last executing test programs: 6m23.842691308s ago: executing program 2 (id=2246): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) unshare(0x2a020400) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") 6m22.641068582s ago: executing program 2 (id=2254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$IPC_RMID(0x0, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00'}, 0x18) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x3, 0x0, 0x82, 0x0, 0x8404, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x5}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x34}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0, 0x100000}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 6m22.604128956s ago: executing program 2 (id=2255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f00000002c0)) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000240)) mknod$loop(0x0, 0xc000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x4004) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r5, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "336a4c9a80"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 6m22.414422104s ago: executing program 2 (id=2258): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000e40)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x85}}]}, 0x11, 0x553, &(0x7f0000001080)="$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") socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000580)='binfmt_misc\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x8001, 0x2}, {0x0}, &(0x7f0000001b80)=[{&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f0000000780)=""/159, 0x9f}, {&(0x7f0000000880)=""/199, 0xc7}], 0x3, 0x3, 0x1}}], 0x48, 0x4000000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) shutdown(0xffffffffffffffff, 0x0) 6m21.529935298s ago: executing program 2 (id=2275): r0 = syz_io_uring_setup(0x3d9f, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0x2bb}, &(0x7f00000003c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x2d, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @generic={0xc7, 0x7, 0x6, 0x9, 0x4fe}, @jmp={0x5, 0x1, 0x8, 0x7, 0x3, 0xfffffffffffffffc, 0xfffffffffffffff4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x17, &(0x7f0000000280)=""/23, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=[r3, r3, r3, r3, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x1, 0x6, 0x7}, {0x1, 0x3, 0x0, 0x2}, {0x2, 0x3, 0xc, 0x9}, {0x1, 0x2, 0xd, 0x3}, {0x2, 0x4, 0xd, 0x8}, {0x0, 0x4, 0x3, 0x8}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000005c80)={0x17, 0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005c40)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) io_uring_enter(r0, 0x1c39, 0x106a, 0x22, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x4) ioctl$PPPIOCSACTIVE(r7, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r7, &(0x7f0000000000)=""/9, 0x9) write$ppp(r7, &(0x7f0000000200)="bc72", 0x2) 6m21.355295495s ago: executing program 2 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 6m21.293008701s ago: executing program 32 (id=2279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 43.760058971s ago: executing program 3 (id=8509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 43.584951378s ago: executing program 3 (id=8511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r5, 0x0, 0xee01) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r9 = socket(0xa, 0x803, 0x101) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x2, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xffffffffffffffe6}, {0x4}}]}, 0x38}}, 0x40011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x35dfdbff, {0x0, 0x0, 0x0, r10, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20048850) 43.475999969s ago: executing program 3 (id=8512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) socket$inet(0x2, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x9}}}, 0x24}}, 0x0) 43.320338614s ago: executing program 3 (id=8517): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = pidfd_getfd(r1, r1, 0x0) getpriority(0x1, r0) write$cgroup_int(r1, &(0x7f0000000080)=0x9774, 0x12) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18000c0, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@nodioread_nolock}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a1, &(0x7f0000000940)="$eJzs3T9sW9UaAPDvXsdN/+S99EnvSQ/UoQKkIlV1kv6BwtSuiEqVOiCxQOS4URUnruIEmigS6V4hOiBAXcoGAyOIgQGxMLKygJiRKhqB1HQAI8fXaZraxQlxXOLfT3J8zj3X/s6519+J79W9cgB962j9TxrxVERcTCKGN7QNRNZ4tLHe6spS8f7KUjGJWu3SL0kkEXFvZanYXD/Jng9FxHJE/D8ivslHHE/X33Jfs1BdWJwaL5dLs1l9ZG766kh1YfHElenxydJkaebUiy+dOXv6zNjJsY3dvV/bWMtvbaw3frz57o3vXrl989PPjiwX3x9P4lwMZW0bx7GTGtskH+c2LT/djWA9lPS6A2xLLsvzeir9L4Yjl2V9K7WNk8PgrnQP6KLaYERt3YYi0AcSSQ99qvk9oH7823zs5vePO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDc7yp60fD0iRgcGHv38J9nnb/tGd6KDdNXX5xs76tH9n67PP9Fi/hlqnjv9m5rz32o2/622iJ9rM/9d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm2XVvt44hj0Tp+U/L488Mjl6+US6ONvy1jfHXsyMvtxx9xsE38xjnb/Wsd2Tj+fVmf0g7H/8W3nz+z/Jj4zz/7+P3favsfiIj3Ooz/n3ufvNqu7c715G79W8BW938S+bjdYfwXzh39ISs6awgAAAAAAAAAADsoXbuWLUkL6+U0LRQa9/D+Nw6m5Up17vjlyvzMROOat8ORT5tXWg036km9PpZdj9usn9xUP5XLAuYOrNULxUp5osdjBwAAAAAAAAAAAAAAAAAAgCfFoU33//+WW7v/f/PPVQN7Vfuf/Ab2OvkP/evh/E961g9g9/n/D32rJv+hf8l/6F/yH/qX/If+Jf+hf8l/6F/yHwAAAAAAAAAAAAAAAAAAAAAAAAAAuuLihQv1R+3+ylKxXp8YWJifqrx1YqJUnSpMzxcLxcrs1cJkpTJZLhWKlem/er+kUrk6GjPz10bmStW5kerC4hvTlfmZ5m+KlvJdHxEAAAAAAAAAAAAAAAAAAAD88wytPZK0EJFv1NO0UIj4V0QcTiK5fKVcGo2If0fE97n8YL0+1utOAwAAAAAAAAAAAAAAAAAAwB5TXVicGi+XS7PdKwxkoboYovPCwFZWjojlne1G/R23/Kp8tgF7vOn2RiH3ZHwOn/xCDyclAAAAAAAAAAAAAAAAAADoUw9u+t3ckkQst3rFH7vSLwAAAAAAAAAAAAAAAAAAAOgv6c9J427/ODb83NDm1n3Jam7tOSLevnXpg2vjc3OzY/Xld9eXz32YLT/Zi/4DnWrmaRoR9TwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHqguLE6Nl8ul2W0WBjtYp9djBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiOPwMAAP//jrbO0g==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r5, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$USBDEVFS_RESET(r3, 0x5514) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x24048010) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x4212, r6, &(0x7f0000000140), 0x200000000001) chroot(0x0) 42.224400778s ago: executing program 3 (id=8531): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r4, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b"}, 0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x4, 0x10500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x505, 0x0, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 41.866069012s ago: executing program 3 (id=8544): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRESOCT=r0], 0x0, 0x23e, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x5a0, 0x800, 0x0, 0x0, 0x0, 0x4ef, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) syz_io_uring_setup(0x1a3, &(0x7f00000004c0)={0x0, 0x9fd4, 0x4000, 0x3, 0x3af}, &(0x7f0000000540)=0x0, &(0x7f0000000840)) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/key-users\x00', 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000940)=@generic={0x5, "4ed4e738d65c1e27364c662ce7850500599e388eafc40b1ebb445ab4198cacdaa28da8009f902efe5056eee97a75e59431a4171b960bf0ccd689cb3b73fa5ae71114e344429096a0c293ced72b280e9f8f1b7629d8ee271517bebd9e0663a4bb746e5fa9b671d27744abd5fe3e99f0e117fd95379c39fc88495f2e9ccf11"}, 0x0, 0x0, 0x0, {0x0, r9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000021000200130003"], 0x78}, 0x1, 0x7}, 0x0) r11 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8918, 0x0) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) 41.828789515s ago: executing program 33 (id=8544): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRESOCT=r0], 0x0, 0x23e, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x5a0, 0x800, 0x0, 0x0, 0x0, 0x4ef, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x800000000000000, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) syz_io_uring_setup(0x1a3, &(0x7f00000004c0)={0x0, 0x9fd4, 0x4000, 0x3, 0x3af}, &(0x7f0000000540)=0x0, &(0x7f0000000840)) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf567, 0x100, 0x0, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/key-users\x00', 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f00000009c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r0, 0x80, &(0x7f0000000940)=@generic={0x5, "4ed4e738d65c1e27364c662ce7850500599e388eafc40b1ebb445ab4198cacdaa28da8009f902efe5056eee97a75e59431a4171b960bf0ccd689cb3b73fa5ae71114e344429096a0c293ced72b280e9f8f1b7629d8ee271517bebd9e0663a4bb746e5fa9b671d27744abd5fe3e99f0e117fd95379c39fc88495f2e9ccf11"}, 0x0, 0x0, 0x0, {0x0, r9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000021000200130003"], 0x78}, 0x1, 0x7}, 0x0) r11 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8918, 0x0) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) 3.626484984s ago: executing program 0 (id=9461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, 0x0, 0x0) 3.542269073s ago: executing program 0 (id=9464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) socket$inet(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x9}}}, 0x24}}, 0x0) 3.35743879s ago: executing program 0 (id=9465): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='\x00', 0x1, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket(0x10, 0x3, 0x9) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{0x7ffe, 0x5c, 0x1}, {0x0, 0xf8, 0x3, 0x81}, {0x3ff, 0x8, 0xc, 0x40}, {0x3775, 0x2, 0x4, 0x7}, {0x2, 0x2, 0x55, 0x8}, {0x99, 0xaf, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x8}]}) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000fa03010000000000000000000500000a140000001100060000000000002000000000000a", @ANYRES16, @ANYBLOB="ea03e5452e8b118a23332b49ed3be89cfee94b46acbb07d9225f", @ANYBLOB="a652b22927541d374d1f63b59eedfc51011e7d", @ANYRES16=r5, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) truncate(&(0x7f0000000080)='./file1\x00', 0x10000) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000000201001) llistxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000600)=""/106, 0x6a) 3.205166465s ago: executing program 0 (id=9468): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='page_pool_release\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.105195314s ago: executing program 0 (id=9471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x21, 0x803, 0x1) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xe68c, 0x0, 0x0, 0x40f00, 0x4, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 3.104435804s ago: executing program 0 (id=9473): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@mblk_io_submit}], [{@uid_eq={'uid', 0x3d, 0xee01}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001cc0)=ANY=[@ANYBLOB="000000004c90160052feff00"/83]) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) rt_sigqueueinfo(0x0, 0x34, 0x0) (fail_nth: 5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 1.640181913s ago: executing program 5 (id=9505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.633415454s ago: executing program 5 (id=9506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}}, 0x40040d0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x91, 0xffff, 0x34, @remote, @mcast2, 0x700, 0x700, 0x3, 0xfff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x4, 0x88, 0xf9, 0xfffffffe, 0x9, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, @loopback, 0x20, 0x7800, 0x0, 0x6}}) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000004000000000000000100000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x5, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x800) 1.423147914s ago: executing program 5 (id=9509): socket$caif_stream(0x25, 0x1, 0x5) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x40, 0x101) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0xfffffffe, 0xfffffffc, 0x0, 'queue0\x00', 0x100}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000005480)={0x0, 0x20000008, 0x3cdb, {0x0, 0x10000}, 0x0, 0xfffffffe}) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0xaa) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) socket$inet_tcp(0x2, 0x1, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000080), 0x633, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={[0x633]}, 0x8) 1.321074364s ago: executing program 5 (id=9511): r0 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRESOCT=r0, @ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYBLOB="24796d1ee57eef415fcf613bd4838982259dfbd47429d4071ab2291338e371f7345996d6ebd896ff9af49b43fd05fae827196d8bd9efbf8b046ace5c6619b131c190500e9fe7eeaf5f156dec84c56b2c45fd6dc969", @ANYRESOCT=r2, @ANYRESOCT=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000074d89ffe30b956a03db0ffbc1ad5fda6f384caf2ba2cbc944f9170e5c8b29d08e808bddf2fc68aa8792f888715e7e93430460b858caebbe60636a7a003441dec12954df906eaa6afd6f77b14f4cbbbb86c8ebe3293ed9a067e56a9c1921e22906209c405dc063ee53b4d0c22951e0d91ae6a51d33e3c56cdea9e7685e59a7c2f153da9ca6846d8d59af60c169e9fef7a4863a316f2793491ce9f612953e7b4579f483d04e38ffc15d2088fe62f05d98f6a38bf2e4a97f30c675de50d9170d0", @ANYBLOB="c60a9b822d1fccc877ec3affd829704726410a2c2927261339c870bd8286b83b23088f39ff49d53792b69f1d4939f73ee323d550adf9c0a731f7920da09fafe452ecd77f803bb4f00f444b9d699ae5a4511a63df8fd988d7b1996f479f95a56409e39d58852d392f7ec88689e82c08cd6a8b05c1611970c5ad6128dedb2b4e0e1be75f975c7874acfdb610a96a76e256ffa66965a95645c2ac37c10c876c", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000040), 0x0, 0x211) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000200)={0xe0000003}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffddfc, {0x0, 0x0, 0x0, r9, {0x3, 0x9}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002380)=""/4090, 0xffa) poll(&(0x7f00000000c0)=[{r6, 0x1009}], 0x1, 0x8000007) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000400)="64e733c3bd26b4027642afbda1bb7a00f4a67aac5a5e155de77edc9a317fd1a70c0318eb49c1a93129b098ea94ed4823ea3466b6f0059a00800000000000009a596e488fd4f324d03dd2d3", 0x4b}, {0x0}, {&(0x7f0000000040)="ac1440faab99bfc5a3cfef4ed7d662176dbc7ebf9e57949cd0c145a799cb9d1f32b7", 0x22}, {&(0x7f0000000680)="b0002c67e2bd45c03817be3720e7974e4401b44d5f4750c3d88bc27332cbef82a01e31b28af47652441ac22f51fa15cc591a5051495cbd7368f64dcdec47e28d9cb19266d31654c9b7e791c385ccb881f6aeabc9117b5a260c26a8b62f5c44df17c3e6311065f451e88025ed22c4afb14fba4cfa067eb8e8f947ec7c58aaf9e814adfc6a46db156fd0f060adfa27d560b958118e1d5135423ef179ba8d4069e3675cffd86497990c0b3192921ef4a68e9ec897a76d7575ecaa79ccd7ba527f40cc27a64c556190cb83e5ff64bc6fb97619a1b127e9ccb07a17ac957aa23c7833ab72db650b610815172da4c92a5650b5cc48", 0xf2}, {&(0x7f0000000780)="fedc065d7cb860f7b609d6d350cfdf1b5946875e6bb5835e8763520cb7e68b413d3d37b356a5b5fb9c81c65ca89e341bf1e9b38cb897c61013d219d84f06cd0f64526965e65a13ab514ff262961397f9f5af", 0x52}], 0x5) socket$nl_route(0x10, 0x3, 0x0) 1.25195936s ago: executing program 4 (id=9513): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@euid_eq={'euid', 0x3d, r5}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$eJzs3V9rW+UfAPDvSZvu7++3DsZQL6SwCydz6dr6Z4LgvBQdDvR+hjYro+kymnSsdbDtwt14I0MQcSC+AO/Fq+EL0Fcx0MGQUfTCm8hJT7qsaZquy9ps+XzgtM9zzkm+5znnPE++JychAQyssfRPLuLliPg6iTjUsmw4soVjq+utPLw2nU5J1Ouf/pVEks1rrp9k/w9klZci4tcvI07k2uNWl5bniuVyaSGrj9fmL49Xl5ZPXpwvzpZmS5cmp6ZOvzU1+e47b/esra+f++e7T+5+ePqrYyvf/nT/8O0kzsTBbFlrO57CjdbKWIxl+yQfZ9atONGDYP0k2e0NYFuGsn6ej3QMOBRDWa8HXnzXI6LeKp8tqAMvvkRXhwHVzAOa1/Y9ug5+bjz4YPUCqL39w6vvjcTexrXR/pXksSuj9Hp3tAfx0xg//3nndjpFl/chrvcgHkDTjZsRcWp4uH38S7Lxb/tONd483tz6GIP2+gO76W6a/7yxUf6TW8t/oj3/qQ9t0He3o3v/z93vQZiO0vzvvQ3z37Wha3Qoq/2vkfPlkwsXy6VTEfH/iDge+T1pfbP7OadX7tU7LWvN/9Ipjd/MBbPtuD+85/HHzBRrxadpc6sHNyNeeZT/JtE2/u9t5Lrr8990f5zbYoyjpTuvdlrWvf3ZxjT0PgOu/xjx2obHP3ks+Cb3J8cb58N486xo9/eto793ir/F9j8z6fHfv3n7R5PW+7XVJ4/xw95/S52Wbff8H0k+a5RHsnlXi7XawkTESPJx+/zJR49t1pvrp+0/fmzz8W+j839fRHy+xfbfOnKr46r9cPxnnuj4P3nh3kdffN8p/taO/5uN0vFsTvfxb1/2v/sGbn/PAQAAAAAAQP/JRcTBSHKFtXIuVyisfof3SOzPlSvV2okLlcVLM9H4ruxo5HPNO92HWj4PMZF9HrZZn1xXn4qIwxHxzdC+Rr0wXSnP7HbjAQAAAAAAAAAAAAAAAAAAoE8c6PD9/9QfQ7u9dcAz5ye/YXB17f+9+KUnoC95/YfBpf/D4NL/YXDp/zC49H8YXPo/DC79HwaX/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2XSqrzy8Np3WZ64sLc5VrpycKVXnCvOL04XpysLlwmylMlsuFaYr892er1ypXJ6YjMWr47VStTZeXVo+P19ZvFQ7f3G+OFs6X8rvSKsAAAAAAAAAAAAAAAAAAADg+VJdWp4rlsulhZ0o5GLnYvWw8H70/JmTnWxFsnaUf8l3aOCqbYUY7pfD9EwKv2W7ZmeCjuxGr+xQ2KUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA28F8AAAD//8YDIpQ=") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000000000001400000008000300", @ANYRES32=r9, @ANYBLOB="08001c00", @ANYRES32=r10, @ANYBLOB="b1b58955993967f81589ff7155938981407488335feb88adfc83f7415c608572b01df0015f3e1e1b12a274b9552cf730f584d680403df1e1f9e2366668cd0bff8352ce16d655822bbe755286a95dae6b7dbc6483ebbbe113204b81cf3aa66c88c15b0cebf0dfd47d757e04d08f34eb3d549ba71f5d909a99c763a8be77191d784c9400c7f09491941a5ce34d6ac681666417b5f6d8040800000000000000e9512d545f08b8522712db0c07b9606a9bd03f96223a03b62dcddb42993327"], 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000bc0)={0xd4, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, "", [@nested={0x4, 0x35}, @generic, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x5}, @nested={0xb8, 0xf3, 0x0, 0x1, [@nested={0x34, 0x137, 0x0, 0x1, [@generic="a9a637519b4eb217830c5408b67e2ea220230efc0f83bc31db93ed722a1e74a55ca2719c81020a3b6ecf865d508625ef"]}, @generic="11a0f0a81e06c2dac4bade597f9c825c7fb3a08a708e548ef54fdd5b8bf171144387c47ea7846916605a3dfdad90511a9de31a30559c02ac305bf5b77a60ce8835e981fd31cad2a5660cfa7e6e73e98c3df4759b72940a27414801a3cd50baf8", @nested={0x4, 0x145}, @nested={0x4, 0x8c}, @typed={0xf, 0xb9, 0x0, 0x0, @binary="645d20f2c7ee04a8fd8072"}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r6}]}]}, 0xd4}, {&(0x7f0000002fc0)={0x10a0, 0x1e, 0x10, 0x70bd2d, 0x25dfdbff, "", [@generic="4dac22500517925d2092b474138ca4cf2b7e40da7a094b475d1740c785680dc37d28d6dae8869ad8c1372ff6ca44870e15388d1b909d29c45fcc99aff9d737db8915d8ad462cb51ab6", @typed={0x8, 0x7, 0x0, 0x0, @u32=0x10000}, @typed={0x4, 0x135, 0x0, 0x0, @binary}, @generic="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", @generic="6d06152a352967d48276f1255e589e3140fdad04cfac5210487c68218239b49b3131569ddd6781b3dc2bf3e31b32ac0987e048838feaadd77d8e433c96db8e62eaa5cb5f604cc55206aa2a6102bbbd25b30fe77c617160f427cf69b379426a2eae476ebcd52730f74a74390aba161b570a37349bfdc07cf83c"]}, 0x10a0}, {&(0x7f00000000c0)={0x14, 0x32, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x4, 0x129}]}, 0x14}, {&(0x7f0000004980)={0x2a0, 0x23, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x290, 0xd1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xb6, 0x0, 0x0, @pid=r10}, @nested={0xc, 0x25, 0x0, 0x1, [@typed={0x4, 0x136}, @nested={0x4, 0xd8}]}, @nested={0x18f, 0x4, 0x0, 0x1, [@generic="6bb5aa3f898cf17f71012064f7756e994fb3691b4433d02765924c25c011275cb1b85906d31f19d4e8fc5410635606f9131097434c69ab2826808d217d65", @generic="62b791538d7140ae789b7e270e519e8863553636117047a20cdc5ea37b058ca757b094ba532f8f68ca272a1d408e7b958f06ac354f83e4d3c305b42293ba7ebe242780026fb5ccbcd7798e324e0c1be77f14edb7aa4137a1f5c6eaad347201bfd1ade0d588037c82413e1ad35dda61660e9bfd92c9", @typed={0x8, 0x140, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x2b, 0x0, 0x0, @uid=r5}, @generic="3eb2e8505504906af200735cc4123838d60ab5db5846fa87e4d73cd3af331a86bbbd7257756e63a8063a9b09074b64c535e26074f8fe81eba32e571c38abb5a3383cd88bf73b21130e531c2c6117c1b2c0efd480bf04fc120117e962c99d6560b7b0195fe2bb8207566566b43ef3569688c37c91a4fa142c734dcb560e0d3270fb037498dbb2e7393e10f42c9004c595a301694995768b80af8ddd88c7a533669c7ff400c342a91eafb41882f10a9e32fb895f6b971634cf54962f8b", @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@empty}]}]}, @generic, @typed={0xdf, 0x67, 0x0, 0x0, @binary="d759a0e68f49180a5054395a7176842c235c92e4d9da514b6ec199b4bbebf4789e204c5877a52fc69db601a10848c22dcb70ef73691fa5873ad1621dd28aa51639010b2ccc1866357a38e5e084facc38b7e6f7511337e1c257ab6f1a2b1915d6a600d0bfa10eb4d7f8a3f99eb9d37eddcdb9e7a093a0f2b8c0c6d4929574695970ea356066f81dc9af5122424ae33a2a3d513843144e78a136c19164d974a78542612a4a071ee942f5ebbef13556206b90b444f5d550f7c3ba2831e2b9e91828bae19f6808d7b698e4fba7c4c74f3d60fc6ec5b28bc930520c91e0"}]}]}, 0x2a0}, {&(0x7f0000001600)={0x50c, 0x3d, 0x400, 0x70bd28, 0x25dfdbfe, "", [@generic="19ccd2436bc87a8330fa10b39f359c3628e9020d240690f7e500b43597cb60f795a71b345d674ec9e5fc347ca7a2a7643cc00ec684241128636b81e87172a643544aa58662d5da453cf49a2ef90b6b3dacf4d15ef426ef412102d056184d6d057a3ea7d053b1b489be17baea6259f65308e0f739af123d1f0309633e50e9bf240c4cbdeefd64aff859e486f77e2d8257156de10d9db2a63b9c65563e6f91778caa12d39560e5dc689d875da2cd9d3a8ff57126e5cd95e8edbedb14f53ec6ce07bb5cb5ee44ec527b3fdc9aa14336e1c521f812e1194876f7c01e5c7572d1c5", @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x2d}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0x84}]}, @nested={0x47, 0x54, 0x0, 0x1, [@typed={0x4, 0x115}, @nested={0x4, 0xb2}, @typed={0x8, 0x50, 0x0, 0x0, @uid=0xee00}, @generic="c1d30d130936cd97c9c058ead20aad96c3a89f075e7b440aacfa65a06b3e254ac8647f2dd978edbb4aa939ac0fb2994c230974", @generic]}, @nested={0x3c4, 0x1b, 0x0, 0x1, [@generic, @nested={0x356, 0x4b, 0x0, 0x1, [@nested={0x13f, 0x139, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @ipv4=@local}, @generic="3a76321cbdc250a1b2b3523b0ecdd73fe6176486c60edf0c09ee323c8a0a221173d605188e440fcc43c914edd754064c85450c4e6e0e0575", @typed={0xf, 0x19, 0x0, 0x0, @str='CREDS_CHECK'}, @generic="c211331a3d4100ef82f6", @typed={0x8, 0xaa, 0x0, 0x0, @str='\'U&\x00'}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x3}, @nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x8, 0xab, 0x0, 0x0, @u32=0x10000}]}, @generic="5b6e7bc4b864d9dd14039a164d3b33531c", @typed={0x9e, 0x43, 0x0, 0x0, @binary="30172b7463a3f41f35213a9b098053ff2287a97374dbbfd60b426c2e0c5868d26ab6a97ac0487f16269e1af14a1685eb82b6cd0c873f7931ea056be1eb5c837c740f427eb328eab4c290bf36e973fdcaaf58b260078252711961d449f4589b15e796a4d0cebedc1a54cecf40eef662bd061e4a1fde8b32c315d43523a8c2728c5e571664d09a0551c1abe2d08cebfaabb3548fc8054d554b07fa"}, @nested={0x14, 0x111, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x85, 0x0, 0x0, @uid=r5}]}]}, @nested={0x13c, 0x109c, 0x0, 0x1, [@generic="bed63b847d90507dd92bdf47a41fbbf1344f1be688e19fdcdd6bef5c8d6fbb240ecfeb6329640269c9ff4b137cc6bbd3626c2811773ba421bf08db87c69fd30149693bb63d303710dfd7fd76ee2a7909bfc9f82976209f1e3adc9f82ea3d2c7ebdf7633ddddeaa12be4a4a24b879be8d112b0d31f1900522e00b10214bce27d3ec6170a2f2805ce91deea5161313968c20195d6133840017c3a3e519cd3b93277e4fc29bfbe2f58c0b63e26075f4c9c9214c06818babc1c7037c7f7109ca4b5287438061bf6314c748fb344d5ca809f6f86596146f62a12f034350", @generic="49abe7b0ee94b79624bd466f76af54aa880829d21df23d4ff6d0f9f6d9f4d09463de0ef401929342ac25d5fe633037647c6db332d927198bbc264b90db2d9d9a0a12a1d235d8d2d75beb4bc1a833d1607014418f92", @typed={0x8, 0xc9, 0x0, 0x0, @fd=r0}]}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback}, @generic="8ba490614fcc3e7ca3d616335dca3caf01ab792f6991d57c655091945508530eb6b2698045f314c70d642b2fb89a0379fda0e11b63b8fd342c5534da589cfb1c319c05cbb52d04e1a2a605e017019088563dd5cf1e391d7e8302cb36aa3d61a9b4f518a4f1352ab33d1f16b6d93d0bc94955ed98d3de133faa235967f76434e2862516881c2ce9f7ec5a229d32ba8180bb36066643ae78f16d593c4debcefaf4584cc0375b37", @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}}, @typed={0x4, 0x10f}, @typed={0x8, 0x3e, 0x0, 0x0, @str='[]}!'}]}, @generic, @typed={0x4, 0x116}, @generic, @generic="9193c5c241c53078dec164589b1539f1f6bf37d70d2b6fce4d07a0deed053c774841a051d833d8c8b00633d8971e2ca118c4b89f1a90a2993c2e6c411b5cb4fb50ecc6cd9d766adebddf0279cfdf454678bff658cc2fd0aac807c0e617e89f990cee6439"]}]}, 0x50c}], 0x5}, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) r12 = socket$nl_audit(0x10, 0x3, 0x9) r13 = epoll_create(0x40) kcmp$KCMP_EPOLL_TFD(r10, r11, 0x7, r12, &(0x7f00000002c0)={r13, r3, 0x5}) r14 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r14}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x3) acct(&(0x7f0000000140)='./file0\x00') 1.25142978s ago: executing program 1 (id=9514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x83, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) 1.219561214s ago: executing program 1 (id=9515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.167869239s ago: executing program 1 (id=9516): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x169397c458a634f0, &(0x7f0000002500)) 1.166863529s ago: executing program 1 (id=9517): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r4, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b"}, 0xe) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x4, 0x10500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x505, 0x0, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x40, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 895.179334ms ago: executing program 6 (id=9519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_plug\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0xfffffffffffffe36) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x4, "23900000aa82dc1ecf00"}) ioctl$TIOCGPGRP(r2, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1, 0x0, 0x8}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b7e536", 0x3}], 0x1}}], 0x2, 0x400c404) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) 874.901716ms ago: executing program 1 (id=9520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000a40)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='mm_page_alloc\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r1, 0x0, 0x2144}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES32=r3, @ANYRESOCT, @ANYBLOB="e8d1e5843f75e008b8fa7aabdf57130099bde1a0dff0338a2f1232a0a73f77453ec9bafc5a084406ff54f62a838ec419d8ca1ab06849f1d5a467a330789b375d76aaea0cfa67c585a9c35e7dbd85cbc064fc9ec4144866099882d331259f9df9c8dd72c043408f0cef4cdea903b9e2e96d8d4173dd64bfaad310bd7704d62d7a7f1c3a62abb49881c18f018bd811556dbd0e1f69a5d1f360a771d87bc574fde8a5f7318dd6674c4a1f8a34513982e7c8f46e9e1908643b4836733c5327fd75df7514998cb47bd43c8b21e70ac840fa86e3751ee34856284d38a802c97d43", @ANYRES64=r3], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x62d6, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4, 0x0, 0x4}, 0x23) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r5, 0x0) r6 = gettid() creat(&(0x7f0000000180)='./file0\x00', 0x0) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x17f8, &(0x7f0000000080)={0x0, 0xffffafff, 0x0, 0x0, 0x33d}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000000)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) 601.855302ms ago: executing program 6 (id=9521): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x200000000000013c, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 507.986281ms ago: executing program 6 (id=9522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 493.607843ms ago: executing program 6 (id=9523): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x800, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 475.998164ms ago: executing program 6 (id=9524): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x169397c458a634f0, &(0x7f0000002500)) 459.138406ms ago: executing program 1 (id=9525): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x2f, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x4008090) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000370426bd7000000000", @ANYRES32, @ANYBLOB="91410400000000001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4880) pivot_root(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710400000000000095040000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdfb}, 0x21) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 204.9466ms ago: executing program 4 (id=9526): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x169397c458a634f0, &(0x7f0000002500)) 176.415503ms ago: executing program 6 (id=9527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="51716f1406e97ab52e38b12a0bb4debd8580212c33901ca04531e741d1a5f2452ab4c866d3ffaf2382f157463f3bbe466152293d2c307ecc", @ANYRES16=r2, @ANYRESOCT=r3, @ANYBLOB="a68b48135f7d6f5740069f24813fb7a619c5131e5094e37fd995fbe954ada8342de7cc2a5ce5c316c4f8e99051a6972af8c9541c4e0830f66f98f83e117c5ce83fc2cd720c14debb423f7dd36c5e527536148d3bf46d6e51c00cccd7ba92c33a724cc66b152d3afb84b17c6af2fbedde2f2edd5066e7d8cc32e24b8b63455bb5b657173d010a39e6da5696aa05bd6ff86b8508403a4c0d3f4b46309fbf1a1b9d", @ANYRES8=r2, @ANYRES8=r1, @ANYRES8=r1, @ANYRES32=r2, @ANYRES32=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x1, 0x154) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$igmp(0x2, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 175.443793ms ago: executing program 4 (id=9528): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0x64}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r3 = open(&(0x7f0000000000)='./file1\x00', 0x14b142, 0x80) sendfile(r3, r3, 0x0, 0x1000000201005) 169.968894ms ago: executing program 5 (id=9529): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x83, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) 95.97946ms ago: executing program 4 (id=9530): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) r2 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='\x00', 0x1, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = socket(0x10, 0x3, 0x9) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{0x7ffe, 0x5c, 0x1}, {0x0, 0xf8, 0x3, 0x81}, {0x3ff, 0x8, 0xc, 0x40}, {0x3775, 0x2, 0x4, 0x7}, {0x2, 0x2, 0x55, 0x8}, {0x99, 0xaf, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x8}]}) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000fa03010000000000000000000500000a140000001100060000000000002000000000000a", @ANYRES16, @ANYBLOB="ea03e5452e8b118a23332b49ed3be89cfee94b46acbb07d9225f", @ANYBLOB="a652b22927541d374d1f63b59eedfc51011e7d", @ANYRES16=r5, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x1000000201001) llistxattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000600)=""/106, 0x6a) 89.067341ms ago: executing program 5 (id=9531): fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="720ac4ff0000000071ebd874ef10b6000000003f702b8ccc631cd76bc33e127ce1433ebd48b6c3da953c82280170c59cbd73653dd9bcbd2a0e1d5bfaabb416167f41ad588df4be050abf8945a7ebef88574e104e0b0652c6fa4e26e94f18493fae178a72980d4cb05b2579d733cd670f8798bf20ab6cf3af65db153e55590a876ae70a03687060420a505d068d0ea5e0625392aac3cf2e06fa5c727b502aba198fc9fc822e5613bcf8"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x204c000}, 0x4000890) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r8) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 65.621044ms ago: executing program 4 (id=9532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) 0s ago: executing program 4 (id=9533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x83, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) kernel console output (not intermixed with test programs): failed with errno=-22 [ 606.215035][ T3301] RDS: rds_bind could not find a transport for c001:0:20:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 606.434117][ T3311] RDS: rds_bind could not find a transport for c001:0:20:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 606.472723][ T3275] loop3: detected capacity change from 0 to 1024 [ 606.506981][ T3275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 606.520457][ T3275] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.555827][ T3275] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.8517: lblock 3 mapped to illegal pblock 3 (length 3) [ 606.572190][ T3275] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 606.585270][ T3275] EXT4-fs (loop3): This should not happen!! Data will be lost [ 606.585270][ T3275] [ 606.596310][ T3315] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.8517: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 606.614782][ T3315] EXT4-fs error (device loop3) in ext4_setattr:6035: Corrupt filesystem [ 606.824057][ T3275] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 7: comm syz.3.8517: lblock 7 mapped to illegal pblock 7 (length 9) [ 606.839361][ T3275] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 606.853477][ T3275] EXT4-fs (loop3): This should not happen!! Data will be lost [ 606.853477][ T3275] [ 606.888821][T27955] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /355/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 606.910884][T27955] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /355/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 606.932876][T27955] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 606.952922][T27955] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /355/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 606.975814][T27955] EXT4-fs error (device loop3): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 607.004296][T27955] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /355/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 607.041139][ T3329] loop0: detected capacity change from 0 to 512 [ 607.050965][ T3329] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.8534: iget: bad extra_isize 90 (inode size 256) [ 607.064590][ T3329] EXT4-fs (loop0): Remounting filesystem read-only [ 607.072506][ T3329] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 607.081739][ T3329] EXT4-fs (loop0): 1 orphan inode deleted [ 607.088347][ T3329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.133890][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.196887][ T3353] netdevsim netdevsim0: Direct firmware load for ( failed with error -2 [ 607.223800][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 607.334467][ T3365] FAULT_INJECTION: forcing a failure. [ 607.334467][ T3365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.347706][ T3365] CPU: 1 UID: 0 PID: 3365 Comm: syz.5.8548 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 607.347812][ T3365] Tainted: [W]=WARN [ 607.347819][ T3365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.347830][ T3365] Call Trace: [ 607.347837][ T3365] [ 607.347845][ T3365] __dump_stack+0x1d/0x30 [ 607.347868][ T3365] dump_stack_lvl+0x95/0xd0 [ 607.347915][ T3365] dump_stack+0x15/0x1b [ 607.347934][ T3365] should_fail_ex+0x265/0x280 [ 607.347955][ T3365] should_fail+0xb/0x20 [ 607.347973][ T3365] should_fail_usercopy+0x1a/0x20 [ 607.348043][ T3365] _copy_from_user+0x1c/0xb0 [ 607.348068][ T3365] ___sys_sendmsg+0xc1/0x1d0 [ 607.348105][ T3365] __x64_sys_sendmsg+0xd4/0x160 [ 607.348133][ T3365] x64_sys_call+0x17ba/0x3000 [ 607.348184][ T3365] do_syscall_64+0xca/0x2b0 [ 607.348214][ T3365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.348233][ T3365] RIP: 0033:0x7f6b8a7af749 [ 607.348248][ T3365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.348284][ T3365] RSP: 002b:00007f6b8920f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.348303][ T3365] RAX: ffffffffffffffda RBX: 00007f6b8aa05fa0 RCX: 00007f6b8a7af749 [ 607.348315][ T3365] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000005 [ 607.348327][ T3365] RBP: 00007f6b8920f090 R08: 0000000000000000 R09: 0000000000000000 [ 607.348395][ T3365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.348406][ T3365] R13: 00007f6b8aa06038 R14: 00007f6b8aa05fa0 R15: 00007ffe0ea34098 [ 607.348424][ T3365] [ 607.557924][ T3381] netdevsim netdevsim1: Direct firmware load for ( failed with error -2 [ 607.686397][ T3552] bridge_slave_1: left allmulticast mode [ 607.692277][ T3552] bridge_slave_1: left promiscuous mode [ 607.698383][ T3552] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.743282][ T29] kauditd_printk_skb: 1083 callbacks suppressed [ 607.743300][ T29] audit: type=1326 audit(1766324918.172:68277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.788592][ T3552] bridge_slave_0: left allmulticast mode [ 607.794399][ T3552] bridge_slave_0: left promiscuous mode [ 607.794682][ T29] audit: type=1326 audit(1766324918.182:68278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.800283][ T3552] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.823657][ T29] audit: type=1326 audit(1766324918.182:68279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.854169][ T29] audit: type=1326 audit(1766324918.182:68280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.877951][ T29] audit: type=1326 audit(1766324918.182:68281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.901900][ T29] audit: type=1326 audit(1766324918.182:68282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.925582][ T29] audit: type=1326 audit(1766324918.182:68283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.949357][ T29] audit: type=1326 audit(1766324918.182:68284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.973062][ T29] audit: type=1326 audit(1766324918.182:68285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 607.996726][ T29] audit: type=1326 audit(1766324918.192:68286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3384 comm="syz.5.8554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 608.103614][ T3428] RDS: rds_bind could not find a transport for c001:0:20:0:4002:0:20:0, load rds_tcp or rds_rdma? [ 608.145228][ T3552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.159824][ T3552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.169433][ T3552] bond0 (unregistering): Released all slaves [ 608.189070][ T3420] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 608.245155][ T3440] netdevsim netdevsim0: Direct firmware load for ( failed with error -2 [ 608.327380][ T3367] lo speed is unknown, defaulting to 1000 [ 608.352933][ T3445] loop1: detected capacity change from 0 to 512 [ 608.375468][ T3552] hsr_slave_0: left promiscuous mode [ 608.381466][ T3552] hsr_slave_1: left promiscuous mode [ 608.387332][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.401400][ T3552] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.403289][ T3445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.437715][ T3552] veth1_vlan: left allmulticast mode [ 608.453618][ T3464] __nla_validate_parse: 24 callbacks suppressed [ 608.453638][ T3464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8568'. [ 608.463395][ T3445] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.480378][ T3445] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.510258][ T3552] team0 (unregistering): Port device team_slave_0 removed [ 608.559212][ T3474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8568'. [ 608.652738][ T3367] chnl_net:caif_netlink_parms(): no params data found [ 608.697288][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.704610][ T3367] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.711929][ T3367] bridge_slave_0: entered allmulticast mode [ 608.718729][ T3367] bridge_slave_0: entered promiscuous mode [ 608.726256][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.733621][ T3367] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.741013][ T3367] bridge_slave_1: entered allmulticast mode [ 608.747800][ T3367] bridge_slave_1: entered promiscuous mode [ 608.766784][ T3367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.777375][ T3367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.801678][ T3367] team0: Port device team_slave_0 added [ 608.812325][ T3367] team0: Port device team_slave_1 added [ 608.836045][ T3367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.843174][ T3367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.869200][ T3367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.882662][ T3367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.889692][ T3367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.915764][ T3367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.952489][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8576'. [ 609.022217][ T3367] hsr_slave_0: entered promiscuous mode [ 609.057354][ T3367] hsr_slave_1: entered promiscuous mode [ 609.078950][ T3367] debugfs: 'hsr0' already exists in 'hsr' [ 609.084759][ T3367] Cannot create hsr debugfs directory [ 609.136855][ T3823] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 609.145337][ T3823] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 609.188382][ T3845] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8581'. [ 609.212375][ T3823] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 609.220867][ T3823] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 609.231299][ T3851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8584'. [ 609.433668][ T3823] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 609.470813][ T3367] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 609.495373][ T3367] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 609.520102][ T3367] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 609.530095][ T3367] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 609.689536][ T3367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.742734][ T3367] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.774111][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.781262][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.802636][ T3925] loop1: detected capacity change from 0 to 512 [ 609.834089][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.841370][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.849293][ T3925] EXT4-fs: dax option not supported [ 609.866879][ T3367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.974632][ T3367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.009939][ T3941] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 610.131355][ T3958] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 610.239375][ T3367] veth0_vlan: entered promiscuous mode [ 610.263682][ T3973] sd 0:0:1:0: device reset [ 610.278204][ T3367] veth1_vlan: entered promiscuous mode [ 610.341221][ T3367] veth0_macvtap: entered promiscuous mode [ 610.350633][ T3367] veth1_macvtap: entered promiscuous mode [ 610.378648][ T3367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.398421][ T3367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.443172][ T414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.512081][ T414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.521363][ T414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.530648][ T414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.559237][ T3998] loop6: detected capacity change from 0 to 1024 [ 610.565991][ T3998] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 610.647621][ T3994] SELinux: failed to load policy [ 611.054725][ T4024] loop0: detected capacity change from 0 to 512 [ 611.092724][ T4024] EXT4-fs: dax option not supported [ 611.102850][ T4009] lo speed is unknown, defaulting to 1000 [ 611.209951][ T4055] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 611.247073][ T4009] chnl_net:caif_netlink_parms(): no params data found [ 611.268850][ T4079] loop0: detected capacity change from 0 to 512 [ 611.335258][ T4079] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.8613: iget: bad extra_isize 90 (inode size 256) [ 611.368989][ T4079] EXT4-fs (loop0): Remounting filesystem read-only [ 611.376208][ T4079] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 611.389709][ T4165] xt_hashlimit: invalid interval [ 611.400810][ T4079] EXT4-fs (loop0): 1 orphan inode deleted [ 611.425842][ T4009] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.433109][ T4009] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.433867][ T4079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.448441][ T4009] bridge_slave_0: entered allmulticast mode [ 611.459537][ T4009] bridge_slave_0: entered promiscuous mode [ 611.467030][ T4009] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.474170][ T4009] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.481622][ T4009] bridge_slave_1: entered allmulticast mode [ 611.488589][ T4009] bridge_slave_1: entered promiscuous mode [ 611.512375][ T4009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.534665][ T4009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.601104][ T4009] team0: Port device team_slave_0 added [ 611.621364][ T4009] team0: Port device team_slave_1 added [ 611.640471][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.647472][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.673792][ T4009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.730816][ T4009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.737799][ T4009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 611.763998][ T4009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.775292][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.814425][ T4009] hsr_slave_0: entered promiscuous mode [ 611.825992][ T4009] hsr_slave_1: entered promiscuous mode [ 611.839869][ T4009] debugfs: 'hsr0' already exists in 'hsr' [ 611.845649][ T4009] Cannot create hsr debugfs directory [ 611.892058][ T4321] loop0: detected capacity change from 0 to 512 [ 611.932122][ T4321] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.8622: iget: bad extra_isize 90 (inode size 256) [ 611.948219][ T4321] EXT4-fs (loop0): Remounting filesystem read-only [ 611.954911][ T4321] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 611.988151][ T4321] EXT4-fs (loop0): 1 orphan inode deleted [ 611.994362][ T4321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.066275][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.297473][ T4009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.312447][ T4009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.337260][ T4009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.369153][ T4009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.460397][ T4009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.486097][ T4009] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.497395][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.504587][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.526511][ T4009] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.537171][ T4009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.579393][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.586504][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.627249][ T4462] sd 0:0:1:0: device reset [ 612.677444][ T4009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.701095][ T4477] 9pnet_virtio: no channels available for device 127.0.0.1 [ 612.784722][ T4491] xt_hashlimit: invalid interval [ 612.790616][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 612.790632][ T29] audit: type=1326 audit(1766324923.222:68860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.848238][ T29] audit: type=1326 audit(1766324923.262:68861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.872015][ T29] audit: type=1326 audit(1766324923.262:68862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.895670][ T29] audit: type=1326 audit(1766324923.262:68863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.919883][ T29] audit: type=1326 audit(1766324923.262:68864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.943472][ T29] audit: type=1326 audit(1766324923.262:68865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.967457][ T29] audit: type=1326 audit(1766324923.262:68866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 612.991033][ T29] audit: type=1326 audit(1766324923.262:68867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 613.015352][ T29] audit: type=1326 audit(1766324923.262:68868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 613.039215][ T29] audit: type=1326 audit(1766324923.262:68869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4485 comm="syz.4.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 613.056655][ T4503] loop0: detected capacity change from 0 to 1024 [ 613.072334][ T4009] veth0_vlan: entered promiscuous mode [ 613.080374][ T4009] veth1_vlan: entered promiscuous mode [ 613.118811][ T4009] veth0_macvtap: entered promiscuous mode [ 613.143050][ T4009] veth1_macvtap: entered promiscuous mode [ 613.151471][ T4514] FAULT_INJECTION: forcing a failure. [ 613.151471][ T4514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.164752][ T4514] CPU: 0 UID: 0 PID: 4514 Comm: syz.6.8651 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 613.164865][ T4514] Tainted: [W]=WARN [ 613.164874][ T4514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.164888][ T4514] Call Trace: [ 613.164895][ T4514] [ 613.164904][ T4514] __dump_stack+0x1d/0x30 [ 613.165013][ T4514] dump_stack_lvl+0x95/0xd0 [ 613.165091][ T4514] dump_stack+0x15/0x1b [ 613.165108][ T4514] should_fail_ex+0x265/0x280 [ 613.165133][ T4514] should_fail+0xb/0x20 [ 613.165159][ T4514] should_fail_usercopy+0x1a/0x20 [ 613.165187][ T4514] _copy_from_user+0x1c/0xb0 [ 613.165218][ T4514] __se_sys_mount+0x10d/0x2e0 [ 613.165242][ T4514] ? fput+0x8f/0xc0 [ 613.165318][ T4514] ? ksys_write+0x192/0x1a0 [ 613.165369][ T4514] __x64_sys_mount+0x67/0x80 [ 613.165393][ T4514] x64_sys_call+0x2cca/0x3000 [ 613.165416][ T4514] do_syscall_64+0xca/0x2b0 [ 613.165448][ T4514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.165472][ T4514] RIP: 0033:0x7fb04ac9f749 [ 613.165518][ T4514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.165538][ T4514] RSP: 002b:00007fb049707038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.165604][ T4514] RAX: ffffffffffffffda RBX: 00007fb04aef5fa0 RCX: 00007fb04ac9f749 [ 613.165617][ T4514] RDX: 0000200000000340 RSI: 00002000000002c0 RDI: 0000000000000000 [ 613.165630][ T4514] RBP: 00007fb049707090 R08: 0000200000000b00 R09: 0000000000000000 [ 613.165642][ T4514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.165656][ T4514] R13: 00007fb04aef6038 R14: 00007fb04aef5fa0 R15: 00007ffc766f3408 [ 613.165686][ T4514] [ 613.187480][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.305646][ T4514] 9p: Bad value for 'rfdno' [ 613.353551][ T4503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 613.398587][ T4009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.409786][ T3580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.492191][ T3580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.508153][ T4503] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.518245][ T4534] loop1: detected capacity change from 0 to 512 [ 613.525500][ T3580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.528676][ T4534] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8608: iget: bad extra_isize 90 (inode size 256) [ 613.548582][ T3580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.567742][ T4502] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.8643: path /403/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 613.600907][ T4534] EXT4-fs (loop1): Remounting filesystem read-only [ 613.611121][ T4534] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 613.611504][ T4502] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.8643: Freeing blocks not in datazone - block = 0, count = 16 [ 613.631603][ T4534] EXT4-fs (loop1): 1 orphan inode deleted [ 613.662578][ T4534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.717839][ T4543] loop6: detected capacity change from 0 to 512 [ 613.726721][ T4545] __nla_validate_parse: 20 callbacks suppressed [ 613.726740][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8656'. [ 613.734846][ T4534] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8608'. [ 613.758661][ T4534] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8608'. [ 613.796859][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.862517][ T4557] loop1: detected capacity change from 0 to 1024 [ 613.870455][ T4543] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8653: iget: bad extra_isize 90 (inode size 256) [ 613.917335][ T4557] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 613.931064][ T4543] EXT4-fs (loop6): Remounting filesystem read-only [ 613.931652][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 613.947178][ T4543] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 613.959326][ T4543] EXT4-fs (loop6): 1 orphan inode deleted [ 613.965859][ T4543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.991211][ T4564] FAULT_INJECTION: forcing a failure. [ 613.991211][ T4564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.005138][ T4564] CPU: 1 UID: 0 PID: 4564 Comm: syz.4.8662 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 614.005176][ T4564] Tainted: [W]=WARN [ 614.005185][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.005198][ T4564] Call Trace: [ 614.005206][ T4564] [ 614.005214][ T4564] __dump_stack+0x1d/0x30 [ 614.005286][ T4564] dump_stack_lvl+0x95/0xd0 [ 614.005313][ T4564] dump_stack+0x15/0x1b [ 614.005365][ T4564] should_fail_ex+0x265/0x280 [ 614.005446][ T4564] should_fail+0xb/0x20 [ 614.005469][ T4564] should_fail_usercopy+0x1a/0x20 [ 614.005510][ T4564] _copy_from_user+0x1c/0xb0 [ 614.005542][ T4564] ___sys_sendmsg+0xc1/0x1d0 [ 614.005671][ T4564] __x64_sys_sendmsg+0xd4/0x160 [ 614.005703][ T4564] x64_sys_call+0x17ba/0x3000 [ 614.005804][ T4564] do_syscall_64+0xca/0x2b0 [ 614.005843][ T4564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.005944][ T4564] RIP: 0033:0x7f4b95dbf749 [ 614.005964][ T4564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.006027][ T4564] RSP: 002b:00007f4b9481f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.006047][ T4564] RAX: ffffffffffffffda RBX: 00007f4b96015fa0 RCX: 00007f4b95dbf749 [ 614.006062][ T4564] RDX: 0000000000000106 RSI: 0000200000000140 RDI: 0000000000000004 [ 614.006078][ T4564] RBP: 00007f4b9481f090 R08: 0000000000000000 R09: 0000000000000000 [ 614.006091][ T4564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.006103][ T4564] R13: 00007f4b96016038 R14: 00007f4b96015fa0 R15: 00007fff66775d58 [ 614.006203][ T4564] [ 614.224654][ T4578] loop0: detected capacity change from 0 to 512 [ 614.271101][ T4578] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.8664: iget: bad extra_isize 90 (inode size 256) [ 614.318329][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.344155][ T4578] EXT4-fs (loop0): Remounting filesystem read-only [ 614.368319][ T4578] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 614.403247][ T4578] EXT4-fs (loop0): 1 orphan inode deleted [ 614.426042][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.448816][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8670'. [ 614.470164][ T4578] netlink: 'syz.0.8664': attribute type 10 has an invalid length. [ 614.472032][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8670'. [ 614.490738][ T4578] team0: Port device dummy0 added [ 614.517747][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.528552][ T4603] xt_hashlimit: invalid interval [ 614.557188][ T4606] netlink: 'syz.5.8674': attribute type 1 has an invalid length. [ 614.733140][ T4628] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8676'. [ 614.910105][ T4636] loop6: detected capacity change from 0 to 512 [ 614.954461][ T4636] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8678: iget: bad extra_isize 90 (inode size 256) [ 614.994380][ T4636] EXT4-fs (loop6): Remounting filesystem read-only [ 615.012646][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8682'. [ 615.045428][ T4636] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 615.051712][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8682'. [ 615.064153][ T4636] EXT4-fs (loop6): 1 orphan inode deleted [ 615.072561][ T4636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.170277][ T4659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8683'. [ 615.189842][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.205651][ T4661] xt_hashlimit: invalid interval [ 615.314132][ T4673] netlink: 'syz.6.8687': attribute type 1 has an invalid length. [ 615.328847][ T4674] loop0: detected capacity change from 0 to 1024 [ 615.341105][ T4674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 615.354003][ T4674] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.472848][ T4674] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.8685: lblock 0 mapped to illegal pblock 0 (length 6) [ 615.495572][ T4681] loop6: detected capacity change from 0 to 512 [ 615.504959][ T4681] EXT4-fs: dax option not supported [ 615.535828][ T4674] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 615.548377][ T4674] EXT4-fs (loop0): This should not happen!! Data will be lost [ 615.548377][ T4674] [ 615.795974][ T4702] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8695'. [ 615.846884][ T4709] xt_hashlimit: invalid interval [ 616.129102][ T3561] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:23: lblock 8 mapped to illegal pblock 8 (length 8) [ 616.158589][ T3561] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 616.171024][ T3561] EXT4-fs (loop0): This should not happen!! Data will be lost [ 616.171024][ T3561] [ 616.184867][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 616.264818][ T4724] lo speed is unknown, defaulting to 1000 [ 616.573061][ T4785] FAULT_INJECTION: forcing a failure. [ 616.573061][ T4785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.586320][ T4785] CPU: 0 UID: 0 PID: 4785 Comm: syz.4.8713 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 616.586353][ T4785] Tainted: [W]=WARN [ 616.586360][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.586445][ T4785] Call Trace: [ 616.586451][ T4785] [ 616.586460][ T4785] __dump_stack+0x1d/0x30 [ 616.586557][ T4785] dump_stack_lvl+0x95/0xd0 [ 616.586579][ T4785] dump_stack+0x15/0x1b [ 616.586621][ T4785] should_fail_ex+0x265/0x280 [ 616.586711][ T4785] should_fail+0xb/0x20 [ 616.586729][ T4785] should_fail_usercopy+0x1a/0x20 [ 616.586750][ T4785] _copy_from_iter+0x21c/0xe70 [ 616.586850][ T4785] ? obj_cgroup_charge_account+0x122/0x1a0 [ 616.586980][ T4785] ? __rcu_read_unlock+0x4f/0x70 [ 616.587000][ T4785] ping_v4_sendmsg+0x150/0xcd0 [ 616.587059][ T4785] ? __rcu_read_unlock+0x4f/0x70 [ 616.587084][ T4785] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 616.587102][ T4785] inet_sendmsg+0xc5/0xd0 [ 616.587129][ T4785] __sock_sendmsg+0x102/0x180 [ 616.587216][ T4785] ____sys_sendmsg+0x31e/0x4a0 [ 616.587261][ T4785] ___sys_sendmsg+0x17b/0x1d0 [ 616.587295][ T4785] __x64_sys_sendmsg+0xd4/0x160 [ 616.587403][ T4785] x64_sys_call+0x17ba/0x3000 [ 616.587424][ T4785] do_syscall_64+0xca/0x2b0 [ 616.587514][ T4785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.587562][ T4785] RIP: 0033:0x7f4b95dbf749 [ 616.587577][ T4785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.587620][ T4785] RSP: 002b:00007f4b9481f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.587639][ T4785] RAX: ffffffffffffffda RBX: 00007f4b96015fa0 RCX: 00007f4b95dbf749 [ 616.587651][ T4785] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 616.587662][ T4785] RBP: 00007f4b9481f090 R08: 0000000000000000 R09: 0000000000000000 [ 616.587674][ T4785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.587685][ T4785] R13: 00007f4b96016038 R14: 00007f4b96015fa0 R15: 00007fff66775d58 [ 616.587726][ T4785] [ 616.823820][ T4790] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 617.228431][ T4795] SELinux: failed to load policy [ 617.272595][ T4797] SELinux: failed to load policy [ 617.373551][ T4827] loop1: detected capacity change from 0 to 512 [ 617.397358][ T4827] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 617.452288][ T4827] EXT4-fs (loop1): 1 truncate cleaned up [ 617.498943][ T4827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.622294][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.715688][ T4868] xt_hashlimit: invalid interval [ 617.842206][ T4877] loop6: detected capacity change from 0 to 1024 [ 617.888786][ T4865] SELinux: failed to load policy [ 617.908228][ T4877] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 617.946611][ T4886] netlink: 'syz.4.8745': attribute type 1 has an invalid length. [ 617.950346][ T4877] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.978914][ T4886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.003956][ T4921] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 618.020973][ T4886] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 618.030656][ T4886] bond1: (slave batadv1): making interface the new active one [ 618.041300][ T4886] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 618.051400][ T29] kauditd_printk_skb: 1298 callbacks suppressed [ 618.051419][ T29] audit: type=1326 audit(1766324928.482:70166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.120064][ T4926] loop1: detected capacity change from 0 to 512 [ 618.128936][ T4877] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.8742: lblock 0 mapped to illegal pblock 0 (length 6) [ 618.159321][ T4877] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 618.166354][ T4886] netlink: 'syz.4.8745': attribute type 13 has an invalid length. [ 618.171771][ T4877] EXT4-fs (loop6): This should not happen!! Data will be lost [ 618.171771][ T4877] [ 618.189500][ T29] audit: type=1326 audit(1766324928.482:70167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.189538][ T29] audit: type=1326 audit(1766324928.482:70168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.189570][ T29] audit: type=1326 audit(1766324928.482:70169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.189600][ T29] audit: type=1326 audit(1766324928.482:70170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.189673][ T29] audit: type=1326 audit(1766324928.482:70171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.189736][ T29] audit: type=1326 audit(1766324928.482:70172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.189772][ T29] audit: type=1326 audit(1766324928.482:70173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.355060][ T29] audit: type=1326 audit(1766324928.512:70174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.355612][ T4926] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8743: iget: bad extra_isize 90 (inode size 256) [ 618.378763][ T29] audit: type=1326 audit(1766324928.512:70175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.0.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 618.394234][ T4926] EXT4-fs (loop1): Remounting filesystem read-only [ 618.423581][ T4926] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 618.439675][ T4926] EXT4-fs (loop1): 1 orphan inode deleted [ 618.446061][ T4926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.480391][ T4886] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.487655][ T4886] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.536619][ T4941] loop0: detected capacity change from 0 to 512 [ 618.545813][ T4886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.555406][ T4941] journal_path: Non-blockdev passed as './bus' [ 618.555950][ T4886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.561707][ T4941] EXT4-fs: error: could not find journal device path [ 618.607312][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.617119][ T3922] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:63: lblock 8 mapped to illegal pblock 8 (length 8) [ 618.632550][ T3922] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 618.644976][ T3922] EXT4-fs (loop6): This should not happen!! Data will be lost [ 618.644976][ T3922] [ 618.665882][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 618.729715][ T4941] __nla_validate_parse: 11 callbacks suppressed [ 618.729737][ T4941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8751'. [ 618.751138][ T3922] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.760464][ T3922] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.771261][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8755'. [ 618.781594][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8755'. [ 618.826891][ T3922] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.836017][ T4965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.868892][ T4965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.948487][ T3587] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.957718][ T4936] lo speed is unknown, defaulting to 1000 [ 619.094479][ T5013] xt_hashlimit: invalid interval [ 619.301938][ T5021] netdevsim netdevsim0: Direct firmware load for ( failed with error -2 [ 619.367851][ T5018] loop1: detected capacity change from 0 to 512 [ 619.415319][ T5020] loop6: detected capacity change from 0 to 1024 [ 619.509354][ T5028] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8765'. [ 619.558577][ T5020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 619.586677][ T5018] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8763: iget: bad extra_isize 90 (inode size 256) [ 619.608536][ T5028] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8765'. [ 619.618146][ T5020] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.648403][ T5018] EXT4-fs (loop1): Remounting filesystem read-only [ 619.659463][ T5018] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 619.673740][ T5031] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 619.683696][ T5018] EXT4-fs (loop1): 1 orphan inode deleted [ 619.741728][ T5018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.778987][ T5019] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.8762: lblock 0 mapped to illegal pblock 0 (length 6) [ 619.822613][ T5019] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 619.835120][ T5019] EXT4-fs (loop6): This should not happen!! Data will be lost [ 619.835120][ T5019] [ 619.855510][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.865645][ T5020] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.8762: lblock 0 mapped to illegal pblock 0 (length 1) [ 619.880333][ T5048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8771'. [ 619.988152][ T5020] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.8762: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 620.058113][ T5020] EXT4-fs error (device loop6) in ext4_setattr:6035: Corrupt filesystem [ 620.152518][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 620.173458][ T5073] xt_hashlimit: invalid interval [ 620.186273][ T5077] netdevsim netdevsim6: Direct firmware load for ( failed with error -2 [ 620.206191][ T5075] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8779'. [ 620.220020][ T5075] netlink: 9 bytes leftover after parsing attributes in process `syz.5.8779'. [ 620.395829][ T5089] xt_hashlimit: invalid interval [ 620.535988][ T5099] loop0: detected capacity change from 0 to 1024 [ 620.579762][ T5099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 620.601276][ T5086] loop1: detected capacity change from 0 to 512 [ 620.612613][ T5086] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8781: iget: bad extra_isize 90 (inode size 256) [ 620.626995][ T5099] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.639932][ T5086] EXT4-fs (loop1): Remounting filesystem read-only [ 620.646659][ T5086] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 620.656258][ T5086] EXT4-fs (loop1): 1 orphan inode deleted [ 620.658919][ T5099] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.8780: lblock 0 mapped to illegal pblock 0 (length 1) [ 620.662860][ T5086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.707659][ T5099] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 620.720322][ T5099] EXT4-fs (loop0): This should not happen!! Data will be lost [ 620.720322][ T5099] [ 620.761479][ T5121] netdevsim netdevsim6: Direct firmware load for ( failed with error -2 [ 620.775797][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.831135][ T5125] loop6: detected capacity change from 0 to 512 [ 620.841563][ T5125] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8796: iget: bad extra_isize 90 (inode size 256) [ 620.855437][ T5125] EXT4-fs (loop6): Remounting filesystem read-only [ 620.862314][ T5125] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 620.871441][ T5125] EXT4-fs (loop6): 1 orphan inode deleted [ 620.878229][ T5125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.893809][ T5125] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8796'. [ 620.903550][ T5125] netlink: 9 bytes leftover after parsing attributes in process `syz.6.8796'. [ 620.921050][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.002356][ T5146] loop1: detected capacity change from 0 to 128 [ 621.011493][ T5146] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 621.031032][ T5146] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.052252][ T5146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5146 comm=syz.1.8800 [ 621.085040][ T4009] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 621.130262][ T5161] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8807: iget: bad extra_isize 90 (inode size 256) [ 621.148919][ T5161] EXT4-fs (loop6): Remounting filesystem read-only [ 621.155785][ T5165] FAULT_INJECTION: forcing a failure. [ 621.155785][ T5165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.169001][ T5165] CPU: 0 UID: 0 PID: 5165 Comm: syz.4.8808 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 621.169037][ T5165] Tainted: [W]=WARN [ 621.169045][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.169081][ T5165] Call Trace: [ 621.169135][ T5165] [ 621.169143][ T5165] __dump_stack+0x1d/0x30 [ 621.169171][ T5165] dump_stack_lvl+0x95/0xd0 [ 621.169195][ T5165] dump_stack+0x15/0x1b [ 621.169216][ T5165] should_fail_ex+0x265/0x280 [ 621.169238][ T5165] should_fail+0xb/0x20 [ 621.169281][ T5165] should_fail_usercopy+0x1a/0x20 [ 621.169307][ T5165] _copy_to_user+0x20/0xa0 [ 621.169336][ T5165] simple_read_from_buffer+0xb5/0x130 [ 621.169359][ T5165] proc_fail_nth_read+0x10e/0x150 [ 621.169455][ T5165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 621.169535][ T5165] vfs_read+0x1a8/0x770 [ 621.169575][ T5165] ? __rcu_read_unlock+0x4f/0x70 [ 621.169589][ T5165] ? __fget_files+0x184/0x1c0 [ 621.169604][ T5165] ? mutex_lock+0x58/0x90 [ 621.169623][ T5165] ksys_read+0xda/0x1a0 [ 621.169654][ T5165] __x64_sys_read+0x40/0x50 [ 621.169669][ T5165] x64_sys_call+0x2889/0x3000 [ 621.169685][ T5165] do_syscall_64+0xca/0x2b0 [ 621.169746][ T5165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.169822][ T5165] RIP: 0033:0x7f4b95dbe15c [ 621.169834][ T5165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 621.169847][ T5165] RSP: 002b:00007f4b9481f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.169921][ T5165] RAX: ffffffffffffffda RBX: 00007f4b96015fa0 RCX: 00007f4b95dbe15c [ 621.169930][ T5165] RDX: 000000000000000f RSI: 00007f4b9481f0a0 RDI: 000000000000000a [ 621.169939][ T5165] RBP: 00007f4b9481f090 R08: 0000000000000000 R09: 0000000000000000 [ 621.169947][ T5165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.169956][ T5165] R13: 00007f4b96016038 R14: 00007f4b96015fa0 R15: 00007fff66775d58 [ 621.169969][ T5165] [ 621.170105][ T5161] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 621.199788][ T5169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 621.230506][ T5161] EXT4-fs (loop6): 1 orphan inode deleted [ 621.317206][ T5169] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.326742][ T5173] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 621.333857][ T5161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.446064][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.478056][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 621.516828][ T4009] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 621.604676][ T5218] FAULT_INJECTION: forcing a failure. [ 621.604676][ T5218] name failslab, interval 1, probability 0, space 0, times 0 [ 621.617485][ T5218] CPU: 0 UID: 0 PID: 5218 Comm: syz.5.8820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 621.617591][ T5218] Tainted: [W]=WARN [ 621.617600][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.617615][ T5218] Call Trace: [ 621.617624][ T5218] [ 621.617634][ T5218] __dump_stack+0x1d/0x30 [ 621.617665][ T5218] dump_stack_lvl+0x95/0xd0 [ 621.617688][ T5218] dump_stack+0x15/0x1b [ 621.617707][ T5218] should_fail_ex+0x265/0x280 [ 621.617740][ T5218] should_failslab+0x8c/0xb0 [ 621.617765][ T5218] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 621.617793][ T5218] ? __d_alloc+0x37/0x340 [ 621.617859][ T5218] __d_alloc+0x37/0x340 [ 621.617882][ T5218] ? security_inode_permission+0x4a/0xb0 [ 621.617905][ T5218] d_alloc_parallel+0x54/0xcd0 [ 621.617984][ T5218] ? __rcu_read_unlock+0x4f/0x70 [ 621.618004][ T5218] ? __d_lookup+0x316/0x340 [ 621.618038][ T5218] path_openat+0x8c6/0x23b0 [ 621.618124][ T5218] do_filp_open+0x109/0x230 [ 621.618162][ T5218] do_sys_openat2+0xa6/0x150 [ 621.618195][ T5218] __x64_sys_open+0xe6/0x110 [ 621.618224][ T5218] x64_sys_call+0x166f/0x3000 [ 621.618302][ T5218] do_syscall_64+0xca/0x2b0 [ 621.618340][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.618424][ T5218] RIP: 0033:0x7f6b8a7af749 [ 621.618445][ T5218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.618496][ T5218] RSP: 002b:00007f6b8920f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 621.618516][ T5218] RAX: ffffffffffffffda RBX: 00007f6b8aa05fa0 RCX: 00007f6b8a7af749 [ 621.618529][ T5218] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240 [ 621.618544][ T5218] RBP: 00007f6b8920f090 R08: 0000000000000000 R09: 0000000000000000 [ 621.618558][ T5218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.618570][ T5218] R13: 00007f6b8aa06038 R14: 00007f6b8aa05fa0 R15: 00007ffe0ea34098 [ 621.618627][ T5218] [ 621.749247][ T5213] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8818: iget: bad extra_isize 90 (inode size 256) [ 621.847070][ T5213] EXT4-fs (loop6): Remounting filesystem read-only [ 621.863142][ T5213] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 621.876329][ T5229] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 621.885202][ T5213] EXT4-fs (loop6): 1 orphan inode deleted [ 621.915812][ T5231] xt_hashlimit: invalid interval [ 621.944576][ T5213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.977627][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.434020][ T5256] SELinux: failed to load policy [ 622.520385][ T5261] set_capacity_and_notify: 3 callbacks suppressed [ 622.520407][ T5261] loop0: detected capacity change from 0 to 512 [ 622.538506][ T5261] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.8831: iget: bad extra_isize 90 (inode size 256) [ 622.579064][ T5281] loop1: detected capacity change from 0 to 512 [ 622.592524][ T5281] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8842: iget: bad extra_isize 90 (inode size 256) [ 622.624263][ T5261] EXT4-fs (loop0): Remounting filesystem read-only [ 622.646978][ T5261] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 622.656444][ T5281] EXT4-fs (loop1): Remounting filesystem read-only [ 622.707739][ T5261] EXT4-fs (loop0): 1 orphan inode deleted [ 622.720971][ T5281] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 622.740706][ T5261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.742167][ T5281] EXT4-fs (loop1): 1 orphan inode deleted [ 622.759285][ T5281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.787538][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.941372][ T5301] netdevsim netdevsim1: Direct firmware load for ( failed with error -2 [ 622.955519][ T5297] loop6: detected capacity change from 0 to 512 [ 623.046204][ T5297] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8847: iget: bad extra_isize 90 (inode size 256) [ 623.079142][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.091812][ T5297] EXT4-fs (loop6): Remounting filesystem read-only [ 623.098450][ T5297] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 623.107450][ T5297] EXT4-fs (loop6): 1 orphan inode deleted [ 623.113728][ T5297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.126121][ T29] kauditd_printk_skb: 1401 callbacks suppressed [ 623.126141][ T29] audit: type=1326 audit(1766324933.552:71577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb04ac9df90 code=0x7ffc0000 [ 623.156751][ T29] audit: type=1326 audit(1766324933.552:71578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb04ac9e497 code=0x7ffc0000 [ 623.194659][ T29] audit: type=1326 audit(1766324933.552:71579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb04ac9df90 code=0x7ffc0000 [ 623.218495][ T29] audit: type=1326 audit(1766324933.552:71580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.243812][ T29] audit: type=1326 audit(1766324933.552:71581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.278605][ T29] audit: type=1326 audit(1766324933.712:71582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.280634][ T5326] xt_hashlimit: invalid interval [ 623.356561][ T29] audit: type=1326 audit(1766324933.712:71583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.380250][ T29] audit: type=1326 audit(1766324933.712:71584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.403792][ T29] audit: type=1326 audit(1766324933.742:71585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.427487][ T29] audit: type=1326 audit(1766324933.742:71586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5296 comm="syz.6.8847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 623.430596][ T5330] loop0: detected capacity change from 0 to 512 [ 623.460203][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.517771][ T5330] loop0: detected capacity change from 0 to 512 [ 623.562609][ T5345] xt_hashlimit: invalid interval [ 623.605981][ T5348] loop1: detected capacity change from 0 to 1024 [ 623.661309][ T5330] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 623.679440][ T5356] netlink: 'syz.4.8859': attribute type 1 has an invalid length. [ 623.689856][ T5348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 623.709668][ T5330] EXT4-fs (loop0): mount failed [ 623.715456][ T5356] bond2: entered promiscuous mode [ 623.721786][ T5348] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.732770][ T5356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.800933][ T5396] netdevsim netdevsim0: Direct firmware load for ( failed with error -2 [ 623.890143][ T5341] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.8853: lblock 0 mapped to illegal pblock 0 (length 6) [ 623.904859][ T5341] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 623.917234][ T5341] EXT4-fs (loop1): This should not happen!! Data will be lost [ 623.917234][ T5341] [ 623.930827][ T5341] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #15: comm syz.1.8853: lblock 0 mapped to illegal pblock 0 (length 1) [ 623.970248][ T5341] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.8853: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 623.992674][ T5341] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 624.032045][ T5405] __nla_validate_parse: 14 callbacks suppressed [ 624.032065][ T5405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8863'. [ 624.106466][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8865'. [ 624.161321][ T5413] SELinux: failed to load policy [ 624.210543][ T5421] loop0: detected capacity change from 0 to 512 [ 624.232775][ T5421] EXT4-fs: dax option not supported [ 624.242174][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 624.387025][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8877'. [ 624.423641][ T5451] team0: Port device team_slave_1 removed [ 624.639634][ T5468] netdevsim netdevsim6: Direct firmware load for ( failed with error -2 [ 624.710557][ T5481] loop6: detected capacity change from 0 to 512 [ 624.722446][ T5481] EXT4-fs: dax option not supported [ 624.783880][ T5497] xt_hashlimit: invalid interval [ 624.856442][ T5504] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8891'. [ 624.865971][ T5504] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8891'. [ 624.892111][ T5488] SELinux: failed to load policy [ 625.008675][ T5515] pim6reg: entered allmulticast mode [ 625.020164][ T5515] pim6reg: left allmulticast mode [ 625.027926][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8897'. [ 625.037194][ T5520] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 625.116952][ T5534] loop0: detected capacity change from 0 to 1024 [ 625.128605][ T5534] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 625.163289][ T5528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8899'. [ 625.172505][ T5528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8899'. [ 625.320769][ T5557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8909'. [ 625.346215][ T5553] SELinux: failed to load policy [ 625.352031][ T5560] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 625.528955][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8918'. [ 625.555273][ T5577] loop1: detected capacity change from 0 to 512 [ 625.562034][ T5579] team0: Port device team_slave_1 removed [ 625.571383][ T5577] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8915: iget: bad extra_isize 90 (inode size 256) [ 625.585789][ T5577] EXT4-fs (loop1): Remounting filesystem read-only [ 625.592879][ T5577] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 625.604528][ T5577] EXT4-fs (loop1): 1 orphan inode deleted [ 625.611521][ T5577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.669321][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.702554][ T5596] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5596 comm=syz.4.8922 [ 625.739689][ T5596] FAULT_INJECTION: forcing a failure. [ 625.739689][ T5596] name failslab, interval 1, probability 0, space 0, times 0 [ 625.752518][ T5596] CPU: 0 UID: 0 PID: 5596 Comm: syz.4.8922 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 625.752556][ T5596] Tainted: [W]=WARN [ 625.752563][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.752574][ T5596] Call Trace: [ 625.752582][ T5596] [ 625.752593][ T5596] __dump_stack+0x1d/0x30 [ 625.752688][ T5596] dump_stack_lvl+0x95/0xd0 [ 625.752708][ T5596] dump_stack+0x15/0x1b [ 625.752788][ T5596] should_fail_ex+0x265/0x280 [ 625.752814][ T5596] should_failslab+0x8c/0xb0 [ 625.752838][ T5596] __kmalloc_noprof+0xb9/0x5a0 [ 625.752927][ T5596] ? iter_file_splice_write+0xf7/0xa20 [ 625.753026][ T5596] iter_file_splice_write+0xf7/0xa20 [ 625.753050][ T5596] ? shmem_file_read_iter+0x488/0x540 [ 625.753130][ T5596] ? copy_splice_read+0x623/0x660 [ 625.753151][ T5596] ? copy_splice_read+0x623/0x660 [ 625.753171][ T5596] ? __pfx_iter_file_splice_write+0x10/0x10 [ 625.753193][ T5596] direct_splice_actor+0x156/0x2a0 [ 625.753218][ T5596] ? __pfx_shmem_file_open+0x1/0x10 [ 625.753312][ T5596] splice_direct_to_actor+0x312/0x680 [ 625.753354][ T5596] ? __pfx_direct_splice_actor+0x10/0x10 [ 625.753383][ T5596] do_splice_direct+0xda/0x150 [ 625.753408][ T5596] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 625.753436][ T5596] do_sendfile+0x380/0x650 [ 625.753515][ T5596] __x64_sys_sendfile64+0x105/0x150 [ 625.753547][ T5596] x64_sys_call+0x2db1/0x3000 [ 625.753575][ T5596] do_syscall_64+0xca/0x2b0 [ 625.753606][ T5596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.753680][ T5596] RIP: 0033:0x7f4b95dbf749 [ 625.753700][ T5596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.753721][ T5596] RSP: 002b:00007f4b9481f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 625.753740][ T5596] RAX: ffffffffffffffda RBX: 00007f4b96015fa0 RCX: 00007f4b95dbf749 [ 625.753818][ T5596] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 625.753830][ T5596] RBP: 00007f4b9481f090 R08: 0000000000000000 R09: 0000000000000000 [ 625.753841][ T5596] R10: 0001000000201001 R11: 0000000000000246 R12: 0000000000000001 [ 625.753856][ T5596] R13: 00007f4b96016038 R14: 00007f4b96015fa0 R15: 00007fff66775d58 [ 625.753902][ T5596] [ 625.986565][ T5602] xt_hashlimit: invalid interval [ 626.071272][ T5598] SELinux: failed to load policy [ 626.178187][ T5620] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 626.197222][ T5620] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.246088][ T5620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5620 comm=syz.0.8928 [ 626.316057][T26339] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 626.341880][ T5646] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 626.435300][ T5667] team0: Port device team_slave_1 removed [ 626.499948][ T5658] lo speed is unknown, defaulting to 1000 [ 626.654390][ T5731] pim6reg: entered allmulticast mode [ 626.670101][ T5731] pim6reg: left allmulticast mode [ 626.777900][ T5752] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8952: iget: bad extra_isize 90 (inode size 256) [ 626.791977][ T5752] EXT4-fs (loop6): Remounting filesystem read-only [ 626.801632][ T5752] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 626.811010][ T5752] EXT4-fs (loop6): 1 orphan inode deleted [ 626.817532][ T5752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.852052][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.050620][ T5796] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 627.066076][ T5796] EXT4-fs (loop6): mount failed [ 627.175082][ T5822] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 627.216267][ T5822] EXT4-fs (loop6): mount failed [ 627.582417][ T5927] netdevsim netdevsim1: Direct firmware load for ( failed with error -2 [ 627.724092][ T5960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5960 comm=syz.0.8988 [ 627.741790][ T5964] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 628.128178][ T29] kauditd_printk_skb: 1218 callbacks suppressed [ 628.128194][ T29] audit: type=1326 audit(1766324938.552:72802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.4.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 628.198088][ T29] audit: type=1326 audit(1766324938.562:72803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.4.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 628.218617][ T6022] set_capacity_and_notify: 8 callbacks suppressed [ 628.218662][ T6022] loop0: detected capacity change from 0 to 512 [ 628.221889][ T29] audit: type=1326 audit(1766324938.562:72804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.4.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 628.258431][ T29] audit: type=1326 audit(1766324938.592:72805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.282000][ T29] audit: type=1326 audit(1766324938.592:72806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.305735][ T29] audit: type=1326 audit(1766324938.592:72807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.329352][ T29] audit: type=1326 audit(1766324938.592:72808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.353073][ T29] audit: type=1326 audit(1766324938.592:72809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.376818][ T29] audit: type=1326 audit(1766324938.592:72810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.400361][ T29] audit: type=1326 audit(1766324938.592:72811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.0.9005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153ee5f749 code=0x7ffc0000 [ 628.424964][ T6022] EXT4-fs: dax option not supported [ 628.452430][ T6015] FAULT_INJECTION: forcing a failure. [ 628.452430][ T6015] name failslab, interval 1, probability 0, space 0, times 0 [ 628.465117][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.5.9003 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 628.465171][ T6015] Tainted: [W]=WARN [ 628.465180][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.465194][ T6015] Call Trace: [ 628.465201][ T6015] [ 628.465209][ T6015] __dump_stack+0x1d/0x30 [ 628.465238][ T6015] dump_stack_lvl+0x95/0xd0 [ 628.465263][ T6015] dump_stack+0x15/0x1b [ 628.465339][ T6015] should_fail_ex+0x265/0x280 [ 628.465367][ T6015] should_failslab+0x8c/0xb0 [ 628.465450][ T6015] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 628.465477][ T6015] ? sidtab_sid2str_get+0xa0/0x130 [ 628.465647][ T6015] kmemdup_noprof+0x2b/0x70 [ 628.465665][ T6015] sidtab_sid2str_get+0xa0/0x130 [ 628.465691][ T6015] security_sid_to_context_core+0x1eb/0x2e0 [ 628.465767][ T6015] security_sid_to_context+0x27/0x40 [ 628.465800][ T6015] selinux_lsmprop_to_secctx+0x67/0xf0 [ 628.465827][ T6015] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 628.465848][ T6015] audit_log_subj_ctx+0xa4/0x3e0 [ 628.465906][ T6015] ? skb_put+0xa9/0xf0 [ 628.465935][ T6015] audit_log_task_context+0x48/0x70 [ 628.465962][ T6015] audit_log_task+0xf4/0x250 [ 628.466058][ T6015] ? kstrtouint+0x76/0xc0 [ 628.466082][ T6015] audit_seccomp+0x61/0x100 [ 628.466115][ T6015] ? __seccomp_filter+0x832/0x1260 [ 628.466206][ T6015] __seccomp_filter+0x843/0x1260 [ 628.466238][ T6015] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 628.466270][ T6015] ? vfs_write+0x7e8/0x960 [ 628.466426][ T6015] __secure_computing+0x82/0x150 [ 628.466457][ T6015] syscall_trace_enter+0xcf/0x1e0 [ 628.466523][ T6015] do_syscall_64+0xa4/0x2b0 [ 628.466676][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.466764][ T6015] RIP: 0033:0x7f6b8a7af749 [ 628.466784][ T6015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.466806][ T6015] RSP: 002b:00007f6b8920f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 628.466908][ T6015] RAX: ffffffffffffffda RBX: 00007f6b8aa05fa0 RCX: 00007f6b8a7af749 [ 628.466924][ T6015] RDX: 0000200000000300 RSI: 000000002ee7decd RDI: 000000000000000a [ 628.466939][ T6015] RBP: 00007f6b8920f090 R08: 0000000000000000 R09: 0000000000000000 [ 628.466952][ T6015] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 628.466964][ T6015] R13: 00007f6b8aa06038 R14: 00007f6b8aa05fa0 R15: 00007ffe0ea34098 [ 628.466982][ T6015] [ 628.523101][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.718074][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.728760][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.736651][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.754639][ T6028] loop0: detected capacity change from 0 to 512 [ 628.766488][ T6028] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9007: iget: bad extra_isize 90 (inode size 256) [ 628.802877][ T6028] EXT4-fs (loop0): Remounting filesystem read-only [ 628.820006][ T6028] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 628.842990][ T6028] EXT4-fs (loop0): 1 orphan inode deleted [ 628.856510][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.917743][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.206776][ T6071] loop6: detected capacity change from 0 to 512 [ 629.226553][ T6071] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9021: iget: bad extra_isize 90 (inode size 256) [ 629.254974][ T6071] EXT4-fs (loop6): Remounting filesystem read-only [ 629.262786][ T6074] loop0: detected capacity change from 0 to 512 [ 629.269288][ T6071] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 629.287038][ T6071] EXT4-fs (loop6): 1 orphan inode deleted [ 629.304125][ T6071] __nla_validate_parse: 38 callbacks suppressed [ 629.304164][ T6071] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9021'. [ 629.326323][ T6074] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9019: iget: bad extra_isize 90 (inode size 256) [ 629.340134][ T6065] SELinux: failed to load policy [ 629.351873][ T6071] netlink: 9 bytes leftover after parsing attributes in process `syz.6.9021'. [ 629.386572][ T6074] EXT4-fs (loop0): Remounting filesystem read-only [ 629.433694][ T6074] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 629.443054][ T6074] EXT4-fs (loop0): 1 orphan inode deleted [ 629.501522][ T6083] loop6: detected capacity change from 0 to 512 [ 629.527610][ T6083] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9023: iget: bad extra_isize 90 (inode size 256) [ 629.548299][ T6083] EXT4-fs (loop6): Remounting filesystem read-only [ 629.555002][ T6083] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 629.567252][ T6083] EXT4-fs (loop6): 1 orphan inode deleted [ 629.786033][ T6107] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9031'. [ 629.806183][ T6107] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9031'. [ 630.084314][ T6147] loop0: detected capacity change from 0 to 512 [ 630.094800][ T6147] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9046: iget: bad extra_isize 90 (inode size 256) [ 630.109931][ T6147] EXT4-fs (loop0): Remounting filesystem read-only [ 630.116639][ T6147] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 630.130327][ T6147] EXT4-fs (loop0): 1 orphan inode deleted [ 630.142446][ T6151] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9047'. [ 630.423340][ T6175] loop1: detected capacity change from 0 to 512 [ 630.434368][ T6175] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9052: iget: bad extra_isize 90 (inode size 256) [ 630.440124][ T6190] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 630.451974][ T6175] EXT4-fs (loop1): Remounting filesystem read-only [ 630.456460][ T6190] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 630.471743][ T6175] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 630.480908][ T6175] EXT4-fs (loop1): 1 orphan inode deleted [ 630.491868][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9058'. [ 630.495479][ T6190] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 630.509336][ T6190] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 630.598491][ T6201] loop0: detected capacity change from 0 to 512 [ 630.628509][ T6201] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9063: iget: bad extra_isize 90 (inode size 256) [ 630.647792][ T6201] EXT4-fs (loop0): Remounting filesystem read-only [ 630.654949][ T6201] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 630.664868][ T6201] EXT4-fs (loop0): 1 orphan inode deleted [ 630.674334][ T6212] netdevsim netdevsim1: Direct firmware load for ( failed with error -2 [ 630.744307][ T6226] loop1: detected capacity change from 0 to 512 [ 630.757021][ T6226] EXT4-fs: dax option not supported [ 630.854536][ T6248] loop0: detected capacity change from 0 to 512 [ 630.880184][ T6248] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9076: iget: bad extra_isize 90 (inode size 256) [ 630.894553][ T6254] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 630.932329][ T6248] EXT4-fs (loop0): Remounting filesystem read-only [ 630.961526][ T6248] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 630.993521][ T6248] EXT4-fs (loop0): 1 orphan inode deleted [ 631.060496][ T6266] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 631.078358][ T6266] EXT4-fs (loop1): mount failed [ 631.090667][ T6278] EXT4-fs: dax option not supported [ 631.154341][ T6290] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 631.367439][ T6323] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9094: iget: bad extra_isize 90 (inode size 256) [ 631.389333][ T6323] EXT4-fs (loop6): Remounting filesystem read-only [ 631.400718][ T6323] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 631.429986][ T6323] EXT4-fs (loop6): 1 orphan inode deleted [ 632.020248][ T6388] SELinux: failed to load policy [ 632.068895][ T6390] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9117: iget: bad extra_isize 90 (inode size 256) [ 632.088221][ T6390] EXT4-fs (loop1): Remounting filesystem read-only [ 632.094954][ T6390] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 632.104203][ T6390] EXT4-fs (loop1): 1 orphan inode deleted [ 632.240440][ T6406] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9122: iget: bad extra_isize 90 (inode size 256) [ 632.255542][ T6406] EXT4-fs (loop6): Remounting filesystem read-only [ 632.277485][ T6406] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 632.293512][ T6406] EXT4-fs (loop6): 1 orphan inode deleted [ 632.343046][ T6425] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 632.504052][ T6430] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9123: iget: bad extra_isize 90 (inode size 256) [ 632.566737][ T6457] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9138: iget: bad extra_isize 90 (inode size 256) [ 632.588252][ T6457] EXT4-fs (loop0): Remounting filesystem read-only [ 632.594987][ T6457] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 632.615176][ T6457] EXT4-fs (loop0): 1 orphan inode deleted [ 632.621187][ T6430] EXT4-fs (loop1): Remounting filesystem read-only [ 632.628229][ T6430] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 632.635573][ T6447] SELinux: failed to load policy [ 632.637336][ T6430] EXT4-fs (loop1): 1 orphan inode deleted [ 632.839376][ T6486] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9148: iget: bad extra_isize 90 (inode size 256) [ 632.869518][ T6486] EXT4-fs (loop0): Remounting filesystem read-only [ 632.876264][ T6486] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 632.885635][ T6486] EXT4-fs (loop0): 1 orphan inode deleted [ 632.929546][ T6474] lo speed is unknown, defaulting to 1000 [ 632.959765][ T6508] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9150: iget: bad extra_isize 90 (inode size 256) [ 632.974683][ T6508] EXT4-fs (loop0): Remounting filesystem read-only [ 632.985084][ T6508] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 632.994985][ T6508] EXT4-fs (loop0): 1 orphan inode deleted [ 633.188351][ T29] kauditd_printk_skb: 2419 callbacks suppressed [ 633.188368][ T29] audit: type=1326 audit(1766324943.612:75229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.218847][ T29] audit: type=1326 audit(1766324943.612:75230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.242524][ T29] audit: type=1326 audit(1766324943.612:75231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.266156][ T29] audit: type=1326 audit(1766324943.612:75232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.290048][ T29] audit: type=1326 audit(1766324943.612:75233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.314239][ T29] audit: type=1326 audit(1766324943.612:75234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.323345][ T6540] SELinux: failed to load policy [ 633.338140][ T29] audit: type=1326 audit(1766324943.612:75235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.366536][ T29] audit: type=1326 audit(1766324943.612:75236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.390167][ T29] audit: type=1326 audit(1766324943.612:75237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.414449][ T29] audit: type=1326 audit(1766324943.612:75238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.4.9156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f4b95dbf749 code=0x7ffc0000 [ 633.435292][ T6553] set_capacity_and_notify: 12 callbacks suppressed [ 633.435308][ T6553] loop1: detected capacity change from 0 to 512 [ 633.501359][ T6553] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9160: iget: bad extra_isize 90 (inode size 256) [ 633.516623][ T6553] EXT4-fs (loop1): Remounting filesystem read-only [ 633.523474][ T6553] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 633.532558][ T6553] EXT4-fs (loop1): 1 orphan inode deleted [ 633.595277][ T6579] loop0: detected capacity change from 0 to 512 [ 633.613703][ T6579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9177: iget: bad extra_isize 90 (inode size 256) [ 633.627967][ T6579] EXT4-fs (loop0): Remounting filesystem read-only [ 633.628485][ T6593] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 633.634731][ T6579] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 633.652913][ T6579] EXT4-fs (loop0): 1 orphan inode deleted [ 633.714727][ T6601] loop1: detected capacity change from 0 to 512 [ 633.755736][ T6601] journal_path: Non-blockdev passed as './bus' [ 633.762037][ T6601] EXT4-fs: error: could not find journal device path [ 633.825704][ T6591] lo speed is unknown, defaulting to 1000 [ 633.947857][ T6659] loop0: detected capacity change from 0 to 1024 [ 633.955398][ T6659] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 634.036662][ T6673] xt_hashlimit: invalid interval [ 634.049326][ T6676] xt_hashlimit: invalid interval [ 634.069795][ T6666] netdevsim netdevsim6: Direct firmware load for ( failed with error -2 [ 634.291867][ T6692] loop1: detected capacity change from 0 to 512 [ 634.317813][ T6692] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9195: iget: bad extra_isize 90 (inode size 256) [ 634.334451][ T6692] EXT4-fs (loop1): Remounting filesystem read-only [ 634.341214][ T6692] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 634.351112][ T6692] EXT4-fs (loop1): 1 orphan inode deleted [ 634.357518][ T6692] EXT4-fs mount: 32 callbacks suppressed [ 634.357592][ T6692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.378707][ T6692] __nla_validate_parse: 77 callbacks suppressed [ 634.378733][ T6692] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9195'. [ 634.394392][ T6692] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9195'. [ 634.405063][ T6697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9196'. [ 634.415113][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.428447][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9196'. [ 634.664113][ T6709] netlink: 'syz.1.9200': attribute type 1 has an invalid length. [ 634.683733][ T6707] loop6: detected capacity change from 0 to 512 [ 634.706311][ T6707] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9198: iget: bad extra_isize 90 (inode size 256) [ 634.735243][ T6707] EXT4-fs (loop6): Remounting filesystem read-only [ 634.749782][ T6707] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 634.768249][ T6707] EXT4-fs (loop6): 1 orphan inode deleted [ 634.774977][ T6707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.824395][ T6715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9201'. [ 634.859721][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.059852][ T6728] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9206'. [ 635.069463][ T6728] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9206'. [ 635.130525][ T6739] loop0: detected capacity change from 0 to 128 [ 635.147603][ T6739] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.160844][ T6739] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.215441][T26339] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.235115][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9213'. [ 635.280658][ T6764] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9217'. [ 635.290194][ T6764] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9217'. [ 635.336017][ T6773] loop0: detected capacity change from 0 to 512 [ 635.341943][ T6775] xt_hashlimit: invalid interval [ 635.357300][ T6773] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9221: iget: bad extra_isize 90 (inode size 256) [ 635.372945][ T6773] EXT4-fs (loop0): Remounting filesystem read-only [ 635.380040][ T6773] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 635.389334][ T6773] EXT4-fs (loop0): 1 orphan inode deleted [ 635.395543][ T6773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.431254][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.473565][ T6795] loop1: detected capacity change from 0 to 1024 [ 635.531628][ T6795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 635.547263][ T6795] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.583643][ T6795] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.9223: lblock 0 mapped to illegal pblock 0 (length 1) [ 635.599911][ T6795] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 635.612263][ T6795] EXT4-fs (loop1): This should not happen!! Data will be lost [ 635.612263][ T6795] [ 635.651537][ T6816] loop0: detected capacity change from 0 to 512 [ 635.690956][ T6816] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 635.707691][ T6816] EXT4-fs (loop0): mount failed [ 635.795452][ T6836] xt_hashlimit: invalid interval [ 635.844212][ T6838] journal_path: Non-blockdev passed as './bus' [ 635.850542][ T6838] EXT4-fs: error: could not find journal device path [ 635.993432][ T6842] SELinux: failed to load policy [ 636.209268][ T6865] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 636.224669][ T6865] EXT4-fs (loop0): mount failed [ 636.225259][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 636.477472][ T6892] xt_hashlimit: invalid interval [ 636.501718][ T6879] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9247: iget: bad extra_isize 90 (inode size 256) [ 636.516109][ T6879] EXT4-fs (loop0): Remounting filesystem read-only [ 636.523652][ T6879] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 636.533132][ T6879] EXT4-fs (loop0): 1 orphan inode deleted [ 636.540580][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.585673][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.851081][ T6910] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9256: iget: bad extra_isize 90 (inode size 256) [ 636.866081][ T6910] EXT4-fs (loop6): Remounting filesystem read-only [ 636.882508][ T6910] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 636.891704][ T6910] EXT4-fs (loop6): 1 orphan inode deleted [ 636.897899][ T6910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.980106][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.999538][ T6914] netdevsim netdevsim5: Direct firmware load for ( failed with error -2 [ 637.029547][ T6908] SELinux: failed to load policy [ 637.405112][ T6953] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 637.591089][ T6969] xt_hashlimit: invalid interval [ 637.685356][ T6965] netlink: 'syz.4.9274': attribute type 1 has an invalid length. [ 637.769043][ T6976] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 637.820477][ T6976] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.845366][ T6985] xt_hashlimit: invalid interval [ 637.866042][ T6976] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.9276: lblock 0 mapped to illegal pblock 0 (length 6) [ 637.882129][ T6976] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 637.894479][ T6976] EXT4-fs (loop6): This should not happen!! Data will be lost [ 637.894479][ T6976] [ 638.015174][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 638.016728][ T6970] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.9276: lblock 0 mapped to illegal pblock 0 (length 1) [ 638.041793][ T6970] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.9276: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 638.060177][ T6970] EXT4-fs error (device loop6) in ext4_setattr:6035: Corrupt filesystem [ 638.069498][ T6989] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.198104][ T29] kauditd_printk_skb: 1084 callbacks suppressed [ 638.198170][ T29] audit: type=1326 audit(1766324948.632:76321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.228873][ T29] audit: type=1326 audit(1766324948.652:76322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.252620][ T29] audit: type=1326 audit(1766324948.662:76323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.277107][ T29] audit: type=1326 audit(1766324948.662:76324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.300905][ T29] audit: type=1326 audit(1766324948.662:76325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.324608][ T29] audit: type=1326 audit(1766324948.662:76326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.348322][ T29] audit: type=1326 audit(1766324948.662:76327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.371998][ T29] audit: type=1326 audit(1766324948.662:76328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.395541][ T29] audit: type=1326 audit(1766324948.662:76329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.419457][ T29] audit: type=1326 audit(1766324948.662:76330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6996 comm="syz.5.9284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b8a7e2005 code=0x7ffc0000 [ 638.493524][ T7006] set_capacity_and_notify: 9 callbacks suppressed [ 638.493542][ T7006] loop0: detected capacity change from 0 to 512 [ 638.511446][ T7006] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9288: iget: bad extra_isize 90 (inode size 256) [ 638.525306][ T7006] EXT4-fs (loop0): Remounting filesystem read-only [ 638.531978][ T7006] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 638.541198][ T7006] EXT4-fs (loop0): 1 orphan inode deleted [ 638.547857][ T7006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.568229][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 638.579461][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.750733][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 638.788369][ T7059] netdevsim netdevsim1: Direct firmware load for ( failed with error -2 [ 638.961586][ T7076] loop6: detected capacity change from 0 to 512 [ 638.971281][ T7076] journal_path: Non-blockdev passed as './bus' [ 638.977503][ T7076] EXT4-fs: error: could not find journal device path [ 639.085953][ T7090] xt_hashlimit: invalid interval [ 639.162054][ T7083] SELinux: failed to load policy [ 639.237460][ T7097] loop6: detected capacity change from 0 to 1024 [ 639.249734][ T7100] loop1: detected capacity change from 0 to 512 [ 639.263517][ T7100] loop1: detected capacity change from 0 to 512 [ 639.273011][ T7097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 639.287200][ T7097] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.309145][ T7100] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 639.324486][ T7100] EXT4-fs (loop1): mount failed [ 639.404420][ T7117] __nla_validate_parse: 48 callbacks suppressed [ 639.404437][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9319'. [ 639.521750][ T7134] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9323'. [ 639.531911][ T7134] netlink: 9 bytes leftover after parsing attributes in process `syz.1.9323'. [ 639.550683][ T7138] xt_hashlimit: invalid interval [ 639.782210][ T7161] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 639.782360][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9332'. [ 639.790814][ T7161] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 639.817159][ T7161] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 639.825782][ T7161] netlink: 60 bytes leftover after parsing attributes in process `wg1'. [ 639.839084][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9334'. [ 639.843850][ T7166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9333'. [ 639.967926][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 639.972411][ T7171] lo speed is unknown, defaulting to 1000 [ 640.769946][ T7236] SELinux: failed to load policy [ 640.944071][ T7263] loop1: detected capacity change from 0 to 128 [ 640.953766][ T7263] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 640.955324][ T7266] loop0: detected capacity change from 0 to 512 [ 640.976247][ T7263] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.039652][ T7263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7263 comm=syz.1.9356 [ 641.053294][ T7273] 9p: Bad value for 'wfdno' [ 641.162141][ T4009] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 641.387016][ T7290] loop0: detected capacity change from 0 to 512 [ 641.442224][ T7290] loop0: detected capacity change from 0 to 512 [ 641.481469][ T7290] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 641.559882][ T7290] EXT4-fs (loop0): mount failed [ 641.985638][ T7352] loop0: detected capacity change from 0 to 512 [ 641.998398][ T7352] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9382: iget: bad extra_isize 90 (inode size 256) [ 642.029712][ T7352] EXT4-fs (loop0): Remounting filesystem read-only [ 642.038748][ T7352] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 642.059555][ T7352] EXT4-fs (loop0): 1 orphan inode deleted [ 642.066019][ T7352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.091104][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.118295][ T7358] netdevsim netdevsim0: Direct firmware load for ( failed with error -2 [ 642.218131][ T7350] netlink: 'syz.5.9381': attribute type 1 has an invalid length. [ 642.322621][ T7375] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9389: iget: bad extra_isize 90 (inode size 256) [ 642.353308][ T7375] EXT4-fs (loop0): Remounting filesystem read-only [ 642.368089][ T7375] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 642.398089][ T7375] EXT4-fs (loop0): 1 orphan inode deleted [ 642.420367][ T7380] siw: device registration error -23 [ 642.429678][ T7375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.468098][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.487623][ T7378] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9388: iget: bad extra_isize 90 (inode size 256) [ 642.537406][ T7378] EXT4-fs (loop6): Remounting filesystem read-only [ 642.567398][ T7399] EXT4-fs: inline encryption not supported [ 642.578806][ T7378] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 642.589682][ T7399] EXT4-fs: Ignoring removed i_version option [ 642.619931][ T7399] EXT4-fs (loop1): 1 orphan inode deleted [ 642.631433][ T7378] EXT4-fs (loop6): 1 orphan inode deleted [ 642.639263][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.653336][ T7407] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 642.683660][ T7378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.831267][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.854172][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.967393][ T7436] pim6reg: entered allmulticast mode [ 643.000370][ T7436] pim6reg: left allmulticast mode [ 643.044933][ T7459] xt_hashlimit: invalid interval [ 643.243665][ T29] kauditd_printk_skb: 2499 callbacks suppressed [ 643.243682][ T29] audit: type=1326 audit(1766324953.672:78828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 643.302028][ T29] audit: type=1326 audit(1766324953.702:78829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb04ac9f783 code=0x7ffc0000 [ 643.325739][ T29] audit: type=1326 audit(1766324953.702:78830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb04ac9f807 code=0x7ffc0000 [ 643.349460][ T29] audit: type=1326 audit(1766324953.702:78831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb04ac56bdd code=0x7ffc0000 [ 643.372896][ T29] audit: type=1326 audit(1766324953.702:78832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb04acd3e89 code=0x7ffc0000 [ 643.396739][ T29] audit: type=1326 audit(1766324953.702:78833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb04ac56c47 code=0x7ffc0000 [ 643.420299][ T29] audit: type=1326 audit(1766324953.702:78834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 643.443962][ T29] audit: type=1326 audit(1766324953.702:78835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 643.467835][ T29] audit: type=1326 audit(1766324953.722:78836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb04ac56357 code=0x7ffc0000 [ 643.491531][ T29] audit: type=1326 audit(1766324953.722:78837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7460 comm="syz.6.9399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb04ac563b6 code=0x7ffc0000 [ 643.811302][ T7507] set_capacity_and_notify: 4 callbacks suppressed [ 643.811320][ T7507] loop1: detected capacity change from 0 to 512 [ 644.027515][ T7507] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9410: iget: bad extra_isize 90 (inode size 256) [ 644.048220][ T7592] loop6: detected capacity change from 0 to 512 [ 644.081842][ T7592] loop6: detected capacity change from 0 to 512 [ 644.148625][ T7507] EXT4-fs (loop1): Remounting filesystem read-only [ 644.155297][ T7507] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 644.176860][ T7507] EXT4-fs (loop1): 1 orphan inode deleted [ 644.183943][ T7507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.206238][ T7592] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 644.224885][ T7592] EXT4-fs (loop6): mount failed [ 644.256509][ T7625] loop0: detected capacity change from 0 to 512 [ 644.285642][ T7625] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.9417: iget: bad extra_isize 90 (inode size 256) [ 644.305126][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.314481][ T7625] EXT4-fs (loop0): Remounting filesystem read-only [ 644.321516][ T7625] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 644.330603][ T7625] EXT4-fs (loop0): 1 orphan inode deleted [ 644.337700][ T7625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.362295][ T7630] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7630 comm=syz.5.9419 [ 644.387141][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.410652][ T7647] __nla_validate_parse: 27 callbacks suppressed [ 644.410668][ T7647] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9425'. [ 644.426890][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9426'. [ 644.437125][ T7647] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9425'. [ 644.488909][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9424'. [ 644.522106][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9431'. [ 644.551554][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9430'. [ 644.570871][ T7669] loop0: detected capacity change from 0 to 1024 [ 644.578765][ T7669] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 644.599579][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9430'. [ 644.641474][ T7679] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9436'. [ 644.658704][ T7679] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9436'. [ 644.669055][ T7678] loop1: detected capacity change from 0 to 512 [ 644.688381][ T7678] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9433: iget: bad extra_isize 90 (inode size 256) [ 644.690856][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9439'. [ 644.716406][ T7678] EXT4-fs (loop1): Remounting filesystem read-only [ 644.728302][ T7678] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 644.756145][ T7678] EXT4-fs (loop1): 1 orphan inode deleted [ 644.762890][ T7678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.813167][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.199201][ T7737] xt_hashlimit: invalid interval [ 645.205608][ T7721] loop1: detected capacity change from 0 to 512 [ 645.221089][ T7721] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.9441: iget: bad extra_isize 90 (inode size 256) [ 645.235049][ T7721] EXT4-fs (loop1): Remounting filesystem read-only [ 645.241879][ T7721] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 645.251374][ T7721] EXT4-fs (loop1): 1 orphan inode deleted [ 645.257800][ T7721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 645.321318][ T7744] loop6: detected capacity change from 0 to 1024 [ 645.445633][ T7744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 645.473978][ T7744] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.512051][ T4009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.528783][ T7743] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.9453: lblock 0 mapped to illegal pblock 0 (length 1) [ 645.598086][ T7743] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 645.610524][ T7743] EXT4-fs (loop6): This should not happen!! Data will be lost [ 645.610524][ T7743] [ 645.775483][ T7799] loop0: detected capacity change from 0 to 128 [ 645.799546][ T7799] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.820255][ T7799] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.840348][ T7799] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7799 comm=syz.0.9465 [ 645.910832][T26339] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 645.982834][ T7819] uprobe: syz.1.9470:7819 failed to unregister, leaking uprobe [ 646.016495][ T7823] loop0: detected capacity change from 0 to 1024 [ 646.025977][ T7823] ext3: Unknown parameter 'nouser_xattr' [ 646.040876][ T7823] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 646.056169][ T7823] EXT4-fs (loop0): 1 truncate cleaned up [ 646.063185][ T7823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.083775][ T7823] FAULT_INJECTION: forcing a failure. [ 646.083775][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 646.096451][ T7823] CPU: 1 UID: 0 PID: 7823 Comm: syz.0.9473 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 646.096482][ T7823] Tainted: [W]=WARN [ 646.096565][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.096579][ T7823] Call Trace: [ 646.096587][ T7823] [ 646.096596][ T7823] __dump_stack+0x1d/0x30 [ 646.096624][ T7823] dump_stack_lvl+0x95/0xd0 [ 646.096648][ T7823] dump_stack+0x15/0x1b [ 646.096711][ T7823] should_fail_ex+0x265/0x280 [ 646.096760][ T7823] should_failslab+0x8c/0xb0 [ 646.096784][ T7823] __kmalloc_cache_noprof+0x65/0x4c0 [ 646.096810][ T7823] ? audit_log_d_path+0x8d/0x150 [ 646.096837][ T7823] audit_log_d_path+0x8d/0x150 [ 646.096941][ T7819] Process accounting resumed [ 646.096938][ T7823] audit_log_d_path_exe+0x42/0x70 [ 646.096965][ T7823] audit_log_task+0x1e9/0x250 [ 646.096997][ T7823] ? kstrtouint+0x76/0xc0 [ 646.097017][ T7823] audit_seccomp+0x61/0x100 [ 646.097098][ T7823] ? __seccomp_filter+0x832/0x1260 [ 646.097191][ T7823] __seccomp_filter+0x843/0x1260 [ 646.097282][ T7823] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 646.097310][ T7823] ? vfs_write+0x7e8/0x960 [ 646.097330][ T7823] ? __rcu_read_unlock+0x4f/0x70 [ 646.097365][ T7823] ? __fget_files+0x184/0x1c0 [ 646.097467][ T7823] __secure_computing+0x82/0x150 [ 646.097551][ T7823] syscall_trace_enter+0xcf/0x1e0 [ 646.097575][ T7823] do_syscall_64+0xa4/0x2b0 [ 646.097616][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.097637][ T7823] RIP: 0033:0x7f153ee5f749 [ 646.097654][ T7823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.097672][ T7823] RSP: 002b:00007f153d8c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 646.097763][ T7823] RAX: ffffffffffffffda RBX: 00007f153f0b5fa0 RCX: 00007f153ee5f749 [ 646.097776][ T7823] RDX: 0000000000000000 RSI: 0000000000000034 RDI: 0000000000000000 [ 646.097789][ T7823] RBP: 00007f153d8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 646.097801][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.097814][ T7823] R13: 00007f153f0b6038 R14: 00007f153f0b5fa0 R15: 00007ffe8e0f2ec8 [ 646.097833][ T7823] [ 646.117604][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 646.295158][ T7836] netlink: 'syz.1.9477': attribute type 1 has an invalid length. [ 646.337454][T26339] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.461136][ T7857] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7857 comm=syz.5.9480 [ 646.527234][ T7854] siw: device registration error -23 [ 646.747746][ T3587] bridge_slave_1: left allmulticast mode [ 646.753497][ T3587] bridge_slave_1: left promiscuous mode [ 646.759354][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.802233][ T3587] bridge_slave_0: left allmulticast mode [ 646.807959][ T3587] bridge_slave_0: left promiscuous mode [ 646.813687][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.966035][ T3587] batman_adv: batadv0: Removing interface: vxlan0 [ 647.011154][ T3587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.025241][ T3587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.045085][ T3587] bond0 (unregistering): Released all slaves [ 647.056396][ T7838] lo speed is unknown, defaulting to 1000 [ 647.274751][ T7938] netlink: 'syz.1.9495': attribute type 1 has an invalid length. [ 647.341786][ T7838] chnl_net:caif_netlink_parms(): no params data found [ 647.467184][ T3587] hsr_slave_0: left promiscuous mode [ 647.473190][ T3587] hsr_slave_1: left promiscuous mode [ 647.486472][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.504017][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.578766][ T3587] team0 (unregistering): Port device team_slave_0 removed [ 647.645664][ T3587] team0 (unregistering): Port device dummy0 removed [ 647.727820][ T8082] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 647.798754][ T8113] siw: device registration error -23 [ 647.804432][ T8082] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.825462][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.832743][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.874197][ T7838] bridge_slave_0: entered allmulticast mode [ 647.891795][ T7838] bridge_slave_0: entered promiscuous mode [ 647.930151][ T8082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8082 comm=syz.6.9508 [ 647.950787][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.957963][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.966080][ T7838] bridge_slave_1: entered allmulticast mode [ 647.972840][ T7838] bridge_slave_1: entered promiscuous mode [ 648.011632][ T7838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.023879][ T7838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.034796][ T3367] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 648.056736][ T7838] team0: Port device team_slave_0 added [ 648.063761][ T7838] team0: Port device team_slave_1 added [ 648.072255][ T3587] IPVS: stop unused estimator thread 0... [ 648.109715][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.116796][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.142909][ T7838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.195595][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.202681][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.228855][ T7838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.287685][ T7838] hsr_slave_0: entered promiscuous mode [ 648.298488][ T7838] hsr_slave_1: entered promiscuous mode [ 648.304616][ T7838] debugfs: 'hsr0' already exists in 'hsr' [ 648.310437][ T7838] Cannot create hsr debugfs directory [ 648.461108][ T8249] netlink: 'syz.1.9520': attribute type 1 has an invalid length. [ 648.644511][ T29] kauditd_printk_skb: 1166 callbacks suppressed [ 648.644528][ T29] audit: type=1326 audit(1766324959.072:80003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.687761][ T29] audit: type=1326 audit(1766324959.112:80004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.711395][ T29] audit: type=1326 audit(1766324959.122:80005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.735049][ T29] audit: type=1326 audit(1766324959.122:80006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.758697][ T29] audit: type=1326 audit(1766324959.122:80007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.759894][ T7838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 648.782196][ T29] audit: type=1326 audit(1766324959.122:80008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.782236][ T29] audit: type=1326 audit(1766324959.122:80009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.782263][ T29] audit: type=1326 audit(1766324959.122:80010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.859686][ T29] audit: type=1326 audit(1766324959.122:80011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.883209][ T29] audit: type=1326 audit(1766324959.122:80012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8360 comm="syz.6.9524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fb04ac9f749 code=0x7ffc0000 [ 648.922270][ T7838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 648.945709][ T8384] xt_hashlimit: invalid interval [ 648.947637][ T7838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 648.967605][ T7838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.003772][ T8390] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8390 comm=syz.4.9530 [ 649.096988][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.186299][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.313253][ T8411] set_capacity_and_notify: 2 callbacks suppressed [ 649.313275][ T8411] loop6: detected capacity change from 0 to 512 [ 649.337204][ T8413] netlink: 'syz.5.9531': attribute type 13 has an invalid length. [ 649.362379][ T8411] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.9527: iget: bad extra_isize 90 (inode size 256) [ 649.387422][ T8411] EXT4-fs (loop6): Remounting filesystem read-only [ 649.397535][ T8411] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 649.462601][ T8411] EXT4-fs (loop6): 1 orphan inode deleted [ 649.469098][ T8411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.560094][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.567364][ T8413] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.592646][ T8406] ================================================================== [ 649.600769][ T8406] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 649.608612][ T8406] [ 649.610954][ T8406] write to 0xffffea00065ae018 of 8 bytes by task 8117 on cpu 1: [ 649.618615][ T8406] __filemap_remove_folio+0x1a5/0x2a0 [ 649.624034][ T8406] filemap_remove_folio+0x6d/0x1d0 [ 649.629200][ T8406] truncate_inode_folio+0x42/0x50 [ 649.634246][ T8406] shmem_undo_range+0x244/0xa80 [ 649.639102][ T8406] shmem_evict_inode+0x12e/0x510 [ 649.644050][ T8406] evict+0x2af/0x510 [ 649.647954][ T8406] iput+0x4bd/0x650 [ 649.651771][ T8406] dentry_unlink_inode+0x24f/0x260 [ 649.656895][ T8406] __dentry_kill+0x18d/0x4b0 [ 649.661497][ T8406] finish_dput+0x2b/0x200 [ 649.665837][ T8406] dput+0x52/0x60 [ 649.669475][ T8406] __fput+0x444/0x650 [ 649.673465][ T8406] ____fput+0x1c/0x30 [ 649.677452][ T8406] task_work_run+0x131/0x1a0 [ 649.682147][ T8406] do_exit+0x467/0x1590 [ 649.686322][ T8406] do_group_exit+0xff/0x140 [ 649.690836][ T8406] get_signal+0xe58/0xf70 [ 649.695188][ T8406] arch_do_signal_or_restart+0x96/0x450 [ 649.700756][ T8406] irqentry_exit+0xfb/0x560 [ 649.705269][ T8406] asm_exc_page_fault+0x26/0x30 [ 649.710128][ T8406] [ 649.712455][ T8406] read to 0xffffea00065ae018 of 8 bytes by task 8406 on cpu 0: [ 649.719999][ T8406] folio_mapping+0xa1/0xe0 [ 649.724420][ T8406] evict_folios+0x2b54/0x35a0 [ 649.729122][ T8406] try_to_shrink_lruvec+0x5b5/0x950 [ 649.734328][ T8406] shrink_lruvec+0x22e/0x1b50 [ 649.739015][ T8406] shrink_node+0x66c/0x2010 [ 649.743608][ T8406] do_try_to_free_pages+0x3f6/0xcd0 [ 649.748814][ T8406] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 649.754723][ T8406] try_charge_memcg+0x383/0xa10 [ 649.759573][ T8406] obj_cgroup_charge_pages+0xa6/0x150 [ 649.764951][ T8406] __memcg_kmem_charge_page+0x9f/0x170 [ 649.770417][ T8406] __alloc_frozen_pages_noprof+0x18f/0x360 [ 649.776494][ T8406] alloc_pages_mpol+0xb3/0x260 [ 649.781354][ T8406] alloc_pages_noprof+0x90/0x130 [ 649.786298][ T8406] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 649.792198][ T8406] __kvmalloc_node_noprof+0x492/0x6b0 [ 649.797572][ T8406] ip_set_alloc+0x24/0x30 [ 649.801907][ T8406] hash_netiface_create+0x282/0x740 [ 649.807115][ T8406] ip_set_create+0x3cc/0x970 [ 649.811711][ T8406] nfnetlink_rcv_msg+0x4c6/0x590 [ 649.816659][ T8406] netlink_rcv_skb+0x123/0x220 [ 649.821429][ T8406] nfnetlink_rcv+0x167/0x16c0 [ 649.826111][ T8406] netlink_unicast+0x5c0/0x690 [ 649.830884][ T8406] netlink_sendmsg+0x58b/0x6b0 [ 649.835658][ T8406] __sock_sendmsg+0x145/0x180 [ 649.840333][ T8406] ____sys_sendmsg+0x31e/0x4a0 [ 649.845109][ T8406] ___sys_sendmsg+0x17b/0x1d0 [ 649.849799][ T8406] __x64_sys_sendmsg+0xd4/0x160 [ 649.854658][ T8406] x64_sys_call+0x17ba/0x3000 [ 649.859350][ T8406] do_syscall_64+0xca/0x2b0 [ 649.863957][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.869853][ T8406] [ 649.872176][ T8406] value changed: 0xffff88811c937640 -> 0x0000000000000000 [ 649.879366][ T8406] [ 649.881784][ T8406] Reported by Kernel Concurrency Sanitizer on: [ 649.887949][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.5.9531 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 649.899340][ T8406] Tainted: [W]=WARN [ 649.903143][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.913371][ T8406] ================================================================== [ 649.975954][ T3367] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.070531][T10455] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.077668][T10455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.086610][ T2107] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.096690][ T2107] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.112358][T10455] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.119609][T10455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.133173][ T2107] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.149281][ T3598] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.215135][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.291910][ T7838] veth0_vlan: entered promiscuous mode [ 650.300943][ T7838] veth1_vlan: entered promiscuous mode [ 650.316954][ T7838] veth0_macvtap: entered promiscuous mode [ 650.325286][ T7838] veth1_macvtap: entered promiscuous mode [ 650.335880][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.347270][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.359207][ T3598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.368832][ T3598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.379106][ T3598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.389759][ T3598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0