last executing test programs: 1m14.918029575s ago: executing program 3 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd82, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 1m14.864167486s ago: executing program 3 (id=72): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r9, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r8, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000fff58500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000c8500000085000000b70000000000000395"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r11}, 0x20) r12 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r12, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="99", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r12) r13 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80682) ioctl$EVIOCSREP(r13, 0x40084503, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8050) r15 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r15) dup2(r0, r1) 1m14.376136402s ago: executing program 3 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r9, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r8, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000fff58500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000c8500000085000000b70000000000000395"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r11}, 0x20) r12 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r12, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="99", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r12) r13 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80682) ioctl$EVIOCSREP(r13, 0x40084503, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r14, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8050) r15 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r15) dup2(r0, r1) 1m14.115282705s ago: executing program 3 (id=76): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x81000, 0x800, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3a}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x2, 0xb, 0x7, 0x2, 0xbe}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0xfc, &(0x7f0000000340)=""/252, 0x40f00, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r2, r3, r4], &(0x7f0000000680)=[{0x4, 0x5, 0x2, 0x2}, {0x4, 0x4, 0xd, 0x8}, {0x0, 0x1, 0xa}, {0x1, 0x3, 0x0, 0xa}, {0x0, 0x5, 0x0, 0x1}, {0x5, 0x2, 0x4, 0x9}], 0x10, 0x6, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105042, 0x1e7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r6, &(0x7f0000000200), 0x0, 0x8080c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r7, 0x0, 0x0, 0x8000c62) truncate(&(0x7f00000001c0)='./file1\x00', 0x7fffffffffffffff) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 1m13.69973807s ago: executing program 3 (id=81): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000b80)="90cf7a4544aca2e6835d02749221ccd76a8aeaa3cdf7835f2e91559c05b29c5f76376a37f408afa6a5b80693797b27a29207008d9463bb1da42fdd8bcd458a6016c436a727313e501634c3cbb4476e3a866f9dbc3806360409000000049a8356ebda8efa803eff3ab5b47e52aa7ace095b60ca8cc773660e4aa059f357", 0x7d, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@lazytime}, {@oldalloc}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$eJzs3M1vFOUfAPDv7LalvP3aH+ILCFJFI761tLzIwYMaTThgYqIHjKfaLqSyUENrIoSY6gGPhsS78e4fYDzpxagnE696NyTEcAE9rZndGVi2u6VbdrvQ/XyS2T7PzLP7PN+ZeTovz84G0LfG0pckYltE/BERI7XsnQXGan9uXr8088/1SzNJVCrv/J1Uy924fmkmL5q/b2stU6lk+U1N6r38fsR0uVw6n+UnFs9+NLFw4eJLc2enT5dOl85NHTt2+NDeoaNTR+rfNrzWONO4buz+dH7PruPvXXlr5uSVD375Nm3vtmx5fRydMlZbu0090+nKemx7XToZ6GFDaEsxItLNNVjt/yNRjM23lo3Em5/3tHFAV1UqlUqz43NmqQJsYEn0ugVAb+QH+vT6N5/W6dTjvnDtteoFUH7RM3OzmC8ZiEItsW+wdnnUFWMRcXLp36/TKdq9D7GvW60CADayH9Lznxebnf8V4pFaYih9+V82hjIaEf+PiB0R8VBE7IyIhyOqZR+NiMfarL9xhGT5+U/h6pqDW4X0/O+VbGwrn7J68yKjxSy3vRr/YHJqrlw6mK2TAzG46dRcUppcoY4f3/j9y1bL6s//0imtPz8XzNpxdaDhBt3s9OL0vcRc79pnEbsHmsWfRD6Mk0TErojYvcY65p5vPSB09/hX0IFxpso3Ec/Wtv9SNMSfS1qOT06+fHTqyMRwlEsHJ/K9Yrlff7v8dqv674w/htuKvwPS7b+l6f5/K/7RZDhi4cLFM9Xx2oUmH3Kz4WKyweU/v2h5TdPm/n98e7b/DyXvVmcMZQs+mV5cPD8ZMZScWD5/6van5fm8fBr/gf3N+/+OuL0mHo+IPRGxNyKeyC690rY/GRFPRcT+Fdbxz68//WH78a9wV76D0vhn77b9o377t58onvnp+/bjz6Xb/3A1dSCbs5r/f6tt4L2sOwAAAHhQFKrfgU8K47fShcL4eO07/DtjS6E8v7D4wqn5j8/N1r4rPxqDhfxO10jd/dDJ7N5wnp9qyB/K7ht/VdxczY/PzJdnex089LmtLfp/6q9ir1sHdN0axtFe7UY7gPXneU3oX/o/9KdE/4e+pv9D/2rW/ze3LD3+XVcbA6wrx3/oX6vo/0vr9DwSsM4c/6F/6f/Ql1o+G1+4p0f+JTqWOPFcEvdBM5YlonBfNGPjJwZW/WMWbSQqI7X+n87Z1LTM8t9mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBD9FwAA//+r+eEo") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xe0000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r8, @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0xd4) 1m13.394766014s ago: executing program 3 (id=85): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xa, 0x7}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x10008000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1m13.394280134s ago: executing program 32 (id=85): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xa, 0x7}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x10008000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1.940843266s ago: executing program 1 (id=1159): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x47b, &(0x7f0000001900)="$eJzs3EtsG0UfAPD/ruOk6eNLvlIeLS0ECqLikTTpgx64gEDiABISHIo4hSStSt0GNUGiVQWFQzmiStwRRyTuSJzggoADQuIKd1Spqnpp4WS09m7qOHbi1Gmt4N9PWntmd52Zv2fHHs/YCaBvjWU3ScT2iPgjIkbq2eUnjNXvbt24OPP3jYszSVSrb15PaufdvHFxpji1eNy2eqZajRjKkkMtyr38TsR0pTJ3Ls9PLJ55f2Lh/IXnTp2ZPjl3cu7s1LFjhw/tGzw6daSr+NL8Povr5p6P5vfufvXtK6/PHL/y7s/fZPXdnh9vjKOlZI2CsmibjNWf3WaPZjdPdlT7TeHX7GZHw45koP3J4/egQnSuFBFZc5Vr/X8kSjG8dGwkXvm0p5UD7qpqtVpt8f5czu8vVYH/sCR6XQOgN4o3/Ozzb7Hdw+FHz117sf4BKIv7Vr7VjwwszR2Umz7fbqSxiDh+6Z8vsy06mYcAAOjS99n459lW4780Hmg473/5GspoRPw/InZGxH0RsSsi7o+onftgRDy0zvKbV0hWjn/Sq3cUWIey8d8L+drW8vFfMfqL0VKe21GLv5ycOFWZO5g/JweiPJTlJ1cp44eXf/+8SG9pOtY4/su2rPxiLJjX4+pA0wTd7PTidLdxF659ErFnoFX8SRTLOElE7I6IPXdYxqmnv97b7tja8a9ilXWmTlW/iniq3v6XYln8t5sqabs+Ofn80akjE1uiMndworgqVvrlt8tvtCt/tfi3dR/emrL239ry+l9a8BxNtkQsnL9wurZeu7D+Mi7/+VlDn16+kDoWkX4bse7rfzB5q5YezPd9OL24eG4yYjB5beX+qduPLfLF+Vn8B/a37v87G2r8cERkF/G+iHgkX8TN2u6xiHg8IvavEv9PLz3xXrtjK9p/uIi/1ar5xsvin12r/aOx/defKJ3+8buO42/Z/odrqQP5nk5e/zqtYDfPHQAAAGwWae078Ek6vpRO0/Hx+tzTrtiaVuYXFp85Mf/B2dn6d+VHo5wWM10jDfOhk/nccJGfasofyueNvygN1/LjM/OV2V4HD31uW5v+n/mr1OvaAXfdBqyjAZuU/g/9S/+H/qX/Q//S/6F/ter/H/egHsC95/0f+pf+D/1L/4f+pf9DX2r72/i0q5/89zhR/O+ELv7O9d5H0XVi+G4WEWnvA+yLxEA3l3EniaGWh3r8wgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBB/g0AAP//nGbiZw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff010000000800000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') unshare(0x20000400) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) write$binfmt_script(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000240)=0xcf12, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESOCT], 0x20) 1.917602497s ago: executing program 0 (id=1160): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080)={[], [{@seclabel}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)='K', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000600)={0x2, 'batadv_slave_0\x00', {0x3}, 0x3}) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 1.64640445s ago: executing program 4 (id=1165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (fail_nth: 3) 1.573614211s ago: executing program 4 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r4}, 0x18) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close_range(r3, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) gettid() getresuid(&(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) r8 = getpid() syz_pidfd_open(r8, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) getegid() getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) 1.482624572s ago: executing program 2 (id=1170): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000840)='kfree\x00', r0, 0x0, 0x2ab}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000180)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000000f14010029b9", @ANYBLOB="0ceac8d67d803c91ff0122f70fdb32d49d339b82e1d365196b8ca5274ac038f66500d4e4332b6f4fc192ec3ab4666bd96333c990e2b22cec7394427866bae106eb303bd9085824e150857bddc76c6faad8f3400d5dee72073d25cf6fb512adc4bd0166cae546ea34b86b55b9ebc73f7e505465c12ed1091b6eb1cf18a64815ee0fa2a0a424d57034daae99a3a14ded4b0d928164f8c8597e38c5f54f8d4d6c5338c8305667a018a2d3a54c9d2b54f6719b4a5c09aedcc800ee3db9d4348cb75c65bf75739864ac6c638aa5a457eb76cc2d3588472559a7171aa03616544c33e47e", @ANYBLOB="d105468056d9d22978dadaa21de6e991667245e52a3a4485aad9e2c313261b9579f0c5d536c7a5578e1c13baaea55ad98f584ecb88024f2e0edbd6c49056bde74b84a85b29ca4675a3d1ee2a2d27cd20af4729546ac1", @ANYRES8=r1, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[0x0]) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r4 = syz_io_uring_setup(0x3bbd, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x6, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r4, 0x567, 0x72, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000100000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@deltaction={0x50, 0x31, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x50}}, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80080043}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000ff020000402f2f8e0000000000000000000000014e2100"/43, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="06000000000000000400000000000000000001000000000041b70000000000000700000000000000010000000000000010000000000000000700000000000000080000000000000000000000000000000100000000000000020000000000000005000000b56b6e0001010200000000005986000003000000060000002abd7000240009000a00000000000000070000000000000053000000000000000800000000000000050019006c00000008001d004500000014000d00fc0200"/200], 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'erspan0\x00', 0x2}) 1.386404513s ago: executing program 0 (id=1171): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7814, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45) 1.286584945s ago: executing program 5 (id=1172): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000840)='kfree\x00', r0, 0x0, 0x2ab}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000180)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="200000000f14010029b9", @ANYBLOB="0ceac8d67d803c91ff0122f70fdb32d49d339b82e1d365196b8ca5274ac038f66500d4e4332b6f4fc192ec3ab4666bd96333c990e2b22cec7394427866bae106eb303bd9085824e150857bddc76c6faad8f3400d5dee72073d25cf6fb512adc4bd0166cae546ea34b86b55b9ebc73f7e505465c12ed1091b6eb1cf18a64815ee0fa2a0a424d57034daae99a3a14ded4b0d928164f8c8597e38c5f54f8d4d6c5338c8305667a018a2d3a54c9d2b54f6719b4a5c09aedcc800ee3db9d4348cb75c65bf75739864ac6c638aa5a457eb76cc2d3588472559a7171aa03616544c33e47e", @ANYBLOB="d105468056d9d22978dadaa21de6e991667245e52a3a4485aad9e2c313261b9579f0c5d536c7a5578e1c13baaea55ad98f584ecb88024f2e0edbd6c49056bde74b84a85b29ca4675a3d1ee2a2d27cd20af4729546ac1", @ANYRES8=r1, @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) io_setup(0x7ff, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[0x0]) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r4 = syz_io_uring_setup(0x3bbd, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x6, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r3, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r4, 0x567, 0x72, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000100000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000840)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80080043}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000ff020000402f2f8e0000000000000000000000014e2100"/43, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="06000000000000000400000000000000000001000000000041b70000000000000700000000000000010000000000000010000000000000000700000000000000080000000000000000000000000000000100000000000000020000000000000005000000b56b6e0001010200000000005986000003000000060000002abd7000240009000a00000000000000070000000000000053000000000000000800000000000000050019006c00000008001d004500000014000d00fc0200"/200], 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'erspan0\x00', 0x2}) 1.256105685s ago: executing program 4 (id=1173): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x47b, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0], 0x20) 1.141585887s ago: executing program 2 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r2, &(0x7f0000000040)='\x00', 0x1, 0x1300) 1.058845207s ago: executing program 2 (id=1175): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x54c, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000900000095000000000000006f0763ff3b5f089bdf42cb8261fc60370fe8555470ce5503c5232674f1ad18ff01dd1473f65bc34150094f9402db85de669b7231a1549688cf"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x30}}, 0x40) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000005d00)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 1.043516698s ago: executing program 4 (id=1176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) connect$caif(r2, &(0x7f0000000080)=@dgm={0x25, 0x80000000, 0x6f}, 0x7) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r3, &(0x7f0000000200)="7853a42ae2", 0x5) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) inotify_init1(0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 991.809588ms ago: executing program 1 (id=1177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x81000, 0x800, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3a}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @generic={0x2, 0xb, 0x7, 0x2, 0xbe}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000300)='syzkaller\x00', 0x1ff, 0xfc, &(0x7f0000000340)=""/252, 0x40f00, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xf, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r1, 0xffffffffffffffff, r2], &(0x7f0000000680)=[{0x4, 0x5, 0x2, 0x2}, {0x4, 0x4, 0xd, 0x8}, {0x0, 0x1, 0xa}, {0x1, 0x3, 0x0, 0xa}, {0x0, 0x5, 0x0, 0x1}, {0x5, 0x2, 0x4, 0x9}], 0x10, 0x6, @void, @value}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8080c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 962.508889ms ago: executing program 2 (id=1178): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000400)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) fgetxattr(r5, &(0x7f0000000880)=@known='user.incfs.id\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000700)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x91f3, @remote, 0x7fff}, @in6={0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, 0x0, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x1, 0x7ff, {{0x12, 0x4, 0x0, 0x2, 0x48, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xdb, 0x1, 0x5, [{@multicast1, 0xfffffff9}, {@empty, 0x4}, {@multicast1, 0x8}, {@loopback, 0x4}, {@multicast2, 0x401}, {@rand_addr=0x64010101, 0x800}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r6, 0x4, 0x9, 0x40, 0xcc8, 0x2a, @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7, 0x0, 0x4}}) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @remote, 0x10}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="fcedb04599ffacbb9f1050a26ccbc0", 0xf}, {&(0x7f0000000140)="288dddd10197f5b487051354c39695179e6341", 0x13}, {&(0x7f00000012c0)="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", 0x1000}], 0x3, &(0x7f0000002480)=[@hopopts={{0x1088, 0x29, 0x36, {0x33, 0x20e, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0x80, 0x1000, "1023d22c50778a5234cba3572d19fed358f79d4dcc5c59abf92b7e3b421ed52ffbdaaa28fda189dddaf596e9eaa01630d4baa67b5b1f5aed7241317acb780b3495f3a821cd8d480350f4993dc5061077a00a9c70d212fb1d939dc1ad64b7ea2c8e5f83c1f4f46cd145fa41d7fbd34726d7e5ccd31f46922428a7e2e6f1196efaca8d32edc53675b07a3a3f2442406eafd59f4aa5f5d82e84110f5007397d2dfc02a7d1d1a83a0a9282e6578a224c901c14e673456db30a57d091355fa5403e4e585765bfbdf41b9463c52d486546834bf7660e1e7ced0140e95317e01218d4b312bea2c0af238dbf6507680aa0cb7b155133a1eb036140759ebaad744e736aabacfc2c77802ca02ee957631ac91d21e4b5387987ffa9c14abfa36c4ff560baee24b1d9aed4a476bb61476f8015b733c88bcc1486281ae654bd41e5afbf22735e69b0733e36facae11b7a6fa22a76ea21c01f8b38c88c25598a9e76a2a2edb63b10954fd4c1aec3964619bd3871229238881a103bfe633b9794e66afb01e9acd12f7bb7ac3aca73af587b5fc8551bda291d2247dff30d4f9ea0a1ef2fb3a896e586ed3621065011305ee884e1d0d705b43d065ccd67ba0e81b0aa16e11fea36c100898a8dae9d023573f9d10464349c94cbe1fa3aee302ba2344c63d5ad886a20b6428eee2ea29ad16e3f585fed8429b406085b5a5da772c49a07cd156d01d7f1cd4a91b73c41439337491124889df4e5c2c0ca00d5423ac652b614401f86d77e2bea1d9d113f9505c203b427643b294b00c58600cc229902e31eba9ced9291ad49bdcfd4105267a90a80156b11ef4703317f50b11ebe6317e551a5b81bc508fb45924cdcb053df5a252ef5a4bca1c00e32ade31c301a59bdc2c555005647528e1233430edc8740158d2bcf559c1819818bd6f612cb95b8e6f18af62a41614f6f1cc544146d3b10a09339deb536c41f36f0235e0934026da4ce1f96e898bb039313c1c750c1d38c537bf28111b566100ea6cc5caad340c22bdd56dfc31ed22e6721fecfc07164e0a5dd7371a6161b373fbf00e883c65d27abe1bf4691dd1b812b5cd8da0495673af4abf291ef61fd1eecd7418fff6a469914256da8b764c6eb4c3c288087f5f1d69d8b80fe7987a3d2cfe43908998a137f7e58dae4c74039ee3c0aa386352459e2ff094b285a6769a8e3e1eba9d33551c80664b8f564df7b9af3ff5ef6d0debeed4c6f486b6ed53ca9be34be1a4b86719e9ffd917deb057790e5c00b5cb7c1a7d6bb0432456bb7890fdd5a27ba6c28c2dcfe5772da8e770f768332fe152d0d9577d360612c21a12b820f8ea8fe0ca192959a3f0adb81a2ecff30cc40f81fb7f798b3be8c58080b2bf38cae24fcc5b3fc6b203ae6ed83fa623840895e78977447f01aa73c1e34def8fc4c8969dec2cec0028046cca3254eac01be2df622eed3d78d859465a11768e2d0be31b8a541bfa3e9eb9fc1d3b0da98bf1f7661cf3e9d6d7c0c0df7720deb015ab72d37626fb720940beaee56ab01f1c389127328373c24e4eebeb03ad24b69edf54565fee3dd961d7d06d761965c3f5a752d73a2e61579e5004f75dc7d01d3605db4ca5fcc121885400283888bf5adbbd4a8515b2b8b1b7760a2b2b9e1262ec291aa460c28d95aa9b9d9bece33fd4937599b2afbcbbe906be67f6cddeb7ebf13a80282b033ec70ad5c25061947e6aa26c7a2db84af6081ecbac835ae982263fb32deaf5c293a11b55b78138cae4f5dba06c0f233d84df312f84b093c8a9b14e4c3178070442d2d2de1a49d675f952e681911cd7e4bfede6195ba2581d9e96ee2f1e28b0056f0417c5ca52a4e3ad26c76e37ff80867154bf664dd21d38917eba666ecd30ba27e5f985963edba90e01a687cb6fcf7d4d398c6717e5c946cc73931838afaf7ee9563d0c6ad044217edcc9449cd1f6a934a178bc86f98c6c3947b2c32b7bd720d2cae8d0b6df82c4144ed1f9c86355154bee9b610c000fd102ec87ca00eb1ebe63f0a9ad03b877af91a156bcc35307c3081bc5ab3050219369da62c184445fd301c8796cf9f74d1bc6619b21206f9528ef2dabd1ca49074ef8490685b86bc260a21fe20ea4c4620b30fb348bb3e3b661dd010ccb98dbe7e44385e3b142d7a5e5c9a29f2696a2698b49a119816c22cad7edaa4008e42d1bf098b183ef7c110da1fde9379a09f96a724c6e99eae31daaab84e89f53ae8fd325966c6f924087bbebc64806b314bcba4cdeb4f2c30c4656a7fea6f7a3f9681219989dc66f1e594bfc694d5180c3d2181e318c9f85e7aace9cbc623e9642b4e1cabfabe8bc5027361293633022a894349a15b539aa29386fb0f7ba9bb9b02df0518429fa44cd4e9a4097452f4a0ff17acff01f2518f1336e9270b23f958817559c562080ab032331359c79e39618a67997576f71c598be72b13a90287e5457cf1d38fc77766dc65c665a6771abfa02d1c6a9c406510ade2e8b226985fc29d052747e2d244f3014b6340787acaa6785cf17c8d70b7d73f28451dec061071d648111773aeb99a98726099ee870025945c19a5b3b2e0e0d246c03aa0ca4e42d54e2ec987c11c7d5d8e03e4ca04e46e4e74ac81b720cdb9163b540caf7678b73b87563fe2cf1343b034a998ad18501fddfee1b7c8f1f578bf64e0bda4f56bd232bffb6a51fbbadae97a03da0d437f8e8f7a88ee1870a10abe0ada77742d98e04b5ccc618c01b986759e297a6f14021e88bd70e532ab1c5a49ccbd77a23ac372fd948374383375db8a0b257e8adbe9a65dc38c4792f652d8cf9cc65e715267a9f9512a2df0a229d316fef558c1370df5de72bd36c0af64fd9b2eba844e5c88dbc09d3e4b3219e073c198c827bcc1689a4917fe425c4e9f79247e7be5fcd22dcfa891938e22b988fc1c3c5962a482d5afe5a705783025c0c094eb005373aba4a5b6094b9d351b0d669df951e139c1b59a88f5023e7dcf7c5ab8c4acd4f597bd722ccdb8e5e0f335fb337497ee35a1e0e3ddd33bf0507ae6d6705eb3833dada693f09c086dd006e8b6899984be511d950b69d9e4c154efa9ecb593335264027e678cc2d4eeb51195aa867dc63ff8e05ee3abef2ab8b0b9327eebe01e13e9e95499a0aa57f9c1999d02ef0892514dba4701947e779b3d3191ef8873d6eca1744015f5796e87051dbb544b31c5fd92747df0ec43f285818b45bd5a110e71017cd20fd4e38a00d565fb38e640382ed643fd87f26c9d403d84a9f4aaaabfd34bb61ae90fa3dd614b67fed1ad38d743833634b737410709863e1214e4485002642b681b2bd77b953fa78c9d255b50a7ca8e6b44d3d373e8dd9a2cba4885ab7879998352a0b03de511c1c37ea51b04244ebf3d36ce1e4a465598ca7424799284f44513b62befeaaf9e09157e49d1f8a10b3ed33bef0942bc1fb0e7bafd49d424899f606b5a97a36b83706c077bb978fd564871ccdc39448c0f83caabe6da8976b67197996b012e0c88c4fce3b39579cb2c3a08319881621feab7115c66d0c63647b98d79c08fe9c896f70b7a6a8c4ee32f2002cf907e6886f7a728795f26a93a2a2a54c84db9a47f873b11ba5b838c7d85049b5bcd44c9bdabf1c04504a3b7da6999b5fa1c75e1d573b35f33ffd0294aaf355d78ac9cea6f579d3fce6e73964996ebdf2d09616ff7acb0122913daa0113a7120468de90d3b44a3a528cce0df9e03536a2be2111ea601be0eee5311ad6839e134cd699ff29a33b03be7fc210000f77c8fe6c761ad6cffde95e7b17ddc3606caf5f85e31671bd55fcaa96a4a246c4dafe38a443aa777d72d1684b34e2a0ee63e3ae8605cd6203b00ca25cb278d6d9414ba9d99951e247f447efe207dc9be189654746da7f27f876e9a6d416618b679d2cdf9cea0ee3226d36e9af5ea8e1754ddc5f752a4513db840e4c00e9ddfb2e6ad888f91646d1e988d51aff62665a11a890effb878725538b9b9fd9b7a977567d99e3b06243e8b5648f3b04d96f50595b19a4a7894111e0604a2e8a7d6bccabef04b52f21b23f08d13f18bff337129bd13dbcb71fbe6f082f16d6c3b214ca28e0d81f52918e9e3a040dc8b68050fb5e101db5d987f515b2aaab2b99912e5f81e54cb447046003d023181e81fd46584362c34c627ce6b34ab12f27930018040626fe521cfd9c6a7c361fdf005baf1eefab8f3b75db822851204e75f0a5fc6a4a76a91da999e41e7e1fe7f7040d04cdc2cd24a89bce3db73bc4ab8a278b202be042b4d8064585691899cede33e3a0724f44d0ebc02105c0ee20d8d6be4c90f18b7b5481f8ef610d5ad25486079869b35fb577964c8d5f07ca16239378a809c1b12b1237a01e784fa19359c6c921446c3af6f0b36bc6844284268a45a8013cd3dbf232a5bda625ca816127f0d75f5baebebc1bfdbd15aa21b97b68d50b1a86e9b5411dc2985157b6d2b94acc9f0c79fd1a629684f3af2d595d56185e02f20df784f97fbf7d37954c50e8adeb189c25d942e7bcc78e05bb658db41fff05cb61dfb6f165a3d2796c617e4be3b0654d013bbb283b5730bdc150a4b688ac9d0e459f44265e3d5c97c5f244321f23a71b7c70085db37fa798c3975971de57b9141d14458bbb811ea6950db515132692054e90988fa24acb2cb732bf05346572d62a655d3d8d853f7aa88343bf99241b90ed7f557f29ea97c65164bd5784a148707f43049b6f513fae6fa6fc01f615ab5533eb5b267269022f3660c69b3a3ded2abcac0967d69dad7ab9a6bfcb0039a440f2b221a841a7d002b9f14e9fad38dab54a8a1987351513f3e793aa8e9658476174a8825621194a1f76ab327e5914744873d07ab44646e74787d2cdec911d2772426752aeae2748be4975bc9b1738588468c1c8479cebe93044b436ccccdff23cddfda0f4be1cb390d874809522a7628a072a1c83478df8bf4c0b64b27f4f3cedf9a3bf61dc27c541bd789cff5db8b4d56b0e5545120a8417aca3ba619050450f7c607708d82e0e0559dfced44cb626aa1954b786e1bf3857873378dee434b111e51a10dc68f360c1a2f9b3923599ca07fb27f5fe8cc3748be4cf84954e88be4d4e42102943fb1f7d55ab7ba79c2da0db81143e1ffe88ae87884f0a85797e118dacfbf0da53a6bea34ba7c79891be7645327e2d763a4a97310014c3a315a4d14468aa3f812d8192730bb1a9de221ef0413335c3a48dd127b26f284e8c451245c8a4bed76b77b21d7b8a1c094832391e64462e5995545bcd6e88dad6e48bee87b423177de44549f193620e3f9f91d7ea8926933eceb7567e0b47bb3ddb51c1a3ec77219cb3183b3d2618a9517d0082314ae58e9d2f11495f5a9e0e614ada7654eabeade6120c90004f7d2a57ca60962bb6df2361dcacaa976a66d82ba284a1f337e5c47ce2ee226d09b83bfa018b714306b139406f19c59b26b3f73bd2b5eca54687f385b97e346c38133e4152fd07acdb5193dddbaa62a1b47b1ab09ece2e32ff6c19a3d05ab9a565ca47543efaec544bf2fa397e6f832167369f5760bcbd4f63c497fd4750d200e8a5cd6c58446e2550976d359ee26d200229f7c3aff3cd74343c9e5c461d8ff05e2325c388ba223d0274be16adf9152cd71239d70971d67a011677d6ab4d246e876fd76a841d6693c23e3caea2f9694de9270c9cc5f7e9396f21a8e96fd7f165f4b67a3986ffd61a27bce1d5d30a0f72b508e685e29a37f483a2482d3b566a07a8d05aa9787332fabdac86f582fdf5d05503b3f7149a62d2f9a480182ff9503b7feef76d5e59f72"}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0xea}, @ra={0x5, 0x2, 0xfff0}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x3, [0x8001, 0x1000, 0x10, 0x6, 0x0, 0x2, 0x5, 0x7]}}, @ra={0x5, 0x2, 0xa00}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xf}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}, @dstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x78}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x1, 0x6a, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts={{0x70, 0x29, 0x36, {0x5e, 0xa, '\x00', [@ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0x0, [0x8000000000000001, 0xfffffffffffffffa, 0x0, 0x2, 0x1, 0x7, 0x10001, 0x1]}}, @ra={0x5, 0x2, 0xd487}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x35}, r7}}}], 0x1200}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180300000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r9, 0x400, 0x1) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./bus\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1002080, &(0x7f0000000280)={[{@errors_continue}, {@nomblk_io_submit}, {@noinit_itable}]}, 0x1, 0xb80, &(0x7f00000017c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x6}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 818.34933ms ago: executing program 1 (id=1179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 817.734ms ago: executing program 4 (id=1180): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x47b, &(0x7f0000001900)="$eJzs3EtsG0UfAPD/ruOk6eNLvlIeLS0ECqLikTTpgx64gEDiABISHIo4hSStSt0GNUGiVQWFQzmiStwRRyTuSJzggoADQuIKd1Spqnpp4WS09m7qOHbi1Gmt4N9PWntmd52Zv2fHHs/YCaBvjWU3ScT2iPgjIkbq2eUnjNXvbt24OPP3jYszSVSrb15PaufdvHFxpji1eNy2eqZajRjKkkMtyr38TsR0pTJ3Ls9PLJ55f2Lh/IXnTp2ZPjl3cu7s1LFjhw/tGzw6daSr+NL8Povr5p6P5vfufvXtK6/PHL/y7s/fZPXdnh9vjKOlZI2CsmibjNWf3WaPZjdPdlT7TeHX7GZHw45koP3J4/egQnSuFBFZc5Vr/X8kSjG8dGwkXvm0p5UD7qpqtVpt8f5czu8vVYH/sCR6XQOgN4o3/Ozzb7Hdw+FHz117sf4BKIv7Vr7VjwwszR2Umz7fbqSxiDh+6Z8vsy06mYcAAOjS99n459lW4780Hmg473/5GspoRPw/InZGxH0RsSsi7o+onftgRDy0zvKbV0hWjn/Sq3cUWIey8d8L+drW8vFfMfqL0VKe21GLv5ycOFWZO5g/JweiPJTlJ1cp44eXf/+8SG9pOtY4/su2rPxiLJjX4+pA0wTd7PTidLdxF659ErFnoFX8SRTLOElE7I6IPXdYxqmnv97b7tja8a9ilXWmTlW/iniq3v6XYln8t5sqabs+Ofn80akjE1uiMndworgqVvrlt8tvtCt/tfi3dR/emrL239ry+l9a8BxNtkQsnL9wurZeu7D+Mi7/+VlDn16+kDoWkX4bse7rfzB5q5YezPd9OL24eG4yYjB5beX+qduPLfLF+Vn8B/a37v87G2r8cERkF/G+iHgkX8TN2u6xiHg8IvavEv9PLz3xXrtjK9p/uIi/1ar5xsvin12r/aOx/defKJ3+8buO42/Z/odrqQP5nk5e/zqtYDfPHQAAAGwWae078Ek6vpRO0/Hx+tzTrtiaVuYXFp85Mf/B2dn6d+VHo5wWM10jDfOhk/nccJGfasofyueNvygN1/LjM/OV2V4HD31uW5v+n/mr1OvaAXfdBqyjAZuU/g/9S/+H/qX/Q//S/6F/ter/H/egHsC95/0f+pf+D/1L/4f+pf9DX2r72/i0q5/89zhR/O+ELv7O9d5H0XVi+G4WEWnvA+yLxEA3l3EniaGWh3r8wgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBB/g0AAP//nGbiZw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0], 0x20) 725.250591ms ago: executing program 2 (id=1181): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080)={[], [{@seclabel}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)='K', 0x1}], 0x1, 0x7fff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000600)={0x2, 'batadv_slave_0\x00', {0x3}, 0x3}) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 723.713562ms ago: executing program 1 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) 606.466543ms ago: executing program 1 (id=1183): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000b80)="90cf7a4544aca2e6835d02749221ccd76a8aeaa3cdf7835f2e91559c05b29c5f76376a37f408afa6a5b80693797b27a29207008d9463bb1da42fdd8bcd458a6016c436a727313e501634c3cbb4476e3a866f9dbc3806360409000000049a8356ebda8efa803eff3ab5b47e52aa7ace095b60ca8cc773660e4aa059f35726c7ff859b26b8f5", 0x85, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000000000085000000720000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~00\t&&') syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@lazytime}, {@oldalloc}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$eJzs3M1vFOUfAPDv7LalvP3aH+ILCFJFI761tLzIwYMaTThgYqIHjKfaLqSyUENrIoSY6gGPhsS78e4fYDzpxagnE696NyTEcAE9rZndGVi2u6VbdrvQ/XyS2T7PzLP7PN+ZeTovz84G0LfG0pckYltE/BERI7XsnQXGan9uXr8088/1SzNJVCrv/J1Uy924fmkmL5q/b2stU6lk+U1N6r38fsR0uVw6n+UnFs9+NLFw4eJLc2enT5dOl85NHTt2+NDeoaNTR+rfNrzWONO4buz+dH7PruPvXXlr5uSVD375Nm3vtmx5fRydMlZbu0090+nKemx7XToZ6GFDaEsxItLNNVjt/yNRjM23lo3Em5/3tHFAV1UqlUqz43NmqQJsYEn0ugVAb+QH+vT6N5/W6dTjvnDtteoFUH7RM3OzmC8ZiEItsW+wdnnUFWMRcXLp36/TKdq9D7GvW60CADayH9Lznxebnf8V4pFaYih9+V82hjIaEf+PiB0R8VBE7IyIhyOqZR+NiMfarL9xhGT5+U/h6pqDW4X0/O+VbGwrn7J68yKjxSy3vRr/YHJqrlw6mK2TAzG46dRcUppcoY4f3/j9y1bL6s//0imtPz8XzNpxdaDhBt3s9OL0vcRc79pnEbsHmsWfRD6Mk0TErojYvcY65p5vPSB09/hX0IFxpso3Ec/Wtv9SNMSfS1qOT06+fHTqyMRwlEsHJ/K9Yrlff7v8dqv674w/htuKvwPS7b+l6f5/K/7RZDhi4cLFM9Xx2oUmH3Kz4WKyweU/v2h5TdPm/n98e7b/DyXvVmcMZQs+mV5cPD8ZMZScWD5/6van5fm8fBr/gf3N+/+OuL0mHo+IPRGxNyKeyC690rY/GRFPRcT+Fdbxz68//WH78a9wV76D0vhn77b9o377t58onvnp+/bjz6Xb/3A1dSCbs5r/f6tt4L2sOwAAAHhQFKrfgU8K47fShcL4eO07/DtjS6E8v7D4wqn5j8/N1r4rPxqDhfxO10jd/dDJ7N5wnp9qyB/K7ht/VdxczY/PzJdnex089LmtLfp/6q9ir1sHdN0axtFe7UY7gPXneU3oX/o/9KdE/4e+pv9D/2rW/ze3LD3+XVcbA6wrx3/oX6vo/0vr9DwSsM4c/6F/6f/Ql1o+G1+4p0f+JTqWOPFcEvdBM5YlonBfNGPjJwZW/WMWbSQqI7X+n87Z1LTM8t9mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBD9FwAA//+r+eEo") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xe0000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r8, @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0xd4) 594.393123ms ago: executing program 4 (id=1184): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0xfffffffffffffffd) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x200, 0x800, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xa, 0x7}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x10008000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 536.393394ms ago: executing program 5 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x1300) 485.242014ms ago: executing program 0 (id=1186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100000201030000000000000000000a0000010800084000000002140019800800020010000000080002000800000078000e800c000280050001003a00000006000340000400000c0002800500010088000000060003400003000006000340000100000600034000040000060003400004000006000340000100002c00018014000300fc02000000000000000000000000000014000400200100000000000000000000000000003c0002800c0002"], 0x150}, 0x1, 0x0, 0x0, 0x8040891}, 0x4080) 470.133405ms ago: executing program 1 (id=1187): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x47b, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff010000000800000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') unshare(0x20000400) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) write$binfmt_script(r5, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000240)=0xcf12, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES64=0x0, @ANYRESOCT], 0x20) 376.131836ms ago: executing program 5 (id=1188): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) preadv2(r1, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/40, 0x28}, {&(0x7f0000000ac0)=""/230, 0xe6}], 0x2, 0x6, 0x10000, 0x0) 375.518056ms ago: executing program 0 (id=1189): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) preadv2(r2, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/40, 0x28}, {&(0x7f0000000ac0)=""/230, 0xe6}], 0x2, 0x6, 0x10000, 0x0) 306.846787ms ago: executing program 5 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000), 0x4) connect$caif(r2, &(0x7f0000000080)=@dgm={0x25, 0x80000000, 0x6f}, 0x7) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000000080)=0x7) write$ppp(r3, &(0x7f0000000200)="7853a42ae2", 0x5) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) inotify_init1(0x80800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(0xffffffffffffffff) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 301.365516ms ago: executing program 0 (id=1191): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 249.141117ms ago: executing program 0 (id=1192): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x4, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f00000000c0)=""/103, 0x67, 0x0, &(0x7f0000000380)=""/146, 0x92}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz8FpAlEUBdA7n/mZCQSyTxFTRxaBrLJOE/bhypUd2I7FiIJ8YRwtQV2cs3k8ePfBDc9VcmqttXLb345J9zVmSsm2Jqm/U9Jm6Yd7bH+dbTinbuqSTbKu+U/qe5KPJN3PMCar75Skn48+D+Pyo8vf7qFdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFXQIAAP//s1YVKg==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd3e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 143.632918ms ago: executing program 5 (id=1193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) 11.00117ms ago: executing program 5 (id=1194): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x47b, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) pipe(&(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0], 0x20) 0s ago: executing program 2 (id=1195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) kernel console output (not intermixed with test programs): on 314 [ 72.457295][ T5496] total_workingset_refault_file 480 [ 72.458907][ T5521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.462542][ T5496] total_swap 1253376 [ 72.462553][ T5496] total_swapcached 20480 [ 72.462563][ T5496] total_pgpgin 27168 [ 72.462572][ T5496] total_pgpgout 27162 [ 72.462579][ T5496] total_pgfault 36865 [ 72.462585][ T5496] total_pgmajfault 191 [ 72.499297][ T5496] total_inactive_anon 8192 [ 72.503819][ T5496] total_active_anon 12288 [ 72.508317][ T5496] total_inactive_file 0 [ 72.512503][ T5496] total_active_file 4096 [ 72.516750][ T5496] total_unevictable 0 [ 72.520773][ T5496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.514,pid=5494,uid=0 [ 72.535545][ T5496] Memory cgroup out of memory: Killed process 5494 (syz.0.514) total-vm:95928kB, anon-rss:1100kB, file-rss:22576kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 72.553593][ T5526] siw: device registration error -23 [ 72.573326][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.652962][ T5532] loop1: detected capacity change from 0 to 512 [ 72.691305][ T5532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.709772][ T5532] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.720463][ T3698] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 72.768722][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.802732][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 72.892331][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.927537][ T5548] loop0: detected capacity change from 0 to 1024 [ 72.958825][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.966701][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 72.966718][ T29] audit: type=1326 audit(1745622692.057:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cd99e969 code=0x7ffc0000 [ 72.978025][ T5548] 9pnet_fd: Insufficient options for proto=fd [ 73.000345][ T29] audit: type=1326 audit(1745622692.067:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.4.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f54cd99e969 code=0x7ffc0000 [ 73.000383][ T29] audit: type=1326 audit(1745622692.067:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5551 comm="syz.4.531" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54cd99e969 code=0x0 [ 73.053425][ T5553] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.529: Allocating blocks 385-513 which overlap fs metadata [ 73.071943][ T5547] EXT4-fs (loop0): pa ffff88810653a380: logic 16, phys. 129, len 24 [ 73.080176][ T5547] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 73.103949][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.280136][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.356495][ T29] audit: type=1326 audit(1745622692.447:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 73.380005][ T29] audit: type=1326 audit(1745622692.447:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 73.403493][ T29] audit: type=1326 audit(1745622692.447:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 73.426883][ T29] audit: type=1326 audit(1745622692.447:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5568 comm="syz.2.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x0 [ 73.767030][ T5577] loop1: detected capacity change from 0 to 1024 [ 73.785052][ T5577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.829898][ T5577] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.540: Allocating blocks 385-513 which overlap fs metadata [ 73.863224][ T5576] EXT4-fs (loop1): pa ffff88810656f930: logic 16, phys. 129, len 24 [ 73.871380][ T5576] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 73.892599][ T29] audit: type=1326 audit(1745622692.977:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cd99e969 code=0x7ffc0000 [ 73.916272][ T29] audit: type=1326 audit(1745622692.987:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54cd99e969 code=0x7ffc0000 [ 73.939898][ T29] audit: type=1326 audit(1745622692.987:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5582 comm="syz.4.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54cd99e969 code=0x7ffc0000 [ 73.987986][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.157075][ T5590] loop4: detected capacity change from 0 to 512 [ 74.201201][ T5590] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.213943][ T5590] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.545: bad orphan inode 13 [ 74.262153][ T5590] ext4_test_bit(bit=12, block=18) = 1 [ 74.267581][ T5590] is_bad_inode(inode)=0 [ 74.271815][ T5590] NEXT_ORPHAN(inode)=2130706432 [ 74.276719][ T5590] max_ino=32 [ 74.279963][ T5590] i_nlink=1 [ 74.288867][ T5601] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 74.303477][ T5590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.317184][ T5601] SELinux: failed to load policy [ 74.342079][ T5601] loop5: detected capacity change from 0 to 1024 [ 74.362897][ T5601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.391891][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.486675][ T5615] loop0: detected capacity change from 0 to 1024 [ 74.522339][ T5615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.537760][ T5619] loop5: detected capacity change from 0 to 2048 [ 74.539731][ T5615] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.553: Allocating blocks 385-513 which overlap fs metadata [ 74.560533][ T5614] EXT4-fs (loop0): pa ffff88810656f930: logic 16, phys. 129, len 24 [ 74.568633][ T5614] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 74.583211][ T5619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.597673][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.607905][ T5619] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.622939][ T5619] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 74.635336][ T5619] EXT4-fs (loop5): This should not happen!! Data will be lost [ 74.635336][ T5619] [ 74.645152][ T5619] EXT4-fs (loop5): Total free blocks count 0 [ 74.651264][ T5619] EXT4-fs (loop5): Free/Dirty block details [ 74.656530][ T5623] loop0: detected capacity change from 0 to 512 [ 74.657161][ T5619] EXT4-fs (loop5): free_blocks=2415919104 [ 74.669190][ T5619] EXT4-fs (loop5): dirty_blocks=16 [ 74.674408][ T5619] EXT4-fs (loop5): Block reservation details [ 74.676813][ T5623] EXT4-fs (loop0): 1 orphan inode deleted [ 74.680482][ T5619] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 74.688184][ T5623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.707087][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 74.716774][ T5623] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.739291][ T5623] ip6gre2: entered allmulticast mode [ 74.810972][ T31] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.847699][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.556'. [ 74.876099][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.941340][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.001745][ T5633] siw: device registration error -23 [ 75.038150][ T5638] loop0: detected capacity change from 0 to 2048 [ 75.051504][ T5638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.081786][ T5638] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.182128][ T5650] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 75.246720][ T5652] loop1: detected capacity change from 0 to 1024 [ 75.264134][ T5650] SELinux: failed to load policy [ 75.291553][ T5652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.311917][ T5654] loop4: detected capacity change from 0 to 1024 [ 75.333226][ T5652] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.565: Allocating blocks 385-513 which overlap fs metadata [ 75.361886][ T5651] EXT4-fs (loop1): pa ffff88810653a380: logic 16, phys. 129, len 24 [ 75.369997][ T5651] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 75.385675][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.405634][ T5661] loop2: detected capacity change from 0 to 1024 [ 75.482801][ T5666] loop1: detected capacity change from 0 to 512 [ 75.521939][ T5666] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.594738][ T5671] loop4: detected capacity change from 0 to 512 [ 75.638059][ T5671] EXT4-fs (loop4): 1 orphan inode deleted [ 75.650515][ T273] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 75.668459][ T5677] loop1: detected capacity change from 0 to 512 [ 75.676720][ T5671] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.704661][ T5677] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.716580][ T5677] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.569: bad orphan inode 13 [ 75.753471][ T5677] ext4_test_bit(bit=12, block=18) = 1 [ 75.758942][ T5677] is_bad_inode(inode)=0 [ 75.763193][ T5677] NEXT_ORPHAN(inode)=2130706432 [ 75.768069][ T5677] max_ino=32 [ 75.771409][ T5677] i_nlink=1 [ 75.780830][ T5671] ip6gre3: entered allmulticast mode [ 75.992177][ T5686] loop4: detected capacity change from 0 to 2048 [ 76.017559][ T5686] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.294134][ T5695] siw: device registration error -23 [ 76.325928][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 76.477000][ T5705] loop2: detected capacity change from 0 to 512 [ 76.499423][ T5705] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.507271][ T5705] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.577: bad orphan inode 13 [ 76.516412][ T5707] loop1: detected capacity change from 0 to 512 [ 76.518826][ T5705] ext4_test_bit(bit=12, block=18) = 1 [ 76.529018][ T5705] is_bad_inode(inode)=0 [ 76.533368][ T5705] NEXT_ORPHAN(inode)=2130706432 [ 76.538227][ T5705] max_ino=32 [ 76.541573][ T5705] i_nlink=1 [ 76.557580][ T5707] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.567958][ T5707] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.578: bad orphan inode 13 [ 76.570077][ T5705] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 76.588398][ T5707] ext4_test_bit(bit=12, block=18) = 1 [ 76.593876][ T5707] is_bad_inode(inode)=0 [ 76.598046][ T5707] NEXT_ORPHAN(inode)=2130706432 [ 76.600441][ T5705] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 76.602922][ T5707] max_ino=32 [ 76.614508][ T5707] i_nlink=1 [ 76.621397][ T5707] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 76.640470][ T5707] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 76.966745][ T5716] loop4: detected capacity change from 0 to 512 [ 76.981744][ T5716] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.251763][ T5723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.583'. [ 77.347545][ T5735] loop2: detected capacity change from 0 to 2048 [ 77.397658][ T5735] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.412988][ T5735] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 77.425451][ T5735] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.425451][ T5735] [ 77.435231][ T5735] EXT4-fs (loop2): Total free blocks count 0 [ 77.441288][ T5735] EXT4-fs (loop2): Free/Dirty block details [ 77.447244][ T5735] EXT4-fs (loop2): free_blocks=2415919104 [ 77.453026][ T5735] EXT4-fs (loop2): dirty_blocks=16 [ 77.458151][ T5735] EXT4-fs (loop2): Block reservation details [ 77.464225][ T5735] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 77.627154][ T5746] loop4: detected capacity change from 0 to 1024 [ 77.653361][ T5746] 9pnet_fd: Insufficient options for proto=fd [ 77.685009][ T5750] loop4: detected capacity change from 0 to 512 [ 77.694879][ T5750] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 77.704852][ T5750] EXT4-fs (loop4): invalid journal inode [ 77.710946][ T5750] EXT4-fs (loop4): can't get journal size [ 77.727909][ T5750] EXT4-fs (loop4): 1 truncate cleaned up [ 77.761609][ T1719] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 77.773927][ T1719] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.773927][ T1719] [ 77.799834][ T5753] loop4: detected capacity change from 0 to 512 [ 77.813856][ T5757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.594'. [ 77.832521][ T5753] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.927795][ T5766] loop2: detected capacity change from 0 to 512 [ 77.937001][ T5766] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 77.980898][ T5767] siw: device registration error -23 [ 78.069036][ T5772] loop0: detected capacity change from 0 to 512 [ 78.082569][ T5772] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.138794][ T5776] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.230878][ T5775] loop4: detected capacity change from 0 to 512 [ 78.250921][ T5775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.258127][ T5775] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.598: bad orphan inode 13 [ 78.272503][ T5775] ext4_test_bit(bit=12, block=18) = 1 [ 78.277922][ T5775] is_bad_inode(inode)=0 [ 78.282216][ T5775] NEXT_ORPHAN(inode)=2130706432 [ 78.287104][ T5775] max_ino=32 [ 78.290337][ T5775] i_nlink=1 [ 78.399288][ T5781] loop1: detected capacity change from 0 to 2048 [ 78.476927][ T5775] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 78.491234][ T5775] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 78.645537][ T5793] loop0: detected capacity change from 0 to 512 [ 78.652554][ T5793] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 78.661379][ T5793] EXT4-fs (loop0): invalid journal inode [ 78.667208][ T5793] EXT4-fs (loop0): can't get journal size [ 78.674250][ T5793] EXT4-fs (loop0): 1 truncate cleaned up [ 78.799256][ T5805] loop0: detected capacity change from 0 to 512 [ 78.821293][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 78.821310][ T29] audit: type=1326 audit(1745622697.917:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 78.847571][ T5805] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.860293][ T5796] netlink: 16 bytes leftover after parsing attributes in process `syz.5.604'. [ 78.866992][ T29] audit: type=1326 audit(1745622697.917:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 78.893682][ T29] audit: type=1326 audit(1745622697.917:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 78.917064][ T29] audit: type=1326 audit(1745622697.917:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 78.940629][ T29] audit: type=1326 audit(1745622697.917:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 78.954082][ T5812] siw: device registration error -23 [ 78.964095][ T29] audit: type=1326 audit(1745622697.917:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 78.992797][ T29] audit: type=1326 audit(1745622697.917:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 79.016324][ T29] audit: type=1326 audit(1745622697.917:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 79.039710][ T29] audit: type=1326 audit(1745622697.917:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 79.063130][ T29] audit: type=1326 audit(1745622697.917:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5806 comm="syz.2.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 79.101719][ T3698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 79.226528][ T5817] loop2: detected capacity change from 0 to 512 [ 79.247061][ T5817] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.258456][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.614'. [ 79.259769][ T5817] EXT4-fs (loop2): invalid journal inode [ 79.277315][ T5817] EXT4-fs (loop2): can't get journal size [ 79.284114][ T5817] EXT4-fs (loop2): 1 truncate cleaned up [ 79.299304][ T5817] tipc: Enabling of bearer rejected, already enabled [ 79.311079][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 79.342853][ T5828] loop5: detected capacity change from 0 to 512 [ 79.349684][ T5828] EXT4-fs: Ignoring removed orlov option [ 79.373380][ T5828] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.416970][ T5837] loop0: detected capacity change from 0 to 512 [ 79.424859][ T5837] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 79.647664][ T5844] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.027541][ T5852] loop5: detected capacity change from 0 to 512 [ 80.041614][ T5852] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 80.051228][ T5852] EXT4-fs (loop5): invalid journal inode [ 80.057030][ T5852] EXT4-fs (loop5): can't get journal size [ 80.064740][ T5852] EXT4-fs (loop5): 1 truncate cleaned up [ 80.116061][ T5857] loop5: detected capacity change from 0 to 2048 [ 80.142486][ T5859] loop4: detected capacity change from 0 to 512 [ 80.146253][ T5857] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.163751][ T5857] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 80.176110][ T5857] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.176110][ T5857] [ 80.185834][ T5857] EXT4-fs (loop5): Total free blocks count 0 [ 80.191908][ T5857] EXT4-fs (loop5): Free/Dirty block details [ 80.192660][ T5859] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.197895][ T5857] EXT4-fs (loop5): free_blocks=2415919104 [ 80.197913][ T5857] EXT4-fs (loop5): dirty_blocks=16 [ 80.197924][ T5857] EXT4-fs (loop5): Block reservation details [ 80.225530][ T5857] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 80.465378][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 80.580331][ T1719] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 80.592647][ T1719] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.592647][ T1719] [ 80.634923][ T5895] loop5: detected capacity change from 0 to 512 [ 80.661419][ T5895] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.752441][ T5901] loop5: detected capacity change from 0 to 512 [ 80.781410][ T5901] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.872095][ T5906] loop5: detected capacity change from 0 to 512 [ 80.882434][ T5906] EXT4-fs (loop5): orphan cleanup on readonly fs [ 80.889230][ T5906] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.641: bad orphan inode 13 [ 80.899616][ T5906] ext4_test_bit(bit=12, block=18) = 1 [ 80.905077][ T5906] is_bad_inode(inode)=0 [ 80.909269][ T5906] NEXT_ORPHAN(inode)=2130706432 [ 80.914192][ T5906] max_ino=32 [ 80.917390][ T5906] i_nlink=1 [ 80.922262][ T5906] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 80.940891][ T5906] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 81.351885][ T5931] loop1: detected capacity change from 0 to 2048 [ 81.373930][ T5931] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.388890][ T5931] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 81.401289][ T5931] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.401289][ T5931] [ 81.410960][ T5931] EXT4-fs (loop1): Total free blocks count 0 [ 81.417077][ T5931] EXT4-fs (loop1): Free/Dirty block details [ 81.423076][ T5931] EXT4-fs (loop1): free_blocks=2415919104 [ 81.428823][ T5931] EXT4-fs (loop1): dirty_blocks=16 [ 81.434053][ T5931] EXT4-fs (loop1): Block reservation details [ 81.440352][ T5931] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 81.480835][ T5936] loop0: detected capacity change from 0 to 512 [ 81.502324][ T5936] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.664918][ T5946] loop0: detected capacity change from 0 to 2048 [ 81.695853][ T5946] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 81.715990][ T1719] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.728450][ T1719] EXT4-fs (loop1): This should not happen!! Data will be lost [ 81.728450][ T1719] [ 81.731318][ T5946] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 81.750749][ T5946] EXT4-fs (loop0): This should not happen!! Data will be lost [ 81.750749][ T5946] [ 81.760473][ T5946] EXT4-fs (loop0): Total free blocks count 0 [ 81.766521][ T5946] EXT4-fs (loop0): Free/Dirty block details [ 81.772488][ T5946] EXT4-fs (loop0): free_blocks=2415919104 [ 81.778272][ T5946] EXT4-fs (loop0): dirty_blocks=16 [ 81.783432][ T5946] EXT4-fs (loop0): Block reservation details [ 81.789433][ T5946] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 81.799365][ T5952] loop1: detected capacity change from 0 to 512 [ 81.808809][ T5952] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 81.818080][ T5952] EXT4-fs (loop1): invalid journal inode [ 81.824129][ T5952] EXT4-fs (loop1): can't get journal size [ 81.831728][ T5952] EXT4-fs (loop1): 1 truncate cleaned up [ 81.840470][ T5952] tipc: Enabling of bearer rejected, already enabled [ 81.923695][ T5967] FAULT_INJECTION: forcing a failure. [ 81.923695][ T5967] name failslab, interval 1, probability 0, space 0, times 0 [ 81.936491][ T5967] CPU: 0 UID: 0 PID: 5967 Comm: syz.5.661 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 81.936591][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.936605][ T5967] Call Trace: [ 81.936611][ T5967] [ 81.936618][ T5967] __dump_stack+0x1d/0x30 [ 81.936639][ T5967] dump_stack_lvl+0xe8/0x140 [ 81.936702][ T5967] dump_stack+0x15/0x1b [ 81.936721][ T5967] should_fail_ex+0x265/0x280 [ 81.936759][ T5967] should_failslab+0x8c/0xb0 [ 81.936800][ T5967] kmem_cache_alloc_noprof+0x50/0x310 [ 81.936865][ T5967] ? audit_log_start+0x365/0x6c0 [ 81.936893][ T5967] audit_log_start+0x365/0x6c0 [ 81.936949][ T5967] audit_seccomp+0x48/0x100 [ 81.937002][ T5967] ? __seccomp_filter+0x68c/0x10d0 [ 81.937086][ T5967] __seccomp_filter+0x69d/0x10d0 [ 81.937109][ T5967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 81.937192][ T5967] ? vfs_write+0x75e/0x8d0 [ 81.937222][ T5967] __secure_computing+0x82/0x150 [ 81.937240][ T5967] syscall_trace_enter+0xcf/0x1e0 [ 81.937308][ T5967] do_syscall_64+0xaa/0x1a0 [ 81.937334][ T5967] ? clear_bhb_loop+0x25/0x80 [ 81.937410][ T5967] ? clear_bhb_loop+0x25/0x80 [ 81.937434][ T5967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.937454][ T5967] RIP: 0033:0x7f1081ece969 [ 81.937468][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.937487][ T5967] RSP: 002b:00007f1080537038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 81.937510][ T5967] RAX: ffffffffffffffda RBX: 00007f10820f5fa0 RCX: 00007f1081ece969 [ 81.937591][ T5967] RDX: 0000000000008000 RSI: 0000200000001d80 RDI: 0000000000000006 [ 81.937602][ T5967] RBP: 00007f1080537090 R08: 0000000000000020 R09: 0000000000000000 [ 81.937681][ T5967] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 81.937692][ T5967] R13: 0000000000000000 R14: 00007f10820f5fa0 R15: 00007ffe3a757078 [ 81.937711][ T5967] [ 82.192156][ T5972] loop2: detected capacity change from 0 to 512 [ 82.217068][ T1719] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 82.229333][ T1719] EXT4-fs (loop0): This should not happen!! Data will be lost [ 82.229333][ T1719] [ 82.232048][ T5972] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.262332][ T5978] loop0: detected capacity change from 0 to 512 [ 82.281661][ T5978] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.340716][ T5984] FAULT_INJECTION: forcing a failure. [ 82.340716][ T5984] name failslab, interval 1, probability 0, space 0, times 0 [ 82.353446][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.0.666 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 82.353480][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.353495][ T5984] Call Trace: [ 82.353504][ T5984] [ 82.353513][ T5984] __dump_stack+0x1d/0x30 [ 82.353554][ T5984] dump_stack_lvl+0xe8/0x140 [ 82.353578][ T5984] dump_stack+0x15/0x1b [ 82.353677][ T5984] should_fail_ex+0x265/0x280 [ 82.353731][ T5984] should_failslab+0x8c/0xb0 [ 82.353767][ T5984] kmem_cache_alloc_noprof+0x50/0x310 [ 82.353808][ T5984] ? getname_flags+0x80/0x3b0 [ 82.353955][ T5984] getname_flags+0x80/0x3b0 [ 82.353990][ T5984] user_path_at+0x28/0x130 [ 82.354012][ T5984] do_faccessat+0x380/0x800 [ 82.354040][ T5984] __x64_sys_faccessat2+0x51/0x60 [ 82.354133][ T5984] x64_sys_call+0x2e69/0x2fb0 [ 82.354159][ T5984] do_syscall_64+0xd0/0x1a0 [ 82.354184][ T5984] ? clear_bhb_loop+0x25/0x80 [ 82.354210][ T5984] ? clear_bhb_loop+0x25/0x80 [ 82.354237][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.354313][ T5984] RIP: 0033:0x7f94e3a2e969 [ 82.354332][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.354353][ T5984] RSP: 002b:00007f94e2097038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 82.354437][ T5984] RAX: ffffffffffffffda RBX: 00007f94e3c55fa0 RCX: 00007f94e3a2e969 [ 82.354452][ T5984] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000007 [ 82.354468][ T5984] RBP: 00007f94e2097090 R08: 0000000000000000 R09: 0000000000000000 [ 82.354483][ T5984] R10: 0000000000001300 R11: 0000000000000246 R12: 0000000000000001 [ 82.354576][ T5984] R13: 0000000000000000 R14: 00007f94e3c55fa0 R15: 00007ffc24ec1d08 [ 82.354597][ T5984] [ 82.644474][ T6000] loop4: detected capacity change from 0 to 512 [ 82.670629][ T6000] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.837037][ T6020] loop4: detected capacity change from 0 to 512 [ 82.851622][ T6020] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.485850][ T6038] unsupported nla_type 52263 [ 83.518185][ T6041] loop1: detected capacity change from 0 to 512 [ 83.525244][ T6041] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 83.527037][ T6043] ref_ctr_offset mismatch. inode: 0x331 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 83.545093][ T6041] EXT4-fs (loop1): invalid journal inode [ 83.551132][ T6041] EXT4-fs (loop1): can't get journal size [ 83.558214][ T6041] EXT4-fs (loop1): 1 truncate cleaned up [ 83.566297][ T6041] tipc: Enabling of bearer rejected, already enabled [ 83.604215][ T6046] FAULT_INJECTION: forcing a failure. [ 83.604215][ T6046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.617405][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.5.682 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 83.617487][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.617554][ T6046] Call Trace: [ 83.617561][ T6046] [ 83.617570][ T6046] __dump_stack+0x1d/0x30 [ 83.617596][ T6046] dump_stack_lvl+0xe8/0x140 [ 83.617618][ T6046] dump_stack+0x15/0x1b [ 83.617637][ T6046] should_fail_ex+0x265/0x280 [ 83.617801][ T6046] should_fail+0xb/0x20 [ 83.617849][ T6046] should_fail_usercopy+0x1a/0x20 [ 83.617887][ T6046] _copy_from_user+0x1c/0xb0 [ 83.617906][ T6046] __sys_bpf+0x178/0x790 [ 83.617944][ T6046] __x64_sys_bpf+0x41/0x50 [ 83.617985][ T6046] x64_sys_call+0x2478/0x2fb0 [ 83.618009][ T6046] do_syscall_64+0xd0/0x1a0 [ 83.618089][ T6046] ? clear_bhb_loop+0x25/0x80 [ 83.618109][ T6046] ? clear_bhb_loop+0x25/0x80 [ 83.618129][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.618154][ T6046] RIP: 0033:0x7f1081ece969 [ 83.618172][ T6046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.618303][ T6046] RSP: 002b:00007f10804f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 83.618326][ T6046] RAX: ffffffffffffffda RBX: 00007f10820f6160 RCX: 00007f1081ece969 [ 83.618346][ T6046] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000012 [ 83.618368][ T6046] RBP: 00007f10804f5090 R08: 0000000000000000 R09: 0000000000000000 [ 83.618384][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.618397][ T6046] R13: 0000000000000000 R14: 00007f10820f6160 R15: 00007ffe3a757078 [ 83.618448][ T6046] [ 84.040943][ T6061] loop4: detected capacity change from 0 to 512 [ 84.058984][ T6061] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.090949][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 84.090965][ T29] audit: type=1326 audit(1745622703.187:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 84.093531][ T6061] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.690: bad orphan inode 13 [ 84.097193][ T29] audit: type=1326 audit(1745622703.187:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 84.154192][ T29] audit: type=1326 audit(1745622703.187:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6063 comm="syz.2.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x0 [ 84.177539][ T6061] ext4_test_bit(bit=12, block=18) = 1 [ 84.183016][ T6061] is_bad_inode(inode)=0 [ 84.187179][ T6061] NEXT_ORPHAN(inode)=2130706432 [ 84.192051][ T6061] max_ino=32 [ 84.195262][ T6061] i_nlink=1 [ 84.216274][ T6061] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 84.231221][ T6061] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 84.402753][ T6068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.693'. [ 84.435610][ T6073] siw: device registration error -23 [ 84.467318][ T6077] loop0: detected capacity change from 0 to 512 [ 84.479288][ T6077] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 84.495912][ T29] audit: type=1326 audit(1745622703.587:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.519363][ T29] audit: type=1326 audit(1745622703.587:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.542793][ T29] audit: type=1326 audit(1745622703.587:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.555801][ T6077] EXT4-fs (loop0): invalid journal inode [ 84.566161][ T29] audit: type=1326 audit(1745622703.587:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.580461][ T6077] EXT4-fs (loop0): can't get journal size [ 84.595199][ T29] audit: type=1326 audit(1745622703.587:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.618639][ T6083] loop1: detected capacity change from 0 to 1024 [ 84.624417][ T29] audit: type=1326 audit(1745622703.587:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.633090][ T6077] EXT4-fs (loop0): 1 truncate cleaned up [ 84.654134][ T29] audit: type=1326 audit(1745622703.587:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.1.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 84.687092][ T6083] 9pnet_fd: Insufficient options for proto=fd [ 84.695692][ T6083] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.699: Allocating blocks 385-513 which overlap fs metadata [ 84.718192][ T6077] tipc: Enabling of bearer rejected, already enabled [ 84.728571][ T6082] EXT4-fs (loop1): pa ffff88810653a380: logic 16, phys. 129, len 24 [ 84.732630][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'. [ 84.736607][ T6082] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 84.829790][ T6097] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 84.904283][ T6103] loop1: detected capacity change from 0 to 512 [ 84.910970][ T6103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.924261][ T6103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.951692][ T6112] loop2: detected capacity change from 0 to 1024 [ 84.965969][ T6103] EXT4-fs (loop1): 1 truncate cleaned up [ 85.005560][ T6112] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.709: Allocating blocks 385-513 which overlap fs metadata [ 85.021423][ T6111] EXT4-fs (loop2): pa ffff88810656fa10: logic 16, phys. 129, len 24 [ 85.029469][ T6111] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 85.086759][ T6122] loop5: detected capacity change from 0 to 1024 [ 85.130446][ T6124] loop2: detected capacity change from 0 to 512 [ 85.151495][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 85.167057][ T6122] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.712: Allocating blocks 385-513 which overlap fs metadata [ 85.185975][ T6132] loop4: detected capacity change from 0 to 1024 [ 85.201996][ T6121] EXT4-fs (loop5): pa ffff88810653a380: logic 16, phys. 129, len 24 [ 85.210159][ T6121] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 85.231662][ T6124] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.242625][ T6136] loop1: detected capacity change from 0 to 1024 [ 85.257516][ T6132] 9pnet_fd: Insufficient options for proto=fd [ 85.268683][ T6132] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.715: Allocating blocks 385-513 which overlap fs metadata [ 85.271489][ T6136] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.716: Allocating blocks 385-513 which overlap fs metadata [ 85.299073][ T6129] EXT4-fs (loop4): pa ffff88810656fa10: logic 16, phys. 129, len 24 [ 85.307229][ T6129] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 85.307615][ T6133] EXT4-fs (loop1): pa ffff88810653a3f0: logic 16, phys. 129, len 24 [ 85.325372][ T6133] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 85.456684][ T6154] loop2: detected capacity change from 0 to 1024 [ 85.494219][ T6154] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.721: Allocating blocks 385-513 which overlap fs metadata [ 85.520295][ T6160] siw: device registration error -23 [ 85.529404][ T6150] EXT4-fs (loop2): pa ffff88810656fa10: logic 16, phys. 129, len 24 [ 85.537518][ T6150] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 85.576637][ T6167] pimreg: entered allmulticast mode [ 85.597463][ T6167] pimreg: left allmulticast mode [ 85.615970][ T6170] loop2: detected capacity change from 0 to 1024 [ 85.618089][ T6173] loop4: detected capacity change from 0 to 512 [ 85.632657][ T6173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.639481][ T6174] loop5: detected capacity change from 0 to 1024 [ 85.646393][ T6173] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.680874][ T6173] EXT4-fs (loop4): 1 truncate cleaned up [ 85.690315][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 85.703896][ T6174] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.730: Allocating blocks 385-513 which overlap fs metadata [ 85.758228][ T6172] EXT4-fs (loop5): pa ffff88810656fa10: logic 16, phys. 129, len 24 [ 85.766299][ T6172] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 85.788083][ T6189] loop1: detected capacity change from 0 to 512 [ 85.828922][ T6189] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.007675][ T6209] loop5: detected capacity change from 0 to 1024 [ 86.034961][ T6209] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.739: Allocating blocks 385-513 which overlap fs metadata [ 86.049472][ T6207] EXT4-fs (loop5): pa ffff88810653a3f0: logic 16, phys. 129, len 24 [ 86.053619][ T6208] siw: device registration error -23 [ 86.057514][ T6207] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 86.232883][ T6229] loop0: detected capacity change from 0 to 512 [ 86.251294][ T6215] netlink: 16 bytes leftover after parsing attributes in process `syz.5.741'. [ 86.262323][ T6226] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 86.262834][ T6229] EXT4-fs (loop0): 1 orphan inode deleted [ 86.272898][ T6226] SELinux: failed to load policy [ 86.292442][ T6226] loop1: detected capacity change from 0 to 1024 [ 86.303519][ T6229] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.357548][ T6235] loop0: detected capacity change from 0 to 512 [ 86.376515][ T6235] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.634801][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 86.655230][ T6263] loop5: detected capacity change from 0 to 512 [ 86.669856][ T6270] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 86.680391][ T6270] SELinux: failed to load policy [ 86.705558][ T6270] loop2: detected capacity change from 0 to 1024 [ 86.748961][ T6277] loop4: detected capacity change from 0 to 512 [ 86.770286][ T6263] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.788696][ T6277] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 86.805375][ T6277] EXT4-fs (loop4): invalid journal inode [ 86.811172][ T6277] EXT4-fs (loop4): can't get journal size [ 86.830208][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.757'. [ 86.850796][ T3698] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 18: invalid block bitmap [ 86.864473][ T6277] EXT4-fs (loop4): 1 truncate cleaned up [ 86.997816][ T6276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 87.019406][ T6291] loop4: detected capacity change from 0 to 512 [ 87.061149][ T6293] pimreg: entered allmulticast mode [ 87.067201][ T6293] pimreg: left allmulticast mode [ 87.074467][ T6291] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.104796][ T6300] loop2: detected capacity change from 0 to 1024 [ 87.113277][ T6291] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.764: bad orphan inode 13 [ 87.127795][ T6291] ext4_test_bit(bit=12, block=18) = 1 [ 87.133300][ T6291] is_bad_inode(inode)=0 [ 87.137481][ T6291] NEXT_ORPHAN(inode)=2130706432 [ 87.142408][ T6291] max_ino=32 [ 87.145661][ T6291] i_nlink=1 [ 87.150349][ T6302] loop1: detected capacity change from 0 to 512 [ 87.157246][ T6291] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 87.222904][ T6315] loop5: detected capacity change from 0 to 512 [ 87.232379][ T6302] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.243315][ T6291] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.262125][ T6315] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 87.271148][ T6315] EXT4-fs (loop5): invalid journal inode [ 87.277107][ T6315] EXT4-fs (loop5): can't get journal size [ 87.299042][ T6315] EXT4-fs (loop5): 1 truncate cleaned up [ 87.387355][ T6321] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 87.398006][ T6321] SELinux: failed to load policy [ 87.409093][ T6321] loop5: detected capacity change from 0 to 1024 [ 87.427296][ T6328] loop1: detected capacity change from 0 to 512 [ 87.447539][ T6328] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.455862][ T6328] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.776: bad orphan inode 13 [ 87.466175][ T6328] ext4_test_bit(bit=12, block=18) = 1 [ 87.471711][ T6328] is_bad_inode(inode)=0 [ 87.475913][ T6328] NEXT_ORPHAN(inode)=2130706432 [ 87.480817][ T6328] max_ino=32 [ 87.484026][ T6328] i_nlink=1 [ 87.489013][ T6328] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 87.511143][ T6333] tipc: Enabling of bearer rejected, media not registered [ 87.519120][ T6328] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.654518][ T6336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.779'. [ 87.917533][ T6346] pimreg: entered allmulticast mode [ 87.924032][ T6346] pimreg: left allmulticast mode [ 87.942964][ T6348] loop5: detected capacity change from 0 to 2048 [ 87.979335][ T6348] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.005075][ T6348] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 88.017481][ T6348] EXT4-fs (loop5): This should not happen!! Data will be lost [ 88.017481][ T6348] [ 88.027193][ T6348] EXT4-fs (loop5): Total free blocks count 0 [ 88.033256][ T6348] EXT4-fs (loop5): Free/Dirty block details [ 88.039035][ T6354] loop4: detected capacity change from 0 to 1024 [ 88.039212][ T6348] EXT4-fs (loop5): free_blocks=2415919104 [ 88.039235][ T6348] EXT4-fs (loop5): dirty_blocks=16 [ 88.056543][ T6348] EXT4-fs (loop5): Block reservation details [ 88.062630][ T6348] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 88.093090][ T6354] 9pnet_fd: Insufficient options for proto=fd [ 88.118450][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 88.134405][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 88.177806][ T6369] loop0: detected capacity change from 0 to 512 [ 88.197963][ T6369] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 88.218004][ T6370] loop4: detected capacity change from 0 to 512 [ 88.223033][ T6369] EXT4-fs (loop0): invalid journal inode [ 88.237153][ T6370] EXT4-fs (loop4): orphan cleanup on readonly fs [ 88.245020][ T6369] EXT4-fs (loop0): can't get journal size [ 88.268671][ T6370] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.790: bad orphan inode 13 [ 88.293825][ T6369] EXT4-fs (loop0): 1 truncate cleaned up [ 88.306100][ T6370] ext4_test_bit(bit=12, block=18) = 1 [ 88.311601][ T6370] is_bad_inode(inode)=0 [ 88.315845][ T6370] NEXT_ORPHAN(inode)=2130706432 [ 88.320727][ T6370] max_ino=32 [ 88.324010][ T6370] i_nlink=1 [ 88.331345][ T6370] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 88.383852][ T6370] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 88.419232][ T6383] loop0: detected capacity change from 0 to 512 [ 88.436038][ T6383] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 88.447594][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.793'. [ 88.470012][ T6383] EXT4-fs (loop0): invalid journal inode [ 88.489675][ T6383] EXT4-fs (loop0): can't get journal size [ 88.514033][ T6383] EXT4-fs (loop0): 1 truncate cleaned up [ 88.527456][ T6383] tipc: Enabling of bearer rejected, already enabled [ 88.537830][ T3403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.550363][ T3403] EXT4-fs (loop5): This should not happen!! Data will be lost [ 88.550363][ T3403] [ 88.595656][ T6391] loop2: detected capacity change from 0 to 1024 [ 88.611600][ T3698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 88.642233][ T6391] 9pnet_fd: Insufficient options for proto=fd [ 88.673624][ T6396] loop5: detected capacity change from 0 to 512 [ 88.702913][ T6396] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.822873][ T6407] loop2: detected capacity change from 0 to 2048 [ 88.840087][ T6411] FAULT_INJECTION: forcing a failure. [ 88.840087][ T6411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.853248][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.5.803 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 88.853313][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.853329][ T6411] Call Trace: [ 88.853336][ T6411] [ 88.853344][ T6411] __dump_stack+0x1d/0x30 [ 88.853442][ T6411] dump_stack_lvl+0xe8/0x140 [ 88.853468][ T6411] dump_stack+0x15/0x1b [ 88.853489][ T6411] should_fail_ex+0x265/0x280 [ 88.853529][ T6411] should_fail+0xb/0x20 [ 88.853572][ T6411] should_fail_usercopy+0x1a/0x20 [ 88.853612][ T6411] _copy_from_user+0x1c/0xb0 [ 88.853638][ T6411] ___sys_sendmsg+0xc1/0x1d0 [ 88.853734][ T6411] __x64_sys_sendmsg+0xd4/0x160 [ 88.853779][ T6411] x64_sys_call+0x2999/0x2fb0 [ 88.853805][ T6411] do_syscall_64+0xd0/0x1a0 [ 88.853883][ T6411] ? clear_bhb_loop+0x25/0x80 [ 88.853978][ T6411] ? clear_bhb_loop+0x25/0x80 [ 88.854005][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.854048][ T6411] RIP: 0033:0x7f1081ece969 [ 88.854066][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.854088][ T6411] RSP: 002b:00007f1080537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.854111][ T6411] RAX: ffffffffffffffda RBX: 00007f10820f5fa0 RCX: 00007f1081ece969 [ 88.854127][ T6411] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000006 [ 88.854142][ T6411] RBP: 00007f1080537090 R08: 0000000000000000 R09: 0000000000000000 [ 88.854157][ T6411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.854204][ T6411] R13: 0000000000000000 R14: 00007f10820f5fa0 R15: 00007ffe3a757078 [ 88.854227][ T6411] [ 88.880785][ T6417] loop1: detected capacity change from 0 to 512 [ 88.897927][ T6407] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.975462][ T6421] loop5: detected capacity change from 0 to 1024 [ 89.002108][ T6417] EXT4-fs (loop1): 1 orphan inode deleted [ 89.061036][ T1719] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 89.097479][ T6421] 9pnet_fd: Insufficient options for proto=fd [ 89.107376][ T6421] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.807: Allocating blocks 385-513 which overlap fs metadata [ 89.157574][ T6420] EXT4-fs (loop5): pa ffff88810653a3f0: logic 16, phys. 129, len 24 [ 89.165656][ T6420] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 89.181940][ T6426] loop4: detected capacity change from 0 to 512 [ 89.191749][ T6417] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.254393][ T6426] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.337112][ T6432] loop0: detected capacity change from 0 to 1024 [ 89.363788][ T6430] siw: device registration error -23 [ 89.394364][ T6437] loop4: detected capacity change from 0 to 512 [ 89.414455][ T6437] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.485928][ T6440] loop1: detected capacity change from 0 to 512 [ 89.545496][ T6456] __nla_validate_parse: 2 callbacks suppressed [ 89.545568][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.817'. [ 89.563732][ T6440] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.576121][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 89.594575][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.817'. [ 89.630924][ T6461] loop4: detected capacity change from 0 to 512 [ 89.655936][ T6461] EXT4-fs: Ignoring removed oldalloc option [ 89.685391][ T6461] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.818: Parent and EA inode have the same ino 15 [ 89.704890][ T6464] loop1: detected capacity change from 0 to 1024 [ 89.729603][ T6466] loop5: detected capacity change from 0 to 512 [ 89.736382][ T6461] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.757545][ T6466] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 89.777990][ T6461] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.818: Parent and EA inode have the same ino 15 [ 89.791677][ T6461] EXT4-fs (loop4): 1 orphan inode deleted [ 89.798359][ T6466] EXT4-fs (loop5): invalid journal inode [ 89.804344][ T6466] EXT4-fs (loop5): can't get journal size [ 89.827199][ T6464] 9pnet_fd: Insufficient options for proto=fd [ 89.842710][ T6466] EXT4-fs (loop5): 1 truncate cleaned up [ 89.852785][ T6464] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.819: Allocating blocks 385-513 which overlap fs metadata [ 89.862362][ T6466] tipc: Enabling of bearer rejected, already enabled [ 89.876323][ T6462] EXT4-fs (loop1): pa ffff88810653a3f0: logic 16, phys. 129, len 24 [ 89.884500][ T6462] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 89.898888][ T6471] loop4: detected capacity change from 0 to 2048 [ 89.915352][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.820'. [ 89.943976][ T6471] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.960534][ T6471] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 89.972914][ T6471] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.972914][ T6471] [ 89.982597][ T6471] EXT4-fs (loop4): Total free blocks count 0 [ 89.988602][ T6471] EXT4-fs (loop4): Free/Dirty block details [ 89.994543][ T6471] EXT4-fs (loop4): free_blocks=2415919104 [ 90.000295][ T6471] EXT4-fs (loop4): dirty_blocks=16 [ 90.005417][ T6471] EXT4-fs (loop4): Block reservation details [ 90.011428][ T6471] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 90.027421][ T6475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 90.044526][ T6479] loop2: detected capacity change from 0 to 512 [ 90.062984][ T6479] ext4 filesystem being mounted at /157/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.091601][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 90.091613][ T29] audit: type=1400 audit(1745622709.187:1786): avc: denied { read write } for pid=6474 comm="syz.1.822" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.122346][ T29] audit: type=1400 audit(1745622709.187:1787): avc: denied { open } for pid=6474 comm="syz.1.822" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.170684][ T29] audit: type=1400 audit(1745622709.257:1788): avc: denied { create } for pid=6483 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.190318][ T29] audit: type=1400 audit(1745622709.257:1789): avc: denied { setopt } for pid=6483 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.221018][ T29] audit: type=1400 audit(1745622709.317:1790): avc: denied { write } for pid=6483 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.240755][ T29] audit: type=1400 audit(1745622709.337:1791): avc: denied { read } for pid=6483 comm="syz.2.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.326628][ T1719] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 90.338888][ T1719] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.338888][ T1719] [ 90.385424][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 90.431087][ T6494] loop0: detected capacity change from 0 to 512 [ 90.442499][ T6494] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 90.457399][ T29] audit: type=1400 audit(1745622709.547:1792): avc: denied { execmem } for pid=6493 comm="syz.0.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.571690][ T6498] loop5: detected capacity change from 0 to 512 [ 90.584138][ T6498] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.648797][ T6501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.817190][ T6505] loop1: detected capacity change from 0 to 1024 [ 90.842448][ T6505] 9pnet_fd: Insufficient options for proto=fd [ 90.851764][ T6505] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.832: Allocating blocks 385-513 which overlap fs metadata [ 90.868099][ T6504] EXT4-fs (loop1): pa ffff88810653a5b0: logic 16, phys. 129, len 24 [ 90.876246][ T6504] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 90.927674][ T6511] netlink: 8 bytes leftover after parsing attributes in process `'. [ 90.936817][ T29] audit: type=1400 audit(1745622710.017:1793): avc: denied { write } for pid=6510 comm=04 name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.966341][ T29] audit: type=1400 audit(1745622710.057:1794): avc: denied { create } for pid=6514 comm="syz.5.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.977531][ T6511] bond1: entered promiscuous mode [ 90.990998][ T6511] bond1: entered allmulticast mode [ 90.996690][ T6511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.003420][ T29] audit: type=1400 audit(1745622710.057:1795): avc: denied { write } for pid=6514 comm="syz.5.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 91.120788][ T6526] loop2: detected capacity change from 0 to 512 [ 91.162978][ T6526] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.181177][ T6528] loop5: detected capacity change from 0 to 512 [ 91.193196][ T6521] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 91.223371][ T6528] EXT4-fs (loop5): 1 orphan inode deleted [ 91.236957][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 91.246470][ T6528] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.257481][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 91.358450][ T6542] loop0: detected capacity change from 0 to 512 [ 91.404460][ T6552] loop5: detected capacity change from 0 to 1024 [ 91.435264][ T6542] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.456468][ T6552] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.845: Allocating blocks 385-513 which overlap fs metadata [ 91.486384][ T6551] EXT4-fs (loop5): pa ffff88810656fb60: logic 16, phys. 129, len 24 [ 91.494473][ T6551] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 91.518589][ T6557] loop4: detected capacity change from 0 to 512 [ 91.537927][ T6557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.545785][ T6557] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.847: bad orphan inode 13 [ 91.556450][ T6557] ext4_test_bit(bit=12, block=18) = 1 [ 91.561921][ T6557] is_bad_inode(inode)=0 [ 91.566114][ T6557] NEXT_ORPHAN(inode)=2130706432 [ 91.571103][ T6557] max_ino=32 [ 91.574308][ T6557] i_nlink=1 [ 91.597057][ T6557] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 91.611689][ T6557] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 91.648960][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 91.660656][ T6570] loop1: detected capacity change from 0 to 1024 [ 91.681763][ T6573] loop5: detected capacity change from 0 to 512 [ 91.695411][ T6573] EXT4-fs (loop5): blocks per group (71) and clusters per group (20800) inconsistent [ 91.721262][ T6570] 9pnet_fd: Insufficient options for proto=fd [ 91.859951][ T6580] loop1: detected capacity change from 0 to 2048 [ 91.893086][ T6580] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.905749][ T6583] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.298778][ T6591] loop4: detected capacity change from 0 to 1024 [ 92.309082][ T6592] loop2: detected capacity change from 0 to 512 [ 92.318654][ T6592] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.325497][ T6592] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.857: bad orphan inode 13 [ 92.338757][ T6592] ext4_test_bit(bit=12, block=18) = 1 [ 92.344191][ T6592] is_bad_inode(inode)=0 [ 92.348414][ T6592] NEXT_ORPHAN(inode)=2130706432 [ 92.353315][ T6592] max_ino=32 [ 92.356620][ T6592] i_nlink=1 [ 92.360824][ T6591] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.858: Allocating blocks 385-513 which overlap fs metadata [ 92.376206][ T6590] EXT4-fs (loop4): pa ffff88810653a5b0: logic 16, phys. 129, len 24 [ 92.384265][ T6590] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 92.397585][ T6592] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 92.412087][ T6592] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 92.476049][ T6602] loop4: detected capacity change from 0 to 512 [ 92.492181][ T6602] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.550668][ T6602] EXT4-fs (loop4): invalid journal inode [ 92.556886][ T6602] EXT4-fs (loop4): can't get journal size [ 92.566707][ T6602] EXT4-fs (loop4): 1 truncate cleaned up [ 92.748595][ T6616] loop4: detected capacity change from 0 to 1024 [ 92.774540][ T6618] loop5: detected capacity change from 0 to 512 [ 92.789560][ T6618] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 92.911700][ T6618] EXT4-fs (loop5): invalid journal inode [ 92.917479][ T6618] EXT4-fs (loop5): can't get journal size [ 92.925403][ T6618] EXT4-fs (loop5): 1 truncate cleaned up [ 92.941445][ T6618] tipc: Enabling of bearer rejected, already enabled [ 92.975081][ T6628] pimreg: entered allmulticast mode [ 92.984554][ T6628] pimreg: left allmulticast mode [ 93.056323][ T6632] loop1: detected capacity change from 0 to 512 [ 93.113014][ T6632] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.162400][ T6641] loop0: detected capacity change from 0 to 2048 [ 93.222975][ T6641] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.427265][ T6654] loop2: detected capacity change from 0 to 512 [ 93.470991][ T6654] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.509404][ T6654] EXT4-fs (loop2): 1 truncate cleaned up [ 93.603979][ T6660] FAULT_INJECTION: forcing a failure. [ 93.603979][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.617185][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.2.877 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 93.617217][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.617233][ T6660] Call Trace: [ 93.617239][ T6660] [ 93.617247][ T6660] __dump_stack+0x1d/0x30 [ 93.617272][ T6660] dump_stack_lvl+0xe8/0x140 [ 93.617293][ T6660] dump_stack+0x15/0x1b [ 93.617308][ T6660] should_fail_ex+0x265/0x280 [ 93.617344][ T6660] should_fail+0xb/0x20 [ 93.617453][ T6660] should_fail_usercopy+0x1a/0x20 [ 93.617492][ T6660] _copy_to_user+0x20/0xa0 [ 93.617562][ T6660] simple_read_from_buffer+0xb5/0x130 [ 93.617588][ T6660] proc_fail_nth_read+0x100/0x140 [ 93.617650][ T6660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.617782][ T6660] vfs_read+0x19d/0x6f0 [ 93.617804][ T6660] ? __rcu_read_unlock+0x4f/0x70 [ 93.617824][ T6660] ? __fget_files+0x184/0x1c0 [ 93.617856][ T6660] ? up_write+0x18/0x60 [ 93.617956][ T6660] ksys_read+0xda/0x1a0 [ 93.617980][ T6660] __x64_sys_read+0x40/0x50 [ 93.618004][ T6660] x64_sys_call+0x2d77/0x2fb0 [ 93.618024][ T6660] do_syscall_64+0xd0/0x1a0 [ 93.618080][ T6660] ? clear_bhb_loop+0x25/0x80 [ 93.618100][ T6660] ? clear_bhb_loop+0x25/0x80 [ 93.618121][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.618141][ T6660] RIP: 0033:0x7f77c11fd37c [ 93.618212][ T6660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.618230][ T6660] RSP: 002b:00007f77bf846030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.618248][ T6660] RAX: ffffffffffffffda RBX: 00007f77c1426080 RCX: 00007f77c11fd37c [ 93.618260][ T6660] RDX: 000000000000000f RSI: 00007f77bf8460a0 RDI: 0000000000000008 [ 93.618271][ T6660] RBP: 00007f77bf846090 R08: 0000000000000000 R09: 0000000000000000 [ 93.618283][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.618359][ T6660] R13: 0000000000000001 R14: 00007f77c1426080 R15: 00007ffffdc1d698 [ 93.618377][ T6660] [ 93.996772][ T6664] pimreg: entered allmulticast mode [ 94.002814][ T6664] pimreg: left allmulticast mode [ 94.204376][ T6681] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 94.238634][ T6681] SELinux: failed to load policy [ 94.352417][ T6677] loop4: detected capacity change from 0 to 1024 [ 94.451811][ T6686] loop0: detected capacity change from 0 to 512 [ 94.458291][ T6695] loop5: detected capacity change from 0 to 1024 [ 94.497775][ T6686] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.677072][ T6711] loop0: detected capacity change from 0 to 512 [ 94.702554][ T6711] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.713512][ T6711] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.892: bad orphan inode 13 [ 94.718863][ T6713] loop1: detected capacity change from 0 to 512 [ 94.729118][ T6711] ext4_test_bit(bit=12, block=18) = 1 [ 94.735381][ T6711] is_bad_inode(inode)=0 [ 94.739694][ T6711] NEXT_ORPHAN(inode)=2130706432 [ 94.744564][ T6711] max_ino=32 [ 94.747872][ T6711] i_nlink=1 [ 94.748440][ T6713] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.770103][ T6711] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 94.776456][ T6713] EXT4-fs (loop1): 1 truncate cleaned up [ 94.790512][ T6711] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.961098][ T6719] FAULT_INJECTION: forcing a failure. [ 94.961098][ T6719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.975096][ T6719] CPU: 0 UID: 0 PID: 6719 Comm: syz.1.894 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 94.975132][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.975144][ T6719] Call Trace: [ 94.975150][ T6719] [ 94.975156][ T6719] __dump_stack+0x1d/0x30 [ 94.975242][ T6719] dump_stack_lvl+0xe8/0x140 [ 94.975263][ T6719] dump_stack+0x15/0x1b [ 94.975283][ T6719] should_fail_ex+0x265/0x280 [ 94.975374][ T6719] should_fail+0xb/0x20 [ 94.975400][ T6719] should_fail_usercopy+0x1a/0x20 [ 94.975434][ T6719] _copy_from_user+0x1c/0xb0 [ 94.975501][ T6719] ___sys_sendmsg+0xc1/0x1d0 [ 94.975569][ T6719] __x64_sys_sendmsg+0xd4/0x160 [ 94.975606][ T6719] x64_sys_call+0x2999/0x2fb0 [ 94.975625][ T6719] do_syscall_64+0xd0/0x1a0 [ 94.975699][ T6719] ? clear_bhb_loop+0x25/0x80 [ 94.975762][ T6719] ? clear_bhb_loop+0x25/0x80 [ 94.975848][ T6719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.975868][ T6719] RIP: 0033:0x7fa13829e969 [ 94.975886][ T6719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.975908][ T6719] RSP: 002b:00007fa136907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.975986][ T6719] RAX: ffffffffffffffda RBX: 00007fa1384c5fa0 RCX: 00007fa13829e969 [ 94.975999][ T6719] RDX: 0000000000048010 RSI: 0000200000000040 RDI: 0000000000000008 [ 94.976011][ T6719] RBP: 00007fa136907090 R08: 0000000000000000 R09: 0000000000000000 [ 94.976024][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.976040][ T6719] R13: 0000000000000000 R14: 00007fa1384c5fa0 R15: 00007ffcf1e3a828 [ 94.976063][ T6719] [ 95.006011][ T6721] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 95.016561][ T6719] mmap: syz.1.894 (6719) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.021346][ T6721] SELinux: failed to load policy [ 95.123843][ T6723] loop2: detected capacity change from 0 to 1024 [ 95.131686][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 95.131701][ T29] audit: type=1326 audit(1745622714.177:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 95.213588][ T29] audit: type=1326 audit(1745622714.177:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 95.236930][ T29] audit: type=1326 audit(1745622714.177:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f77c11fe969 code=0x7ffc0000 [ 95.260295][ T29] audit: type=1326 audit(1745622714.177:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f77c11fe9a3 code=0x7ffc0000 [ 95.283563][ T29] audit: type=1326 audit(1745622714.217:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77c11fd41f code=0x7ffc0000 [ 95.306731][ T29] audit: type=1326 audit(1745622714.217:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f77c11fe9f7 code=0x7ffc0000 [ 95.329994][ T29] audit: type=1326 audit(1745622714.217:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77c11fd2d0 code=0x7ffc0000 [ 95.353440][ T29] audit: type=1326 audit(1745622714.217:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f77c11fe56b code=0x7ffc0000 [ 95.385725][ T29] audit: type=1326 audit(1745622714.247:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77c11fd5ca code=0x7ffc0000 [ 95.408958][ T29] audit: type=1326 audit(1745622714.247:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77c11fd5ca code=0x7ffc0000 [ 95.445786][ T6727] loop4: detected capacity change from 0 to 512 [ 95.482804][ T6727] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 95.514828][ T6727] EXT4-fs (loop4): invalid journal inode [ 95.523636][ T6727] EXT4-fs (loop4): can't get journal size [ 95.530464][ T6727] EXT4-fs (loop4): 1 truncate cleaned up [ 95.531325][ T6733] loop2: detected capacity change from 0 to 2048 [ 95.615808][ T6733] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.653700][ T6730] __nla_validate_parse: 6 callbacks suppressed [ 95.653734][ T6730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.898'. [ 95.674397][ T6742] loop1: detected capacity change from 0 to 512 [ 95.792988][ T6749] loop4: detected capacity change from 0 to 512 [ 95.851951][ T6749] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.934400][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.902'. [ 96.111924][ T6742] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.182779][ T6766] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 96.206935][ T6766] SELinux: failed to load policy [ 96.236989][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 96.254345][ T6764] loop5: detected capacity change from 0 to 1024 [ 96.456560][ T6787] loop0: detected capacity change from 0 to 512 [ 96.480612][ T6785] loop5: detected capacity change from 0 to 512 [ 96.510553][ T6785] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.526898][ T6787] EXT4-fs mount: 219 callbacks suppressed [ 96.526914][ T6787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.548529][ T6791] loop2: detected capacity change from 0 to 512 [ 96.573651][ T6785] EXT4-fs (loop5): 1 truncate cleaned up [ 96.592367][ T6791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.606758][ T6787] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.623176][ T6785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.644763][ T6791] EXT4-fs (loop2): 1 truncate cleaned up [ 96.657564][ T6791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.785922][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 96.820506][ T6785] FAULT_INJECTION: forcing a failure. [ 96.820506][ T6785] name failslab, interval 1, probability 0, space 0, times 0 [ 96.835021][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.5.913 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 96.835048][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.835064][ T6785] Call Trace: [ 96.835086][ T6785] [ 96.835095][ T6785] __dump_stack+0x1d/0x30 [ 96.835120][ T6785] dump_stack_lvl+0xe8/0x140 [ 96.835145][ T6785] dump_stack+0x15/0x1b [ 96.835171][ T6785] should_fail_ex+0x265/0x280 [ 96.835202][ T6785] ? alloc_pipe_info+0xae/0x350 [ 96.835260][ T6785] should_failslab+0x8c/0xb0 [ 96.835295][ T6785] __kmalloc_cache_noprof+0x4c/0x320 [ 96.835321][ T6785] alloc_pipe_info+0xae/0x350 [ 96.835393][ T6785] splice_direct_to_actor+0x592/0x680 [ 96.835418][ T6785] ? kstrtouint_from_user+0x9f/0xf0 [ 96.835492][ T6785] ? __pfx_direct_splice_actor+0x10/0x10 [ 96.835516][ T6785] ? __rcu_read_unlock+0x4f/0x70 [ 96.835541][ T6785] ? get_pid_task+0x96/0xd0 [ 96.835565][ T6785] ? avc_policy_seqno+0x15/0x30 [ 96.835681][ T6785] do_splice_direct+0xda/0x150 [ 96.835734][ T6785] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 96.835761][ T6785] do_sendfile+0x380/0x640 [ 96.835805][ T6785] __x64_sys_sendfile64+0x105/0x150 [ 96.835859][ T6785] x64_sys_call+0xb39/0x2fb0 [ 96.835884][ T6785] do_syscall_64+0xd0/0x1a0 [ 96.835910][ T6785] ? clear_bhb_loop+0x25/0x80 [ 96.835935][ T6785] ? clear_bhb_loop+0x25/0x80 [ 96.835998][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.836024][ T6785] RIP: 0033:0x7f1081ece969 [ 96.836043][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.836129][ T6785] RSP: 002b:00007f1080537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 96.836148][ T6785] RAX: ffffffffffffffda RBX: 00007f10820f5fa0 RCX: 00007f1081ece969 [ 96.836165][ T6785] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 96.836180][ T6785] RBP: 00007f1080537090 R08: 0000000000000000 R09: 0000000000000000 [ 96.836195][ T6785] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 96.836206][ T6785] R13: 0000000000000000 R14: 00007f10820f5fa0 R15: 00007ffe3a757078 [ 96.836281][ T6785] [ 97.146295][ T6806] loop4: detected capacity change from 0 to 512 [ 97.165750][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.200431][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.213633][ T6806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.260608][ T6806] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.278076][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.309597][ T6819] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 97.325145][ T6819] SELinux: failed to load policy [ 97.361069][ T6814] loop5: detected capacity change from 0 to 1024 [ 97.405579][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.447302][ T6830] loop0: detected capacity change from 0 to 512 [ 97.448714][ T6814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.491328][ T6832] loop2: detected capacity change from 0 to 1024 [ 97.533822][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.554658][ T6832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.570852][ T6830] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.592686][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.615276][ T6832] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.928: Allocating blocks 385-513 which overlap fs metadata [ 97.632955][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.645682][ T6840] loop4: detected capacity change from 0 to 1024 [ 97.667082][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.930'. [ 97.678461][ T6831] EXT4-fs (loop2): pa ffff88810653a5b0: logic 16, phys. 129, len 24 [ 97.686563][ T6831] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 97.698143][ T6840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.744493][ T6843] bond1: entered promiscuous mode [ 97.749597][ T6843] bond1: entered allmulticast mode [ 97.765315][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 97.780960][ T6840] 9pnet_fd: Insufficient options for proto=fd [ 97.790061][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.799651][ T6840] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.929: Allocating blocks 385-513 which overlap fs metadata [ 97.842526][ T6843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.856355][ T6839] EXT4-fs (loop4): pa ffff88810653a620: logic 16, phys. 129, len 24 [ 97.864465][ T6839] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 97.910370][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 97.921295][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.992342][ T6868] pimreg: entered allmulticast mode [ 97.998551][ T6868] pimreg: left allmulticast mode [ 98.020905][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 98.073153][ T6876] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 98.102860][ T6876] SELinux: failed to load policy [ 98.126067][ T6884] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.149516][ T6871] loop5: detected capacity change from 0 to 1024 [ 98.154299][ T6884] loop2: detected capacity change from 0 to 2048 [ 98.171918][ T6885] loop1: detected capacity change from 0 to 2048 [ 98.196634][ T6884] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 98.204426][ T6885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.212818][ T6871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.226499][ T6885] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.269702][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.335192][ T6896] loop2: detected capacity change from 0 to 1024 [ 98.345059][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 98.385666][ T6896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.418464][ T6896] 9pnet_fd: Insufficient options for proto=fd [ 98.450365][ T6896] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.949: Allocating blocks 385-513 which overlap fs metadata [ 98.466926][ T6895] EXT4-fs (loop2): pa ffff88810653a620: logic 16, phys. 129, len 24 [ 98.475138][ T6895] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 98.485464][ T6909] loop5: detected capacity change from 0 to 512 [ 98.498750][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.525667][ T6909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.549345][ T6913] siw: device registration error -23 [ 98.559151][ T6909] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.701903][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.724229][ T6921] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 98.735926][ T6920] loop2: detected capacity change from 0 to 512 [ 98.745728][ T6920] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.762673][ T6921] SELinux: failed to load policy [ 98.777630][ T6920] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.957: bad orphan inode 13 [ 98.817075][ T6920] ext4_test_bit(bit=12, block=18) = 1 [ 98.822637][ T6920] is_bad_inode(inode)=0 [ 98.826795][ T6920] NEXT_ORPHAN(inode)=2130706432 [ 98.831679][ T6920] max_ino=32 [ 98.834927][ T6920] i_nlink=1 [ 98.893064][ T6919] loop0: detected capacity change from 0 to 1024 [ 98.900548][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.950724][ T6920] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 98.964937][ T6919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.004273][ T6920] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.023707][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.081428][ T6939] loop0: detected capacity change from 0 to 512 [ 99.102476][ T6939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.130284][ T6939] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.135765][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 99.163956][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.181600][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.206561][ T6949] siw: device registration error -23 [ 99.239315][ T6954] loop1: detected capacity change from 0 to 512 [ 99.256821][ T6954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.276624][ T6954] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.311954][ T6962] loop5: detected capacity change from 0 to 2048 [ 99.351044][ T6962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.363169][ T6962] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.394407][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.483583][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.506366][ T6971] loop1: detected capacity change from 0 to 512 [ 99.543330][ T6971] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 99.570925][ T6971] EXT4-fs (loop1): invalid journal inode [ 99.636109][ T6971] EXT4-fs (loop1): can't get journal size [ 99.644422][ T6973] loop2: detected capacity change from 0 to 2048 [ 99.721302][ T6971] EXT4-fs (loop1): 1 truncate cleaned up [ 99.727505][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.776502][ T6973] loop2: unable to read partition table [ 99.789156][ T6973] loop2: partition table beyond EOD, truncated [ 99.795442][ T6973] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 99.805973][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.854583][ T3004] loop2: unable to read partition table [ 99.862786][ T3004] loop2: partition table beyond EOD, truncated [ 100.049769][ T6990] loop4: detected capacity change from 0 to 512 [ 100.072091][ T6990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.093576][ T6990] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.191282][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.214924][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.316918][ T6999] siw: device registration error -23 [ 100.339505][ T7001] loop4: detected capacity change from 0 to 512 [ 100.373466][ T7001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.399852][ T7001] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.436029][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 100.436121][ T29] audit: type=1326 audit(1745622719.527:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.494155][ T29] audit: type=1326 audit(1745622719.537:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.517527][ T29] audit: type=1326 audit(1745622719.537:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.540875][ T29] audit: type=1326 audit(1745622719.537:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.564231][ T29] audit: type=1326 audit(1745622719.537:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.587640][ T29] audit: type=1326 audit(1745622719.537:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.611084][ T29] audit: type=1326 audit(1745622719.537:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.627894][ T7021] loop5: detected capacity change from 0 to 2048 [ 100.634391][ T29] audit: type=1326 audit(1745622719.537:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.0.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e3a2e969 code=0x7ffc0000 [ 100.669480][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.689541][ T7021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.707514][ T7021] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.714414][ T7025] loop4: detected capacity change from 0 to 512 [ 100.744649][ T7025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.759511][ T7025] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.794755][ T7031] __nla_validate_parse: 9 callbacks suppressed [ 100.794833][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.991'. [ 100.821079][ T7034] loop2: detected capacity change from 0 to 512 [ 100.829007][ T7034] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 100.840055][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'. [ 100.859053][ T7034] EXT4-fs (loop2): invalid journal inode [ 100.866053][ T7035] siw: device registration error -23 [ 100.927288][ T7034] EXT4-fs (loop2): can't get journal size [ 100.937240][ T7034] EXT4-fs (loop2): 1 truncate cleaned up [ 100.943699][ T7034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.960442][ T7034] tipc: Enabling of bearer rejected, already enabled [ 100.972192][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 100.972579][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.995611][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.069692][ T29] audit: type=1326 audit(1745622720.157:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 101.093082][ T29] audit: type=1326 audit(1745622720.157:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.1.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 101.152429][ T7051] loop2: detected capacity change from 0 to 512 [ 101.162343][ T7051] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.169116][ T7051] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.996: bad orphan inode 13 [ 101.191381][ T7054] loop1: detected capacity change from 0 to 512 [ 101.217149][ T7051] ext4_test_bit(bit=12, block=18) = 1 [ 101.222742][ T7051] is_bad_inode(inode)=0 [ 101.226914][ T7051] NEXT_ORPHAN(inode)=2130706432 [ 101.231853][ T7051] max_ino=32 [ 101.235186][ T7051] i_nlink=1 [ 101.240968][ T7051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.254409][ T7054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.268290][ T7047] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 101.277914][ T7054] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.290968][ T7047] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 101.314367][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.339096][ T7059] loop0: detected capacity change from 0 to 1024 [ 101.371870][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.513213][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.558586][ T7071] netlink: 'syz.5.1004': attribute type 12 has an invalid length. [ 101.595986][ T7071] loop5: detected capacity change from 0 to 512 [ 101.606964][ T7071] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 101.621446][ T7071] EXT4-fs (loop5): 1 truncate cleaned up [ 101.643373][ T7071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.661226][ T7074] loop4: detected capacity change from 0 to 512 [ 101.692303][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.705609][ T7074] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.718711][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1005'. [ 101.781419][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.853393][ T7086] loop4: detected capacity change from 0 to 512 [ 101.872967][ T7086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.885801][ T7086] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.913329][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.933122][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.946937][ T7090] loop2: detected capacity change from 0 to 1024 [ 101.957571][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.977978][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.001430][ T7090] 9pnet_fd: Insufficient options for proto=fd [ 102.010448][ T7096] loop4: detected capacity change from 0 to 128 [ 102.023793][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.050249][ T7096] syz_tun: entered allmulticast mode [ 102.062355][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1012'. [ 102.075126][ T7095] syz_tun: left allmulticast mode [ 102.230678][ T7102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 102.296550][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.359032][ T7112] loop5: detected capacity change from 0 to 512 [ 102.401276][ T7112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.429074][ T7112] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.441519][ T7123] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 102.462245][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1017'. [ 102.479256][ T7123] SELinux: failed to load policy [ 102.491588][ T7126] loop1: detected capacity change from 0 to 512 [ 102.501489][ T7117] loop0: detected capacity change from 0 to 1024 [ 102.503893][ T7126] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.526941][ T7126] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.1020: bad orphan inode 13 [ 102.527314][ T7117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.551144][ T7126] ext4_test_bit(bit=12, block=18) = 1 [ 102.556559][ T7126] is_bad_inode(inode)=0 [ 102.560777][ T7126] NEXT_ORPHAN(inode)=2130706432 [ 102.565629][ T7126] max_ino=32 [ 102.568843][ T7126] i_nlink=1 [ 102.587666][ T7126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.589814][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.608243][ T7131] loop4: detected capacity change from 0 to 512 [ 102.615951][ T7126] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 102.645938][ T7126] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 102.668850][ T7131] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.724821][ T7144] loop5: detected capacity change from 0 to 1024 [ 102.737129][ T7146] loop0: detected capacity change from 0 to 2048 [ 102.784985][ T7146] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.806183][ T7146] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 102.818581][ T7146] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.818581][ T7146] [ 102.828333][ T7146] EXT4-fs (loop0): Total free blocks count 0 [ 102.834345][ T7146] EXT4-fs (loop0): Free/Dirty block details [ 102.840352][ T7146] EXT4-fs (loop0): free_blocks=2415919104 [ 102.846093][ T7146] EXT4-fs (loop0): dirty_blocks=16 [ 102.851340][ T7146] EXT4-fs (loop0): Block reservation details [ 102.857349][ T7146] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 102.908582][ T7160] loop2: detected capacity change from 0 to 512 [ 102.932815][ T7160] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.111481][ T3403] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.123906][ T3403] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.123906][ T3403] [ 103.163071][ T7170] loop0: detected capacity change from 0 to 512 [ 103.183364][ T7170] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.197651][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1032'. [ 103.278227][ T7179] loop1: detected capacity change from 0 to 1024 [ 103.285974][ T7177] siw: device registration error -23 [ 103.347093][ T7179] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1034: Allocating blocks 385-513 which overlap fs metadata [ 103.362966][ T7188] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 103.374894][ T7188] SELinux: failed to load policy [ 103.377815][ T7190] pimreg: entered allmulticast mode [ 103.387288][ T7188] loop2: detected capacity change from 0 to 1024 [ 103.388944][ T7190] pimreg: left allmulticast mode [ 103.396568][ T7178] EXT4-fs (loop1): pa ffff88810653a690: logic 16, phys. 129, len 24 [ 103.406658][ T7178] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 103.487035][ T7199] loop1: detected capacity change from 0 to 512 [ 103.505089][ T7199] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.543081][ T7203] loop0: detected capacity change from 0 to 2048 [ 103.574470][ T7203] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.595303][ T7203] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 103.607668][ T7203] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.607668][ T7203] [ 103.617347][ T7203] EXT4-fs (loop0): Total free blocks count 0 [ 103.623427][ T7203] EXT4-fs (loop0): Free/Dirty block details [ 103.629342][ T7203] EXT4-fs (loop0): free_blocks=2415919104 [ 103.635292][ T7203] EXT4-fs (loop0): dirty_blocks=16 [ 103.640468][ T7203] EXT4-fs (loop0): Block reservation details [ 103.646662][ T7203] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 103.652811][ T7207] loop2: detected capacity change from 0 to 512 [ 103.694586][ T7207] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.710224][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1043'. [ 103.786434][ T7222] all: renamed from lo (while UP) [ 103.861165][ T7226] siw: device registration error -23 [ 103.924526][ T7233] loop5: detected capacity change from 0 to 1024 [ 103.983153][ T7233] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1050: Allocating blocks 385-513 which overlap fs metadata [ 104.014280][ T7232] EXT4-fs (loop5): pa ffff88810656fcb0: logic 16, phys. 129, len 24 [ 104.022359][ T7232] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 104.042615][ T7238] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 104.053236][ T7238] SELinux: failed to load policy [ 104.065269][ T7238] loop1: detected capacity change from 0 to 1024 [ 104.170019][ T273] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.182372][ T273] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.182372][ T273] [ 104.233043][ T7246] loop5: detected capacity change from 0 to 512 [ 104.295716][ T7255] loop2: detected capacity change from 0 to 512 [ 104.307517][ T7246] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.334128][ T7255] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.369936][ T7260] loop0: detected capacity change from 0 to 128 [ 104.425292][ T7260] syz_tun: entered allmulticast mode [ 104.437246][ T7265] loop4: detected capacity change from 0 to 512 [ 104.456599][ T7265] EXT4-fs (loop4): orphan cleanup on readonly fs [ 104.468155][ T7265] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.1058: bad orphan inode 13 [ 104.488506][ T7256] syz_tun: left allmulticast mode [ 104.496039][ T7265] ext4_test_bit(bit=12, block=18) = 1 [ 104.501548][ T7265] is_bad_inode(inode)=0 [ 104.505723][ T7265] NEXT_ORPHAN(inode)=2130706432 [ 104.510678][ T7265] max_ino=32 [ 104.513885][ T7265] i_nlink=1 [ 104.544075][ T7265] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 104.563188][ T7265] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 104.610832][ T7279] loop0: detected capacity change from 0 to 1024 [ 104.663189][ T7279] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1063: Allocating blocks 385-513 which overlap fs metadata [ 104.736401][ T7300] loop1: detected capacity change from 0 to 512 [ 104.742080][ T7278] EXT4-fs (loop0): pa ffff88810653a690: logic 16, phys. 129, len 24 [ 104.750781][ T7278] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 104.794710][ T7300] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.809216][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 105.053729][ T7337] loop0: detected capacity change from 0 to 2048 [ 105.088522][ T7337] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.197150][ T7350] loop2: detected capacity change from 0 to 2048 [ 105.260037][ T7350] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.319857][ T7358] loop4: detected capacity change from 0 to 1024 [ 105.447654][ T7358] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1080: Allocating blocks 385-513 which overlap fs metadata [ 105.487490][ T7357] EXT4-fs (loop4): pa ffff88810653a700: logic 16, phys. 129, len 24 [ 105.495605][ T7357] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 105.509256][ T7365] loop1: detected capacity change from 0 to 512 [ 105.553455][ T7367] loop4: detected capacity change from 0 to 1024 [ 105.578416][ T7365] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.618320][ T7367] 9pnet_fd: Insufficient options for proto=fd [ 105.743234][ T7377] loop4: detected capacity change from 0 to 512 [ 105.758705][ T7377] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 105.784072][ T7377] EXT4-fs (loop4): invalid journal inode [ 105.802370][ T7377] EXT4-fs (loop4): can't get journal size [ 105.818161][ T7377] EXT4-fs (loop4): 1 truncate cleaned up [ 105.883392][ T7380] siw: device registration error -23 [ 105.893221][ T7383] __nla_validate_parse: 3 callbacks suppressed [ 105.893238][ T7383] netlink: 8 bytes leftover after parsing attributes in process `'. [ 105.958218][ T7383] bond1: entered promiscuous mode [ 105.963722][ T7383] bond1: entered allmulticast mode [ 106.001947][ T7383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.054167][ T7390] loop0: detected capacity change from 0 to 512 [ 106.073284][ T7390] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.106708][ T7390] EXT4-fs (loop0): invalid journal inode [ 106.112604][ T7390] EXT4-fs (loop0): can't get journal size [ 106.120463][ T7390] EXT4-fs (loop0): 1 truncate cleaned up [ 106.136783][ T7390] tipc: Enabling of bearer rejected, already enabled [ 106.147271][ T7396] loop4: detected capacity change from 0 to 1024 [ 106.156050][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 106.177452][ T7396] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1093: Allocating blocks 385-513 which overlap fs metadata [ 106.193287][ T7395] EXT4-fs (loop4): pa ffff88810656fcb0: logic 16, phys. 129, len 24 [ 106.201401][ T7395] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 106.216146][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 106.216182][ T29] audit: type=1400 audit(1745622725.307:2064): avc: denied { connect } for pid=7399 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.255700][ T29] audit: type=1400 audit(1745622725.347:2065): avc: denied { write } for pid=7399 comm="syz.2.1094" path="socket:[16076]" dev="sockfs" ino=16076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.321639][ T7408] loop4: detected capacity change from 0 to 512 [ 106.358377][ T7408] EXT4-fs (loop4): 1 orphan inode deleted [ 106.363237][ T7403] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 106.365783][ T7408] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.374452][ T7403] SELinux: failed to load policy [ 106.390361][ T37] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.400308][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 106.400427][ T7403] loop1: detected capacity change from 0 to 1024 [ 106.413873][ T29] audit: type=1326 audit(1745622725.487:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 106.441505][ T29] audit: type=1326 audit(1745622725.487:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 106.465047][ T29] audit: type=1326 audit(1745622725.487:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa13829e969 code=0x7ffc0000 [ 106.488492][ T29] audit: type=1326 audit(1745622725.487:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa13829e9a3 code=0x7ffc0000 [ 106.512219][ T29] audit: type=1326 audit(1745622725.487:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa13829d41f code=0x7ffc0000 [ 106.535762][ T29] audit: type=1326 audit(1745622725.487:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa13829e9f7 code=0x7ffc0000 [ 106.559296][ T29] audit: type=1326 audit(1745622725.497:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz.1.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13829d2d0 code=0x7ffc0000 [ 106.597672][ T7416] loop5: detected capacity change from 0 to 512 [ 106.712897][ T7416] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.808680][ T7429] loop4: detected capacity change from 0 to 1024 [ 106.932289][ T7441] loop5: detected capacity change from 0 to 1024 [ 106.943354][ T7436] loop1: detected capacity change from 0 to 2048 [ 106.962367][ T7436] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.055440][ T7450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1104'. [ 107.085582][ T7452] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 107.127558][ T7452] SELinux: failed to load policy [ 107.214446][ T7452] loop0: detected capacity change from 0 to 1024 [ 107.424155][ T7463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1110'. [ 107.530188][ T7466] batadv_slave_1: entered promiscuous mode [ 107.546159][ T7466] batadv_slave_1: left promiscuous mode [ 107.743770][ T7479] loop4: detected capacity change from 0 to 512 [ 107.814430][ T7479] EXT4-fs (loop4): orphan cleanup on readonly fs [ 107.821178][ T7479] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.1114: bad orphan inode 13 [ 107.833265][ T7479] ext4_test_bit(bit=12, block=18) = 1 [ 107.838766][ T7479] is_bad_inode(inode)=0 [ 107.843040][ T7479] NEXT_ORPHAN(inode)=2130706432 [ 107.847894][ T7479] max_ino=32 [ 107.851159][ T7479] i_nlink=1 [ 107.910816][ T7479] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 107.959919][ T7479] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 108.240897][ T7496] siw: device registration error -23 [ 108.340296][ T7506] loop5: detected capacity change from 0 to 512 [ 108.384756][ T7508] loop2: detected capacity change from 0 to 512 [ 108.520223][ T7506] EXT4-fs (loop5): 1 orphan inode deleted [ 108.536211][ T7508] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.547158][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 108.591933][ T7515] loop4: detected capacity change from 0 to 128 [ 108.659927][ T7515] syz_tun: entered allmulticast mode [ 108.665964][ T7514] syz_tun: left allmulticast mode [ 108.702954][ T7506] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.720948][ T7517] netlink: 8 bytes leftover after parsing attributes in process `'. [ 108.770454][ T7520] loop2: detected capacity change from 0 to 512 [ 108.788942][ T7517] bond2: entered promiscuous mode [ 108.794163][ T7517] bond2: entered allmulticast mode [ 108.799751][ T7517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.825713][ T7520] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.000859][ T7534] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1134'. [ 109.031832][ T7534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1134'. [ 109.041041][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 109.071516][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 109.087082][ T7541] loop4: detected capacity change from 0 to 512 [ 109.131762][ T7541] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 109.183178][ T7549] loop1: detected capacity change from 0 to 512 [ 109.185900][ T7541] EXT4-fs (loop4): invalid journal inode [ 109.205295][ T7541] EXT4-fs (loop4): can't get journal size [ 109.212966][ T7549] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 109.229370][ T7549] EXT4-fs (loop1): invalid journal inode [ 109.235522][ T7549] EXT4-fs (loop1): can't get journal size [ 109.251319][ T7541] EXT4-fs (loop4): 1 truncate cleaned up [ 109.259577][ T7541] tipc: Enabling of bearer rejected, already enabled [ 109.267668][ T7549] EXT4-fs (loop1): 1 truncate cleaned up [ 109.301220][ T7549] tipc: Enabling of bearer rejected, already enabled [ 109.315775][ T7551] loop2: detected capacity change from 0 to 2048 [ 109.329349][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 109.461500][ T7551] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.528065][ T7551] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 109.540596][ T7551] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.540596][ T7551] [ 109.550282][ T7551] EXT4-fs (loop2): Total free blocks count 0 [ 109.556364][ T7551] EXT4-fs (loop2): Free/Dirty block details [ 109.562367][ T7551] EXT4-fs (loop2): free_blocks=2415919104 [ 109.568094][ T7551] EXT4-fs (loop2): dirty_blocks=16 [ 109.573352][ T7551] EXT4-fs (loop2): Block reservation details [ 109.579386][ T7551] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 109.734579][ T7567] bond2: entered promiscuous mode [ 109.739991][ T7567] bond2: entered allmulticast mode [ 109.755580][ T7567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.908705][ T273] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 109.921119][ T273] EXT4-fs (loop2): This should not happen!! Data will be lost [ 109.921119][ T273] [ 110.017902][ T7577] loop4: detected capacity change from 0 to 512 [ 110.113701][ T7577] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.146265][ T7589] loop5: detected capacity change from 0 to 128 [ 110.240887][ T7594] blktrace: Concurrent blktraces are not allowed on loop0 [ 110.272112][ T7589] syz_tun: entered allmulticast mode [ 110.294094][ T7598] loop4: detected capacity change from 0 to 1024 [ 110.358972][ T7594] loop2: detected capacity change from 0 to 2048 [ 110.373123][ T7598] 9pnet_fd: Insufficient options for proto=fd [ 110.379514][ T7605] SELinux: policydb magic number 0x7cff8c20 does not match expected magic number 0xf97cff8c [ 110.387133][ T7587] syz_tun: left allmulticast mode [ 110.459479][ T7598] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1155: Allocating blocks 385-513 which overlap fs metadata [ 110.470578][ T7605] SELinux: failed to load policy [ 110.512194][ T7596] EXT4-fs (loop4): pa ffff88810653a700: logic 16, phys. 129, len 24 [ 110.520242][ T7596] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 110.551969][ T7594] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 110.561496][ T7599] loop1: detected capacity change from 0 to 1024 [ 110.724467][ T7625] loop1: detected capacity change from 0 to 512 [ 110.724936][ T7618] loop0: detected capacity change from 0 to 2048 [ 110.772252][ T7625] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 110.773984][ T7618] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 110.819397][ T7618] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 110.820009][ T7625] EXT4-fs (loop1): invalid journal inode [ 110.831819][ T7618] EXT4-fs (loop0): This should not happen!! Data will be lost [ 110.831819][ T7618] [ 110.839659][ T7625] EXT4-fs (loop1): can't get journal size [ 110.847044][ T7618] EXT4-fs (loop0): Total free blocks count 0 [ 110.858806][ T7618] EXT4-fs (loop0): Free/Dirty block details [ 110.864821][ T7618] EXT4-fs (loop0): free_blocks=2415919104 [ 110.870658][ T7618] EXT4-fs (loop0): dirty_blocks=16 [ 110.875776][ T7618] EXT4-fs (loop0): Block reservation details [ 110.881795][ T7618] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 110.885378][ T7634] IPv6: Can't replace route, no match found [ 110.897803][ T7625] EXT4-fs (loop1): 1 truncate cleaned up [ 110.908931][ T7625] tipc: Enabling of bearer rejected, already enabled [ 110.920724][ T7625] __nla_validate_parse: 3 callbacks suppressed [ 110.920741][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 110.967086][ T7639] pimreg: entered allmulticast mode [ 110.976101][ T7639] pimreg: left allmulticast mode [ 111.047651][ T7644] loop5: detected capacity change from 0 to 128 [ 111.204679][ T7649] siw: device registration error -23 [ 111.212307][ T3405] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 111.224725][ T3405] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.224725][ T3405] [ 111.250897][ T7653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1170'. [ 111.278833][ T7644] syz_tun: entered allmulticast mode [ 111.285496][ T7643] syz_tun: left allmulticast mode [ 111.374476][ T7660] loop4: detected capacity change from 0 to 512 [ 111.391649][ T7660] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 111.419935][ T7660] EXT4-fs (loop4): invalid journal inode [ 111.425786][ T7660] EXT4-fs (loop4): can't get journal size [ 111.471646][ T7660] EXT4-fs (loop4): 1 truncate cleaned up [ 111.502955][ T7668] loop2: detected capacity change from 0 to 512 [ 111.520755][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1172'. [ 111.553336][ T7668] EXT4-fs (loop2): 1 orphan inode deleted [ 111.560659][ T3405] __quota_error: 54 callbacks suppressed [ 111.560673][ T3405] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 111.576203][ T3405] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 111.587706][ T7668] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.652189][ T7675] loop1: detected capacity change from 0 to 1024 [ 111.658641][ T29] audit: type=1400 audit(1745622730.747:2126): avc: denied { shutdown } for pid=7672 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.678437][ T29] audit: type=1400 audit(1745622730.747:2127): avc: denied { getopt } for pid=7672 comm="syz.2.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.705988][ T7675] 9pnet_fd: Insufficient options for proto=fd [ 111.762708][ T7673] loop2: detected capacity change from 0 to 4096 [ 111.795733][ T7683] IPv6: Can't replace route, no match found [ 111.845646][ T7684] loop4: detected capacity change from 0 to 512 [ 111.886622][ T7684] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 111.887997][ T7686] loop2: detected capacity change from 0 to 2048 [ 111.903376][ T7684] EXT4-fs (loop4): invalid journal inode [ 111.909376][ T7684] EXT4-fs (loop4): can't get journal size [ 111.931460][ T7684] EXT4-fs (loop4): 1 truncate cleaned up [ 111.956141][ T7693] loop1: detected capacity change from 0 to 512 [ 111.964665][ T7686] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.000697][ T7686] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 112.013151][ T7686] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.013151][ T7686] [ 112.022846][ T7686] EXT4-fs (loop2): Total free blocks count 0 [ 112.028850][ T7686] EXT4-fs (loop2): Free/Dirty block details [ 112.034839][ T7686] EXT4-fs (loop2): free_blocks=2415919104 [ 112.040598][ T7686] EXT4-fs (loop2): dirty_blocks=16 [ 112.045722][ T7686] EXT4-fs (loop2): Block reservation details [ 112.051813][ T7686] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 112.055742][ T7693] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.121932][ T7703] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1186'. [ 112.139907][ T7703] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1186'. [ 112.148969][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'. [ 112.169774][ T7705] loop1: detected capacity change from 0 to 512 [ 112.200564][ T7705] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 112.222906][ T7701] loop4: detected capacity change from 0 to 2048 [ 112.380339][ T7701] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.410966][ T7705] EXT4-fs (loop1): invalid journal inode [ 112.420983][ T7705] EXT4-fs (loop1): can't get journal size [ 112.461493][ T7705] EXT4-fs (loop1): 1 truncate cleaned up [ 112.482308][ T7705] tipc: Enabling of bearer rejected, already enabled [ 112.522213][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 112.566140][ T7723] loop0: detected capacity change from 0 to 8192 [ 112.591182][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.603471][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 112.603471][ T37] [ 112.614177][ T7726] loop5: detected capacity change from 0 to 512 [ 112.666244][ T7701] ================================================================== [ 112.674364][ T7701] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 112.682172][ T7701] [ 112.684489][ T7701] write to 0xffffea0005481c18 of 8 bytes by task 7622 on cpu 1: [ 112.692134][ T7701] __filemap_remove_folio+0x1a5/0x2a0 [ 112.697543][ T7701] filemap_remove_folio+0x6d/0x1d0 [ 112.702651][ T7701] truncate_inode_folio+0x42/0x50 [ 112.707677][ T7701] shmem_undo_range+0x244/0xa80 [ 112.712532][ T7701] shmem_evict_inode+0x134/0x520 [ 112.717474][ T7701] evict+0x2e0/0x550 [ 112.721363][ T7701] iput+0x447/0x5b0 [ 112.725173][ T7701] dentry_unlink_inode+0x24f/0x260 [ 112.730277][ T7701] __dentry_kill+0x18d/0x4b0 [ 112.734870][ T7701] dput+0x5e/0xd0 [ 112.738504][ T7701] __fput+0x444/0x650 [ 112.742478][ T7701] ____fput+0x1c/0x30 [ 112.746452][ T7701] task_work_run+0x12e/0x1a0 [ 112.751040][ T7701] do_exit+0x5dd/0x17c0 [ 112.755200][ T7701] do_group_exit+0xff/0x140 [ 112.759709][ T7701] get_signal+0xe59/0xf70 [ 112.764046][ T7701] arch_do_signal_or_restart+0x97/0x480 [ 112.769603][ T7701] irqentry_exit_to_user_mode+0x5e/0xa0 [ 112.775160][ T7701] irqentry_exit+0x12/0x50 [ 112.779583][ T7701] asm_exc_page_fault+0x26/0x30 [ 112.784472][ T7701] [ 112.786786][ T7701] read to 0xffffea0005481c18 of 8 bytes by task 7701 on cpu 0: [ 112.794323][ T7701] folio_mapping+0xa1/0x120 [ 112.798821][ T7701] evict_folios+0xdb9/0x33d0 [ 112.803404][ T7701] try_to_shrink_lruvec+0x45a/0x7e0 [ 112.808633][ T7701] shrink_lruvec+0x22e/0x1a40 [ 112.813310][ T7701] shrink_node+0x686/0x2110 [ 112.817806][ T7701] do_try_to_free_pages+0x3f6/0xcd0 [ 112.823006][ T7701] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 112.828903][ T7701] try_charge_memcg+0x3ab/0x870 [ 112.833751][ T7701] obj_cgroup_charge_pages+0xb7/0x1a0 [ 112.839115][ T7701] __memcg_kmem_charge_page+0x9f/0x170 [ 112.844592][ T7701] __alloc_frozen_pages_noprof+0x188/0x360 [ 112.850398][ T7701] alloc_pages_mpol+0xb3/0x250 [ 112.855180][ T7701] alloc_pages_noprof+0x90/0x130 [ 112.860112][ T7701] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 112.865932][ T7701] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 112.871330][ T7701] ip_set_alloc+0x1f/0x30 [ 112.875658][ T7701] hash_netiface_create+0x282/0x740 [ 112.880856][ T7701] ip_set_create+0x3c9/0x960 [ 112.885445][ T7701] nfnetlink_rcv_msg+0x4c3/0x590 [ 112.890379][ T7701] netlink_rcv_skb+0x120/0x220 [ 112.895147][ T7701] nfnetlink_rcv+0x16b/0x1690 [ 112.899816][ T7701] netlink_unicast+0x59e/0x670 [ 112.904578][ T7701] netlink_sendmsg+0x58b/0x6b0 [ 112.909369][ T7701] __sock_sendmsg+0x142/0x180 [ 112.914045][ T7701] ____sys_sendmsg+0x31e/0x4e0 [ 112.918816][ T7701] ___sys_sendmsg+0x17b/0x1d0 [ 112.923497][ T7701] __x64_sys_sendmsg+0xd4/0x160 [ 112.928355][ T7701] x64_sys_call+0x2999/0x2fb0 [ 112.933030][ T7701] do_syscall_64+0xd0/0x1a0 [ 112.937527][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.943432][ T7701] [ 112.945749][ T7701] value changed: 0xffff8881037d9648 -> 0x0000000000000000 [ 112.952843][ T7701] [ 112.955156][ T7701] Reported by Kernel Concurrency Sanitizer on: [ 112.961305][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.4.1184 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 112.973715][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.983785][ T7701] ================================================================== [ 112.996181][ T3534] loop0: p1 p2 < > p3 p4 < p5 > [ 113.001170][ T3534] loop0: partition table partially beyond EOD, truncated [ 113.009328][ T7726] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 113.027637][ T3534] loop0: p1 size 100663296 extends beyond EOD, truncated [ 113.050908][ T3534] loop0: p2 start 591104 is beyond EOD, truncated [ 113.050994][ T7726] EXT4-fs (loop5): invalid journal inode [ 113.057382][ T3534] loop0: p3 start 33572980 is beyond EOD, truncated [ 113.085239][ T7728] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 113.095018][ T3534] loop0: p5 size 100663296 extends beyond EOD, truncated [ 113.119997][ T7726] EXT4-fs (loop5): can't get journal size [ 113.129125][ T7726] EXT4-fs (loop5): 1 truncate cleaned up [ 113.179177][ T7723] loop0: p1 p2 < > p3 p4 < p5 > [ 113.184300][ T7723] loop0: partition table partially beyond EOD, truncated [ 113.191996][ T7723] loop0: p1 size 100663296 extends beyond EOD, truncated [ 113.203282][ T7723] loop0: p2 start 591104 is beyond EOD, truncated [ 113.209777][ T7723] loop0: p3 start 33572980 is beyond EOD, truncated [ 113.231050][ T7723] loop0: p5 size 100663296 extends beyond EOD, truncated [ 113.434085][ T3534] udevd[3534]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 113.445118][ T3379] udevd[3379]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory