 0x1ff72eae, 0xce6b, 0x8}, {0x7fff, 0x7, 0x4, 0x0, 0x1, 0x14}, {0x9, 0x1d1bb27a, 0x4, 0x43, 0xa, 0x8}, {0x8001, 0x0, 0x8, 0x3, 0xfffffff7, 0x6}, {0x1ff, 0x864, 0x3dc, 0x7fffffff, 0x200, 0x5}, {0x2, 0x6, 0xda1, 0x9, 0x7d2, 0x10}, {0xa, 0x7fffffff, 0xfffff06b, 0x0, 0x4, 0x7f}, {0x10001, 0xfffffffa, 0xffff0001, 0x400, 0x1, 0x3}, {0x70000000, 0x5f707df2, 0x7f, 0x7fffffff, 0x9}, {0x0, 0x4, 0x9, 0x0, 0x80000001, 0x401}, {0x9, 0x2, 0x80000001, 0x2, 0x2523, 0x81}, {0x40, 0x8, 0xfff, 0x100, 0x3ff, 0xffffffff}, {0x3, 0x7, 0x56, 0x3, 0x10, 0x6}, {0x7fff, 0x40, 0xe, 0x4, 0xffff, 0xb0}, {0x2, 0xfffffffd, 0x0, 0xb21, 0x7, 0x9510}, {0xe649, 0x6, 0x7fffffff, 0x102, 0xffff, 0x4}, {0x2, 0x4, 0x1, 0x80000001, 0x7, 0x9}, {0xc, 0x200, 0x5, 0xa7e, 0x4, 0x1}, {0x6, 0x9, 0x6, 0x8, 0xd82d, 0x2}, {0x3, 0xffffff78, 0x2, 0x7, 0xfffffffa, 0x1}, {0x4, 0x80000000, 0x2, 0x3, 0x5, 0x10000}, {0x3, 0x7, 0x4, 0x7fff, 0xfff, 0xfa77}, {0x10000, 0xfffffffd, 0x80000001, 0x800, 0x400001, 0x8}, {0xefdf, 0x3, 0x5, 0x6, 0x2, 0xfff}, {0x3, 0x3, 0xffffffff, 0x6, 0x2, 0x13}, {0x1, 0x7f, 0xfffffffc, 0x5, 0x7}, {0xc, 0x3, 0x9, 0x4, 0x0, 0x7}, {0x3, 0x21, 0xad0, 0x2, 0x8, 0xffffffff}, {0x3, 0x7fffffff, 0xc8, 0x9, 0x754, 0x8}], [{0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x1}, {}, {0x4, 0xcec72bcc48a97240}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x56ab6f83d6d01e6b, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0xca32b325be8497a7}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x2}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x7}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x33211dacfbee65e7, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4}, {0x2, 0x1}, {0x2}, {0x2}, {0x4}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x2a100, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) finit_module(r5, 0x0, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xffec, 0x22000000, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 39.972122909s ago: executing program 2 (id=3837): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 39.85370776s ago: executing program 2 (id=3838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300741300000800c4"], 0x2c}, 0x1, 0x0, 0x0, 0x24000891}, 0x40000c0) 39.748428052s ago: executing program 2 (id=3839): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c000180080001", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 39.628286084s ago: executing program 2 (id=3840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdcd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 39.552655875s ago: executing program 2 (id=3842): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(0x0, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0x61, 0x0, &(0x7f0000000000)="259a53f288476da80035afb2d2ff", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0xa9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x1, 0x1, [0x4b2, 0x5e8, 0x389, 0x73f]}) 39.426011827s ago: executing program 2 (id=3845): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @rand_addr=0x64010101, @multicast, @remote}}}}, &(0x7f0000000200)={0x0, 0x2, [0x20, 0x50b, 0x2e9, 0xd3b]}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300)='./file2/file0\x00') sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYRESOCT]) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0xfffffd6b, &(0x7f0000000880)=[{&(0x7f0000000600)="5c00000013006bcc9e3be35c6e17ab31076b876c1d0000007ea60864160af36514001af9eaa8000007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c95330d2758fc51cff323b36c13231e49dd70b2c730d6fc8d00d44bc0c94ff879bc7a0275bf1fcf426cc2a7c8ce4ef7d68ddcb8b3d2a270946d2680062d4b830ce5d0af3259cab47c34c7d", 0xa5}, {&(0x7f0000000540)="fb9f863cc063480cb61d7b2ab06d7d201976f5f7000079281f2cfe68222d931aec6e4b2eb82d041e0c69811da0f1fd2214dc41ad2ce7d60736a3559d70c136be5f86", 0x42}, {&(0x7f00000006c0)="182713e8158e5169594e66fdc57e9fd1773ae081ff2975fcd2beda1428683cffc775b8b2ef5a87a49cdf3b5f49536f8c8031ed596aa69b86eabd25234f9c603d44ecc24280feae690779b302651a602b7b1f6e32beb0700ff622bd12b88ef24d91d9255f7d2301c6bc533ce4f9725f866cf6d8ab8aa81477ac45517e9c76929ecea1c4e2d8b0ed19165d683f448313ca6426bc03ffa8f740025b2b2ace2c5ef2864e4eec8c814358f5273247203a"}, {&(0x7f00000007c0)="f64d41870be4c8db2d7c1789a8fc7bf88bc294a9852394f0486c7c08c6cdc5d0c27230d8cbf429b3fb18369c77872f6c0daf1407fb6113695f4a20304f6a510b12ef1138d18b4252630960e549e6901b737a70c02683a53e25d8488d586ea9dd45f28d5c6974e30b1f816f4c5c71d121328e7acc5097ffcc38c21b41c3855636ad6e5cc0a64befca478a1aefa0b4b3ac11c9f0115897"}], 0x2, 0x0, 0xffffffffffffff4a, 0x1f00c00e}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x4000, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(r0, 0x0, &(0x7f00000004c0)) 39.425432987s ago: executing program 33 (id=3845): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7, 0x1, 0x4}, {0x8100, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @multicast, @rand_addr=0x64010101, @multicast, @remote}}}}, &(0x7f0000000200)={0x0, 0x2, [0x20, 0x50b, 0x2e9, 0xd3b]}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x101}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f0000000280)='./file2\x00', &(0x7f0000000300)='./file2/file0\x00') sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1d, &(0x7f0000000040)=0x7, 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYRESOCT]) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0xfffffd6b, &(0x7f0000000880)=[{&(0x7f0000000600)="5c00000013006bcc9e3be35c6e17ab31076b876c1d0000007ea60864160af36514001af9eaa8000007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c95330d2758fc51cff323b36c13231e49dd70b2c730d6fc8d00d44bc0c94ff879bc7a0275bf1fcf426cc2a7c8ce4ef7d68ddcb8b3d2a270946d2680062d4b830ce5d0af3259cab47c34c7d", 0xa5}, {&(0x7f0000000540)="fb9f863cc063480cb61d7b2ab06d7d201976f5f7000079281f2cfe68222d931aec6e4b2eb82d041e0c69811da0f1fd2214dc41ad2ce7d60736a3559d70c136be5f86", 0x42}, {&(0x7f00000006c0)="182713e8158e5169594e66fdc57e9fd1773ae081ff2975fcd2beda1428683cffc775b8b2ef5a87a49cdf3b5f49536f8c8031ed596aa69b86eabd25234f9c603d44ecc24280feae690779b302651a602b7b1f6e32beb0700ff622bd12b88ef24d91d9255f7d2301c6bc533ce4f9725f866cf6d8ab8aa81477ac45517e9c76929ecea1c4e2d8b0ed19165d683f448313ca6426bc03ffa8f740025b2b2ace2c5ef2864e4eec8c814358f5273247203a"}, {&(0x7f00000007c0)="f64d41870be4c8db2d7c1789a8fc7bf88bc294a9852394f0486c7c08c6cdc5d0c27230d8cbf429b3fb18369c77872f6c0daf1407fb6113695f4a20304f6a510b12ef1138d18b4252630960e549e6901b737a70c02683a53e25d8488d586ea9dd45f28d5c6974e30b1f816f4c5c71d121328e7acc5097ffcc38c21b41c3855636ad6e5cc0a64befca478a1aefa0b4b3ac11c9f0115897"}], 0x2, 0x0, 0xffffffffffffff4a, 0x1f00c00e}, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9255bb992464e73a02159d3720df19f7a1dfec3"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x4000, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(r0, 0x0, &(0x7f00000004c0)) 39.391415797s ago: executing program 0 (id=3848): mknod$loop(0x0, 0x100000000000600d, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_UP(r0, 0x0, 0x40) getrlimit(0xd, &(0x7f0000000680)) (fail_nth: 9) 39.283449069s ago: executing program 0 (id=3851): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x20, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) 39.271861789s ago: executing program 0 (id=3853): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdcd, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 39.18800566s ago: executing program 0 (id=3856): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 38.858170055s ago: executing program 0 (id=3860): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(0x0, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0x61, 0x0, &(0x7f0000000000)="259a53f288476da80035afb2d2ff", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0xa9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x1, 0x1, [0x4b2, 0x5e8, 0x389, 0x73f]}) 38.857006235s ago: executing program 34 (id=3860): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(0x0, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0x61, 0x0, &(0x7f0000000000)="259a53f288476da80035afb2d2ff", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0xa9, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x1, 0x1, [0x4b2, 0x5e8, 0x389, 0x73f]}) 2.214493538s ago: executing program 5 (id=4554): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.899332903s ago: executing program 5 (id=4559): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91", 0x63}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65", 0x1c}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32ce", 0x46}], 0x3}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.827925933s ago: executing program 5 (id=4561): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000014c0)="980bcfe393", 0x5}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 1.803861764s ago: executing program 5 (id=4562): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = creat(0x0, 0x0) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000019440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000019540)={&(0x7f00000195c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="5386aafe720ddfdf8ff9083fad000827bd7000fddbdf25340000000800030000", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100001400550090f6c3668b4445b37d0a38708e6ede9b14005500540c99880b05d632d68e4f120d3ddeb914005500e58923e41b8be096efb6652de73744b9140055005d2691bf67300c78d20dde6fc48f811b0600fd000100000014005500963807a8e0852f7a35f9cf7f7c7ef2cd1400fe00739806dd5f616ec3a5f719cf7400d97f08001f01000000000500200119000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x40840) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000194c0)={&(0x7f0000019380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000019480)={&(0x7f00000193c0)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x840) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') io_uring_setup(0xd0, &(0x7f0000019240)={0x0, 0x82ad, 0x80, 0x3, 0x3d4}) pread64(r6, 0x0, 0x0, 0x1000000000) write$P9_RVERSION(r3, &(0x7f00000196c0)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230303087a31c62ac58fe8f3cd0dc9b3e792c34b79941bc9fa724f0a02ffb3a1f08418b0cb59d610efb8566ec004045cf7ddd7c7172db4072183e6a0147e47d6e0cbeb8854f769d3c92ec0b0bf703f87a1a84f78f90afd804ae32183441fbbf67709776af26f528bb80186db28955274bef5fb4ac35cbeecacd341baa4c9e024e83fb71e1cd52d0f85ded080c32fc595e8f077aefe8fdd6f67d8cf3d1893ec413232da4dd59470cd3600e380c82a97e4f487bbe1803"], 0x15) r7 = dup(0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') r8 = syz_open_dev$loop(&(0x7f0000000140), 0xa, 0xa382) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000192c0)={0x0, {}, 0x0, {}, 0x4, 0x1, 0x17, 0x1c, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "6296c8007b0000130000e8ffffff00212d00000000000000000000000900", [0x7, 0x4000000000000007]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) socket(0x10, 0x3, 0x0) 1.38046089s ago: executing program 6 (id=4580): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dfffffff9a26000000210000000c0001800800"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.362938761s ago: executing program 6 (id=4581): mknod$loop(0x0, 0x100000000000600d, 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") unlink(&(0x7f0000000100)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1.288438582s ago: executing program 4 (id=4583): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0x8, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0308004d6b71ef288563", @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRESOCT], 0xffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000000000085000000b900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x37, &(0x7f0000000200)=ANY=[@ANYRES16=r5], &(0x7f0000000100)='syzkaller\x00', 0x8200c, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x40, r12, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfc}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x5aae9dac807750c2}, 0x800) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x40010) 1.256006162s ago: executing program 6 (id=4584): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 985.089566ms ago: executing program 1 (id=4587): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180)) r4 = memfd_secret(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, r0, 0x2f11, '\x00', 0x0, r4, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180800007902000000000000fcffffff00000000", @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xba881e795f5860e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r12, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 984.458356ms ago: executing program 6 (id=4588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4f33}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340fa701003932561b080000", @ANYRES16=r2, @ANYBLOB="0100fcff7f00000000002100000009001f007068793000"], 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870", 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) sysinfo(&(0x7f00000003c0)=""/13) 959.076076ms ago: executing program 7 (id=4589): r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000240)={0x1d6, 0x1, &(0x7f0000000a00)="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"}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='i2c_result\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) rmdir(0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x1, 0x0, 'queue0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) 958.183016ms ago: executing program 4 (id=4590): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1ff, 0x0, 0x5}}) 890.074437ms ago: executing program 5 (id=4591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00\t\x00\x00\x00@'], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q9\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, &(0x7f0000000080), {[{{@arp={@loopback, @private=0xa010102, 0x80800000, 0xff, 0xa, 0x4, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0xb, 0x7, 0x7, 0x8000, 0xe, 0x8, 'bridge0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb, 0x36, {0x3}}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "651e94c9dcc32e0ff33cf170bcc24a94c6cdbccfcadbf52c2cb4d88ae54c"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) syz_clone3(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(&(0x7f0000000d80)=']\x00\x85,l\xb7\x00q\x14\x16&s\xea\xe5%\xf6B\x0f\nc\x04\x16\x99\xf1.\xa9\xbb\xad\x8a\x17v\x18\v\xe0\xce\xb2\x97\x95\x8cw\xd7^\xf4F#x\xe4\x1cz\xf6h\xa1} ', 0x40, 0x78, &(0x7f0000000280)={0x80000000, 0x359b, 0x0, 0xf66}) keyctl$chown(0x4, 0x0, 0xee00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRES32=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0x6}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r8, 0xb}}, 0x48) 889.719637ms ago: executing program 4 (id=4592): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) socket$inet6(0xa, 0x80002, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 844.112458ms ago: executing program 1 (id=4593): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 819.806528ms ago: executing program 7 (id=4594): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x8000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000077000000fb000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0xc6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r4, 0xfffffffe, 0xff, 0x5, 0x9, 0x2, 0x4, 0x8, {0x0, @in6={{0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7fff}}, 0xfc0c, 0x34, 0x8, 0x3e, 0xe22}}, &(0x7f0000000140)=0xb0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xa8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$selinux_user(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x4, 0x7}]}) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000000c0)=0xb, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r11, 0xffffffffffffffff) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 780.451159ms ago: executing program 4 (id=4595): mknod$loop(0x0, 0x100000000000600d, 0x1) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0xb1}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4de, &(0x7f0000001080)="$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") unlink(&(0x7f0000000100)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000700", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 767.260929ms ago: executing program 5 (id=4596): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000019440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000019580)={&(0x7f0000019500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000019540)={&(0x7f00000195c0)=ANY=[@ANYBLOB="b8000000", @ANYBLOB="5386aafe720ddfdf8ff9083fad000827bd7000fddbdf25340000000800030000", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100001400550090f6c3668b4445b37d0a38708e6ede9b14005500540c99880b05d632d68e4f120d3ddeb914005500e58923e41b8be096efb6652de73744b9140055005d2691bf67300c78d20dde6fc48f811b0600fd000100000014005500963807a8e0852f7a35f9cf7f7c7ef2cd1400fe00739806dd5f616ec3a5f719cf7400d97f08001f01000000000500200119000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x40840) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000194c0)={&(0x7f0000019380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000019480)={&(0x7f00000193c0)={0x10, 0x3f5, 0x10, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x840) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') io_uring_setup(0xd0, &(0x7f0000019240)={0x0, 0x82ad, 0x80, 0x3, 0x3d4}) pread64(r6, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) write$P9_RVERSION(r3, &(0x7f00000196c0)=ANY=[@ANYBLOB="1500000065ffff01800000080039503230303087a31c62ac58fe8f3cd0dc9b3e792c34b79941bc9fa724f0a02ffb3a1f08418b0cb59d610efb8566ec004045cf7ddd7c7172db4072183e6a0147e47d6e0cbeb8854f769d3c92ec0b0bf703f87a1a84f78f90afd804ae32183441fbbf67709776af26f528bb80186db28955274bef5fb4ac35cbeecacd341baa4c9e024e83fb71e1cd52d0f85ded080c32fc595e8f077aefe8fdd6f67d8cf3d1893ec413232da4dd59470cd3600e380c82a97e4f487bbe1803"], 0x15) r7 = dup(0xffffffffffffffff) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') r8 = syz_open_dev$loop(&(0x7f0000000140), 0xa, 0xa382) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000192c0)={0x0, {}, 0x0, {}, 0x4, 0x1, 0x17, 0x1c, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "6296c8007b0000130000e8ffffff00212d00000000000000000000000900", [0x7, 0x4000000000000007]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000019200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) socket(0x10, 0x3, 0x0) 748.550499ms ago: executing program 1 (id=4597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 671.894311ms ago: executing program 1 (id=4598): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@smackfsfloor}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x5}}, 0x24, 0x2) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) get_robust_list(0x0, 0x0, &(0x7f0000000340)) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a01040000000000000000010000ea08000a40000000000900020073797a32000000000900010073797a30000000000800054000000004440000001e0a05020000000000000000010000000900020073797a32000000001800038014000080100001800400028008000180000000000900010073797a300000"], 0xc8}}, 0x0) 651.838511ms ago: executing program 6 (id=4599): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 609.678502ms ago: executing program 6 (id=4600): socket(0x10, 0x3, 0x0) syz_io_uring_setup(0x42ad, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x50010, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000000bc0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x20000000, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 588.422582ms ago: executing program 7 (id=4601): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff22ebd4ba5e9a303ae624953be874d42800000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) fchdir(r1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x2) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000080)=0x8, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0xa}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 526.473893ms ago: executing program 4 (id=4602): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) (fail_nth: 2) 469.686364ms ago: executing program 7 (id=4603): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911d400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000001c0)={0x0, 0xb, 0x9, 0x4, 0x0, 0x0, 0x0}) 468.828304ms ago: executing program 1 (id=4604): r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000240)={0x1d6, 0x1, &(0x7f0000000a00)="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"}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='i2c_result\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000960) rmdir(0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x1, 0x0, 'queue0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) 448.264084ms ago: executing program 7 (id=4605): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000700", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) epoll_create(0x8) 420.046435ms ago: executing program 7 (id=4606): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.609431ms ago: executing program 4 (id=4607): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0xff}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000640)="af", 0x1}], 0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_DELCHAIN={0x138, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xc0, 0xc, "5ee1f392e056a52164dfc159100957764f890ad99a67b15704ac2047cd1a32f81f2b15eb8d3b2c819d8d2662a219b3368a1ad934ea7e5c50c6dd2e98ef94d9ab9e7c1680f4162336f19341975e403141ecb9070cea405f350821e0b07489a8b9cecf0f95df0d2809fe2588074afb546eebb71e07bf8874d41975aa96b7e0ed240f3eff782c9585b38396e9eb96ecd73de93a1670f6596808c7c1dc05c793243a09b9ea127da9056dec2000ea9ebdc9da5a752d8803a8e8f3f9cfeb60"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0x30, 0xc, "a6dbe8db82778908e39f08c9fac170d63d147c202a88d36f4620ec52270a2b1778ed7be29a55d1dc1026e31a"}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x2530, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2504, 0x3, 0x0, 0x1, [{0x22d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x134, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "ae25ba194db964b0cd7af9fe9cdcde8f8040d741511c9e8be78b90506cc6bf49669eca320e23745d484933ad48c7333c2572555e2d232cfff735423ba23216016775f6b4bddedf925f963bbcd256d56116a91e9659fc243cd94803e9308481053710ae8faacc151cfc22696812e12f77bfc252e29fab4aa0b39f6ea31a4c46b7b713bcb99151a9997bf7a8d97a899519b951615af635d173b61ab6f3fce4291a9e790f9d8a32e4f45cdbe212e99c0b6384b0c96733fbc2f7210a1489fb7aa4df552416bda2d351f25ebcac67dde9b275b2c8c96481804d45ba3cdf14502c180a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x217c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9, 0x1, "f8c74f7965"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "e9a9665519ce7afd464f72e4b9c220c531c06e6aa9f2b2eeea3c0385832790f8693cda30c800236543062f88c1ffa8b2144c62711396bec54a7eef8afdbb3421686ab441fe81bac2ca5d22ead56c17549b389699c265a7fe4430de33cacb2de0d29f171195407138e27eb1711d61f3db4fa2c641780c8806c55dceb6303047d23f521aa902c72debf5a6b2bf84795a53d9cc996a208a6a70a40d2295a2ea3fdd6f4fb793c749d50fad6cec1b15ccb19246aa"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x174, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "2121439c802a288792562c95282a90d58e10c0f07a4716a91220e96e40ae00dfc43f9d92adaa86528573634f2f459bc24e3a8dad053d08c74f9a4e0bb219884ae1ab08b71abd78bf62d559b2031f7b875d76140274081f55419a72456fd95385c1869599a03f2866585bf21b97d3aaf7cd2330bd280779942a643f9d80551821c756f8de13caa6bed345162fabd8a95e51df4a2eb19bc7eab7"}, @NFTA_DATA_VALUE={0xf, 0x1, "d63f1eac4f328d60eb7927"}, @NFTA_DATA_VALUE={0xbd, 0x1, "0a00b3d5642f9776fc990172fc20777604b710a2b39a6870aba7693c964a3a754cf9206e776fee2d3d5329fa9561f659c4694f93cdbd2dad595d1c99a85cc70f99683e2d267caa694b31afb032c1d07940ee4e23ad00bc67f577c0d13e1defd6c4e162b76c63a77fb5a86ded95f536814096fc83d9953cfdda74f68e3845d4bf65f2acbf88b724d2796459c44862611b7589bb65566575a38371f7b32e76336851397aad21d946d503871b16a85f80f9b7bdba62e6ff054de2"}]}, @NFTA_SET_ELEM_EXPR={0x68, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xe32}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x40, 0x6, 0x1, 0x0, "dfdf35cf6d714d6ecad228cc260a48bb61913ba9be135aeb5a97c39b4d39a2ba62cd9a23b5a6cd63dc8b04ed10bc1489a22f2db9d522ba2f5e5a9edd"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x2690}, 0x1, 0x0, 0x0, 0x40240d5}, 0x1) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r5]) 0s ago: executing program 1 (id=4608): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={r3, 0xfffffffe, 0xff, 0x5, 0x9, 0x2, 0x4, 0x8, {0x0, @in6={{0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7fff}}, 0xfc0c, 0x34, 0x8, 0x3e, 0xe22}}, &(0x7f0000000140)=0xb0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0xfe, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xa8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$selinux_user(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x4, 0x7}]}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000000c0)=0xb, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r10, 0xffffffffffffffff) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): ce 0, times 0 [ 214.408801][T14251] CPU: 0 UID: 0 PID: 14251 Comm: syz.4.3958 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 214.408869][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.408886][T14251] Call Trace: [ 214.408895][T14251] [ 214.408905][T14251] __dump_stack+0x1d/0x30 [ 214.408932][T14251] dump_stack_lvl+0xe8/0x140 [ 214.408957][T14251] dump_stack+0x15/0x1b [ 214.408977][T14251] should_fail_ex+0x265/0x280 [ 214.409057][T14251] should_failslab+0x8c/0xb0 [ 214.409087][T14251] kmem_cache_alloc_noprof+0x50/0x310 [ 214.409166][T14251] ? dup_fd+0x3a/0x540 [ 214.409243][T14251] dup_fd+0x3a/0x540 [ 214.409285][T14251] copy_files+0x98/0xf0 [ 214.409383][T14251] copy_process+0xc44/0x1fe0 [ 214.409558][T14251] kernel_clone+0x16c/0x5b0 [ 214.409661][T14251] ? vfs_write+0x75e/0x8e0 [ 214.409696][T14251] __x64_sys_clone+0xe6/0x120 [ 214.409732][T14251] x64_sys_call+0x2c59/0x2fb0 [ 214.409809][T14251] do_syscall_64+0xd2/0x200 [ 214.409831][T14251] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.409861][T14251] ? clear_bhb_loop+0x40/0x90 [ 214.409924][T14251] ? clear_bhb_loop+0x40/0x90 [ 214.409947][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.409969][T14251] RIP: 0033:0x7fe970ade929 [ 214.410013][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.410032][T14251] RSP: 002b:00007fe96f146fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 214.410051][T14251] RAX: ffffffffffffffda RBX: 00007fe970d05fa0 RCX: 00007fe970ade929 [ 214.410063][T14251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 214.410076][T14251] RBP: 00007fe96f147090 R08: 0000000000000000 R09: 0000000000000000 [ 214.410088][T14251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 214.410152][T14251] R13: 0000000000000000 R14: 00007fe970d05fa0 R15: 00007ffe65ca2f68 [ 214.410172][T14251] [ 214.539158][T14249] loop6: detected capacity change from 0 to 512 [ 214.631559][T14259] 9pnet_fd: Insufficient options for proto=fd [ 214.664452][T14249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.691196][T14249] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.823941][T14280] loop7: detected capacity change from 0 to 512 [ 214.843531][T14280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.892025][T14280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.930442][T14280] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.950607][T14271] loop5: detected capacity change from 0 to 1024 [ 214.968454][T14280] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 215.002224][T13916] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.024884][T14271] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.112223][T11401] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.207471][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.329518][T14308] netlink: 'syz.6.3980': attribute type 1 has an invalid length. [ 215.376995][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3980'. [ 215.400520][T14308] netlink: 'syz.6.3980': attribute type 5 has an invalid length. [ 215.437951][T14308] loop6: detected capacity change from 0 to 128 [ 215.482445][T14271] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.3965: missing EA_INODE flag [ 215.511811][T14293] loop7: detected capacity change from 0 to 1024 [ 215.550423][T14271] EXT4-fs (loop5): Remounting filesystem read-only [ 215.626386][T14293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.634538][T14299] loop4: detected capacity change from 0 to 1024 [ 215.659265][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.756525][T14299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.893385][T14326] netlink: 'syz.6.3987': attribute type 1 has an invalid length. [ 215.905832][T14326] loop6: detected capacity change from 0 to 128 [ 216.062475][T14299] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3976: missing EA_INODE flag [ 216.063322][T14332] SELinux: syz.1.3989 (14332) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 216.080362][T14299] EXT4-fs (loop4): Remounting filesystem read-only [ 216.213946][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.236925][T14343] program syz.5.3992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.279230][T14348] netlink: 'syz.4.3993': attribute type 1 has an invalid length. [ 216.300981][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3993'. [ 216.310237][T14348] netlink: 'syz.4.3993': attribute type 5 has an invalid length. [ 216.323710][T14348] loop4: detected capacity change from 0 to 128 [ 216.333497][T13916] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.391782][T14355] loop7: detected capacity change from 0 to 512 [ 216.401093][T14356] bio_check_eod: 550 callbacks suppressed [ 216.401108][T14356] syz.4.3993: attempt to access beyond end of device [ 216.401108][T14356] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 216.409084][T14355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.441299][T14356] syz.4.3993: attempt to access beyond end of device [ 216.441299][T14356] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 216.464497][T14356] syz.4.3993: attempt to access beyond end of device [ 216.464497][T14356] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 216.478372][T14356] syz.4.3993: attempt to access beyond end of device [ 216.478372][T14356] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 216.486707][T14355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.492580][T14356] syz.4.3993: attempt to access beyond end of device [ 216.492580][T14356] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 216.518054][T14356] syz.4.3993: attempt to access beyond end of device [ 216.518054][T14356] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 216.531942][T14356] syz.4.3993: attempt to access beyond end of device [ 216.531942][T14356] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 216.532941][T14352] 9pnet_fd: Insufficient options for proto=fd [ 216.545473][T14356] syz.4.3993: attempt to access beyond end of device [ 216.545473][T14356] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 216.545511][T14356] syz.4.3993: attempt to access beyond end of device [ 216.545511][T14356] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 216.564024][T14355] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.565106][T14356] syz.4.3993: attempt to access beyond end of device [ 216.565106][T14356] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 216.621103][T14355] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 216.665241][T13916] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.793900][T14372] loop7: detected capacity change from 0 to 1024 [ 216.812383][T14372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.838973][T13916] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.866084][T14376] loop7: detected capacity change from 0 to 512 [ 216.875596][T14376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.891567][T14376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.904480][T14376] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.917460][T14376] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 216.950780][T13916] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.976003][T14383] program syz.7.4006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.038867][T14386] loop4: detected capacity change from 0 to 1024 [ 217.094696][T14386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.139393][T14394] sd 0:0:1:0: device reset [ 217.176589][T14397] loop5: detected capacity change from 0 to 512 [ 217.183902][T14397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.205200][T14397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.221508][T14397] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.234709][T14397] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 217.264188][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.372505][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.395396][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 217.395416][ T29] audit: type=1326 audit(2000000144.328:14165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 217.399184][T14412] loop4: detected capacity change from 0 to 512 [ 217.402082][ T29] audit: type=1326 audit(2000000144.328:14166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 217.431399][T14412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.431661][ T29] audit: type=1326 audit(2000000144.328:14167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 217.487577][ T29] audit: type=1326 audit(2000000144.328:14168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe970ade963 code=0x7ffc0000 [ 217.511183][ T29] audit: type=1326 audit(2000000144.328:14169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe970add3df code=0x7ffc0000 [ 217.534655][ T29] audit: type=1326 audit(2000000144.328:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe970ade9b7 code=0x7ffc0000 [ 217.558265][ T29] audit: type=1326 audit(2000000144.328:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe970add290 code=0x7ffc0000 [ 217.581918][ T29] audit: type=1326 audit(2000000144.328:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe970ade52b code=0x7ffc0000 [ 217.595286][T14412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.607933][ T29] audit: type=1326 audit(2000000144.358:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe970add58a code=0x7ffc0000 [ 217.634859][T14412] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.641384][ T29] audit: type=1326 audit(2000000144.358:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14411 comm="syz.4.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe970add58a code=0x7ffc0000 [ 217.681116][T14412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 217.713449][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.764666][T14419] program syz.4.4019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.834511][T14427] loop6: detected capacity change from 0 to 512 [ 217.841709][T14427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.871515][T14427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.890922][T14427] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.921830][T14427] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 218.001876][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.029932][T14434] SELinux: syz.7.4025 (14434) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 218.116273][T14443] loop6: detected capacity change from 0 to 512 [ 218.147202][T14443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.192769][T14443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.215737][T14443] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.264828][T14451] netlink: 'syz.1.4032': attribute type 1 has an invalid length. [ 218.283133][T14443] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 218.299515][T14451] loop1: detected capacity change from 0 to 128 [ 218.365211][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.425080][T14456] netlink: 'syz.6.4033': attribute type 1 has an invalid length. [ 218.445834][T14456] loop6: detected capacity change from 0 to 128 [ 218.530542][T14458] SELinux: syz.7.4034 (14458) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 218.611258][T14463] sd 0:0:1:0: device reset [ 218.698607][T14467] SELinux: syz.4.4039 (14467) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 218.774718][T14478] loop6: detected capacity change from 0 to 512 [ 218.798578][T14476] loop1: detected capacity change from 0 to 8192 [ 218.820179][T14478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.821356][T14476] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4042'. [ 218.848242][T14480] SELinux: syz.4.4044 (14480) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 218.881013][T14478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.908915][T14478] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.929164][T14486] loop5: detected capacity change from 0 to 1024 [ 218.944457][T14478] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 218.976850][T14486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.993206][T14494] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 219.004002][T14494] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 219.045010][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.065961][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.231141][T14490] loop1: detected capacity change from 0 to 1024 [ 219.237556][T14509] loop4: detected capacity change from 0 to 1024 [ 219.262728][T14509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.285959][T14517] loop6: detected capacity change from 0 to 512 [ 219.304100][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.307078][T14490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.360342][T14522] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 219.371394][T14522] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 219.416730][T14490] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.4046: missing EA_INODE flag [ 219.430643][T14490] EXT4-fs (loop1): Remounting filesystem read-only [ 219.460324][T14526] loop4: detected capacity change from 0 to 512 [ 219.468776][T14526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.481935][T14525] SELinux: syz.7.4060 (14525) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 219.508881][T14526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.522233][T14526] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.535834][T11401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.546448][T14526] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 219.603425][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.663714][T14534] SELinux: syz.7.4064 (14534) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 219.836846][T14530] loop1: detected capacity change from 0 to 1024 [ 219.903791][T14530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.965307][T14552] SELinux: syz.4.4071 (14552) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 220.026615][T14559] netlink: 'syz.5.4073': attribute type 1 has an invalid length. [ 220.035946][T14559] loop5: detected capacity change from 0 to 128 [ 220.139358][T14553] 9pnet_fd: Insufficient options for proto=fd [ 220.263840][T11401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.282573][T14572] loop6: detected capacity change from 0 to 1024 [ 220.303051][T14572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.382317][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.457175][T14589] loop4: detected capacity change from 0 to 512 [ 220.479163][T14589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.497246][T14589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.515527][T14589] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.534569][T14582] 9pnet_fd: Insufficient options for proto=fd [ 220.545109][T14589] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 220.562921][T14602] loop6: detected capacity change from 0 to 128 [ 220.600911][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.759287][T14613] loop6: detected capacity change from 0 to 512 [ 220.769103][T14609] loop4: detected capacity change from 0 to 8192 [ 220.792070][T14604] loop1: detected capacity change from 0 to 1024 [ 220.805502][T14609] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.4093'. [ 220.831945][T14613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.855678][T14613] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.938743][T14604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.035922][T14613] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.4094: corrupted xattr block 19: overlapping e_value [ 221.060011][T14613] EXT4-fs (loop6): Remounting filesystem read-only [ 221.066649][T14613] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 221.086860][T14627] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 221.107459][T14613] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 221.144129][T14633] loop7: detected capacity change from 0 to 512 [ 221.154424][T14613] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 221.158160][T14636] loop4: detected capacity change from 0 to 512 [ 221.172027][T14637] loop5: detected capacity change from 0 to 128 [ 221.179356][T14633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.222135][T14636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.232554][T14633] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.252748][T14636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.274920][T14633] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.286409][T14636] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.301019][T14633] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 221.318281][T14636] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 221.334935][T11401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.349279][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.361094][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.395535][T14651] 9pnet_fd: Insufficient options for proto=fd [ 221.405903][T13916] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.465417][T14650] SELinux: syz.6.4106 (14650) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 221.560932][T14671] loop4: detected capacity change from 0 to 512 [ 221.574597][T14677] loop5: detected capacity change from 0 to 1024 [ 221.581287][T14671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.596778][T14679] loop7: detected capacity change from 0 to 512 [ 221.605961][T14679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.617230][T14671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.632407][T14671] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.633162][T14685] 9pnet_fd: Insufficient options for proto=fd [ 221.652073][T14671] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 221.666984][T14677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.693587][T14679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.724803][T14679] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.736428][T13716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.748782][T14679] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 221.838075][T14702] SELinux: syz.1.4129 (14702) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 221.891137][T14708] loop5: detected capacity change from 0 to 8192 [ 221.934701][T14721] 9pnet_fd: Insufficient options for proto=fd [ 221.953062][T14708] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.4126'. [ 221.964076][T14725] loop6: detected capacity change from 0 to 512 [ 221.973973][T14725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.997145][T14728] loop1: detected capacity change from 0 to 512 [ 222.038797][T14725] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.049360][T14728] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.058145][T14736] loop7: detected capacity change from 0 to 512 [ 222.078710][T14736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.089030][T14741] loop4: detected capacity change from 0 to 512 [ 222.092031][T14728] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.097419][T14736] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.116313][T14741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.121423][T14728] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 222.134919][T14736] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 222.170902][T14741] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.225515][T14741] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 222.242720][T14758] FAULT_INJECTION: forcing a failure. [ 222.242720][T14758] name failslab, interval 1, probability 0, space 0, times 0 [ 222.255488][T14758] CPU: 1 UID: 0 PID: 14758 Comm: syz.6.4151 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 222.255538][T14758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.255625][T14758] Call Trace: [ 222.255634][T14758] [ 222.255643][T14758] __dump_stack+0x1d/0x30 [ 222.255668][T14758] dump_stack_lvl+0xe8/0x140 [ 222.255692][T14758] dump_stack+0x15/0x1b [ 222.255711][T14758] should_fail_ex+0x265/0x280 [ 222.255744][T14758] ? proc_cgroup_show+0x3f/0x600 [ 222.255845][T14758] should_failslab+0x8c/0xb0 [ 222.255870][T14758] __kmalloc_cache_noprof+0x4c/0x320 [ 222.255943][T14758] proc_cgroup_show+0x3f/0x600 [ 222.255965][T14758] ? __rcu_read_unlock+0x4f/0x70 [ 222.255987][T14758] proc_single_show+0x8c/0x110 [ 222.256020][T14758] traverse+0x144/0x3a0 [ 222.256080][T14758] seq_read_iter+0x853/0x940 [ 222.256128][T14758] ? _parse_integer+0x27/0x40 [ 222.256163][T14758] seq_read+0x1f7/0x240 [ 222.256289][T14758] ? __pfx_seq_read+0x10/0x10 [ 222.256323][T14758] vfs_readv+0x3fb/0x690 [ 222.256363][T14758] __x64_sys_preadv+0xfd/0x1c0 [ 222.256458][T14758] x64_sys_call+0x1503/0x2fb0 [ 222.256487][T14758] do_syscall_64+0xd2/0x200 [ 222.256511][T14758] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.256565][T14758] ? clear_bhb_loop+0x40/0x90 [ 222.256596][T14758] ? clear_bhb_loop+0x40/0x90 [ 222.256657][T14758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.256681][T14758] RIP: 0033:0x7f04eebae929 [ 222.256696][T14758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.256772][T14758] RSP: 002b:00007f04ed217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 222.256795][T14758] RAX: ffffffffffffffda RBX: 00007f04eedd5fa0 RCX: 00007f04eebae929 [ 222.256808][T14758] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000005 [ 222.256823][T14758] RBP: 00007f04ed217090 R08: 0000000000000003 R09: 0000000000000000 [ 222.256852][T14758] R10: 000000000000012c R11: 0000000000000246 R12: 0000000000000001 [ 222.256869][T14758] R13: 0000000000000000 R14: 00007f04eedd5fa0 R15: 00007fffb9ed9a88 [ 222.256888][T14758] [ 222.479520][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 222.479535][ T29] audit: type=1326 audit(2000000149.418:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.512919][T14756] SELinux: syz.7.4148 (14756) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 222.537495][ T29] audit: type=1326 audit(2000000149.418:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.561750][ T29] audit: type=1326 audit(2000000149.418:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.585697][ T29] audit: type=1326 audit(2000000149.458:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.609266][ T29] audit: type=1326 audit(2000000149.458:14843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.633014][ T29] audit: type=1326 audit(2000000149.458:14844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.656853][ T29] audit: type=1326 audit(2000000149.468:14845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.680511][ T29] audit: type=1326 audit(2000000149.468:14846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.693793][T14760] 9pnet_fd: Insufficient options for proto=fd [ 222.705101][ T29] audit: type=1326 audit(2000000149.468:14847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.734260][ T29] audit: type=1326 audit(2000000149.518:14848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14740 comm="syz.4.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe970ade929 code=0x7ffc0000 [ 222.791258][T14771] 9pnet_fd: Insufficient options for proto=fd [ 222.831724][T14779] loop4: detected capacity change from 0 to 512 [ 222.856664][T14779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.898144][T14782] SELinux: syz.1.4159 (14782) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 222.922118][T14779] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.958592][T14790] loop6: detected capacity change from 0 to 512 [ 222.972032][T14791] program syz.1.4162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.981927][T14790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.021444][T14790] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.056273][T14794] loop7: detected capacity change from 0 to 8192 [ 223.090335][T14790] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 223.106628][T14794] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.4164'. [ 223.233934][T14820] loop6: detected capacity change from 0 to 512 [ 223.265589][T14820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.326968][T14820] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.339706][T14829] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4175'. [ 223.367740][T14831] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 223.376122][T14831] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.383389][T14831] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.397477][T14823] loop1: detected capacity change from 0 to 512 [ 223.431060][T14831] bridge0: entered allmulticast mode [ 223.436816][T14823] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.478010][T14823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.497400][T14825] loop5: detected capacity change from 0 to 1024 [ 223.509040][T14833] program syz.6.4178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.556061][T14823] EXT4-fs (loop1): 1 truncate cleaned up [ 223.602584][T14823] team_slave_0: entered promiscuous mode [ 223.608346][T14823] team_slave_1: entered promiscuous mode [ 223.636507][T14823] macsec1: entered promiscuous mode [ 223.636660][T14851] loop4: detected capacity change from 0 to 512 [ 223.641916][T14823] team0: entered promiscuous mode [ 223.674619][T14851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.687361][T14853] loop6: detected capacity change from 0 to 1024 [ 223.714857][T14851] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.761528][T14851] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 223.813604][T14865] loop6: detected capacity change from 0 to 128 [ 223.822296][T14860] sel_write_user: 1 callbacks suppressed [ 223.822313][T14860] SELinux: syz.1.4187 (14860) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 223.866516][T14865] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.955095][T14873] program syz.1.4192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.966640][T14872] loop4: detected capacity change from 0 to 128 [ 224.015307][T14872] ext4 filesystem being mounted at /321/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.195137][T14883] siw: device registration error -23 [ 224.313602][T14890] loop1: detected capacity change from 0 to 8192 [ 224.342973][T14891] siw: device registration error -23 [ 224.362964][T14890] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4197'. [ 224.672187][T14903] SELinux: syz.1.4202 (14903) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 224.697187][T14899] SELinux: syz.7.4201 (14899) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 225.102293][T14914] loop5: detected capacity change from 0 to 8192 [ 225.190093][T14914] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.4206'. [ 225.427702][T14934] loop5: detected capacity change from 0 to 512 [ 225.437118][T14934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.456653][T14934] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.473365][T14934] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 225.502989][T14936] SELinux: syz.6.4215 (14936) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 225.563129][T14949] loop6: detected capacity change from 0 to 512 [ 225.570693][T14949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.595070][T14949] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.610047][T14957] loop5: detected capacity change from 0 to 128 [ 225.618416][T14957] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.630748][T14949] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 225.832115][T14973] program syz.6.4229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.912520][T14976] siw: device registration error -23 [ 226.024896][T14978] SELinux: syz.6.4231 (14978) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 226.308405][T14993] loop1: detected capacity change from 0 to 1024 [ 226.465425][T14997] loop7: detected capacity change from 0 to 512 [ 226.530062][T14997] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.602518][T14997] EXT4-fs (loop7): mount failed [ 226.658832][T15006] loop1: detected capacity change from 0 to 8192 [ 226.700694][T15006] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4241'. [ 226.801578][T15013] SELinux: syz.7.4244 (15013) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 226.818080][T15017] loop1: detected capacity change from 0 to 128 [ 226.835939][T15017] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.847256][T15022] FAULT_INJECTION: forcing a failure. [ 226.847256][T15022] name failslab, interval 1, probability 0, space 0, times 0 [ 226.880704][T15022] CPU: 1 UID: 0 PID: 15022 Comm: syz.7.4246 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 226.880765][T15022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.880777][T15022] Call Trace: [ 226.880785][T15022] [ 226.880792][T15022] __dump_stack+0x1d/0x30 [ 226.880817][T15022] dump_stack_lvl+0xe8/0x140 [ 226.880842][T15022] dump_stack+0x15/0x1b [ 226.880952][T15022] should_fail_ex+0x265/0x280 [ 226.880983][T15022] ? prog_array_map_alloc+0x33/0x120 [ 226.881009][T15022] should_failslab+0x8c/0xb0 [ 226.881084][T15022] __kmalloc_cache_noprof+0x4c/0x320 [ 226.881122][T15022] prog_array_map_alloc+0x33/0x120 [ 226.881142][T15022] map_create+0x843/0xb90 [ 226.881226][T15022] ? security_bpf+0x2b/0x90 [ 226.881252][T15022] __sys_bpf+0x5ab/0x790 [ 226.881300][T15022] __x64_sys_bpf+0x41/0x50 [ 226.881390][T15022] x64_sys_call+0x2478/0x2fb0 [ 226.881463][T15022] do_syscall_64+0xd2/0x200 [ 226.881487][T15022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 226.881590][T15022] ? clear_bhb_loop+0x40/0x90 [ 226.881619][T15022] ? clear_bhb_loop+0x40/0x90 [ 226.881641][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.881744][T15022] RIP: 0033:0x7fde502ee929 [ 226.881764][T15022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.881835][T15022] RSP: 002b:00007fde4e957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.881854][T15022] RAX: ffffffffffffffda RBX: 00007fde50515fa0 RCX: 00007fde502ee929 [ 226.881868][T15022] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 0000000000000000 [ 226.881885][T15022] RBP: 00007fde4e957090 R08: 0000000000000000 R09: 0000000000000000 [ 226.881908][T15022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.881924][T15022] R13: 0000000000000000 R14: 00007fde50515fa0 R15: 00007ffd453b6e18 [ 226.881949][T15022] [ 227.084981][T15023] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4245'. [ 227.106662][T15024] loop5: detected capacity change from 0 to 512 [ 227.113627][T15024] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.126501][T15024] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.149187][T15026] siw: device registration error -23 [ 227.162136][T15024] EXT4-fs (loop5): 1 truncate cleaned up [ 227.185890][T15019] team_slave_0: entered promiscuous mode [ 227.191613][T15019] team_slave_1: entered promiscuous mode [ 227.201311][T15019] macsec1: entered promiscuous mode [ 227.206574][T15019] team0: entered promiscuous mode [ 227.402246][T15038] SELinux: syz.7.4250 (15038) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 227.753300][T15048] loop6: detected capacity change from 0 to 8192 [ 227.778977][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 227.778995][ T29] audit: type=1326 audit(2000000154.708:15187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 227.814516][T15048] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.4256'. [ 227.842781][ T29] audit: type=1326 audit(2000000154.748:15188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 227.866464][ T29] audit: type=1326 audit(2000000154.748:15189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 227.870510][T15054] 9pnet_fd: Insufficient options for proto=fd [ 227.890155][ T29] audit: type=1326 audit(2000000154.748:15190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 227.907858][T15052] SELinux: syz.7.4257 (15052) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 227.919908][ T29] audit: type=1326 audit(2000000154.748:15191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 227.957114][ T29] audit: type=1326 audit(2000000154.748:15192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 227.980760][ T29] audit: type=1326 audit(2000000154.748:15193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 228.004538][ T29] audit: type=1326 audit(2000000154.748:15194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 228.004590][ T29] audit: type=1326 audit(2000000154.748:15195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 228.004643][ T29] audit: type=1326 audit(2000000154.748:15196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 228.167542][T15071] SELinux: syz.6.4262 (15071) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 228.197982][T15072] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 228.208841][T15072] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 228.269129][T15083] 9pnet_fd: Insufficient options for proto=fd [ 228.271331][T15068] netlink: 'syz.5.4263': attribute type 10 has an invalid length. [ 228.283170][T15068] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4263'. [ 228.293378][T15068] batman_adv: batadv0: Adding interface: macvlan0 [ 228.300054][T15068] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.327812][T15068] batman_adv: batadv0: Interface activated: macvlan0 [ 228.411639][T15086] loop7: detected capacity change from 0 to 8192 [ 228.425458][T15088] program syz.1.4270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.436060][T15090] loop5: detected capacity change from 0 to 512 [ 228.446528][T15086] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.4269'. [ 228.457872][T15090] EXT4-fs (loop5): 1 orphan inode deleted [ 228.464366][T15090] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.474969][ T57] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 228.613651][T15090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4271'. [ 228.622902][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4271'. [ 228.753760][T15111] FAULT_INJECTION: forcing a failure. [ 228.753760][T15111] name failslab, interval 1, probability 0, space 0, times 0 [ 228.766510][T15111] CPU: 1 UID: 0 PID: 15111 Comm: syz.1.4275 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 228.766544][T15111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.766557][T15111] Call Trace: [ 228.766564][T15111] [ 228.766572][T15111] __dump_stack+0x1d/0x30 [ 228.766593][T15111] dump_stack_lvl+0xe8/0x140 [ 228.766669][T15111] dump_stack+0x15/0x1b [ 228.766686][T15111] should_fail_ex+0x265/0x280 [ 228.766780][T15111] should_failslab+0x8c/0xb0 [ 228.766857][T15111] kmem_cache_alloc_noprof+0x50/0x310 [ 228.766889][T15111] ? prepare_creds+0x37/0x4c0 [ 228.766912][T15111] prepare_creds+0x37/0x4c0 [ 228.766987][T15111] copy_creds+0x8f/0x3f0 [ 228.767008][T15111] copy_process+0x658/0x1fe0 [ 228.767031][T15111] ? kstrtouint+0x76/0xc0 [ 228.767145][T15111] ? __rcu_read_unlock+0x4f/0x70 [ 228.767176][T15111] kernel_clone+0x16c/0x5b0 [ 228.767205][T15111] ? vfs_write+0x75e/0x8e0 [ 228.767238][T15111] __x64_sys_clone+0xe6/0x120 [ 228.767276][T15111] x64_sys_call+0x2c59/0x2fb0 [ 228.767303][T15111] do_syscall_64+0xd2/0x200 [ 228.767410][T15111] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 228.767442][T15111] ? clear_bhb_loop+0x40/0x90 [ 228.767530][T15111] ? clear_bhb_loop+0x40/0x90 [ 228.767630][T15111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.767673][T15111] RIP: 0033:0x7f3e6878e929 [ 228.767692][T15111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.767711][T15111] RSP: 002b:00007f3e66db4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 228.767804][T15111] RAX: ffffffffffffffda RBX: 00007f3e689b6160 RCX: 00007f3e6878e929 [ 228.767821][T15111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 228.767838][T15111] RBP: 00007f3e66db5090 R08: 0000000000000000 R09: 0000000000000000 [ 228.767854][T15111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 228.767865][T15111] R13: 0000000000000000 R14: 00007f3e689b6160 R15: 00007fff4c24f0f8 [ 228.767884][T15111] [ 229.095290][T15113] SELinux: syz.5.4278 (15113) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 229.155891][T15115] 9pnet_fd: Insufficient options for proto=fd [ 229.263535][T15118] loop6: detected capacity change from 0 to 128 [ 229.426249][T15120] loop7: detected capacity change from 0 to 512 [ 229.653793][T15120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.668407][T15118] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.717934][T15120] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.849929][T15120] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 229.944076][T15127] loop5: detected capacity change from 0 to 512 [ 229.979985][T15127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.021113][T15128] siw: device registration error -23 [ 230.030566][T15127] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.076199][T15127] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 230.632779][T15146] loop5: detected capacity change from 0 to 128 [ 230.715718][T15140] 9pnet_fd: Insufficient options for proto=fd [ 230.729445][T15151] loop4: detected capacity change from 0 to 512 [ 230.736300][T15152] bio_check_eod: 662 callbacks suppressed [ 230.736318][T15152] syz.5.4290: attempt to access beyond end of device [ 230.736318][T15152] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 230.761322][T15151] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.4285: corrupted in-inode xattr: invalid ea_ino [ 230.778107][T15151] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.4285: couldn't read orphan inode 15 (err -117) [ 230.789857][T15152] syz.5.4290: attempt to access beyond end of device [ 230.789857][T15152] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 230.831906][T15152] syz.5.4290: attempt to access beyond end of device [ 230.831906][T15152] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 230.845567][T15152] syz.5.4290: attempt to access beyond end of device [ 230.845567][T15152] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 230.868752][T15152] syz.5.4290: attempt to access beyond end of device [ 230.868752][T15152] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 230.884097][T15152] syz.5.4290: attempt to access beyond end of device [ 230.884097][T15152] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 230.897857][T15152] syz.5.4290: attempt to access beyond end of device [ 230.897857][T15152] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 230.911614][T15152] syz.5.4290: attempt to access beyond end of device [ 230.911614][T15152] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 230.913763][T15158] 9pnet_fd: Insufficient options for proto=fd [ 230.929586][T15152] syz.5.4290: attempt to access beyond end of device [ 230.929586][T15152] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 230.947136][T15152] syz.5.4290: attempt to access beyond end of device [ 230.947136][T15152] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 230.975806][T15162] loop4: detected capacity change from 0 to 512 [ 230.992105][T15162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.013345][T15162] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.031871][T15162] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 231.117638][T15168] SELinux: syz.4.4295 (15168) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 231.119323][T15160] loop6: detected capacity change from 0 to 1024 [ 231.159750][T15171] loop4: detected capacity change from 0 to 128 [ 231.374652][T15183] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 231.381002][T15183] syzkaller0: linktype set to 805 [ 231.449841][T15188] loop4: detected capacity change from 0 to 128 [ 231.453912][T15191] loop7: detected capacity change from 0 to 512 [ 231.466161][T15188] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.513408][T15195] loop1: detected capacity change from 0 to 512 [ 231.523360][T15195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 231.595577][T15195] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.606266][T15198] loop6: detected capacity change from 0 to 8192 [ 231.614575][T15195] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 231.632675][T15198] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.4306'. [ 231.730969][T15203] SELinux: syz.1.4307 (15203) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 231.740934][T15207] siw: device registration error -23 [ 231.824609][T15215] 9pnet_fd: Insufficient options for proto=fd [ 231.917853][T15216] 9pnet_fd: Insufficient options for proto=fd [ 231.997307][T15223] SELinux: syz.1.4315 (15223) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.028630][T15226] program syz.5.4316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.106580][T15228] SELinux: syz.1.4317 (15228) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.154563][T15232] loop5: detected capacity change from 0 to 256 [ 232.167945][T15232] vfat: Unknown parameter 'kmem_cache_free' [ 232.213227][T15235] SELinux: syz.1.4319 (15235) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.274605][T15241] loop1: detected capacity change from 0 to 1024 [ 232.288361][T15241] ext4: Unknown parameter 'pcr' [ 232.300241][T15238] SELinux: syz.5.4320 (15238) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 232.358291][T15241] loop1: detected capacity change from 0 to 2048 [ 232.380892][T15245] loop5: detected capacity change from 0 to 512 [ 232.388349][T15245] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.404372][T15248] loop7: detected capacity change from 0 to 128 [ 232.422374][T15245] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.471840][T15245] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 232.719918][T15271] loop5: detected capacity change from 0 to 512 [ 232.734995][T15271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.746080][T15272] loop7: detected capacity change from 0 to 512 [ 232.764943][T15264] loop6: detected capacity change from 0 to 8192 [ 232.783019][T15271] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.805041][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 232.805059][ T29] audit: type=1326 audit(2000000159.739:15683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c6ffcd290 code=0x7ffc0000 [ 232.809993][T15271] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, [ 232.811361][ T29] audit: type=1326 audit(2000000159.739:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9c6ffcd677 code=0x7ffc0000 [ 232.834965][T15271] block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 232.843272][ T29] audit: type=1326 audit(2000000159.739:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c6ffcd290 code=0x7ffc0000 [ 232.899003][ T29] audit: type=1326 audit(2000000159.739:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6ffce929 code=0x7ffc0000 [ 232.922768][ T29] audit: type=1326 audit(2000000159.739:15687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.5.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f9c6ffce929 code=0x7ffc0000 [ 232.948514][T15264] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.4329'. [ 232.950373][ T29] audit: type=1326 audit(2000000159.839:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.6.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 232.981490][ T29] audit: type=1326 audit(2000000159.839:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.6.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 233.005256][ T29] audit: type=1326 audit(2000000159.839:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.6.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 233.029062][ T29] audit: type=1326 audit(2000000159.839:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.6.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 233.053222][ T29] audit: type=1326 audit(2000000159.839:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15263 comm="syz.6.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 233.062460][T15283] loop1: detected capacity change from 0 to 512 [ 233.109555][T15285] loop6: detected capacity change from 0 to 512 [ 233.119315][T15285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.133293][T15283] EXT4-fs (loop1): 1 orphan inode deleted [ 233.140836][T15283] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.151493][ T2725] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 233.164049][T15291] SELinux: syz.5.4338 (15291) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 233.164750][T15285] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.183274][T15283] netlink: 'syz.1.4336': attribute type 3 has an invalid length. [ 233.203224][T15285] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 233.258418][T15298] FAULT_INJECTION: forcing a failure. [ 233.258418][T15298] name failslab, interval 1, probability 0, space 0, times 0 [ 233.271286][T15298] CPU: 1 UID: 0 PID: 15298 Comm: +}[@ Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 233.271323][T15298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.271340][T15298] Call Trace: [ 233.271349][T15298] [ 233.271358][T15298] __dump_stack+0x1d/0x30 [ 233.271384][T15298] dump_stack_lvl+0xe8/0x140 [ 233.271409][T15298] dump_stack+0x15/0x1b [ 233.271480][T15298] should_fail_ex+0x265/0x280 [ 233.271521][T15298] should_failslab+0x8c/0xb0 [ 233.271622][T15298] __kmalloc_noprof+0xa5/0x3e0 [ 233.271651][T15298] ? lsm_fill_user_ctx+0x91/0x1e0 [ 233.271685][T15298] lsm_fill_user_ctx+0x91/0x1e0 [ 233.271749][T15298] selinux_getselfattr+0x87/0xd0 [ 233.271865][T15298] security_getselfattr+0x24d/0x500 [ 233.271903][T15298] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 233.271928][T15298] x64_sys_call+0x1fc6/0x2fb0 [ 233.271949][T15298] do_syscall_64+0xd2/0x200 [ 233.272045][T15298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.272077][T15298] ? clear_bhb_loop+0x40/0x90 [ 233.272103][T15298] ? clear_bhb_loop+0x40/0x90 [ 233.272132][T15298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.272188][T15298] RIP: 0033:0x7f04eebae929 [ 233.272203][T15298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.272246][T15298] RSP: 002b:00007f04ed217038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 233.272271][T15298] RAX: ffffffffffffffda RBX: 00007f04eedd5fa0 RCX: 00007f04eebae929 [ 233.272316][T15298] RDX: 0000200000000040 RSI: ffffffffffffffff RDI: 0000000000000064 [ 233.272389][T15298] RBP: 00007f04ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 233.272405][T15298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.272421][T15298] R13: 0000000000000000 R14: 00007f04eedd5fa0 R15: 00007fffb9ed9a88 [ 233.272492][T15298] [ 233.493053][T15307] program syz.5.4343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.594896][T15316] FAULT_INJECTION: forcing a failure. [ 233.594896][T15316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.608202][T15316] CPU: 0 UID: 0 PID: 15316 Comm: syz.5.4347 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 233.608240][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.608256][T15316] Call Trace: [ 233.608265][T15316] [ 233.608275][T15316] __dump_stack+0x1d/0x30 [ 233.608360][T15316] dump_stack_lvl+0xe8/0x140 [ 233.608386][T15316] dump_stack+0x15/0x1b [ 233.608454][T15316] should_fail_ex+0x265/0x280 [ 233.608566][T15316] should_fail+0xb/0x20 [ 233.608603][T15316] should_fail_usercopy+0x1a/0x20 [ 233.608705][T15316] _copy_from_iter+0xcf/0xe40 [ 233.608727][T15316] ? __build_skb_around+0x1a0/0x200 [ 233.608766][T15316] ? __alloc_skb+0x223/0x320 [ 233.608805][T15316] netlink_sendmsg+0x471/0x6b0 [ 233.608900][T15316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.608934][T15316] __sock_sendmsg+0x142/0x180 [ 233.608964][T15316] ____sys_sendmsg+0x31e/0x4e0 [ 233.609127][T15316] ___sys_sendmsg+0x17b/0x1d0 [ 233.609167][T15316] __x64_sys_sendmsg+0xd4/0x160 [ 233.609271][T15316] x64_sys_call+0x2999/0x2fb0 [ 233.609300][T15316] do_syscall_64+0xd2/0x200 [ 233.609338][T15316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.609372][T15316] ? clear_bhb_loop+0x40/0x90 [ 233.609399][T15316] ? clear_bhb_loop+0x40/0x90 [ 233.609481][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.609584][T15316] RIP: 0033:0x7f9c6ffce929 [ 233.609604][T15316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.609627][T15316] RSP: 002b:00007f9c6e637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.609647][T15316] RAX: ffffffffffffffda RBX: 00007f9c701f5fa0 RCX: 00007f9c6ffce929 [ 233.609659][T15316] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000003 [ 233.609708][T15316] RBP: 00007f9c6e637090 R08: 0000000000000000 R09: 0000000000000000 [ 233.609724][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.609739][T15316] R13: 0000000000000000 R14: 00007f9c701f5fa0 R15: 00007ffcbe5d56c8 [ 233.609763][T15316] [ 233.821199][T15327] FAULT_INJECTION: forcing a failure. [ 233.821199][T15327] name failslab, interval 1, probability 0, space 0, times 0 [ 233.833941][T15327] CPU: 0 UID: 0 PID: 15327 Comm: syz.6.4350 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 233.833978][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.833994][T15327] Call Trace: [ 233.834003][T15327] [ 233.834013][T15327] __dump_stack+0x1d/0x30 [ 233.834037][T15327] dump_stack_lvl+0xe8/0x140 [ 233.834142][T15327] dump_stack+0x15/0x1b [ 233.834208][T15327] should_fail_ex+0x265/0x280 [ 233.834241][T15327] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 233.834272][T15327] should_failslab+0x8c/0xb0 [ 233.834310][T15327] __kmalloc_cache_noprof+0x4c/0x320 [ 233.834350][T15327] bpf_prog_alloc_no_stats+0xc4/0x390 [ 233.834391][T15327] bpf_prog_alloc+0x3c/0x150 [ 233.834486][T15327] bpf_prog_load+0x514/0x1070 [ 233.834601][T15327] ? security_bpf+0x2b/0x90 [ 233.834629][T15327] __sys_bpf+0x51d/0x790 [ 233.834681][T15327] __x64_sys_bpf+0x41/0x50 [ 233.834712][T15327] x64_sys_call+0x2478/0x2fb0 [ 233.834751][T15327] do_syscall_64+0xd2/0x200 [ 233.834773][T15327] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.834914][T15327] ? clear_bhb_loop+0x40/0x90 [ 233.834937][T15327] ? clear_bhb_loop+0x40/0x90 [ 233.834958][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.834980][T15327] RIP: 0033:0x7f04eebae929 [ 233.835077][T15327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.835095][T15327] RSP: 002b:00007f04ed217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.835117][T15327] RAX: ffffffffffffffda RBX: 00007f04eedd5fa0 RCX: 00007f04eebae929 [ 233.835133][T15327] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 233.835149][T15327] RBP: 00007f04ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 233.835165][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.835221][T15327] R13: 0000000000000000 R14: 00007f04eedd5fa0 R15: 00007fffb9ed9a88 [ 233.835245][T15327] [ 234.158551][T15332] SELinux: syz.6.4352 (15332) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 234.178084][T15340] loop5: detected capacity change from 0 to 8192 [ 234.211094][T15348] loop1: detected capacity change from 0 to 512 [ 234.236006][T15340] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.4355'. [ 234.250073][T15355] loop6: detected capacity change from 0 to 128 [ 234.315283][T15358] loop7: detected capacity change from 0 to 512 [ 234.335114][T15358] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4363: bg 0: block 5: invalid block bitmap [ 234.372371][T15358] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 234.399174][T15358] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4363: invalid indirect mapped block 3 (level 2) [ 234.413681][T15358] EXT4-fs (loop7): 1 orphan inode deleted [ 234.419610][T15358] EXT4-fs (loop7): 1 truncate cleaned up [ 234.460257][T15374] FAULT_INJECTION: forcing a failure. [ 234.460257][T15374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.473608][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.5.4370 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 234.473701][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.473714][T15374] Call Trace: [ 234.473721][T15374] [ 234.473728][T15374] __dump_stack+0x1d/0x30 [ 234.473755][T15374] dump_stack_lvl+0xe8/0x140 [ 234.473764][T15368] loop4: detected capacity change from 0 to 8192 [ 234.473781][T15374] dump_stack+0x15/0x1b [ 234.473979][T15374] should_fail_ex+0x265/0x280 [ 234.474040][T15374] should_fail_alloc_page+0xf2/0x100 [ 234.474120][T15374] __alloc_frozen_pages_noprof+0xff/0x360 [ 234.474173][T15374] alloc_pages_mpol+0xb3/0x250 [ 234.474217][T15374] alloc_pages_noprof+0x90/0x130 [ 234.474271][T15374] kimage_alloc_control_pages+0x2ec/0x7d0 [ 234.474320][T15374] ? alloc_pages_mpol+0x201/0x250 [ 234.474388][T15374] machine_kexec_prepare+0xbf/0xaf0 [ 234.474417][T15374] ? kimage_alloc_control_pages+0x77b/0x7d0 [ 234.474462][T15374] ? __pfx_alloc_pgt_page+0x10/0x10 [ 234.474515][T15374] do_kexec_load+0x3cf/0x510 [ 234.474566][T15374] __se_sys_kexec_load+0x134/0x160 [ 234.474594][T15374] __x64_sys_kexec_load+0x55/0x70 [ 234.474623][T15374] x64_sys_call+0xa36/0x2fb0 [ 234.474653][T15374] do_syscall_64+0xd2/0x200 [ 234.474731][T15374] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.474768][T15374] ? clear_bhb_loop+0x40/0x90 [ 234.474817][T15374] ? clear_bhb_loop+0x40/0x90 [ 234.474847][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.474876][T15374] RIP: 0033:0x7f9c6ffce929 [ 234.474896][T15374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.474923][T15374] RSP: 002b:00007f9c6e637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 234.474996][T15374] RAX: ffffffffffffffda RBX: 00007f9c701f5fa0 RCX: 00007f9c6ffce929 [ 234.475014][T15374] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 234.475046][T15374] RBP: 00007f9c6e637090 R08: 0000000000000000 R09: 0000000000000000 [ 234.475064][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.475081][T15374] R13: 0000000000000000 R14: 00007f9c701f5fa0 R15: 00007ffcbe5d56c8 [ 234.475109][T15374] [ 234.715058][T15368] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.4366'. [ 234.761361][T15383] SELinux: syz.6.4371 (15383) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 235.091536][T15397] SELinux: syz.1.4376 (15397) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 235.131044][T15400] loop1: detected capacity change from 0 to 128 [ 235.313753][T15406] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 235.315246][T15374] syz.5.4370 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 235.323702][T15403] SELinux: syz.7.4378 (15403) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 235.335394][T15374] CPU: 1 UID: 0 PID: 15374 Comm: syz.5.4370 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 235.335434][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.335453][T15374] Call Trace: [ 235.335463][T15374] [ 235.335477][T15374] __dump_stack+0x1d/0x30 [ 235.335508][T15374] dump_stack_lvl+0xe8/0x140 [ 235.335535][T15374] dump_stack+0x15/0x1b [ 235.335559][T15374] dump_header+0x81/0x220 [ 235.335646][T15374] oom_kill_process+0x334/0x3f0 [ 235.335689][T15374] out_of_memory+0x979/0xb80 [ 235.335796][T15374] try_charge_memcg+0x5e6/0x9e0 [ 235.335836][T15374] obj_cgroup_charge_pages+0xa6/0x150 [ 235.335888][T15374] __memcg_kmem_charge_page+0x9f/0x170 [ 235.335983][T15374] __alloc_frozen_pages_noprof+0x188/0x360 [ 235.336034][T15374] alloc_pages_mpol+0xb3/0x250 [ 235.336104][T15374] alloc_pages_noprof+0x90/0x130 [ 235.336193][T15374] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 235.336276][T15374] __kvmalloc_node_noprof+0x30f/0x4e0 [ 235.336317][T15374] ? ip_set_alloc+0x1f/0x30 [ 235.336431][T15374] ? ip_set_alloc+0x1f/0x30 [ 235.336470][T15374] ? __kmalloc_cache_noprof+0x189/0x320 [ 235.336511][T15374] ip_set_alloc+0x1f/0x30 [ 235.336550][T15374] hash_netiface_create+0x282/0x740 [ 235.336617][T15374] ? __pfx_hash_netiface_create+0x10/0x10 [ 235.336659][T15374] ip_set_create+0x3cc/0x960 [ 235.336746][T15374] ? __nla_parse+0x40/0x60 [ 235.336775][T15374] nfnetlink_rcv_msg+0x4c3/0x590 [ 235.336837][T15374] ? selinux_capable+0x1f9/0x270 [ 235.336961][T15374] netlink_rcv_skb+0x123/0x220 [ 235.337005][T15374] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 235.337089][T15374] nfnetlink_rcv+0x16b/0x1690 [ 235.337125][T15374] ? __kfree_skb+0x109/0x150 [ 235.337215][T15374] ? nlmon_xmit+0x4f/0x60 [ 235.337244][T15374] ? consume_skb+0x49/0x150 [ 235.337349][T15374] ? nlmon_xmit+0x4f/0x60 [ 235.337375][T15374] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 235.337409][T15374] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 235.337517][T15374] ? __dev_queue_xmit+0x182/0x1fb0 [ 235.337616][T15374] ? irq_work_queue+0x93/0x100 [ 235.337659][T15374] ? ref_tracker_free+0x37d/0x3e0 [ 235.337823][T15374] ? __netlink_deliver_tap+0x4dc/0x500 [ 235.337856][T15374] netlink_unicast+0x59e/0x670 [ 235.337909][T15374] netlink_sendmsg+0x58b/0x6b0 [ 235.338004][T15374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.338032][T15374] __sock_sendmsg+0x142/0x180 [ 235.338114][T15374] ____sys_sendmsg+0x31e/0x4e0 [ 235.338204][T15374] ___sys_sendmsg+0x17b/0x1d0 [ 235.338252][T15374] __x64_sys_sendmsg+0xd4/0x160 [ 235.338286][T15374] x64_sys_call+0x2999/0x2fb0 [ 235.338317][T15374] do_syscall_64+0xd2/0x200 [ 235.338409][T15374] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.338447][T15374] ? clear_bhb_loop+0x40/0x90 [ 235.338613][T15374] ? clear_bhb_loop+0x40/0x90 [ 235.338643][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.338672][T15374] RIP: 0033:0x7f9c6ffce929 [ 235.338696][T15374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.338798][T15374] RSP: 002b:00007f9c6e637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.338825][T15374] RAX: ffffffffffffffda RBX: 00007f9c701f5fa0 RCX: 00007f9c6ffce929 [ 235.338911][T15374] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 235.338929][T15374] RBP: 00007f9c70050b39 R08: 0000000000000000 R09: 0000000000000000 [ 235.338946][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.338962][T15374] R13: 0000000000000000 R14: 00007f9c701f5fa0 R15: 00007ffcbe5d56c8 [ 235.339030][T15374] [ 235.339083][T15374] memory: usage 307200kB, limit 307200kB, failcnt 168 [ 235.356062][T15406] netlink: 'wÞ£ÿ': attribute type 4 has an invalid length. [ 235.362164][T15374] memory+swap: usage 307340kB, limit 9007199254740988kB, failcnt 0 [ 235.576814][T15410] 9pnet_fd: Insufficient options for proto=fd [ 235.577233][T15374] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 235.738270][T15374] Memory cgroup stats for /syz5: [ 235.738736][T15374] cache 0 [ 235.746706][T15374] rss 4096 [ 235.746719][T15374] shmem 0 [ 235.746727][T15374] mapped_file 0 [ 235.756319][T15374] dirty 0 [ 235.759588][T15374] writeback 0 [ 235.762918][T15374] workingset_refault_anon 9 [ 235.767726][T15374] workingset_refault_file 0 [ 235.772369][T15374] swap 143360 [ 235.775825][T15374] swapcached 4096 [ 235.779540][T15374] pgpgin 57849 [ 235.782941][T15374] pgpgout 57848 [ 235.783355][T15413] program syz.7.4381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.786394][T15374] pgfault 31751 [ 235.786405][T15374] pgmajfault 5 [ 235.786415][T15374] inactive_anon 0 [ 235.806256][T15374] active_anon 4096 [ 235.810096][T15374] inactive_file 0 [ 235.813755][T15374] active_file 0 [ 235.817311][T15374] unevictable 0 [ 235.820822][T15374] hierarchical_memory_limit 314572800 [ 235.826426][T15374] hierarchical_memsw_limit 9223372036854771712 [ 235.833096][T15374] total_cache 0 [ 235.836600][T15374] total_rss 4096 [ 235.840214][T15374] total_shmem 0 [ 235.843691][T15374] total_mapped_file 0 [ 235.847789][T15374] total_dirty 0 [ 235.851324][T15374] total_writeback 0 [ 235.855193][T15374] total_workingset_refault_anon 9 [ 235.860257][T15374] total_workingset_refault_file 0 [ 235.865329][T15374] total_swap 143360 [ 235.869161][T15374] total_swapcached 4096 [ 235.873317][T15374] total_pgpgin 57849 [ 235.877228][T15374] total_pgpgout 57848 [ 235.881256][T15374] total_pgfault 31751 [ 235.881639][T15415] hub 6-0:1.0: USB hub found [ 235.885239][T15374] total_pgmajfault 5 [ 235.885250][T15374] total_inactive_anon 0 [ 235.885259][T15374] total_active_anon 4096 [ 235.885267][T15374] total_inactive_file 0 [ 235.885289][T15374] total_active_file 0 [ 235.885296][T15374] total_unevictable 0 [ 235.885304][T15374] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg= [ 235.892602][T15415] hub 6-0:1.0: 8 ports detected [ 235.894645][T15374] /syz5,task_memcg=/syz5,task=syz.5.4370,pid=15373,uid=0 [ 235.937208][T15374] Memory cgroup out of memory: Killed process 15373 (syz.5.4370) total-vm:90044kB, anon-rss:1064kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 236.120380][T15381] syz.5.4370 (15381) used greatest stack depth: 8616 bytes left [ 236.134611][T15417] SELinux: syz.7.4383 (15417) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 236.150141][T15378] syz.5.4370 (15378) used greatest stack depth: 8248 bytes left [ 236.301040][T15426] loop4: detected capacity change from 0 to 164 [ 236.437347][T15438] program syz.4.4392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.459905][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4393'. [ 236.488060][T15429] loop7: detected capacity change from 0 to 1024 [ 236.520336][T15374] syz.5.4370 (15374) used greatest stack depth: 7160 bytes left [ 236.543993][T15446] loop5: detected capacity change from 0 to 512 [ 236.581108][T15446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 236.623332][T15446] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.655694][T15446] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 236.837135][T15463] loop1: detected capacity change from 0 to 512 [ 236.859257][T15463] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 236.884234][T15463] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.4401: iget: bad i_size value: -67835469387268086 [ 236.916066][T15463] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4401: couldn't read orphan inode 15 (err -117) [ 236.928999][T15463] ext2 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.957501][T15463] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.4401: Directory hole found for htree leaf block 0 [ 236.996944][T15459] loop5: detected capacity change from 0 to 164 [ 237.007524][T15457] 9pnet_fd: Insufficient options for proto=fd [ 237.072409][T15476] program syz.5.4405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.087300][T15478] loop7: detected capacity change from 0 to 512 [ 237.095724][T15478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.121051][T15478] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.145701][T15478] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 237.176909][T15488] 9pnet: Could not find request transport: 0xffffffffffffffff [ 237.448445][T15508] program syz.7.4418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.495750][T15510] loop5: detected capacity change from 0 to 512 [ 237.593761][T15520] loop4: detected capacity change from 0 to 512 [ 237.603566][T15520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.616720][T15516] SELinux: syz.7.4423 (15516) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 237.640564][T15520] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.663554][T15520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 237.711012][T15510] EXT4-fs (loop5): 1 orphan inode deleted [ 237.717408][T15510] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.799102][ T788] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 237.830490][T15531] loop7: detected capacity change from 0 to 128 [ 237.912912][T15538] bio_check_eod: 550 callbacks suppressed [ 237.912932][T15538] syz.7.4427: attempt to access beyond end of device [ 237.912932][T15538] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 237.949008][T15538] syz.7.4427: attempt to access beyond end of device [ 237.949008][T15538] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 237.965020][T15538] syz.7.4427: attempt to access beyond end of device [ 237.965020][T15538] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 237.979940][T15537] loop6: detected capacity change from 0 to 512 [ 237.989239][T15538] syz.7.4427: attempt to access beyond end of device [ 237.989239][T15538] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 238.035733][T15538] syz.7.4427: attempt to access beyond end of device [ 238.035733][T15538] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 238.036532][T15537] __quota_error: 415 callbacks suppressed [ 238.036551][T15537] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 238.067373][T15542] sctp: [Deprecated]: syz.1.4431 (pid 15542) Use of int in max_burst socket option. [ 238.067373][T15542] Use struct sctp_assoc_value instead [ 238.082177][T15538] syz.7.4427: attempt to access beyond end of device [ 238.082177][T15538] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 238.151824][T15537] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 238.172841][T15538] syz.7.4427: attempt to access beyond end of device [ 238.172841][T15538] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 238.204807][T15554] loop4: detected capacity change from 0 to 512 [ 238.222447][T15537] EXT4-fs (loop6): mount failed [ 238.228685][T15538] syz.7.4427: attempt to access beyond end of device [ 238.228685][T15538] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 238.235138][T15550] SELinux: syz.5.4434 (15550) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 238.261038][T15554] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 238.280180][T15554] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 238.310497][T15538] syz.7.4427: attempt to access beyond end of device [ 238.310497][T15538] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 238.338220][T15561] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4437'. [ 238.352558][T15558] loop1: detected capacity change from 0 to 512 [ 238.355703][T15538] syz.7.4427: attempt to access beyond end of device [ 238.355703][T15538] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 238.373760][T15561] FAULT_INJECTION: forcing a failure. [ 238.373760][T15561] name failslab, interval 1, probability 0, space 0, times 0 [ 238.386504][T15561] CPU: 1 UID: 0 PID: 15561 Comm: syz.6.4437 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 238.386539][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.386552][T15561] Call Trace: [ 238.386560][T15561] [ 238.386568][T15561] __dump_stack+0x1d/0x30 [ 238.386606][T15561] dump_stack_lvl+0xe8/0x140 [ 238.386629][T15561] dump_stack+0x15/0x1b [ 238.386665][T15561] should_fail_ex+0x265/0x280 [ 238.386697][T15561] ? alloc_netdev_mqs+0x829/0xab0 [ 238.386763][T15561] should_failslab+0x8c/0xb0 [ 238.386794][T15561] __kmalloc_cache_noprof+0x4c/0x320 [ 238.386824][T15561] alloc_netdev_mqs+0x829/0xab0 [ 238.386934][T15561] rtnl_create_link+0x239/0x710 [ 238.386967][T15561] rtnl_newlink_create+0x14c/0x620 [ 238.387042][T15561] ? __schedule+0x6a8/0xb30 [ 238.387069][T15561] rtnl_newlink+0xf29/0x12d0 [ 238.387128][T15561] ? xas_load+0x413/0x430 [ 238.387168][T15561] ? __memcg_slab_free_hook+0x135/0x230 [ 238.387294][T15561] ? __kfree_skb+0x109/0x150 [ 238.387373][T15561] ? __rcu_read_unlock+0x4f/0x70 [ 238.387401][T15561] ? avc_has_perm_noaudit+0x1b1/0x200 [ 238.387467][T15561] ? selinux_capable+0x1f9/0x270 [ 238.387499][T15561] ? security_capable+0x83/0x90 [ 238.387602][T15561] ? ns_capable+0x7d/0xb0 [ 238.387694][T15561] ? __pfx_rtnl_newlink+0x10/0x10 [ 238.387773][T15561] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 238.387802][T15561] netlink_rcv_skb+0x123/0x220 [ 238.387843][T15561] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 238.387872][T15561] rtnetlink_rcv+0x1c/0x30 [ 238.387950][T15561] netlink_unicast+0x59e/0x670 [ 238.388052][T15561] netlink_sendmsg+0x58b/0x6b0 [ 238.388076][T15561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.388102][T15561] __sock_sendmsg+0x142/0x180 [ 238.388134][T15561] ____sys_sendmsg+0x31e/0x4e0 [ 238.388172][T15561] ___sys_sendmsg+0x17b/0x1d0 [ 238.388270][T15561] __x64_sys_sendmsg+0xd4/0x160 [ 238.388292][T15561] x64_sys_call+0x2999/0x2fb0 [ 238.388317][T15561] do_syscall_64+0xd2/0x200 [ 238.388334][T15561] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 238.388359][T15561] ? clear_bhb_loop+0x40/0x90 [ 238.388433][T15561] ? clear_bhb_loop+0x40/0x90 [ 238.388511][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.388536][T15561] RIP: 0033:0x7f04eebae929 [ 238.388555][T15561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.388579][T15561] RSP: 002b:00007f04ed217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.388600][T15561] RAX: ffffffffffffffda RBX: 00007f04eedd5fa0 RCX: 00007f04eebae929 [ 238.388614][T15561] RDX: 0000000000008800 RSI: 0000200000000580 RDI: 0000000000000003 [ 238.388656][T15561] RBP: 00007f04ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 238.388742][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.388754][T15561] R13: 0000000000000000 R14: 00007f04eedd5fa0 R15: 00007fffb9ed9a88 [ 238.388778][T15561] [ 238.399019][T15554] EXT4-fs (loop4): mount failed [ 238.461103][T15565] FAULT_INJECTION: forcing a failure. [ 238.461103][T15565] name failslab, interval 1, probability 0, space 0, times 0 [ 238.487250][T15558] EXT4-fs (loop1): 1 orphan inode deleted [ 238.489770][T15565] CPU: 1 UID: 0 PID: 15565 Comm: syz.6.4440 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 238.489861][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.489880][T15565] Call Trace: [ 238.489890][T15565] [ 238.489901][T15565] __dump_stack+0x1d/0x30 [ 238.490011][T15565] dump_stack_lvl+0xe8/0x140 [ 238.490068][T15565] dump_stack+0x15/0x1b [ 238.490091][T15565] should_fail_ex+0x265/0x280 [ 238.490136][T15565] should_failslab+0x8c/0xb0 [ 238.490169][T15565] kmem_cache_alloc_noprof+0x50/0x310 [ 238.490264][T15565] ? getname_kernel+0x3c/0x1f0 [ 238.490296][T15565] ? should_fail_ex+0xdb/0x280 [ 238.490414][T15565] getname_kernel+0x3c/0x1f0 [ 238.490445][T15565] kern_path+0x23/0x130 [ 238.490553][T15565] bpf_uprobe_multi_link_attach+0x232/0x8f0 [ 238.490593][T15565] ? kstrtouint+0x76/0xc0 [ 238.490630][T15565] ? __rcu_read_unlock+0x4f/0x70 [ 238.490660][T15565] ? __fget_files+0x184/0x1c0 [ 238.490692][T15565] link_create+0x666/0x6c0 [ 238.490814][T15565] __sys_bpf+0x4c7/0x790 [ 238.490916][T15565] __x64_sys_bpf+0x41/0x50 [ 238.490955][T15565] x64_sys_call+0x2478/0x2fb0 [ 238.491031][T15565] do_syscall_64+0xd2/0x200 [ 238.491055][T15565] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 238.491091][T15565] ? clear_bhb_loop+0x40/0x90 [ 238.491121][T15565] ? clear_bhb_loop+0x40/0x90 [ 238.491179][T15565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.491207][T15565] RIP: 0033:0x7f04eebae929 [ 238.491230][T15565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.491254][T15565] RSP: 002b:00007f04ed217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.491307][T15565] RAX: ffffffffffffffda RBX: 00007f04eedd5fa0 RCX: 00007f04eebae929 [ 238.491327][T15565] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 238.491345][T15565] RBP: 00007f04ed217090 R08: 0000000000000000 R09: 0000000000000000 [ 238.491490][T15565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.491508][T15565] R13: 0000000000000000 R14: 00007f04eedd5fa0 R15: 00007fffb9ed9a88 [ 238.491603][T15565] [ 238.513072][ T29] audit: type=1326 audit(2000000165.439:16106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde502e58e7 code=0x7ffc0000 [ 238.556415][T10689] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 238.559858][ T29] audit: type=1326 audit(2000000165.439:16107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde5028ab19 code=0x7ffc0000 [ 238.564644][T10689] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 238.572642][T15558] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.574813][ T29] audit: type=1326 audit(2000000165.439:16108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde502e58e7 code=0x7ffc0000 [ 238.638640][T15576] loop5: detected capacity change from 0 to 512 [ 238.646770][ T29] audit: type=1326 audit(2000000165.439:16109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde5028ab19 code=0x7ffc0000 [ 238.656109][T15576] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.662642][ T29] audit: type=1326 audit(2000000165.439:16110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde502e58e7 code=0x7ffc0000 [ 238.682580][T15576] EXT4-fs (loop5): 1 truncate cleaned up [ 238.686591][ T29] audit: type=1326 audit(2000000165.439:16111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde5028ab19 code=0x7ffc0000 [ 238.704890][T15577] loop4: detected capacity change from 0 to 1024 [ 238.704948][ T29] audit: type=1326 audit(2000000165.439:16112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15568 comm="syz.7.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde502e58e7 code=0x7ffc0000 [ 238.731540][T15577] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.4442: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 238.852120][T15583] bridge0: entered promiscuous mode [ 238.926169][T15577] EXT4-fs (loop4): get root inode failed [ 238.951779][T15583] bridge0: port 3(macvlan2) entered blocking state [ 238.953209][T15577] EXT4-fs (loop4): mount failed [ 238.976797][T15583] bridge0: port 3(macvlan2) entered disabled state [ 239.192317][T15583] macvlan2: entered allmulticast mode [ 239.197774][T15583] bridge0: entered allmulticast mode [ 239.220944][T15583] macvlan2: left allmulticast mode [ 239.226181][T15583] bridge0: left allmulticast mode [ 239.233632][T15583] bridge0: left promiscuous mode [ 239.291380][T15593] loop4: detected capacity change from 0 to 164 [ 239.305384][T15593] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 239.336532][T15597] loop5: detected capacity change from 0 to 512 [ 239.378833][T15597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.394898][T15599] SELinux: syz.7.4448 (15599) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 239.405804][T15597] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.435208][T15597] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 239.456942][T15617] loop7: detected capacity change from 0 to 512 [ 239.481630][T15617] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 239.497073][T15617] EXT4-fs (loop7): mount failed [ 239.533686][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4455'. [ 239.601318][T15626] loop7: detected capacity change from 0 to 512 [ 239.638667][T15626] EXT4-fs (loop7): 1 orphan inode deleted [ 239.645402][T15626] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.658464][ T51] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 239.684724][T15631] loop5: detected capacity change from 0 to 512 [ 239.692430][T15631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.722136][T15631] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.725337][T15635] loop7: detected capacity change from 0 to 1024 [ 239.737822][T15631] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 239.739778][T15635] EXT4-fs: dax option not supported [ 239.852527][T15643] loop7: detected capacity change from 0 to 512 [ 239.859219][T15643] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 239.873344][T15643] loop7: detected capacity change from 0 to 512 [ 239.890560][T15643] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 239.898841][T15643] EXT4-fs (loop7): orphan cleanup on readonly fs [ 239.906999][T15643] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.4461: corrupted inode contents [ 239.920688][T15643] EXT4-fs (loop7): Remounting filesystem read-only [ 239.927316][T15643] EXT4-fs (loop7): 1 truncate cleaned up [ 239.938541][ T2725] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.949153][ T2725] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.963960][ T2725] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 240.014110][T15648] SELinux: syz.5.4462 (15648) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 240.065890][T15651] loop7: detected capacity change from 0 to 1024 [ 240.161574][T15660] loop5: detected capacity change from 0 to 512 [ 240.178155][T15660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.191498][T15662] program syz.1.4467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.204881][T15660] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.247877][T15660] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 240.266970][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4470'. [ 240.313468][T15675] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 240.369995][T15679] SELinux: syz.1.4474 (15679) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 240.396949][T15690] deleting an unspecified loop device is not supported. [ 240.397007][T15689] loop4: detected capacity change from 0 to 128 [ 240.416277][T15690] loop6: detected capacity change from 0 to 512 [ 240.423910][T15690] EXT4-fs: Ignoring removed nobh option [ 240.429770][T15690] ext4: Unknown parameter 'euid' [ 240.438154][T15689] ext4 filesystem being mounted at /374/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.479602][T15695] program syz.5.4480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.589844][T15692] loop1: detected capacity change from 0 to 1024 [ 240.652113][T15703] loop5: detected capacity change from 0 to 512 [ 240.660845][T15703] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.723273][T15703] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.783345][T15707] siw: device registration error -23 [ 240.834578][T15711] FAULT_INJECTION: forcing a failure. [ 240.834578][T15711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.847734][T15711] CPU: 0 UID: 0 PID: 15711 Comm: syz.5.4485 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 240.847768][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.847785][T15711] Call Trace: [ 240.847793][T15711] [ 240.847871][T15711] __dump_stack+0x1d/0x30 [ 240.847933][T15711] dump_stack_lvl+0xe8/0x140 [ 240.847960][T15711] dump_stack+0x15/0x1b [ 240.847981][T15711] should_fail_ex+0x265/0x280 [ 240.848052][T15711] should_fail+0xb/0x20 [ 240.848089][T15711] should_fail_usercopy+0x1a/0x20 [ 240.848131][T15711] _copy_to_user+0x20/0xa0 [ 240.848220][T15711] simple_read_from_buffer+0xb5/0x130 [ 240.848267][T15711] proc_fail_nth_read+0x100/0x140 [ 240.848292][T15711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.848317][T15711] vfs_read+0x1a0/0x6f0 [ 240.848367][T15711] ? __rcu_read_unlock+0x4f/0x70 [ 240.848396][T15711] ? __fget_files+0x184/0x1c0 [ 240.848425][T15711] ksys_read+0xda/0x1a0 [ 240.848580][T15711] __x64_sys_read+0x40/0x50 [ 240.848621][T15711] x64_sys_call+0x2d77/0x2fb0 [ 240.848702][T15711] do_syscall_64+0xd2/0x200 [ 240.848726][T15711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 240.848756][T15711] ? clear_bhb_loop+0x40/0x90 [ 240.848782][T15711] ? clear_bhb_loop+0x40/0x90 [ 240.848877][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.848906][T15711] RIP: 0033:0x7f9c6ffcd33c [ 240.848926][T15711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.848949][T15711] RSP: 002b:00007f9c6e637030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.848973][T15711] RAX: ffffffffffffffda RBX: 00007f9c701f5fa0 RCX: 00007f9c6ffcd33c [ 240.849068][T15711] RDX: 000000000000000f RSI: 00007f9c6e6370a0 RDI: 0000000000000007 [ 240.849144][T15711] RBP: 00007f9c6e637090 R08: 0000000000000000 R09: 0000000000000000 [ 240.849161][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.849234][T15711] R13: 0000000000000000 R14: 00007f9c701f5fa0 R15: 00007ffcbe5d56c8 [ 240.849254][T15711] [ 241.112354][T15719] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4486'. [ 241.150643][T15715] loop5: detected capacity change from 0 to 164 [ 241.217175][T15724] SELinux: syz.1.4489 (15724) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 241.392670][T15729] netlink: 'syz.5.4491': attribute type 10 has an invalid length. [ 241.400632][T15729] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4491'. [ 241.454879][T15740] loop6: detected capacity change from 0 to 512 [ 241.484147][T15740] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 241.538346][T15740] EXT4-fs (loop6): mount failed [ 241.694745][T15762] SELinux: ebitmap: truncated map [ 241.700558][T15760] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 241.708331][T15760] vhci_hcd: default hub control req: 6001 v8001 i0001 l0 [ 241.716616][T15762] SELinux: failed to load policy [ 241.744563][T15766] loop6: detected capacity change from 0 to 512 [ 241.753583][T15768] loop4: detected capacity change from 0 to 128 [ 241.775838][T15769] 9pnet_fd: Insufficient options for proto=fd [ 241.861873][T15757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.870461][ T1083] buffer_io_error: 26 callbacks suppressed [ 241.870477][ T1083] Buffer I/O error on dev loop4, logical block 624, lost async page write [ 241.870677][T15757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.896620][T15756] delete_channel: no stack [ 241.968802][T15773] FAULT_INJECTION: forcing a failure. [ 241.968802][T15773] name failslab, interval 1, probability 0, space 0, times 0 [ 241.981514][T15773] CPU: 0 UID: 0 PID: 15773 Comm: syz.4.4508 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 241.981565][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.981577][T15773] Call Trace: [ 241.981583][T15773] [ 241.981590][T15773] __dump_stack+0x1d/0x30 [ 241.981610][T15773] dump_stack_lvl+0xe8/0x140 [ 241.981628][T15773] dump_stack+0x15/0x1b [ 241.981642][T15773] should_fail_ex+0x265/0x280 [ 241.981703][T15773] should_failslab+0x8c/0xb0 [ 241.981724][T15773] __kvmalloc_node_noprof+0x123/0x4e0 [ 241.981750][T15773] ? vmemdup_user+0x26/0xd0 [ 241.981770][T15773] ? __rcu_read_unlock+0x4f/0x70 [ 241.981813][T15773] vmemdup_user+0x26/0xd0 [ 241.981908][T15773] map_lookup_elem+0x18f/0x460 [ 241.981937][T15773] ? security_bpf+0x2b/0x90 [ 241.981956][T15773] __sys_bpf+0x3ae/0x790 [ 241.981990][T15773] __x64_sys_bpf+0x41/0x50 [ 241.982015][T15773] x64_sys_call+0x2478/0x2fb0 [ 241.982035][T15773] do_syscall_64+0xd2/0x200 [ 241.982052][T15773] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.982101][T15773] ? clear_bhb_loop+0x40/0x90 [ 241.982128][T15773] ? clear_bhb_loop+0x40/0x90 [ 241.982159][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.982184][T15773] RIP: 0033:0x7fe970ade929 [ 241.982198][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.982355][T15773] RSP: 002b:00007fe96f147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.982371][T15773] RAX: ffffffffffffffda RBX: 00007fe970d05fa0 RCX: 00007fe970ade929 [ 241.982382][T15773] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 241.982393][T15773] RBP: 00007fe96f147090 R08: 0000000000000000 R09: 0000000000000000 [ 241.982437][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.982448][T15773] R13: 0000000000000000 R14: 00007fe970d05fa0 R15: 00007ffe65ca2f68 [ 241.982466][T15773] [ 242.416147][T15792] 9pnet: Could not find request transport: fd0x0000000000000006 [ 242.466113][T15799] loop4: detected capacity change from 0 to 128 [ 242.541040][T15800] loop5: detected capacity change from 0 to 512 [ 242.566235][T15800] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.603267][T15800] EXT4-fs (loop5): mount failed [ 242.610535][T15805] loop1: detected capacity change from 0 to 512 [ 242.647733][T15815] netlink: 'syz.6.4522': attribute type 10 has an invalid length. [ 242.655719][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4522'. [ 242.670002][T15815] batman_adv: batadv0: Adding interface: macvlan0 [ 242.676494][T15815] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.702601][T15815] batman_adv: batadv0: Interface activated: macvlan0 [ 242.821616][T15826] 9pnet: Could not find request transport: fd0x0000000000000006 [ 242.946938][T15837] loop4: detected capacity change from 0 to 512 [ 242.948782][T15839] loop5: detected capacity change from 0 to 128 [ 242.961988][T15839] EXT4-fs mount: 104 callbacks suppressed [ 242.962003][T15839] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.980486][T15839] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 243.040388][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 243.040406][ T29] audit: type=1326 audit(2000000169.969:16641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 243.074241][T15843] loop6: detected capacity change from 0 to 512 [ 243.084354][T15843] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 243.094352][ T29] audit: type=1326 audit(2000000169.999:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f04eebae929 code=0x7ffc0000 [ 243.118094][ T29] audit: type=1326 audit(2000000169.999:16643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f04eebae963 code=0x7ffc0000 [ 243.141708][ T29] audit: type=1326 audit(2000000169.999:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04eebad3df code=0x7ffc0000 [ 243.165185][ T29] audit: type=1326 audit(2000000169.999:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f04eebae9b7 code=0x7ffc0000 [ 243.167074][T15843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.188678][ T29] audit: type=1326 audit(2000000169.999:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04eebad290 code=0x7ffc0000 [ 243.188719][ T29] audit: type=1326 audit(2000000169.999:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04eebae52b code=0x7ffc0000 [ 243.188779][ T29] audit: type=1326 audit(2000000170.009:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f04eebad58a code=0x7ffc0000 [ 243.204788][T15843] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.224863][ T29] audit: type=1326 audit(2000000170.009:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f04eebad58a code=0x7ffc0000 [ 243.224915][ T29] audit: type=1326 audit(2000000170.009:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15842 comm="syz.6.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f04eebad197 code=0x7ffc0000 [ 243.351563][T15843] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 243.401198][T15849] program syz.1.4535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.419672][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.451240][T15851] netlink: 'syz.6.4536': attribute type 10 has an invalid length. [ 243.459170][T15851] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4536'. [ 243.492672][T15854] siw: device registration error -23 [ 243.872674][T15861] 9pnet: Could not find request transport: fd0x0000000000000006 [ 243.924592][T15866] loop4: detected capacity change from 0 to 512 [ 243.982549][T15866] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 244.006229][T15866] EXT4-fs (loop4): mount failed [ 244.112907][T15881] loop4: detected capacity change from 0 to 8192 [ 244.133224][T15881] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.4547'. [ 244.178429][T15883] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 244.178429][T15883] The task syz.6.4546 (15883) triggered the difference, watch for misbehavior. [ 244.205846][T15883] loop6: detected capacity change from 0 to 512 [ 244.215627][T15883] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.224793][T15883] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 244.275967][T15883] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 244.296922][T15883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 244.310857][T13716] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.339375][T15883] System zones: 0-2, 18-18, 34-34 [ 244.344952][T15883] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.4546: iget: bad i_size value: 360287970189639680 [ 244.375600][T15883] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4546: couldn't read orphan inode 15 (err -117) [ 244.424699][T15883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.531377][T15885] loop4: detected capacity change from 0 to 1024 [ 244.597307][T15885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.631845][T15894] program syz.7.4552 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.746611][T15896] SELinux: syz.7.4553 (15896) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 244.771540][T15898] loop5: detected capacity change from 0 to 512 [ 244.801993][T15898] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 244.825891][T15898] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.4554: iget: bad i_size value: -67835469387268086 [ 244.843751][T15898] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.4554: couldn't read orphan inode 15 (err -117) [ 244.863060][T15898] EXT4-fs (loop5): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.879919][T15898] ext2 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.908591][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.930541][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.939938][T15905] loop1: detected capacity change from 0 to 512 [ 244.958120][T15898] EXT4-fs error (device loop5): ext4_add_entry:2417: inode #2: comm syz.5.4554: Directory hole found for htree leaf block 0 [ 245.023744][T13716] EXT4-fs (loop5): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 245.039787][T15914] loop6: detected capacity change from 0 to 1024 [ 245.050020][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4560'. [ 245.076011][T15914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.108730][T15924] 9pnet_fd: Insufficient options for proto=fd [ 245.134698][T15903] 9pnet_fd: Insufficient options for proto=fd [ 245.141190][T15914] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.4558: missing EA_INODE flag [ 245.153458][T15914] EXT4-fs (loop6): Remounting filesystem read-only [ 245.161320][T15914] IPv6: Can't replace route, no match found [ 245.182018][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.197380][T15929] program syz.4.4563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.219924][T15931] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 245.243148][T15933] xt_CT: No such helper "pptp" [ 245.249486][T15933] Unsupported ieee802154 address type: 0 [ 245.258295][T15936] loop6: detected capacity change from 0 to 512 [ 245.281011][T15936] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 245.296108][T15936] EXT4-fs (loop6): mount failed [ 245.330990][T15944] loop4: detected capacity change from 0 to 512 [ 245.350557][T15944] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 245.365582][T15944] EXT4-fs (loop4): mount failed [ 245.396309][T15954] 9pnet_fd: Insufficient options for proto=fd [ 245.430211][T15960] program syz.6.4575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.454407][T15962] loop4: detected capacity change from 0 to 1024 [ 245.461178][T15964] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 245.463379][T15962] EXT4-fs: Ignoring removed nobh option [ 245.474732][T15962] EXT4-fs: Ignoring removed bh option [ 245.502297][T15962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.533064][T15962] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 245.573026][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.577727][T15974] loop6: detected capacity change from 0 to 512 [ 245.589698][T15974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.607138][T15976] 9pnet_fd: Insufficient options for proto=fd [ 245.616152][T15974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.629358][T15974] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.643188][T15974] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 245.675180][T13878] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.693484][T15982] 9pnet_fd: Insufficient options for proto=fd [ 245.722894][T15986] FAULT_INJECTION: forcing a failure. [ 245.722894][T15986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.736140][T15986] CPU: 1 UID: 0 PID: 15986 Comm: syz.7.4586 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 245.736176][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.736199][T15986] Call Trace: [ 245.736207][T15986] [ 245.736217][T15986] __dump_stack+0x1d/0x30 [ 245.736243][T15986] dump_stack_lvl+0xe8/0x140 [ 245.736364][T15986] dump_stack+0x15/0x1b [ 245.736485][T15986] should_fail_ex+0x265/0x280 [ 245.736564][T15986] should_fail+0xb/0x20 [ 245.736661][T15986] should_fail_usercopy+0x1a/0x20 [ 245.736691][T15986] _copy_from_user+0x1c/0xb0 [ 245.736712][T15986] __copy_msghdr+0x244/0x300 [ 245.736748][T15986] ___sys_sendmsg+0x109/0x1d0 [ 245.736787][T15986] __sys_sendmmsg+0x178/0x300 [ 245.736877][T15986] __x64_sys_sendmmsg+0x57/0x70 [ 245.736903][T15986] x64_sys_call+0x2f2f/0x2fb0 [ 245.737043][T15986] do_syscall_64+0xd2/0x200 [ 245.737060][T15986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 245.737084][T15986] ? clear_bhb_loop+0x40/0x90 [ 245.737103][T15986] ? clear_bhb_loop+0x40/0x90 [ 245.737124][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.737202][T15986] RIP: 0033:0x7fde502ee929 [ 245.737216][T15986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.737231][T15986] RSP: 002b:00007fde4e957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.737248][T15986] RAX: ffffffffffffffda RBX: 00007fde50515fa0 RCX: 00007fde502ee929 [ 245.737259][T15986] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 245.737270][T15986] RBP: 00007fde4e957090 R08: 0000000000000000 R09: 0000000000000000 [ 245.737354][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.737365][T15986] R13: 0000000000000000 R14: 00007fde50515fa0 R15: 00007ffd453b6e18 [ 245.737382][T15986] [ 246.029845][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4591'. [ 246.046409][T15996] loop7: detected capacity change from 0 to 8192 [ 246.065972][T15996] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.4589'. [ 246.112546][T16005] 9pnet_fd: Insufficient options for proto=fd [ 246.179525][T16010] loop4: detected capacity change from 0 to 512 [ 246.199103][T16010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.248965][T16008] SELinux: syz.7.4594 (16008) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.263805][T16010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.286769][T16020] loop1: detected capacity change from 0 to 1024 [ 246.296166][T16010] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.329528][T16016] 9pnet_fd: Insufficient options for proto=fd [ 246.343457][T16024] loop6: detected capacity change from 0 to 512 [ 246.350682][T16020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.364258][T16010] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 246.366220][T16020] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.4598: missing EA_INODE flag [ 246.392257][T16026] loop7: detected capacity change from 0 to 128 [ 246.401925][T16020] EXT4-fs (loop1): Remounting filesystem read-only [ 246.412728][T16020] IPv6: Can't replace route, no match found [ 246.413355][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.440606][T11401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.451068][T16031] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 246.455592][T16033] loop4: detected capacity change from 0 to 1024 [ 246.466743][T16033] EXT4-fs: Ignoring removed nobh option [ 246.472471][T16033] EXT4-fs: Ignoring removed bh option [ 246.496510][T16033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.511284][T16033] FAULT_INJECTION: forcing a failure. [ 246.511284][T16033] name failslab, interval 1, probability 0, space 0, times 0 [ 246.524078][T16033] CPU: 0 UID: 0 PID: 16033 Comm: syz.4.4602 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 246.524111][T16033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.524123][T16033] Call Trace: [ 246.524175][T16033] [ 246.524183][T16033] __dump_stack+0x1d/0x30 [ 246.524281][T16033] dump_stack_lvl+0xe8/0x140 [ 246.524306][T16033] dump_stack+0x15/0x1b [ 246.524453][T16033] should_fail_ex+0x265/0x280 [ 246.524492][T16033] should_failslab+0x8c/0xb0 [ 246.524523][T16033] __kmalloc_noprof+0xa5/0x3e0 [ 246.524561][T16033] ? ext4_find_extent+0x16b/0x7a0 [ 246.524597][T16033] ? enqueue_task_fair+0x35e/0x980 [ 246.524664][T16033] ext4_find_extent+0x16b/0x7a0 [ 246.524693][T16033] ? folio_mark_accessed+0x240/0x3d0 [ 246.524774][T16033] ext4_ext_map_blocks+0x11f/0x38a0 [ 246.524809][T16033] ? find_get_block_common+0x736/0x960 [ 246.524928][T16033] ? bdev_getblk+0x66/0x3d0 [ 246.524969][T16033] ? ext4_get_group_desc+0x16b/0x190 [ 246.524998][T16033] ? folio_mark_accessed+0x240/0x3d0 [ 246.525095][T16033] ext4_map_query_blocks+0xa8/0x480 [ 246.525120][T16033] ext4_map_blocks+0x3a1/0xd70 [ 246.525142][T16033] ? kmem_cache_alloc_noprof+0x220/0x310 [ 246.525251][T16033] ? alloc_buffer_head+0x1c3/0x1f0 [ 246.525293][T16033] _ext4_get_block+0x10a/0x350 [ 246.525320][T16033] ext4_get_block_unwritten+0x2a/0xb0 [ 246.525396][T16033] ext4_block_write_begin+0x3d0/0xa60 [ 246.525422][T16033] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 246.525453][T16033] ext4_convert_inline_data_to_extent+0x3de/0x7b0 [ 246.525571][T16033] ext4_try_to_write_inline_data+0x54/0x90 [ 246.525614][T16033] ext4_write_begin+0x148/0xd30 [ 246.525649][T16033] ? find_inode_by_ino_rcu+0x9d/0x160 [ 246.525742][T16033] ? ext4_mark_iloc_dirty+0xd3f/0xda0 [ 246.525781][T16033] ext4_da_write_begin+0x1e0/0x670 [ 246.525855][T16033] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 246.525937][T16033] generic_perform_write+0x184/0x490 [ 246.525998][T16033] ext4_buffered_write_iter+0x1ee/0x3c0 [ 246.526032][T16033] ext4_file_write_iter+0x383/0xf00 [ 246.526139][T16033] ? _parse_integer_limit+0x170/0x190 [ 246.526237][T16033] do_iter_readv_writev+0x421/0x4c0 [ 246.526262][T16033] vfs_writev+0x2df/0x8b0 [ 246.526298][T16033] ? mutex_lock+0xd/0x30 [ 246.526333][T16033] do_writev+0xe7/0x210 [ 246.526420][T16033] __x64_sys_writev+0x45/0x50 [ 246.526446][T16033] x64_sys_call+0x2006/0x2fb0 [ 246.526473][T16033] do_syscall_64+0xd2/0x200 [ 246.526533][T16033] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 246.526559][T16033] ? clear_bhb_loop+0x40/0x90 [ 246.526632][T16033] ? clear_bhb_loop+0x40/0x90 [ 246.526690][T16033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.526716][T16033] RIP: 0033:0x7fe970ade929 [ 246.526731][T16033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.526749][T16033] RSP: 002b:00007fe96f147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 246.526768][T16033] RAX: ffffffffffffffda RBX: 00007fe970d05fa0 RCX: 00007fe970ade929 [ 246.526784][T16033] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 246.526799][T16033] RBP: 00007fe96f147090 R08: 0000000000000000 R09: 0000000000000000 [ 246.526830][T16033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.526850][T16033] R13: 0000000000000000 R14: 00007fe970d05fa0 R15: 00007ffe65ca2f68 [ 246.526869][T16033] [ 246.872753][T16037] loop1: detected capacity change from 0 to 8192 [ 246.874074][T16033] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 246.891463][T16037] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4604'. [ 246.915938][T11183] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.926351][T11401] ================================================================== [ 246.934475][T11401] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 246.941892][T11401] [ 246.944255][T11401] write to 0xffff888237c26f10 of 8 bytes by task 11183 on cpu 0: [ 246.951988][T11401] invalidate_bh_lru+0x8f/0xf0 [ 246.956783][T11401] smp_call_function_many_cond+0x237/0xbf0 [ 246.962604][T11401] on_each_cpu_cond_mask+0x3c/0x80 [ 246.967732][T11401] invalidate_bh_lrus+0x2a/0x30 [ 246.972613][T11401] invalidate_bdev+0x42/0x70 [ 246.977222][T11401] ext4_put_super+0x624/0x7d0 [ 246.981925][T11401] generic_shutdown_super+0xe6/0x210 [ 246.987238][T11401] kill_block_super+0x2a/0x70 [ 246.991927][T11401] ext4_kill_sb+0x42/0x80 [ 246.996280][T11401] deactivate_locked_super+0x72/0x1c0 [ 247.001677][T11401] deactivate_super+0x97/0xa0 [ 247.006374][T11401] cleanup_mnt+0x269/0x2e0 [ 247.010811][T11401] __cleanup_mnt+0x19/0x20 [ 247.015243][T11401] task_work_run+0x12e/0x1a0 [ 247.019853][T11401] exit_to_user_mode_loop+0xe4/0x100 [ 247.025161][T11401] do_syscall_64+0x1d6/0x200 [ 247.029765][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.035678][T11401] [ 247.038015][T11401] read to 0xffff888237c26f10 of 8 bytes by task 11401 on cpu 1: [ 247.045685][T11401] has_bh_in_lru+0x35/0x1f0 [ 247.050216][T11401] smp_call_function_many_cond+0x389/0xbf0 [ 247.056041][T11401] on_each_cpu_cond_mask+0x3c/0x80 [ 247.061169][T11401] invalidate_bh_lrus+0x2a/0x30 [ 247.066058][T11401] blkdev_flush_mapping+0x9a/0x1a0 [ 247.071208][T11401] bdev_release+0x2bf/0x3d0 [ 247.075748][T11401] blkdev_release+0x15/0x20 [ 247.080297][T11401] __fput+0x298/0x650 [ 247.084305][T11401] ____fput+0x1c/0x30 [ 247.088324][T11401] task_work_run+0x12e/0x1a0 [ 247.092934][T11401] exit_to_user_mode_loop+0xe4/0x100 [ 247.098238][T11401] do_syscall_64+0x1d6/0x200 [ 247.102843][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.108762][T11401] [ 247.111094][T11401] value changed: 0xffff88811a0ca3a8 -> 0x0000000000000000 [ 247.118295][T11401] [ 247.120628][T11401] Reported by Kernel Concurrency Sanitizer on: [ 247.126787][T11401] CPU: 1 UID: 0 PID: 11401 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(voluntary) [ 247.139479][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.149551][T11401] ================================================================== [ 247.200681][T16046] program syz.4.4607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.218363][T16045] SELinux: syz.1.4608 (16045) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace.