last executing test programs: 4m51.159258487s ago: executing program 3 (id=153): socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x1, 0x5, &(0x7f0000000300)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4000041, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="f700000000000000000000000000000095000000000000005a021d640ccef35eb069f63b111d1df9ff1896428b511ec60c9ce6a6c105749098b942367df60c57e3445f7e1fd256194ffd2ef50741100070f6bd17c3303f5078f70000d69a204157c94f43dc5745da27fd5b758fabfcb357771ad30e0c1e60729867cb9f1b091f7e49dff9251cd2abca024e8f7ed7048713a029930d795bf88ae06fa3d8e1a81d8734f2377fc26deecab4b444af8b629dc9439be4c819efcebe2022c767d36a4b09dc7d3fbcc52d84b658f035bd0b460ef8e82828dbaec3bf6540016b8ac2"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan0\x00', @random="0000230c1100"}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00)\x00'], 0x33fe0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x1, 0x3, 0x35, 0x7}]}) write$ppp(r5, &(0x7f0000000340)="4985433f", 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req={0x4b, 0xdb0, 0x4, 0x100}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfd80, 0x0, 0x0, 0x0, 0x0, 0x48010}, 0x0) 4m51.049148678s ago: executing program 3 (id=157): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x8, 0x8, 0xdd, 0x10000, {{0x30, 0x4, 0x1, 0x28, 0xc0, 0x66, 0x0, 0xc, 0x4, 0x0, @private=0xa010100, @multicast2, {[@lsrr={0x83, 0x7, 0xc6, [@multicast1]}, @cipso={0x86, 0x38, 0x3, [{0x1, 0xc, "dbbfbacbd20d1c205d9e"}, {0x5, 0xb, "b5cc91cc66ad73ca50"}, {0x6, 0x7, "5f14fe6fbc"}, {0x6, 0x6, "576ab8d5"}, {0x0, 0xe, "6323f86acac0a6f8dc9851a6"}]}, @rr={0x7, 0x13, 0xa3, [@remote, @loopback, @loopback, @local]}, @timestamp={0x44, 0x20, 0x1c, 0x0, 0xa, [0xffff, 0x2, 0x3, 0x6, 0x0, 0x8000, 0x1]}, @lsrr={0x83, 0x7, 0x50, [@local]}, @cipso={0x86, 0x21, 0x1, [{0x5, 0xc, "53cae399fc9ac839b85b"}, {0x2, 0xf, "9eafe115eba30bc650448d56f7"}]}, @noop, @generic={0x88, 0x10, "c84b4a1ee1dbd83196b442c0ff83"}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ldst={0x1, 0x2, 0x2, 0x2}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x7a, &(0x7f0000000140)=""/122, 0x40f00, 0x3e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r6], &(0x7f00000007c0)=[{0x4, 0x5, 0xf, 0x8}, {0x1, 0x5, 0x6, 0x2}, {0x4, 0x5, 0x9}, {0x2, 0x2, 0x6, 0xc}], 0x10, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@private2, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', r7, 0x8027, 0x700, 0x3, 0x3, {{0x1e, 0x4, 0x1, 0x5, 0x78, 0x67, 0x0, 0xf4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@generic={0x44, 0x6, "39990633"}, @noop, @generic={0x82, 0x10, "c5af7dd22624dec3f1c8f1b4774d"}, @rr={0x7, 0xf, 0x3e, [@private=0xa010102, @multicast1, @multicast1]}, @cipso={0x86, 0x3e, 0x1, [{0x5, 0x11, "fd78f748d79cc2d1355cfea944e604"}, {0x7, 0x3, "cd"}, {0x0, 0xd, "dd3e59b673746c15d59c3c"}, {0x7, 0x12, "d45c1622be22987a8f035cd1ce78d1d5"}, {0x7, 0x5, "8d9e78"}]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0xd}, 0x18) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 4m50.573755486s ago: executing program 3 (id=162): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000005}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, 0x0, 0x0, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) readv(r1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000226, &(0x7f0000001ec0)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r6}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r7, 0x5, &(0x7f00000002c0)={0x1, 0x1, 0xccf3, 0xa}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 4m50.466611658s ago: executing program 3 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySG8rLm+kn+vD3PDEfEt0cjHq2srnfhytWz09Vaw3sR+xfPXdy/cOXqvvlz02dmz8yenzrwwsFDky9OHZzakDi358/Hjr/25Mfvv/383HfVfUkcjpOD787Eijg2yniMx508xNbygYg4lCXafC4Pmy0QQqlV8t/HwYh4PMaiUs81jMX8R4U2DuipWiWiBpRUov9DSTXHAc1j++6Og0/2eFTSP7eONA6AVsc/0Dg3EsP1Y6Ntt5OWI6PGuY0dG1B/Vsc/13Z/nj1i2XmIP+9unYENqKeTpesR8US7+JN623bUI83iT5e1I4mIyYj6OaCs/JUHaEPSku7FeZi1rDf+NCIO589Z+dF11j++It/v+AEop5tH8h35Upa7t//Lxh7N8U+0Gf+Mttl3rUfR+7/O47/m/n64fo48XTEOy8YsJ9q/5eDKgp8+PPZpp/pbx3/ZI6u/ORbsh1vXI3aviP+DLNh8/JPFn7TZ/tkqpw53V8er3/9yrNOyouOv3YjY0/b4596oNEutcX1y/9x8dXay8bNtHV9/89aXneovOv5s+2/rEH/L9k9Xvi77TC52WcdXJ26c67Rs9L7xpz8PJY3jzaG85J3pxcVLUxFDyfF8lZbyA2u3pblO8z2y+Pc+077/L/v9v778fUaafzK7cPGNs7c7LVvP9m+5mHyn1mUbOsnin7n/9l/V/7OyT7qs4483Lz/Vadla8Y88SGAAAAAAAABQQmn9GmySTtxNp+nERGO+7GOxLa1eWFh8du7C5fMzEXvr/w85mDavdI818kmWn8r/H7aZP7Ai/1xE7IyIzyoj9fzE6QvVmaKDBwAAAAAAAAAAAAAAAAAAgE1iez7/v3mf6t8rjfn/QEn08gZzwOam/0N51fv/qls8AWVg/w/lpf9Deen/UF76P5SX/g/lpf9Deen/UF76PwAAAABsSTufvvljEhFLL43UH5mhfJkZQbC1DRbdAKAwlaIbABTm7qV/g30ona7G/3/lXw7Y++YABUjaFdYHB7W1O//Ntq8EAAAAAAAAAAAAAHpgz67O8//NDYatzbQ/KK8HmP/vqwPgIeer/6G8HOMD95vFP9xpgfn/AAAAAAAAAAAAANA3o/VHkk7kc4FHI00nJiL+HxE7YjCZm6/OTkbEIxHxQ2Xwf1l+quhGAwAAAAAAAAAAAAAAAAAAwBazcOXq2elqdfZSa+LvVSVbO9G8C2of6no5/uOrIun/xzISEYVvlJ4lBlpKkoilbMtvioZdWojN0Yx6ouA/TAAAAAAAAAAAAAAAAAAAUEItc4/b2/1Fn1sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP137/7/vUsUHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HD6NwAA//+ipUAx") r2 = perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf85fe21d4076cf16, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") (async) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf85fe21d4076cf16, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) (async) 4m50.142460213s ago: executing program 3 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10000) (async) io_uring_enter(0xffffffffffffffff, 0x6252, 0xc09b, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000a24000/0x3000)=nil, 0x3000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f0000000080)) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='sched_switch\x00', r9}, 0x18) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0x824) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 4m47.589357313s ago: executing program 3 (id=231): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000005}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, 0x0, 0x0, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) readv(r1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000226, &(0x7f0000001ec0)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r7}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x5, &(0x7f00000002c0)={0x1, 0x1, 0xccf3, 0xa}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 4m47.551350203s ago: executing program 32 (id=231): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000005}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, 0x0, 0x0, 0x0, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) readv(r1, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000226, &(0x7f0000001ec0)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r7}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r8, 0x5, &(0x7f00000002c0)={0x1, 0x1, 0xccf3, 0xa}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r4, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) 5.7417848s ago: executing program 0 (id=6397): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000400000}, 0x18) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/48, 0x30) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x10800) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5.6915234s ago: executing program 0 (id=6398): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x83c2}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r2, r3) 5.279553847s ago: executing program 0 (id=6403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r3, &(0x7f0000000ac0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d7", 0x20}, {&(0x7f0000000740)="fd276b39be35c04b8f19bcb856c6927014f7746996e18959a18be8052700cc8769e0d0c8fdcaa98b3808eb251ec82d6b65ccae2f7fe7f2a97eb44c5dc14a4845ba6bb232c304934692f144f0b9625a07ddfa2d17f366695792b255f457927c163e2d16f94cfb9b3f5e71b74b405220b10ae493d9d6a78b3d6fab0f56374d4f49bce03520b1d469a7111cee6e9f98e1dbb398e24b0a7b8be35a7359946c6b69a16638e856fe2d3f", 0xa7}, {&(0x7f0000001100)="0e6437b1de2e0ed8574546f4987cc89d979c7d7c683b79a2e8ded4293d23395ff3fbef1b773b105aa331bdcb8aa8a4a901feb83ce31e0fe7c15137e70605ea60d9ad5e682d0b5aa2f2496c9b004f60615fd911094045edc905de7b285b29aecad707649100cd6ef49be907403ae2461f15cb37c45836aeaa115a980089cce9433d0be37880a6f17ded0f80610a1c629dd17a360f504315bf61afbd57dceb3b2f86342050db10306e833d8d7be5e0bd28", 0xb0}, {&(0x7f00000002c0)="b73b69f2c119b9fab535bafa506bf5842d03b0e28201f64f5e57fccaac977a5da288d53e2ff9b1a4d81c17da5845c23904c3ac9ed7600c9765db202ceb77efdbd74262c6fed20e762743836b603816867b563c7e9f", 0x55}, {&(0x7f0000000500)="5df32b96d5883ae2c7cbd170c8cbe8f9c2", 0x11}, {&(0x7f0000001000)="e9cbff21633d8f61348d53fe0d361eb55de7729c8343994842c4ba6ea21dcb35452a6894393007781d2b597d8b81c39df09b62724402a1f1ddf6c1556e8c70c2d8df600ab8a19fbddef92056216e6b38817800894963f30043471f7cd62fe6ea0f7276a783812c1cf09a668e5412271e8a8f67242368fe4409809c8da50422e2573b1291c3db41f1eab230335ea4d73c48f9f7ab02b83be0e3c3fa0467e5064137a32d90af12b5d41fc38b9b28a956e6388ad498845e9a880ae89f57364eb9fff6d6a01a031b8f6afb44cbd3a8f2b81d124ed9e4", 0xd4}, {&(0x7f0000001780)="7c80cda7600ce66cbee87aaa4f0f20db43b701f39f695db516aa2a33f472f8d9379ca841724ec774fa79e091a4ba0b8dee79e78aa4465e382616a6b804027fd795bc7993bb0c0675b0f8465cd6fcaf7005b6f867af785873c0c5d75c9528635767b1b250deb35fe7a88059ac2474c0d8b063d2edb6d44d17e059a53a157d0d8d8b6df616a833b9bc1440207e811963afbcaff0b1ffd100a8b0d302d625b05553461041debfe097edf430d06696b4e92ac026cf75dbc4f9e1efafd0ea0a6f387896db829402c71cfab2da36a87aaa17089b170781de647bea00d42bdeb0f58f78af1ffc8a992495d5e2598c375e3bf67efdc1fcf210b51038e23206315a0e788c734215d5d8a1675da5db4e504624e6d9dc6fca3a43605b47cd1ec28bb490550ea548967c1cfa920b80edb28ec4f44067cdd385af82ad300d940f451855fdf0b937ffd3808a2e13477c63218a3184a8715482cbf9f5c528691281737c6c2740c4306766b5be8b6393a246f9f7ad713994c5ebee40ccc4931c10e35e81479d6bc556a3268ff24d707ab8705cdb338232f83e215e5992e5dac6dc534eefc28d536a78a477755ff4dd79214b1fe3f3c2ac55d4d3ea61f71597d356e7f2ea1f906a1ee5ba763a6b60f2fd92d132d2e15acd90756087190f5f6aa4d0f0092f591f83331f756f4d4417683f969eab8cea475b6a99dc0a737a75fcd738a9575f45d4623a02682135099730667461d10cc86c6c6bb709179d0fbb69332f16a41a393fe6a79a1758953965c399d62e534fdfb29d8c2c5bb87deeb87ef89cc830764933975e320318b01716e661150c2d7072d289727cd5f06fe2fd7315e86d411765afbe25f2222a2c06db32e7528d2cc28c8d02837c315a051e1b41793ecd7aed6aa54a70306d2c618e93388d96f174033c522a593e3e2dcbd5518696915e2961ddb359c7b4b7b51965995b8bbf22b024ec71fe5820700c26eeb7679e3ef9a8b40c571914068723c81456fd4053b094165edf691a81b7a82d0fb877d256370c474feee759fd6b77304cc91b7ee4f16e8b49bccf40e30f266f1e44c018139974d03c409ba27adabac9541162f008080fed132ffe2260d1defdf902781f16454bdc7b00e40246399e1a652bb51b0d65be1fc5504782bea29836fab54fc46d010d03456e2a4dab28e552a1848e615229ff8eb140b1951f2ff62965284ec8931b3d887fea5efcb592aac9104a5a19f137be873b4c889b94bc5c6d8d6222ff061419e053e19ba8cc12ae7600b127c167f05b3fe2ab0d1843b61daf0ebfa1cd9ddb0aca002d0b625911beb8fae99802fab2e85ae68624ae4a80b1aadf8d026e0c329f1c4b2c362fbf8725cab2514b0ae437f1552645ebdffff5c7ef8ca8730d24b131dbb4c9a5bfbea8469a7b7f332f43b3123fca82e6267b5cc509162790f8d132e131189c2747e45a858663fbbde264327d6893e8966f76643bb1dfece4b9d8faf32e7e7d4de3ddd70b495deb000af148172c3649905a62ce53ad79cfd0860b1694183f488366f72eefdd4e63f5e663198ef84aa1d9c32ab69c5fc89d5cc60aa9884563147ab3fe4164ffc0968ec329652806f4eb561606cc2fba84797e892f9651f7c722f323b3ec5196d251fbf82e5964f993f16ec703858f9d2f7faac4899767a5727a093f1b5b6735c5f420b7daca4c7c9c899f88384980a1b56dff81703cca4e0aa5ab16d174adb785117455fc38f52baa4eb0b2611a8c44e6f3ca89d75f255bfb71b61c4c2c565683c53509fe98b46e2ddf23e3fdec741ceb0215c48e6c15f0f2244a9bde30762aa371b24f1b8157cda217f548b8f180733dcb9afbdb0ce78ac0adfd9cf6992d5008dc2d37696c11510ee798cf9a85051b01d5be5742fd90671b1ea38ec6daff9f77954eb4777aa2ded50e8866761e9e0e210f7c0880d8eaca38e644539ee480f1712b8e64cf1a979c746237db85dc3f5e0239b6a5087542a307d9ed9c4fa4e795e63a958beeeeb517470ea4b2c54b234c4b221568fa3b5caa68bd3e1af0e9d83121bee0fced892618e52310296e1285cc5d14bdb4d31753cc67fa86541ae31291eb1086f0b82fc4059b934040d32de13a19a7117a691519480d45f77dc40f908df50db5317a339e08060889f9d26adb64152492d2e50862b59b39417cf5bba46e058405107677c7fb7617d3941b8fda56b8a6e0be82ba9ea3fad946b5cfddbb32c589d57f33cc610ecfab8cfc92be89b9f87be951e99b47c51bb3a65677e120809a3404010b553d5ae901451eeb8be415c6078d20e759abba7bfc566dc0fba4020adff1e03bfd417db3ce55bab8d9965fde55e4665fc248151ac24515b391269d4a0244a7ee20a278ec9833506ba3526164b6c0a0a28306f55fcb749ce1b52972af400879828833a74c418168d08d48a0ce7e85eaa576cf8a2d60d70e6ad3114563ecd7e719fb1e47b7bd108c214a9d970b6a99b6870a268b288eb6f32d24c3b48c149f3fd3ce0eac397b0dfa0353adc00ca0d13ec9e1d910821048a555399fa15935db6c9d3185ff3f3bc17ac6755d59db0406754c40c5d2a0222ea408c9475f682dfbdcf777e649f2ab8ba7cf5c22a2269012adde58285d7f86c7d928e8140d7f2e85e8e99e0a75a43e97a442ebfd0c82b0f9926e2046307f339d234f61b587877857a9a23f264ed170450e5e416fe2cea4dbcdec2288012ab06b4c54e52a9e3b0b8d4ed3711457fdb291e09ab8ac2872085a86a57f87bd979026fa2a6a42c9f6b26b381a4562db04e831ebba80c34a812b4989516c536c8d90951f4d507fb9cb5de354053d1244ec643b5ceba932147e1991e05d5b9e2521a55a603008df83d1a0f688a43d216e99cc417c3f50710fd6a27d9a7b3078776a7895fee4db84cf7eed9cbfc8f0fabf349339b6b7db06fcb517e9ae84f0feecf9c58fdc5dd907496962f5bfa510466165e16201d2ea03610779a764f111c0f38ee9284fb660ea18afdbc28de17c602f65097f9a43044d2a3212006af14c54a5aee6ba8c60e759029087c06f0a351bbc4852c8b9b329b76d2d6737d96340e22127172614ec1a74356ba4230e9a4e3057acb7adfd0bde9f2219255c77ea1b372f0ba40908c1bb38465d760a65dce3da71bfdcae12850e7f09d184d35291c6ffddd85a56f2e65f82cd2a730b848792ea063be34b4df9e3af5d0fafc442174d532c06317aeeed12467c16c3c1800000d48bbd55f5c503836a44399241980cab3281390e69223268c2204fdf1bff22aed7c4b8ece0668b2d7b534d03d84235987a271f0ca1a38ac9206ae88dfe03aaa238b5aa0a51b126fa7013b303197cc9cc9b6eef1cd48f26969f8f76a7b97b3300bdf96f9be42ca36420f7b8811a8b6eba8de33fadafd5d4e3a5a75f0e7e9e9c774b93e170608002bd40350796fd0db0d008bbdf77f6d182fa89209a29432f51498ad4ccb2bff6700fbc9ac57e510167c3abb0dd7490d6e61feb1f509e0d4615f490db6da2484bf4bec7bbf756097885221359a55cfffd733a960782292e7591b814d14e1d69b434564150710540f8a60f9415b7a7309f332481eb689cfe97b42ca550df981215a7993ab985704966ff87be6b1ce44f202f464c61f7a5cb5cde6e8636696bf923a2f5b3444b98696d6c751b65554e0c2eb60ae746b13058dd7f48dc668c5b688c4dbcdd9f837a6d5c5f48c8595b046b82ba067e42b4a98cbdbaeb3a343b319914e097a57632f44135acab7828720499c80728339fe45441e37b6879c276796466b0dae05bbe49bd038f9a634559704cbd590a06aa98fd55a21df7316d9c4279c8bb855c9099428e3540113d18bdf50275565b276c76870b337ec8f210b95d0ed4da344a1d315109ff926a9a3fc2272ea9324ec15842b7c614aea1df5bab6d15b3272ba8c46eba0291b674da3ce9743256cfa88cadf49414db46d76740cc64a53b7ed3479b10c414e8b3eb5bb0f5e8a1d3d0dfe098308fd62649d9f87d48caf6d42faf4f1ee5caf75d22dd4c5f91bf5ee08325c3deb7571cf000577c5648a09b06116668f6f67573702bd275e3980649569e9439f46244fb6e5c33d485af50c96f05244bb8d4f6429869ec6d7443a453cb7da3b8f5554df364e383703014536b25f5827c81a2bc97767bf69098ce181def30d144c9e8bc4c67a6c7500d50ab2273b8ca1db9adb17a1f6eb966218a71d19f5f5b15d23753bec136fe0bacb4a221a6da7752e0ee901279ed0bab32be6833e2b780dba92bb0f0a676defe7bb023a830667383c8ee40c576e4b65dbed3a23e98aeb04b43edb2e954db4048a7eea86ba2658b43512b46967b9ef18745b55d3a8b5b69f3983a1d0a29dc44c7c9523e349592979ad7ee3a075b485d339dda48c8690fc5b6d147133f891637af9a7cfb749237c57635e3f84fc3ff946c33fd793fcf2a9351d093f40d279cd023547caa1bf1f0d94dbe65acabfbf51a9ff069fe71f9b65285425da0522007f023d6df3cc8f6c131e7048ebeba60d9ffe8c57e20812130dcc92db1fb9916bf585d1df337a46aab0e71c8435618abb06e21ab12bc2edc7a370cd2623a6f340ba9eea1522386b23704d147c679886a6dae277db14e6a29ce0d1736342f748ee267cd22ac23cfe4bd97db99f3e9b47f40d92457ecfde1023a6d1d1bc644e3e36d1524fa004c6bfa1d0a41e5867be82a651958069cf11ec1fe8df8bad836791443910240a3c33115bfa58724e9431c9d94778389f180e767e353f0dd8fb44eb6fc27b9de0bf0fbf095b889258c4aa5f5fef073980fae52443bc3726bc9f8d3959a66d53998a2b4bda3712e6195a7dcc013f880183d1d7eecd0d1717d4e3bd2f5d5ee98e7bb60d2a0a805716b0d55fe75fd544fb4963e1c4c1c840f9f5babafbab7565531651a27928798d3bfa3256bc4e9343cf5233d8d43fee502d40d3fc475df84f4d0fcdb2c3300c5f0e1c8a4d2d820781e3146a6ef0355f0fa2695badd6ceedddf3bd01c7360ab4b8ebaf2cca6ef8572009c3ac912ffb60260c45640505a4791e775030e7199cc5826cbcd4064519cd336ae6bd2ecca5533dc7938443d1f2970c50da8be97f839506de64bebb06720efc3c1a9d6a6e9959a4fb3d5daea937c92f234ac99b14eda671cde1e542b326c59e68c814a88a9a1e1fb77d8769e8135479762417a51b7cf7e149eb16073718721ac8a96d22e10279609697ea0d1b904dac1d25672b310846ba960b756971b52088c733084cae2655fd7b97f4cdf14acadeeccb00bd0531192b9f397ab6eae4f248a53aaa5ea5126d96866b4b04d08940c89b8a03f2e7e1d4ba36881b93aba8f7e755ece6ed4e28685084d821ac4dac8434ffe6d0f9db0343df488e5501ab76bd6a35e5c513ea33c757840b58ce26547e28ff4d3df33be0e28cba41a6fec00c9683df93131eaebd1d92a89053c746ffb8a7588d2f18424cf267ba3f2c1afaace50ee765b13e866065086a215bf7a92ceee1170e478bb64817134429c89592b6da0e9de318d9cecbbf883e223013799489054e6d8ec44a6b4e2c681f3c1a0049a8e4d34545f3c4f45c839edd42a75b7028a624f4ec8e7edb5afbbf3ad9b3d65308864b2533ed9976474493815050c94420ce798642b755f9aef8463042542dd042045fe7b024f0b1684fe83eb6a400815245d22f65f638ec3553afd0e907160001524c6d51e2bff4f8fc9f1a354ae0fa8276631bea10e7de8f7f115a3808fc22e17f8e53c8a5bb93543dc5033940bd20dc108087883e4c63c10341c662151cc9a83d8b332612332", 0x1000}, {&(0x7f0000002780)="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", 0xfc0}, {&(0x7f00000009c0)="9b9195b4bc2be5e590d93d881c30a6b7c885e129539c29d188bb44fe90ebd9428620e1fad4a442f872795b23c8fa8cd7c701a21323c9d11f21f5bc15d21cca40a29058c99a3ea8fe856debc35559f047f07a48b17104e6cfe4ef82b851643c8899d73d828a399e", 0x67}, {&(0x7f0000000a40)="b048d4f9b482144d19549b99157c2fe18e255c31bbddf2e779122137790bb732bf355a5333c3101446ba8f62b180e1e166a1b55a7c371914d7d7dc94c549d338b7fa38a031d9a348c6096f7a8827699bbc3631b0df18783c62c5cc4331927b7d3b8f05", 0x63}], 0xa) read(r3, 0x0, 0x0) 5.230987718s ago: executing program 0 (id=6405): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x238}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000914) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) memfd_create(0x0, 0x0) 5.120854999s ago: executing program 0 (id=6406): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = syz_open_procfs$userns(0x0, &(0x7f0000004000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004040)=@RTM_NEWNSID={0x5c, 0x58, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NETNSA_FD={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8005) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010200"/20, @ANYRES32=r4], 0x20}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 1.834842991s ago: executing program 5 (id=6452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES64=0x0], 0x50) r1 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000380)={0x8000000000000000, 0x9, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) exit(0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000100000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000000000000000001400"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@empty, @broadcast, 0xffffff00, 0xffffff00, 0xd, 0x1, {@mac=@remote, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x6, 0xfff9, 0x5, 0xd9c8, 0xb, 0x9, 'veth0_to_hsr\x00', 'bridge0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x7ff, 0x4}}}, {{@arp={@multicast2, @remote, 0x0, 0xffffffff, 0xa, 0x6, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xc, 0x2, 0x6, 0x65b8, 0x1, 0xfffb, 'veth0_to_bond\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @remote, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f0000000000)=[{0x3, 0xfffd}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a0300000000f5ffffff00010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c"], 0xe8}, 0x1, 0x0, 0x0, 0x4008815}, 0x20040090) semget$private(0x0, 0x6, 0x286) 1.164030842s ago: executing program 4 (id=6471): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) getpgrp(0xffffffffffffffff) 1.162698122s ago: executing program 4 (id=6473): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0xfff5) write(r0, &(0x7f0000000000)="240000001e005f8000400000000000000a000000010000000000080008000100000303ff", 0x24) 1.055250874s ago: executing program 5 (id=6474): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_secret(0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) open$dir(0x0, 0x0, 0x5) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 894.783096ms ago: executing program 4 (id=6477): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000400000}, 0x18) unshare(0x2040400) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 797.248418ms ago: executing program 4 (id=6480): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080012400000ffff111e00000000000000000000002372740000000040b4"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000731000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0xdc050000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x5f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x8000000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5}}, 0x20) unshare(0x40020000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000007000000080000000900000005000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000b1c22e053a40d59c22f70da98305b33c661fd8576d6899cbbd627b2a704ec283a6f9528de9aec4dd3f718b8cfd52bf135984927961dfd8c7ec49ecbcbd4adb1b45ff50dc036df2bb40c4f25bc02432592858f31d12417989bf9ba96669170498ae1d9822119a3f0e4c6bc1ef735a4ac19204dc3fbcbf60000d7166070831341fd79b10bceca8e0a924cd019b758f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000084}, 0x44080) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) 796.977458ms ago: executing program 2 (id=6481): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d00", @ANYRES32=r1, @ANYRES16=r1], 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 613.37142ms ago: executing program 5 (id=6484): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x7ffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(0x0, 0x0, 0x5) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 580.949731ms ago: executing program 1 (id=6485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="9be2320c7c0e9733b6cf6812133aba6cf69487aa020eb265c1c89c17bf2db6ca77b515247aca54449f5223761e440e84118ba7b776afa5a2b77f9a5d1705a3063284286254af8d57b25afcdacd394930c93e614b051fecd2657a0ef807a9fd9d2d6fae", @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) 519.251612ms ago: executing program 4 (id=6486): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 493.331252ms ago: executing program 1 (id=6487): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x3a0f) write(r0, 0x0, 0x0) 477.518222ms ago: executing program 4 (id=6488): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000100), 0x2, 0x55a, &(0x7f0000000600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zM0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrcmadVnbmc8Hbjkn9ybnfnPu9/Tc3BsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG63cr9q7PZkkSz+elfSWu7rN5+rfbz9ueVlyLit68ijhfWt1tfWp4vVSrpQl6fbFQvTdaXlk9cqJbm0rn04vTMzKm3Z6bfe/edgcX6xtl/vv/k9oenvj668t0vdw/dTOJ0HMjXdcbxFK51ViZiIn9PxuL0IxtODaCxnSTZ7h1gU0byPB+LbAw4GCN51gP/f19GRBMYUon8hyHVnge0z+0HdB783Lj3weoJ0Pr4R1c/G4k9rXOjfSvJQ2dG2fnu+ADaz9r49c9bN7MlBvc5BMCGrl2PiJOjo+vHvyQf/zbvZB/bPNqG8Q+2zu1s/vNmt/lPYW3+E13mP/u75O5mbJz/hbsDaKanbP73ftf579pFq/GRvPZCa843lpy/UEmzse3FiDgWY7uz+uOu55xaudPsta5z/pctWfvtuWC+H3dHdz/8nHKpUXqamDvdux7xStf5b7LW/0mX/s/ej7N9tnEkvfVar3Ubx/9sNX+KeL1L/1c6rmglj78+Odk6HibbR8V6f9848nuv9rc7/qz/93U9/tfiH086r9fWn7yNH/f8m/Za91D80f/xvyv5rFXelT92pdRoLExF7Eo+Xv/49IPntuvt7bP4jx19/PjX7fjfGxGf9xn/jcM/v9pX/Kv9H1vd/+Un6v8nL9z56IsferXf3/j3Vqt0LH+kn/Gv3x18mvcOAAAAAAAAdppCRByIpFBcKxcKxeLq/R2HY1+hUqs3jp+vLV4sR+u7suMxVmhf6T7YcT/EVH4/bLs+/Uh9JiIORcS3I3tb9eJsrVLe7uABAAAAAAAAAAAAAAAAAABgh9jf4/v/mT9GtnvvgGfOT37D8Now/wfxS0/AjuT/Pwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/7D8JL/AAAAAAAAAAAAAAAAAAAAAAAAAAAAMFBnz5zJlubK/auzWb18eWlxvnb5RDmtzxeri7PF2drCpeJcrTZXSYuztepGr1ep1S5NTcfilclGWm9M1peWz1Vrixcb5y5US3PpuXRsS6ICAAAAAAAAAAAAAAAAAACA50t9aXm+VKmkCwoKmyqM7ozdUBhwYbtHJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB44L8AAAD//7f3N7o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5984e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x40004) ioctl$sock_bt_hci(r4, 0x400448de, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x19, 0xfffffffffffffffd, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f00000001c0)=0x1, 0x4) pwritev2(r7, &(0x7f0000000000)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x2, 0xced4, 0xc) 431.839423ms ago: executing program 2 (id=6489): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000400000}, 0x18) unshare(0x2040400) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 431.181083ms ago: executing program 5 (id=6490): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000300)=""/138, &(0x7f0000000180)=0x8a) 358.283514ms ago: executing program 5 (id=6491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e00)=@delchain={0x1ac, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x170, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x14c, 0x1, [@m_simple={0xa8, 0x1f, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x9, 0xffffffffffffffff, 0x4, 0x3}}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_per\x00\x03\x00_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x6c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x41, 0x6, "0c667158e5bd4f4c7258693ff73b6255ca1d4908fac16f226d18c88d5659578dff7cbcb14a7b44cbd8f6c32df97313956ada98a747f5cd439ea1206ab1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@noblock_validity}, {@norecovery}, {@mblk_io_submit}, {@noload}, {@resgid}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000003500)=[{&(0x7f0000000080)='C', 0x1}], 0x1) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{0xfe00, 0x0, 0x32000000}, {0xffffffff}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x9, 0x1ff, 0x10, @private1, @private0, 0x40, 0x20, 0xfed, 0xbf94}}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'vxcan1\x00'}) 346.640994ms ago: executing program 1 (id=6492): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) (fail_nth: 8) 305.453915ms ago: executing program 2 (id=6493): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r8, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r9, 0x0) 211.807867ms ago: executing program 1 (id=6494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x8, 0x4, 0xdd7, 0x800, 0x156, 0x3, 0x460, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100001082cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000c0019"], 0x38}}, 0x0) 173.416208ms ago: executing program 1 (id=6495): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2123, 0x0) alarm(0x7ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001f0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x10, 0x6, 0x10001) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x0, 0x10000000, 0x1000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0x57, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) 134.342878ms ago: executing program 2 (id=6496): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) shutdown(r0, 0x1) connect$inet6(r0, 0x0, 0x0) write(r0, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) 54.382509ms ago: executing program 2 (id=6497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB="9be2320c7c0e9733b6cf6812133aba6cf69487aa020eb265c1c89c17bf2db6ca77b515247aca54449f5223761e440e84118ba7b776afa5a2b77f9a5d1705a3063284286254af8d57b25afcdacd394930c93e614b051fecd2657a0ef807a9fd9d2d6fae", @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) 53.64822ms ago: executing program 1 (id=6498): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x101}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000200000072000000100019800c"], 0x38}}, 0x0) (fail_nth: 9) 53.091869ms ago: executing program 5 (id=6499): pipe(0x0) getpriority(0x2, 0x0) setreuid(0xee00, 0x0) syz_read_part_table(0x5df, &(0x7f00000006c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) bind$packet(r1, &(0x7f0000000280)={0x11, 0x11, r2, 0x1, 0x3, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @remote}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) symlinkat(&(0x7f0000002040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) add_key$keyring(&(0x7f00000002c0), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r6) ptrace(0x10, 0x0) r7 = socket(0x1a, 0xa, 0x96) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r7, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x2, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xdf, 0x0, 0x0, 0x0}) 3.43967ms ago: executing program 2 (id=6500): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = getpgid(0xffffffffffffffff) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) r3 = getuid() (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xadb, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff8) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) (rerun: 64) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_clone3(&(0x7f00000007c0)={0x10000, &(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580), {0x37}, &(0x7f00000005c0)=""/205, 0xcd, &(0x7f00000006c0)=""/172, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4}, 0x58) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0x0, 0x800, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) (async, rerun: 32) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) (async, rerun: 32) r15 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0) r16 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r17 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x44000, 0x0) (async) r18 = socket$phonet(0x23, 0x2, 0x1) (async) r19 = epoll_create(0x6) r20 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/vmstat\x00', 0x0, 0x0) (async) r21 = syz_open_dev$usbfs(&(0x7f00000023c0), 0x8, 0x88a00) (async) r22 = socket$rxrpc(0x21, 0x2, 0x2) (async) r23 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) r24 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r26 = socket$phonet(0x23, 0x2, 0x1) (async) r27 = perf_event_open$cgroup(&(0x7f0000002480)={0x0, 0x80, 0x3, 0x2, 0x1, 0x5, 0x0, 0x3, 0x50, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x6}, 0x0, 0x6, 0xa364, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000002500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xc4}}, './file0\x00'}) sendmmsg$unix(r0, &(0x7f0000002f80)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)="d1e8561b26c4d7b4d72516cce0cfaa4b9b37c4cf2052f3635ace6425ab2cbdb4ce92316b1c4c7ba37d43df54cdde09c475ee7b75b13ecb5cf72d78db07c396a0fc4846167281caff12f72f27319ada017671947bb9743304aff35292df5dd22f28cd84405029a3e861bc4ef01db69248782868fda2a03e9499cc3c04ef7f8f416d009f36268059b0d7058c7e9d9d3a8625cec4791e52", 0x96}, {&(0x7f0000000140)="7e3537cab744a15d19099fb283805d395b4fdc0c313103e58b34c8f6f151469bc9aecdf341c572b71365995b68207f07ce23fb284c268ac5146844ecc7167df01595de21572f9d81465bb9825678cd91f1ec96cfba18ba55", 0x58}, {&(0x7f00000001c0)="edb2f15602d527f279216e5595d0b839692104b32424f57ed4721562685754da2ec1f93def46c2a1dafef18e0bf7fdec30e30937f63feb0ff4f655747d9f32e9043d52a774e2b191c0cea77d2cef6bd733a99d363378f88b5fd19a4cab8efc74e1fdfdce0119c0cac251601cfa26f9722acbcc908092d5e0829128c292a987808c9812cb86ada51f505f21389ade1e8cdd950ae9229501d3941c6e7916ac1ce365eed25051a8a8dc2bd408f3d8c84e67b2c83ab91060cb59e60336b8e054d237f0f27980076940ff32bbd66e3945385f44dbe4012cf603ce008346364910938d79c11575c0dfa62ef197cce24045019919378e0a8059", 0xf6}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3}}}, @rights={{0x30, 0x1, 0x1, [r4, r5, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r13}}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @rights={{0x34, 0x1, 0x1, [r15, 0xffffffffffffffff, r16, r17, r18, 0xffffffffffffffff, 0xffffffffffffffff, r19, r20]}}], 0x118, 0x20004000}}, {{&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000dc0)="b3c39686ad19e11faeb072c0f6c141a5d7508692ed867967df257b0f26d1da317668f9bed1a48c62ffeffe094b922bd822d0a55ede6ed2a8764d7c8242753de07bc5070ee520bb725f6187e175aabed8fd9e2db52d20700a6c9114cf3c8f0fbd09dc", 0x62}, {&(0x7f0000000e40)="aca8e024c29524298818d41ff5baff6c71e926c70f47550f78f3fd05d3cac9de5dd86b8bfafc0e516d46474c1e10c6c90e8b6df2bafd3868d5c314f0a2110f5a1bb1771d4953824c35ababa750074e319115940d207dc57f1483e3da1d46ab3fc95126917b576cbdca598fd4b7c37d1e3af6a1382ab03755287b1d10901cafd2ff6484b94c23d959eb65836b5f04b5c7c9fb19bcd0d02b2a85a297bd722e2cc853d263cae6ac0f3bab73e4593869570a8902883650f18d722f96bfeff88f77889425302fb1f48623439e429e", 0xcc}, {&(0x7f0000000f40)="e20a5c3e37f306e4aae500c7d476909b78a28c01d0d43235044fb483d7d0891cb2b328f7026ec689547304e26f24b48185f8c9630d832c85d8d3bacc27cb3922e231dc97c46c4365fda18dee538462fe074857b61074713a00c731255b8b385fec3ef1b346c750566d07324a96e3c053a1c991faecc024f72cb76589c9278b58c968ef23649996b0c61960c99d5855c66e1d9f157a96d70fb646617659d1c3b39030d4", 0xa3}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)}], 0x5, &(0x7f00000020c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x800}}, {{&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002180)="21dea2496f2911463a136c9f04324a570b1c27510ee03761f221ce07120c7da0cdd02b10233022ad7e025c3d5b901fd57dacf851bd12373411c4aee5b6a7dc437a77a9d412f339154340ebfa2c10486c8aeadb3ab684e23ca81a9d5c87887018a15880e185c1408ed5a1ce2b54a408117fea5c88d17677fe395722d1ed4b2c810e", 0x81}, {&(0x7f0000002240)="1097c84aae834f273d7e2c8602db0ad6585d41b751de60bb0c9446cf3010923e49818b9a05f9620092ba001d634b2eecfaf0957c0bd4fcebe2a749eb7e8c451000d1f1cbcc5fa9619734367cfb83017ed8e1f3b9b51dea5d05f7cee7062504bc3f9807138fa11b075b2fd943ea90ea2597935edd5a620b6eab188971bd985ccdb7bffa1234f627d7004e4bfa50a651c9a8e130969541", 0x96}, {&(0x7f0000002300)="ca4f733b77835bdb1e61eec64ef3961dd22703fe8d8e94dcb09d4289", 0x1c}, {&(0x7f0000002340)="d3e6ff4f7b241f2dd0ca998b0cb78f1d73e2d4117d5343b0364c27ed85621c6718956f20305b51cee75360ec88e7f786066940", 0x33}], 0x4, &(0x7f0000002e40)=[@rights={{0x24, 0x1, 0x1, [r21, r22, 0xffffffffffffffff, r23, r24]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r25}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r26, r27, r28, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128, 0x8080}}], 0x3, 0x20044880) 0s ago: executing program 0 (id=6421): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) read(r0, &(0x7f0000000100)=""/208, 0xd0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x106, 0x2}}, 0x20) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000480)=0x800fff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x77359400}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r9, 0x29, 0x4b, 0x0, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): ce batadv_slave_1 (retrying later): interface not active [ 303.943728][T20598] xt_nfacct: accounting object `syz1' does not exists [ 303.950675][T20543] hsr_slave_0: entered promiscuous mode [ 303.954104][T20598] loop0: detected capacity change from 0 to 512 [ 303.967016][T20543] hsr_slave_1: entered promiscuous mode [ 303.967037][T20598] EXT4-fs (loop0): orphan cleanup on readonly fs [ 303.973236][T20543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.986867][T20543] Cannot create hsr debugfs directory [ 303.987042][T20598] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.5924: bad orphan inode 13 [ 304.005588][T20598] ext4_test_bit(bit=12, block=18) = 1 [ 304.011166][T20598] is_bad_inode(inode)=0 [ 304.015599][T20598] NEXT_ORPHAN(inode)=2130706432 [ 304.020585][T20598] max_ino=32 [ 304.024027][T20598] i_nlink=1 [ 304.030838][T20598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.049229][T20598] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 304.068678][T20598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5924: bg 0: block 248: padding at end of block bitmap is not set [ 304.092748][T20598] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5924: Failed to acquire dquot type 1 [ 304.121398][T20598] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 304.148108][T20543] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.196131][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.213455][T20543] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.259343][T20543] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.308343][T20618] xt_nfacct: accounting object `syz1' does not exists [ 304.319802][T20543] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.341678][T20618] binfmt_misc: register: failed to install interpreter file ./file2 [ 304.361380][T20620] bond1: entered promiscuous mode [ 304.366600][T20620] bond1: entered allmulticast mode [ 304.372097][T20620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.382248][T20620] bond1 (unregistering): Released all slaves [ 304.451106][T20543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.470283][T20543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.488769][T20543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.517145][T20543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.613929][T20543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.636744][T20543] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.649456][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.656867][ T9650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.683167][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.690371][ T9650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.719389][T20543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.729860][T20543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.780169][T20660] loop5: detected capacity change from 0 to 128 [ 304.786924][T20660] EXT4-fs: Ignoring removed nobh option [ 304.794374][T20660] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 304.810569][T20660] ext4 filesystem being mounted at /524/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.849881][T13507] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.851724][T20543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.895523][T20674] loop7: detected capacity change from 0 to 16384 [ 304.967339][ T24] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 305.018468][T20689] SET target dimension over the limit! [ 305.021396][T20688] netlink: 'syz.2.5950': attribute type 3 has an invalid length. [ 305.034842][T20689] serio: Serial port pts0 [ 305.050096][T20688] netlink: 'syz.2.5950': attribute type 3 has an invalid length. [ 305.120587][T20543] veth0_vlan: entered promiscuous mode [ 305.141385][T20543] veth1_vlan: entered promiscuous mode [ 305.147249][T20701] loop5: detected capacity change from 0 to 2048 [ 305.173718][T20543] veth0_macvtap: entered promiscuous mode [ 305.205122][T20543] veth1_macvtap: entered promiscuous mode [ 305.224176][T20543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.238470][T20701] loop5: unable to read partition table [ 305.247501][T20543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.256383][T20701] loop5: partition table beyond EOD, truncated [ 305.263157][T20701] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 305.273717][T20543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.284180][T20543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.294445][T20543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.303662][T20543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.385878][T20713] tipc: Started in network mode [ 305.390945][T20713] tipc: Node identity 00000000000000000000ffffac1e0105, cluster identity 4711 [ 305.390963][T20713] tipc: Enabling of bearer rejected, failed to enable media [ 305.424450][T20719] loop7: detected capacity change from 0 to 16384 [ 305.475685][T20719] I/O error, dev loop7, sector 2944 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 305.485484][T20719] buffer_io_error: 6 callbacks suppressed [ 305.485496][T20719] Buffer I/O error on dev loop7, logical block 368, lost async page write [ 305.499966][T20719] Buffer I/O error on dev loop7, logical block 369, lost async page write [ 305.508554][T20719] Buffer I/O error on dev loop7, logical block 370, lost async page write [ 305.517431][T20719] Buffer I/O error on dev loop7, logical block 371, lost async page write [ 305.525967][T20719] Buffer I/O error on dev loop7, logical block 372, lost async page write [ 305.534730][T20719] Buffer I/O error on dev loop7, logical block 373, lost async page write [ 305.543362][T20719] Buffer I/O error on dev loop7, logical block 374, lost async page write [ 305.551903][T20719] Buffer I/O error on dev loop7, logical block 375, lost async page write [ 305.560432][T20719] Buffer I/O error on dev loop7, logical block 376, lost async page write [ 305.569134][T20719] Buffer I/O error on dev loop7, logical block 377, lost async page write [ 305.607341][T20731] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 305.614496][T20731] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 305.622299][T20731] vhci_hcd vhci_hcd.0: Device attached [ 305.630716][T20732] vhci_hcd: connection closed [ 305.630943][ T9612] vhci_hcd: stop threads [ 305.640590][ T9612] vhci_hcd: release socket [ 305.645568][ T9612] vhci_hcd: disconnect device [ 305.711223][T20739] netlink: 'syz.5.5966': attribute type 10 has an invalid length. [ 305.724735][T20739] loop5: detected capacity change from 0 to 1024 [ 305.750480][T20739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.775498][T20739] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 305.790209][T20738] EXT4-fs (loop5): pa ffff888106a688c0: logic 48, phys. 177, len 21 [ 305.798530][T20738] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 305.817328][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.844505][T20748] FAULT_INJECTION: forcing a failure. [ 305.844505][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 305.857388][T20748] CPU: 0 UID: 0 PID: 20748 Comm: syz.0.5968 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 305.857421][T20748] Tainted: [W]=WARN [ 305.857428][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.857440][T20748] Call Trace: [ 305.857446][T20748] [ 305.857454][T20748] __dump_stack+0x1d/0x30 [ 305.857475][T20748] dump_stack_lvl+0xe8/0x140 [ 305.857532][T20748] dump_stack+0x15/0x1b [ 305.857592][T20748] should_fail_ex+0x265/0x280 [ 305.857628][T20748] should_failslab+0x8c/0xb0 [ 305.857652][T20748] kmem_cache_alloc_node_noprof+0x57/0x320 [ 305.857680][T20748] ? __alloc_skb+0x101/0x320 [ 305.857762][T20748] __alloc_skb+0x101/0x320 [ 305.857787][T20748] __ip6_append_data+0x194b/0x23d0 [ 305.857847][T20748] ? __pfx_raw6_getfrag+0x10/0x10 [ 305.857869][T20748] ? xfrm_lookup_with_ifid+0x10c2/0x1360 [ 305.857891][T20748] ? __rcu_read_unlock+0x4f/0x70 [ 305.857908][T20748] ? __pfx_ip6_mtu+0x10/0x10 [ 305.857931][T20748] ? ip6_mtu+0xf5/0x120 [ 305.857952][T20748] ip6_append_data+0x13b/0x250 [ 305.857977][T20748] ? __pfx_raw6_getfrag+0x10/0x10 [ 305.857997][T20748] rawv6_sendmsg+0xdba/0xf70 [ 305.858103][T20748] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 305.858130][T20748] inet_sendmsg+0xc5/0xd0 [ 305.858149][T20748] __sock_sendmsg+0x102/0x180 [ 305.858170][T20748] sock_write_iter+0x165/0x1b0 [ 305.858226][T20748] do_iter_readv_writev+0x421/0x4c0 [ 305.858250][T20748] vfs_writev+0x2df/0x8b0 [ 305.858396][T20748] do_writev+0xe7/0x210 [ 305.858417][T20748] __x64_sys_writev+0x45/0x50 [ 305.858434][T20748] x64_sys_call+0x2006/0x2fb0 [ 305.858452][T20748] do_syscall_64+0xd2/0x200 [ 305.858471][T20748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.858518][T20748] ? clear_bhb_loop+0x40/0x90 [ 305.858535][T20748] ? clear_bhb_loop+0x40/0x90 [ 305.858554][T20748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.858574][T20748] RIP: 0033:0x7f403ccfe929 [ 305.858588][T20748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.858603][T20748] RSP: 002b:00007f403b367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 305.858690][T20748] RAX: ffffffffffffffda RBX: 00007f403cf25fa0 RCX: 00007f403ccfe929 [ 305.858700][T20748] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 305.858711][T20748] RBP: 00007f403b367090 R08: 0000000000000000 R09: 0000000000000000 [ 305.858745][T20748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.858759][T20748] R13: 0000000000000000 R14: 00007f403cf25fa0 R15: 00007ffc97e9dd88 [ 305.858779][T20748] [ 306.260801][T20764] netlink: 'syz.0.5975': attribute type 3 has an invalid length. [ 306.269211][T20764] netlink: 'syz.0.5975': attribute type 3 has an invalid length. [ 306.309234][T20770] FAULT_INJECTION: forcing a failure. [ 306.309234][T20770] name failslab, interval 1, probability 0, space 0, times 0 [ 306.321989][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.0.5976 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 306.322091][T20770] Tainted: [W]=WARN [ 306.322095][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.322102][T20770] Call Trace: [ 306.322107][T20770] [ 306.322113][T20770] __dump_stack+0x1d/0x30 [ 306.322126][T20770] dump_stack_lvl+0xe8/0x140 [ 306.322176][T20770] dump_stack+0x15/0x1b [ 306.322185][T20770] should_fail_ex+0x265/0x280 [ 306.322202][T20770] should_failslab+0x8c/0xb0 [ 306.322334][T20770] __kvmalloc_node_noprof+0x123/0x4e0 [ 306.322350][T20770] ? nf_hook_entries_grow+0x1bc/0x450 [ 306.322367][T20770] nf_hook_entries_grow+0x1bc/0x450 [ 306.322450][T20770] __nf_register_net_hook+0x18e/0x480 [ 306.322514][T20770] nf_register_net_hook+0x88/0x130 [ 306.322530][T20770] nf_register_net_hooks+0x44/0x150 [ 306.322547][T20770] nf_ct_netns_do_get+0x188/0x380 [ 306.322640][T20770] nf_ct_netns_get+0x87/0xc0 [ 306.322714][T20770] xt_ct_tg_check+0x7d/0x660 [ 306.322795][T20770] xt_ct_tg_check_v2+0x4a/0x60 [ 306.322810][T20770] xt_check_target+0x28d/0x4c0 [ 306.322827][T20770] ? strnlen+0x28/0x50 [ 306.322838][T20770] ? strcmp+0x22/0x50 [ 306.322870][T20770] ? xt_find_target+0x1cd/0x200 [ 306.322890][T20770] translate_table+0xcf5/0x1070 [ 306.322909][T20770] do_ip6t_set_ctl+0x678/0x840 [ 306.322993][T20770] nf_setsockopt+0x199/0x1b0 [ 306.323005][T20770] ipv6_setsockopt+0x11a/0x130 [ 306.323018][T20770] udpv6_setsockopt+0x99/0xb0 [ 306.323061][T20770] sock_common_setsockopt+0x69/0x80 [ 306.323167][T20770] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.323180][T20770] __sys_setsockopt+0x184/0x200 [ 306.323224][T20770] __x64_sys_setsockopt+0x64/0x80 [ 306.323271][T20770] x64_sys_call+0x2bd5/0x2fb0 [ 306.323336][T20770] do_syscall_64+0xd2/0x200 [ 306.323346][T20770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 306.323360][T20770] ? clear_bhb_loop+0x40/0x90 [ 306.323422][T20770] ? clear_bhb_loop+0x40/0x90 [ 306.323434][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.323446][T20770] RIP: 0033:0x7f403ccfe929 [ 306.323455][T20770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.323481][T20770] RSP: 002b:00007f403b367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.323493][T20770] RAX: ffffffffffffffda RBX: 00007f403cf25fa0 RCX: 00007f403ccfe929 [ 306.323500][T20770] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 306.323507][T20770] RBP: 00007f403b367090 R08: 0000000000000386 R09: 0000000000000000 [ 306.323514][T20770] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.323521][T20770] R13: 0000000000000000 R14: 00007f403cf25fa0 R15: 00007ffc97e9dd88 [ 306.323531][T20770] [ 306.627051][T20772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5978'. [ 306.673558][T20776] loop7: detected capacity change from 0 to 16384 [ 306.681839][T20774] sd 0:0:1:0: device reset [ 306.689247][T20769] netlink: 'syz.4.5977': attribute type 10 has an invalid length. [ 306.690175][T20772] syzkaller1: entered promiscuous mode [ 306.697102][T20769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5977'. [ 306.702642][T20772] syzkaller1: entered allmulticast mode [ 306.712204][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 306.712219][ T29] audit: type=1326 audit(1751371632.576:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 306.747025][ T29] audit: type=1326 audit(1751371632.576:16206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 306.770718][ T29] audit: type=1326 audit(1751371632.576:16207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f403ccfd290 code=0x7ffc0000 [ 306.794861][ T29] audit: type=1326 audit(1751371632.576:16208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 306.818544][ T29] audit: type=1326 audit(1751371632.576:16209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 306.843250][ T24] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 306.871856][T20769] dummy0: entered promiscuous mode [ 306.877585][T20769] bridge0: port 3(dummy0) entered blocking state [ 306.884067][T20769] bridge0: port 3(dummy0) entered disabled state [ 306.921652][T20782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5981'. [ 306.925542][T20769] dummy0: entered allmulticast mode [ 306.936000][ T29] audit: type=1326 audit(1751371632.626:16210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 306.959911][ T29] audit: type=1326 audit(1751371632.626:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 306.983722][ T29] audit: type=1326 audit(1751371632.626:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20773 comm="syz.0.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 307.007349][ T29] audit: type=1400 audit(1751371632.796:16213): avc: denied { create } for pid=20771 comm="syz.2.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 307.027174][ T29] audit: type=1400 audit(1751371632.796:16214): avc: denied { setopt } for pid=20771 comm="syz.2.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 307.047584][T20769] bridge0: port 3(dummy0) entered blocking state [ 307.054092][T20769] bridge0: port 3(dummy0) entered forwarding state [ 307.080677][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5981'. [ 307.092580][T20782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.092643][T20789] atomic_op ffff88812fc48528 conn xmit_atomic 0000000000000000 [ 307.143593][T20789] loop4: detected capacity change from 0 to 2048 [ 307.199114][T20789] loop4: p4 < > [ 307.347053][T20807] xt_nfacct: accounting object `syz1' does not exists [ 307.361160][T20807] binfmt_misc: register: failed to install interpreter file ./file2 [ 307.391926][T20809] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20809 comm=syz.4.5992 [ 307.445721][T20818] netlink: 'syz.4.5996': attribute type 3 has an invalid length. [ 307.454173][T20818] netlink: 'syz.4.5996': attribute type 3 has an invalid length. [ 307.576207][T20835] xt_nfacct: accounting object `syz1' does not exists [ 307.588183][T20835] loop0: detected capacity change from 0 to 512 [ 307.598834][T20835] EXT4-fs (loop0): orphan cleanup on readonly fs [ 307.609912][T20835] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.6003: bad orphan inode 13 [ 307.620705][T20835] ext4_test_bit(bit=12, block=18) = 1 [ 307.626178][T20835] is_bad_inode(inode)=0 [ 307.630461][T20835] NEXT_ORPHAN(inode)=2130706432 [ 307.635319][T20835] max_ino=32 [ 307.638655][T20835] i_nlink=1 [ 307.645174][T20835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.659686][T20835] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 307.692189][T20835] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6003: bg 0: block 248: padding at end of block bitmap is not set [ 307.726347][T20835] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6003: Failed to acquire dquot type 1 [ 307.747932][T20835] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 307.799511][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.818810][T20862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6009'. [ 307.834846][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6009'. [ 307.852014][T20865] loop0: detected capacity change from 0 to 1024 [ 307.871555][T20865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.884024][T20865] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.968686][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.997691][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6020'. [ 308.013568][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6020'. [ 308.024797][T20886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.113981][T20894] loop7: detected capacity change from 0 to 16384 [ 308.171983][T20894] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 308.183890][T20894] I/O error, dev loop7, sector 3584 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 308.233389][T20902] IPv6: Can't replace route, no match found [ 308.239579][T20902] FAULT_INJECTION: forcing a failure. [ 308.239579][T20902] name failslab, interval 1, probability 0, space 0, times 0 [ 308.240726][T20903] 9pnet_fd: Insufficient options for proto=fd [ 308.252505][T20902] CPU: 0 UID: 0 PID: 20902 Comm: syz.0.6031 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 308.252542][T20902] Tainted: [W]=WARN [ 308.252548][T20902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.252561][T20902] Call Trace: [ 308.252568][T20902] [ 308.252575][T20902] __dump_stack+0x1d/0x30 [ 308.252598][T20902] dump_stack_lvl+0xe8/0x140 [ 308.252620][T20902] dump_stack+0x15/0x1b [ 308.252637][T20902] should_fail_ex+0x265/0x280 [ 308.252667][T20902] should_failslab+0x8c/0xb0 [ 308.252689][T20902] kmem_cache_alloc_node_noprof+0x57/0x320 [ 308.252790][T20902] ? __alloc_skb+0x101/0x320 [ 308.252818][T20902] __alloc_skb+0x101/0x320 [ 308.252845][T20902] netlink_ack+0xfd/0x500 [ 308.253026][T20902] netlink_rcv_skb+0x192/0x220 [ 308.253054][T20902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.253082][T20902] rtnetlink_rcv+0x1c/0x30 [ 308.253130][T20902] netlink_unicast+0x59e/0x670 [ 308.253159][T20902] netlink_sendmsg+0x58b/0x6b0 [ 308.253245][T20902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.253264][T20902] __sock_sendmsg+0x145/0x180 [ 308.253295][T20902] ____sys_sendmsg+0x31e/0x4e0 [ 308.253328][T20902] ___sys_sendmsg+0x17b/0x1d0 [ 308.253399][T20902] __x64_sys_sendmsg+0xd4/0x160 [ 308.253433][T20902] x64_sys_call+0x2999/0x2fb0 [ 308.253454][T20902] do_syscall_64+0xd2/0x200 [ 308.253471][T20902] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.253499][T20902] ? clear_bhb_loop+0x40/0x90 [ 308.253519][T20902] ? clear_bhb_loop+0x40/0x90 [ 308.253550][T20902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.253650][T20902] RIP: 0033:0x7f403ccfe929 [ 308.253666][T20902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.253682][T20902] RSP: 002b:00007f403b367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.253701][T20902] RAX: ffffffffffffffda RBX: 00007f403cf25fa0 RCX: 00007f403ccfe929 [ 308.253735][T20902] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 308.253758][T20902] RBP: 00007f403b367090 R08: 0000000000000000 R09: 0000000000000000 [ 308.253770][T20902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.253782][T20902] R13: 0000000000000000 R14: 00007f403cf25fa0 R15: 00007ffc97e9dd88 [ 308.253801][T20902] [ 308.892020][T20934] loop7: detected capacity change from 0 to 16384 [ 308.950139][ T24] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 309.002664][T20939] openvswitch: netlink: Message has 6 unknown bytes. [ 309.270562][T20950] loop0: detected capacity change from 0 to 256 [ 309.284816][T20950] FAT-fs (loop0): Directory bread(block 64) failed [ 309.291959][T20950] FAT-fs (loop0): Directory bread(block 65) failed [ 309.298613][T20950] FAT-fs (loop0): Directory bread(block 66) failed [ 309.305265][T20950] FAT-fs (loop0): Directory bread(block 67) failed [ 309.313376][T20950] FAT-fs (loop0): Directory bread(block 68) failed [ 309.320368][T20950] FAT-fs (loop0): Directory bread(block 69) failed [ 309.327075][T20950] FAT-fs (loop0): Directory bread(block 70) failed [ 309.335281][T20950] FAT-fs (loop0): Directory bread(block 71) failed [ 309.341896][T20950] FAT-fs (loop0): Directory bread(block 72) failed [ 309.348526][T20950] FAT-fs (loop0): Directory bread(block 73) failed [ 309.359804][T20950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6048'. [ 309.396294][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6050'. [ 309.408473][T20959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.447315][T20965] loop4: detected capacity change from 0 to 2048 [ 309.469030][T20965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.490758][T20965] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.6053: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 309.518992][T20965] EXT4-fs (loop4): Remounting filesystem read-only [ 309.526006][T20965] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 309.535784][T20965] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 309.558146][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.592368][T20971] xt_nfacct: accounting object `syz1' does not exists [ 309.611262][T20971] loop4: detected capacity change from 0 to 512 [ 309.619620][T20971] EXT4-fs (loop4): orphan cleanup on readonly fs [ 309.626454][T20971] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.6054: bad orphan inode 13 [ 309.637990][T20971] ext4_test_bit(bit=12, block=18) = 1 [ 309.643500][T20971] is_bad_inode(inode)=0 [ 309.647837][T20971] NEXT_ORPHAN(inode)=2130706432 [ 309.652791][T20971] max_ino=32 [ 309.656044][T20971] i_nlink=1 [ 309.677126][T20971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 309.707743][T20971] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 309.760968][T20971] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6054: bg 0: block 248: padding at end of block bitmap is not set [ 309.785194][T20971] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6054: Failed to acquire dquot type 1 [ 309.814893][T20971] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 309.872322][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.097859][T20993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.179480][T20997] loop5: detected capacity change from 0 to 1024 [ 310.221566][T20997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.239292][T20997] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.393236][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.447776][T21025] xt_nfacct: accounting object `syz1' does not exists [ 310.485871][T21025] loop4: detected capacity change from 0 to 512 [ 310.499365][T21029] netlink: 'syz.1.6077': attribute type 10 has an invalid length. [ 310.507951][T21025] EXT4-fs (loop4): orphan cleanup on readonly fs [ 310.522556][T21025] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.6076: bad orphan inode 13 [ 310.563546][T21025] ext4_test_bit(bit=12, block=18) = 1 [ 310.569068][T21025] is_bad_inode(inode)=0 [ 310.573222][T21025] NEXT_ORPHAN(inode)=2130706432 [ 310.578140][T21025] max_ino=32 [ 310.581431][T21025] i_nlink=1 [ 310.608412][T21025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.645677][T21025] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 310.680731][T21025] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6076: bg 0: block 248: padding at end of block bitmap is not set [ 310.707317][T21025] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6076: Failed to acquire dquot type 1 [ 310.732423][T21025] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 310.836520][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.021085][T21048] loop0: detected capacity change from 0 to 164 [ 311.032958][T21048] iso9660: Unknown parameter 'tlk<4vNj(o 7uWB8"ܗOA%mB+\kQk3ƽR% ]:-&K.Z[J{`JsNdaE|}ʀ;5M'z蛯oe(A?)l;ŭ3:dVnމ01777777777777777777777' [ 311.109056][T21056] loop0: detected capacity change from 0 to 1024 [ 311.121761][T21056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.134305][T21056] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.180508][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.300455][T21065] loop0: detected capacity change from 0 to 2048 [ 311.394484][T21065] loop0: unable to read partition table [ 311.401845][T21065] loop0: partition table beyond EOD, truncated [ 311.408129][T21065] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 311.446096][T21069] netlink: 'syz.0.6091': attribute type 10 has an invalid length. [ 311.462218][T21069] loop0: detected capacity change from 0 to 1024 [ 311.482056][T21069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.517895][T21069] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 311.518191][T21077] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21077 comm=syz.2.6094 [ 311.546198][T21068] EXT4-fs (loop0): pa ffff88810697ee00: logic 48, phys. 177, len 21 [ 311.553167][T21079] loop5: detected capacity change from 0 to 1024 [ 311.554336][T21068] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 311.581251][T21079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.597838][T21079] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.6095: Allocating blocks 385-513 which overlap fs metadata [ 311.616301][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.633984][T21087] loop7: detected capacity change from 0 to 16384 [ 311.645596][T21079] __nla_validate_parse: 7 callbacks suppressed [ 311.645612][T21079] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6095'. [ 311.670478][T21078] EXT4-fs (loop5): pa ffff888106a689a0: logic 16, phys. 129, len 24 [ 311.678659][T21078] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 311.694452][ T24] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 311.711400][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.720794][ T29] kauditd_printk_skb: 361 callbacks suppressed [ 311.720886][ T29] audit: type=1326 audit(1751371637.615:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.750583][ T29] audit: type=1326 audit(1751371637.615:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.774286][ T29] audit: type=1326 audit(1751371637.615:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.797701][ T29] audit: type=1326 audit(1751371637.615:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.821619][ T29] audit: type=1326 audit(1751371637.615:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.836033][T21094] sd 0:0:1:0: device reset [ 311.845107][ T29] audit: type=1326 audit(1751371637.615:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.874776][ T29] audit: type=1326 audit(1751371637.615:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.898339][ T29] audit: type=1326 audit(1751371637.615:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.922103][ T29] audit: type=1326 audit(1751371637.615:16578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.945825][ T29] audit: type=1326 audit(1751371637.615:16579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21090 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403ccfe929 code=0x7ffc0000 [ 311.988191][T21099] loop5: detected capacity change from 0 to 2048 [ 312.053132][T21099] loop5: unable to read partition table [ 312.058893][T21099] loop5: partition table beyond EOD, truncated [ 312.065101][T21099] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 312.112783][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6107'. [ 312.126006][T21108] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21108 comm=syz.5.6107 [ 312.191181][T21118] loop5: detected capacity change from 0 to 164 [ 312.197782][T21118] iso9660: Unknown parameter 'tlk<4vNj(o 7uWB8"ܗOA%mB+\kQk3ƽR% ]:-&K.Z[J{`JsNdaE|}ʀ;5M'z蛯oe(A?)l;ŭ3:dVnމ01777777777777777777777' [ 312.227698][T21119] loop4: detected capacity change from 0 to 1024 [ 312.260418][T21119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.272959][T21119] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.667148][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.711794][T21148] netlink: 'syz.4.6122': attribute type 10 has an invalid length. [ 312.721723][T21148] batman_adv: batadv0: Adding interface: team0 [ 312.727910][T21148] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.753180][T21148] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 312.768482][T21148] loop4: detected capacity change from 0 to 1024 [ 312.781918][T21148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.806726][T21148] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 312.822210][T21147] EXT4-fs (loop4): pa ffff88810697ef50: logic 48, phys. 177, len 21 [ 312.825833][T21153] loop0: detected capacity change from 0 to 1024 [ 312.830282][T21147] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 312.855238][T21153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.855733][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.871394][T21153] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.6123: Allocating blocks 385-513 which overlap fs metadata [ 312.900705][T21153] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6123'. [ 312.914484][T21152] EXT4-fs (loop0): pa ffff888106a68850: logic 16, phys. 129, len 24 [ 312.922594][T21152] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 312.936946][T21157] loop4: detected capacity change from 0 to 1024 [ 312.947940][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.975458][T21157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.011789][T21157] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.030605][T21170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.035667][T21172] loop7: detected capacity change from 0 to 16384 [ 313.050499][T21170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.113552][T21172] I/O error, dev loop7, sector 2304 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 313.123398][T21172] buffer_io_error: 22 callbacks suppressed [ 313.123412][T21172] Buffer I/O error on dev loop7, logical block 288, lost async page write [ 313.137919][T21172] Buffer I/O error on dev loop7, logical block 289, lost async page write [ 313.146552][T21172] Buffer I/O error on dev loop7, logical block 290, lost async page write [ 313.155106][T21172] Buffer I/O error on dev loop7, logical block 291, lost async page write [ 313.163641][T21172] Buffer I/O error on dev loop7, logical block 292, lost async page write [ 313.172201][T21172] Buffer I/O error on dev loop7, logical block 293, lost async page write [ 313.180744][T21172] Buffer I/O error on dev loop7, logical block 294, lost async page write [ 313.189434][T21172] Buffer I/O error on dev loop7, logical block 295, lost async page write [ 313.198017][T21172] Buffer I/O error on dev loop7, logical block 296, lost async page write [ 313.206867][T21172] Buffer I/O error on dev loop7, logical block 297, lost async page write [ 313.259907][ T9667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:61: bg 0: block 393: padding at end of block bitmap is not set [ 313.278460][T21184] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 313.287067][ T9667] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 313.299757][ T9667] EXT4-fs (loop4): This should not happen!! Data will be lost [ 313.299757][ T9667] [ 313.318813][T21188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.333913][T21188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.343636][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.703458][T21207] loop4: detected capacity change from 0 to 1024 [ 313.727261][T21207] EXT4-fs: Ignoring removed nobh option [ 313.733244][T21207] EXT4-fs: Ignoring removed bh option [ 313.750448][T21211] loop7: detected capacity change from 0 to 16384 [ 313.762155][T21207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.784581][T21207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6143'. [ 313.805917][T21207] syzkaller1: entered promiscuous mode [ 313.811538][T21207] syzkaller1: entered allmulticast mode [ 313.817311][ T78] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 313.942181][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.954323][T21220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6148'. [ 313.975024][T21223] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6150'. [ 313.986527][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6150'. [ 314.004335][T21220] syzkaller1: entered promiscuous mode [ 314.009973][T21220] syzkaller1: entered allmulticast mode [ 314.038496][T21228] gtp0: entered promiscuous mode [ 314.072670][T21228] loop5: detected capacity change from 0 to 512 [ 314.104140][T21228] EXT4-fs (loop5): too many log groups per flexible block group [ 314.111897][T21228] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 314.145807][T21228] EXT4-fs (loop5): mount failed [ 314.164034][T21238] xt_nfacct: accounting object `syz1' does not exists [ 314.186793][T21238] binfmt_misc: register: failed to install interpreter file ./file2 [ 314.300899][T21258] loop5: detected capacity change from 0 to 1024 [ 314.311152][T21258] EXT4-fs: Ignoring removed nobh option [ 314.317020][T21258] EXT4-fs: Ignoring removed bh option [ 314.331425][T21258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.353160][T21257] loop4: detected capacity change from 0 to 164 [ 314.361890][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6164'. [ 314.371333][T21257] iso9660: Unknown parameter 'tlk<4vNj(o 7uWB8"ܗOA%mB+\kQk3ƽR% ]:-&K.Z[J{`JsNdaE|}ʀ;5M'z蛯oe(A?)l;ŭ3:dVnމ01777777777777777777777' [ 314.403488][T21258] syzkaller1: entered promiscuous mode [ 314.409021][T21258] syzkaller1: entered allmulticast mode [ 314.422759][T21264] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6165'. [ 314.563458][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.588779][T21277] xt_nfacct: accounting object `syz1' does not exists [ 314.616383][T21277] loop0: detected capacity change from 0 to 512 [ 314.652335][T21277] EXT4-fs (loop0): orphan cleanup on readonly fs [ 314.664925][T21277] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.6172: bad orphan inode 13 [ 314.705416][T21277] ext4_test_bit(bit=12, block=18) = 1 [ 314.710951][T21277] is_bad_inode(inode)=0 [ 314.715433][T21277] NEXT_ORPHAN(inode)=2130706432 [ 314.720347][T21277] max_ino=32 [ 314.723546][T21277] i_nlink=1 [ 314.739760][T21290] loop4: detected capacity change from 0 to 1024 [ 314.746711][T21290] EXT4-fs: Ignoring removed oldalloc option [ 314.753908][T21290] EXT4-fs: Ignoring removed orlov option [ 314.760526][T21290] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 314.762142][T21277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.784215][T21293] netlink: 'syz.2.6178': attribute type 10 has an invalid length. [ 314.807044][T21293] batman_adv: batadv0: Adding interface: team0 [ 314.813285][T21293] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.838651][T21293] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 314.862492][T21277] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 314.862910][T21290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.896184][T21290] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 314.899805][T21277] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6172: bg 0: block 248: padding at end of block bitmap is not set [ 314.928478][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.944118][T21277] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.6172: Failed to acquire dquot type 1 [ 315.016067][T21277] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.095593][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.115870][T21306] Cannot find add_set index 0 as target [ 315.122746][T21306] serio: Serial port pts0 [ 315.221279][T21311] lo speed is unknown, defaulting to 1000 [ 315.323121][T21317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21317 comm=syz.0.6186 [ 315.533686][T21330] xt_nfacct: accounting object `syz1' does not exists [ 315.571952][T21330] loop5: detected capacity change from 0 to 512 [ 315.596703][T21335] loop7: detected capacity change from 0 to 16384 [ 315.606094][T21330] EXT4-fs (loop5): orphan cleanup on readonly fs [ 315.621130][T21330] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.6191: bad orphan inode 13 [ 315.660470][T21330] ext4_test_bit(bit=12, block=18) = 1 [ 315.665904][T21330] is_bad_inode(inode)=0 [ 315.670094][T21330] NEXT_ORPHAN(inode)=2130706432 [ 315.674967][T21330] max_ino=32 [ 315.678175][T21330] i_nlink=1 [ 315.691251][ T24] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 315.705919][T21330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.727636][T21330] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 315.741435][T21330] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6191: bg 0: block 248: padding at end of block bitmap is not set [ 315.756152][T21330] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6191: Failed to acquire dquot type 1 [ 315.769200][T21330] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.808513][T21350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 315.829158][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.840472][T21350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.981964][T21371] loop7: detected capacity change from 0 to 16384 [ 316.005674][T21366] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 316.012356][T21366] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 316.020202][T21366] vhci_hcd vhci_hcd.0: Device attached [ 316.035907][T21372] vhci_hcd: connection closed [ 316.036259][ T9649] vhci_hcd: stop threads [ 316.045343][ T9649] vhci_hcd: release socket [ 316.049885][ T9649] vhci_hcd: disconnect device [ 316.052228][ T78] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 316.155786][T21391] loop5: detected capacity change from 0 to 2048 [ 316.206127][T21398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.240618][T21391] loop5: unable to read partition table [ 316.246395][T21391] loop5: partition table beyond EOD, truncated [ 316.252713][T21391] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 316.421354][T21405] loop7: detected capacity change from 0 to 16384 [ 316.469976][T21407] Falling back ldisc for ttyS3. [ 316.479093][T21405] I/O error, dev loop7, sector 4480 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 316.533214][T21413] loop5: detected capacity change from 0 to 1024 [ 316.562605][T21413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.584108][T21413] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.6222: Allocating blocks 385-513 which overlap fs metadata [ 316.618067][T21412] EXT4-fs (loop5): pa ffff88810697ef50: logic 16, phys. 129, len 24 [ 316.626229][T21412] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 316.654361][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.729934][T21435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21435 comm=syz.2.6232 [ 316.753509][T21442] loop5: detected capacity change from 0 to 1024 [ 316.782179][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 316.782194][ T29] audit: type=1326 audit(1751371642.675:17106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21444 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 316.834992][T21442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.848389][T21442] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.863706][ T29] audit: type=1326 audit(1751371642.675:17107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 316.887877][ T29] audit: type=1326 audit(1751371642.675:17108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 316.912004][ T29] audit: type=1326 audit(1751371642.675:17109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 316.935603][ T29] audit: type=1326 audit(1751371642.675:17110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 316.959326][ T29] audit: type=1326 audit(1751371642.675:17111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 316.983044][ T29] audit: type=1326 audit(1751371642.675:17112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 317.006674][ T29] audit: type=1326 audit(1751371642.705:17113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21444 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 317.030699][ T29] audit: type=1326 audit(1751371642.705:17114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21444 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 317.054345][ T29] audit: type=1326 audit(1751371642.705:17115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21444 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 317.115974][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.151556][T21465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21465 comm=syz.5.6242 [ 317.196007][T21470] __nla_validate_parse: 4 callbacks suppressed [ 317.196022][T21470] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6239'. [ 317.290620][T21475] netlink: 'syz.5.6246': attribute type 1 has an invalid length. [ 317.298424][T21475] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6246'. [ 317.434397][T21486] loop0: detected capacity change from 0 to 1024 [ 317.464570][T21492] loop4: detected capacity change from 0 to 1024 [ 317.478229][T21496] FAULT_INJECTION: forcing a failure. [ 317.478229][T21496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.481386][T21486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.491414][T21496] CPU: 1 UID: 0 PID: 21496 Comm: syz.5.6253 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 317.491449][T21496] Tainted: [W]=WARN [ 317.491456][T21496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.491468][T21496] Call Trace: [ 317.491475][T21496] [ 317.491483][T21496] __dump_stack+0x1d/0x30 [ 317.491519][T21496] dump_stack_lvl+0xe8/0x140 [ 317.491538][T21496] dump_stack+0x15/0x1b [ 317.491554][T21496] should_fail_ex+0x265/0x280 [ 317.491600][T21496] should_fail+0xb/0x20 [ 317.491626][T21496] should_fail_usercopy+0x1a/0x20 [ 317.491655][T21496] _copy_from_user+0x1c/0xb0 [ 317.491675][T21496] __sys_bpf+0x178/0x790 [ 317.491728][T21496] __x64_sys_bpf+0x41/0x50 [ 317.491753][T21496] x64_sys_call+0x2478/0x2fb0 [ 317.491774][T21496] do_syscall_64+0xd2/0x200 [ 317.491814][T21496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.491838][T21496] ? clear_bhb_loop+0x40/0x90 [ 317.491855][T21496] ? clear_bhb_loop+0x40/0x90 [ 317.491942][T21496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.491964][T21496] RIP: 0033:0x7fdba2a9e929 [ 317.491979][T21496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.492047][T21496] RSP: 002b:00007fdba1107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 317.492066][T21496] RAX: ffffffffffffffda RBX: 00007fdba2cc5fa0 RCX: 00007fdba2a9e929 [ 317.492079][T21496] RDX: 0000000000000020 RSI: 00002000000004c0 RDI: 0000000000000008 [ 317.492091][T21496] RBP: 00007fdba1107090 R08: 0000000000000000 R09: 0000000000000000 [ 317.492103][T21496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.492115][T21496] R13: 0000000000000000 R14: 00007fdba2cc5fa0 R15: 00007ffff26cfb68 [ 317.492182][T21496] [ 317.527558][T21500] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6254'. [ 317.533567][T21486] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.572643][T21492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.716974][T21492] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.745677][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.757946][T21500] loop5: detected capacity change from 0 to 512 [ 317.766337][T21500] EXT4-fs: Ignoring removed oldalloc option [ 317.777064][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.798531][T21500] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6254: Parent and EA inode have the same ino 15 [ 317.809416][T21507] loop0: detected capacity change from 0 to 1024 [ 317.813567][T21500] EXT4-fs (loop5): Remounting filesystem read-only [ 317.824477][T21500] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 317.828130][T21510] sg_write: data in/out 1270887834/121 bytes for SCSI command 0xfd-- guessing data in; [ 317.828130][T21510] program syz.4.6256 not setting count and/or reply_len properly [ 317.834763][T21500] EXT4-fs (loop5): 1 orphan inode deleted [ 317.858707][T21500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.860155][T21507] EXT4-fs: Ignoring removed oldalloc option [ 317.890307][T21507] EXT4-fs: Ignoring removed orlov option [ 317.896455][T21507] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 317.911554][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.945909][T21507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.967472][T21507] FAULT_INJECTION: forcing a failure. [ 317.967472][T21507] name failslab, interval 1, probability 0, space 0, times 0 [ 317.980426][T21507] CPU: 1 UID: 0 PID: 21507 Comm: syz.0.6255 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 317.980460][T21507] Tainted: [W]=WARN [ 317.980467][T21507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.980479][T21507] Call Trace: [ 317.980485][T21507] [ 317.980492][T21507] __dump_stack+0x1d/0x30 [ 317.980513][T21507] dump_stack_lvl+0xe8/0x140 [ 317.980538][T21507] dump_stack+0x15/0x1b [ 317.980578][T21507] should_fail_ex+0x265/0x280 [ 317.980605][T21507] should_failslab+0x8c/0xb0 [ 317.980625][T21507] __kmalloc_noprof+0xa5/0x3e0 [ 317.980646][T21507] ? ext4_find_extent+0x16b/0x7a0 [ 317.980734][T21507] ext4_find_extent+0x16b/0x7a0 [ 317.980762][T21507] ? kmem_cache_alloc_noprof+0x186/0x310 [ 317.980790][T21507] ext4_ext_map_blocks+0x11f/0x38a0 [ 317.980865][T21507] ? __es_insert_extent+0xc27/0xee0 [ 317.980963][T21507] ? rb_next+0x4b/0x80 [ 317.980991][T21507] ? _raw_write_unlock+0xd/0x30 [ 317.981014][T21507] ? ext4_es_insert_extent+0x1aec/0x1c10 [ 317.981039][T21507] ? ext4_es_lookup_extent+0x352/0x4f0 [ 317.981141][T21507] ext4_map_blocks+0x61c/0xd70 [ 317.981163][T21507] _ext4_get_block+0x10a/0x350 [ 317.981180][T21507] ext4_get_block_unwritten+0x2a/0xb0 [ 317.981222][T21507] ext4_block_write_begin+0x3d0/0xa60 [ 317.981274][T21507] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 317.981293][T21507] ? folio_mapping+0xb9/0x120 [ 317.981320][T21507] ext4_write_begin+0x56b/0xd30 [ 317.981421][T21507] ext4_da_write_begin+0x1e0/0x670 [ 317.981450][T21507] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 317.981474][T21507] generic_perform_write+0x184/0x490 [ 317.981496][T21507] ext4_buffered_write_iter+0x1ee/0x3c0 [ 317.981529][T21507] ? ext4_file_write_iter+0xfe/0xf00 [ 317.981552][T21507] ext4_file_write_iter+0x383/0xf00 [ 317.981572][T21507] ? 0xffffffff81000000 [ 317.981583][T21507] ? __rcu_read_unlock+0x4f/0x70 [ 317.981632][T21507] ? avc_policy_seqno+0x15/0x30 [ 317.981659][T21507] ? selinux_file_permission+0x1e4/0x320 [ 317.981686][T21507] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 317.981708][T21507] vfs_write+0x4a0/0x8e0 [ 317.981808][T21507] __x64_sys_pwrite64+0xfd/0x150 [ 317.981829][T21507] x64_sys_call+0xe45/0x2fb0 [ 317.981847][T21507] do_syscall_64+0xd2/0x200 [ 317.981863][T21507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.981884][T21507] ? clear_bhb_loop+0x40/0x90 [ 317.981945][T21507] ? clear_bhb_loop+0x40/0x90 [ 317.981968][T21507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.981990][T21507] RIP: 0033:0x7f403ccfe929 [ 317.982006][T21507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.982024][T21507] RSP: 002b:00007f403b367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 317.982059][T21507] RAX: ffffffffffffffda RBX: 00007f403cf25fa0 RCX: 00007f403ccfe929 [ 317.982073][T21507] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000006 [ 317.982085][T21507] RBP: 00007f403b367090 R08: 0000000000000000 R09: 0000000000000000 [ 317.982096][T21507] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 317.982177][T21507] R13: 0000000000000000 R14: 00007f403cf25fa0 R15: 00007ffc97e9dd88 [ 317.982197][T21507] [ 318.392551][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.418028][T21523] loop4: detected capacity change from 0 to 512 [ 318.443209][T21523] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.6261: iget: bad extended attribute block 1 [ 318.492911][T21523] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6261: couldn't read orphan inode 15 (err -117) [ 318.517818][T21523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.529917][T21525] can: request_module (can-proto-4) failed. [ 318.553099][T21525] pim6reg: entered allmulticast mode [ 318.588082][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.641537][T21538] loop0: detected capacity change from 0 to 1024 [ 318.654664][T21541] loop4: detected capacity change from 0 to 1024 [ 318.683770][T21538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.689269][T21541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.709785][T21541] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.721766][T21538] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.756421][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.798321][T12604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.879145][T21560] loop0: detected capacity change from 0 to 164 [ 318.905784][T21565] netlink: 'syz.5.6272': attribute type 10 has an invalid length. [ 318.905950][T21560] iso9660: Unknown parameter 'tlk<4vNj(o 7uWB8"ܗOA%mB+\kQk3ƽR% ]:-&K.Z[J{`JsNdaE|}ʀ;5M'z蛯oe(A?)l;ŭ3:dVnމ01777777777777777777777' [ 318.949016][T21569] loop7: detected capacity change from 0 to 16384 [ 318.964884][T21565] loop5: detected capacity change from 0 to 1024 [ 319.002041][T21573] SET target dimension over the limit! [ 319.008464][T21573] serio: Serial port pts0 [ 319.014799][T21565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.039259][T21569] I/O error, dev loop7, sector 4224 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 319.049149][T21569] buffer_io_error: 22 callbacks suppressed [ 319.049213][T21569] Buffer I/O error on dev loop7, logical block 528, lost async page write [ 319.063739][T21569] Buffer I/O error on dev loop7, logical block 529, lost async page write [ 319.072371][T21569] Buffer I/O error on dev loop7, logical block 530, lost async page write [ 319.081007][T21569] Buffer I/O error on dev loop7, logical block 531, lost async page write [ 319.089611][T21569] Buffer I/O error on dev loop7, logical block 532, lost async page write [ 319.098216][T21569] Buffer I/O error on dev loop7, logical block 533, lost async page write [ 319.106861][T21569] Buffer I/O error on dev loop7, logical block 534, lost async page write [ 319.115582][T21569] Buffer I/O error on dev loop7, logical block 535, lost async page write [ 319.124152][T21569] Buffer I/O error on dev loop7, logical block 536, lost async page write [ 319.132901][T21569] Buffer I/O error on dev loop7, logical block 537, lost async page write [ 319.179139][T21565] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 319.195336][T21580] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6277'. [ 319.198846][T21582] loop7: detected capacity change from 0 to 16384 [ 319.227998][T21562] EXT4-fs (loop5): pa ffff888106a687e0: logic 48, phys. 177, len 21 [ 319.236115][T21562] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 319.286510][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.300518][T21582] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 319.423373][T21593] sd 0:0:1:0: device reset [ 319.766287][T21603] netlink: 'syz.4.6286': attribute type 3 has an invalid length. [ 319.792058][T21605] netlink: 'syz.4.6287': attribute type 3 has an invalid length. [ 319.832273][T21607] SET target dimension over the limit! [ 319.853898][T21607] serio: Serial port pts0 [ 319.991082][T21610] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21610 comm=syz.4.6290 [ 320.062812][T21612] netlink: 'syz.4.6291': attribute type 21 has an invalid length. [ 320.070781][T21612] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6291'. [ 320.131053][T21612] netlink: 'syz.4.6291': attribute type 5 has an invalid length. [ 320.138907][T21612] netlink: 'syz.4.6291': attribute type 6 has an invalid length. [ 320.146759][T21612] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6291'. [ 320.242926][T21619] loop4: detected capacity change from 0 to 164 [ 320.253097][T21619] iso9660: Unknown parameter 'tlk<4vNj(o 7uWB8"ܗOA%mB+\kQk3ƽR% ]:-&K.Z[J{`JsNdaE|}ʀ;5M'z蛯oe(A?)l;ŭ3:dVnމ01777777777777777777777' [ 320.351092][T21636] SET target dimension over the limit! [ 320.357162][T21636] serio: Serial port pts0 [ 320.374646][T21631] loop0: detected capacity change from 0 to 2048 [ 320.402100][T21640] loop7: detected capacity change from 0 to 16384 [ 320.459496][T21640] I/O error, dev loop7, sector 3328 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 320.468827][T21645] loop5: detected capacity change from 0 to 512 [ 320.474463][T21631] loop0: unable to read partition table [ 320.488425][T21631] loop0: partition table beyond EOD, truncated [ 320.490479][T21645] journal_path: Lookup failure for './file0/../file0' [ 320.494700][T21631] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 320.501530][T21645] EXT4-fs: error: could not find journal device path [ 320.595534][T21656] loop7: detected capacity change from 0 to 16384 [ 320.656882][T21659] xt_nfacct: accounting object `syz1' does not exists [ 320.664420][ T78] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 320.669320][T21659] loop5: detected capacity change from 0 to 512 [ 320.683604][T21659] EXT4-fs (loop5): orphan cleanup on readonly fs [ 320.690493][T21659] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.6307: bad orphan inode 13 [ 320.702749][T21659] ext4_test_bit(bit=12, block=18) = 1 [ 320.708191][T21659] is_bad_inode(inode)=0 [ 320.712503][T21659] NEXT_ORPHAN(inode)=2130706432 [ 320.717356][T21659] max_ino=32 [ 320.720597][T21659] i_nlink=1 [ 320.724199][T21659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.740811][T21663] loop4: detected capacity change from 0 to 512 [ 320.747244][T21659] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 320.748884][T21663] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 320.765543][T21663] EXT4-fs (loop4): 1 truncate cleaned up [ 320.771753][T21663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.772882][T21659] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6307: bg 0: block 248: padding at end of block bitmap is not set [ 320.800674][T21659] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6307: Failed to acquire dquot type 1 [ 320.812978][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.813085][T21659] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 320.890162][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.908274][T21673] loop5: detected capacity change from 0 to 512 [ 320.915296][T21673] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 320.933042][T21673] EXT4-fs (loop5): 1 orphan inode deleted [ 320.938823][T21673] EXT4-fs (loop5): 1 truncate cleaned up [ 320.946501][T21673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.963254][T21673] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 320.969875][T21673] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 320.977563][T21673] vhci_hcd vhci_hcd.0: Device attached [ 320.983420][T21678] vhci_hcd: connection closed [ 320.983946][ T9667] vhci_hcd: stop threads [ 320.992963][ T9667] vhci_hcd: release socket [ 320.997369][ T9667] vhci_hcd: disconnect device [ 321.054526][T21682] SET target dimension over the limit! [ 321.061708][T21682] serio: Serial port pts0 [ 321.131879][T21685] netlink: 'syz.4.6314': attribute type 10 has an invalid length. [ 321.144836][T21685] loop4: detected capacity change from 0 to 1024 [ 321.163946][T21685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.195019][T21685] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 321.209727][T21684] EXT4-fs (loop4): pa ffff88810697ee00: logic 48, phys. 177, len 21 [ 321.217775][T21684] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 321.240950][T20543] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.266534][T21693] 9pnet_fd: Insufficient options for proto=fd [ 321.305214][T21695] loop4: detected capacity change from 0 to 128 [ 321.320785][T21695] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.343749][T21695] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.450743][T21704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6322'. [ 321.504971][T13507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.589484][T21719] netlink: 'syz.4.6327': attribute type 10 has an invalid length. [ 321.617454][T21721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.631510][T21718] loop5: detected capacity change from 0 to 2048 [ 321.647598][T21719] loop4: detected capacity change from 0 to 1024 [ 321.676979][T21719] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 321.702754][T21721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.725159][T21715] EXT4-fs (loop4): pa ffff88810697ef50: logic 48, phys. 177, len 21 [ 321.733344][T21715] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 321.740247][T21718] loop5: unable to read partition table [ 321.749021][T21718] loop5: partition table beyond EOD, truncated [ 321.755335][T21718] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 321.784292][T21721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.795595][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 321.795608][ T29] audit: type=1326 audit(1751371647.694:17367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a964cd290 code=0x7ffc0000 [ 321.825612][ T29] audit: type=1326 audit(1751371647.694:17368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 321.849216][ T29] audit: type=1326 audit(1751371647.694:17369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 321.876826][ T29] audit: type=1326 audit(1751371647.694:17370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 321.900403][ T29] audit: type=1326 audit(1751371647.694:17371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 321.924080][ T29] audit: type=1326 audit(1751371647.694:17372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 321.925024][T21737] loop5: detected capacity change from 0 to 512 [ 321.947645][ T29] audit: type=1326 audit(1751371647.694:17373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 321.947676][ T29] audit: type=1326 audit(1751371647.694:17374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 322.001118][ T29] audit: type=1326 audit(1751371647.694:17375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21730 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 322.020416][T21738] loop4: detected capacity change from 0 to 736 [ 322.033254][ T29] audit: type=1326 audit(1751371647.904:17376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21739 comm="syz.2.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a964ce929 code=0x7ffc0000 [ 322.033355][T21737] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 322.073107][T21740] sd 0:0:1:0: device reset [ 322.079641][T21721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.081955][T21737] EXT4-fs (loop5): 1 orphan inode deleted [ 322.095750][T21737] EXT4-fs (loop5): 1 truncate cleaned up [ 322.104011][T21738] rock: directory entry would overflow storage [ 322.110333][T21738] rock: sig=0x3b10, size=4, remaining=3 [ 322.119572][T21737] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 322.126251][T21737] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 322.134083][T21737] vhci_hcd vhci_hcd.0: Device attached [ 322.146431][T21742] vhci_hcd: connection closed [ 322.146693][ T9612] vhci_hcd: stop threads [ 322.155650][ T9612] vhci_hcd: release socket [ 322.160068][ T9612] vhci_hcd: disconnect device [ 322.165811][T21745] netlink: 'syz.4.6336': attribute type 3 has an invalid length. [ 322.202835][T21721] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.214745][T21721] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.226854][T21721] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.239275][T21721] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.323386][T21762] validate_nla: 1 callbacks suppressed [ 322.323404][T21762] netlink: 'syz.0.6343': attribute type 4 has an invalid length. [ 322.344918][T21762] netlink: 'syz.0.6343': attribute type 4 has an invalid length. [ 322.359154][T21767] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6340'. [ 322.377096][T21764] loop4: detected capacity change from 0 to 2048 [ 322.421955][T21771] netlink: 'syz.1.6347': attribute type 3 has an invalid length. [ 322.429837][T21771] netlink: 'syz.1.6347': attribute type 3 has an invalid length. [ 322.468532][T21764] loop4: unable to read partition table [ 322.484487][T21764] loop4: partition table beyond EOD, truncated [ 322.490733][T21764] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 322.563019][T21785] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6352'. [ 322.582831][T21779] loop0: detected capacity change from 0 to 1024 [ 322.589507][T21779] EXT4-fs: Ignoring removed oldalloc option [ 322.590256][T21788] FAULT_INJECTION: forcing a failure. [ 322.590256][T21788] name failslab, interval 1, probability 0, space 0, times 0 [ 322.599238][T21779] EXT4-fs: Ignoring removed orlov option [ 322.608087][T21788] CPU: 1 UID: 0 PID: 21788 Comm: syz.1.6354 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 322.608117][T21788] Tainted: [W]=WARN [ 322.608124][T21788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.608136][T21788] Call Trace: [ 322.608143][T21788] [ 322.608152][T21788] __dump_stack+0x1d/0x30 [ 322.608210][T21788] dump_stack_lvl+0xe8/0x140 [ 322.608228][T21788] dump_stack+0x15/0x1b [ 322.608245][T21788] should_fail_ex+0x265/0x280 [ 322.608299][T21788] should_failslab+0x8c/0xb0 [ 322.608322][T21788] kmem_cache_alloc_noprof+0x50/0x310 [ 322.608346][T21788] ? audit_log_start+0x365/0x6c0 [ 322.608492][T21788] audit_log_start+0x365/0x6c0 [ 322.608524][T21788] audit_seccomp+0x48/0x100 [ 322.608549][T21788] ? __seccomp_filter+0x68c/0x10d0 [ 322.608599][T21788] __seccomp_filter+0x69d/0x10d0 [ 322.608622][T21788] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 322.608652][T21788] ? vfs_write+0x75e/0x8e0 [ 322.608680][T21788] ? __rcu_read_unlock+0x4f/0x70 [ 322.608701][T21788] ? __fget_files+0x184/0x1c0 [ 322.608757][T21788] __secure_computing+0x82/0x150 [ 322.608778][T21788] syscall_trace_enter+0xcf/0x1e0 [ 322.608857][T21788] do_syscall_64+0xac/0x200 [ 322.608875][T21788] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.608906][T21788] ? clear_bhb_loop+0x40/0x90 [ 322.608987][T21788] ? clear_bhb_loop+0x40/0x90 [ 322.609008][T21788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.609064][T21788] RIP: 0033:0x7f0f8f1be929 [ 322.609080][T21788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.609096][T21788] RSP: 002b:00007f0f8d827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000061 [ 322.609115][T21788] RAX: ffffffffffffffda RBX: 00007f0f8f3e5fa0 RCX: 00007f0f8f1be929 [ 322.609128][T21788] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000001 [ 322.609182][T21788] RBP: 00007f0f8d827090 R08: 0000000000000000 R09: 0000000000000000 [ 322.609193][T21788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.609205][T21788] R13: 0000000000000000 R14: 00007f0f8f3e5fa0 R15: 00007fff84aced68 [ 322.609224][T21788] [ 322.676715][T21792] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6356'. [ 322.792336][T21665] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 322.858215][T21795] netlink: 'syz.4.6358': attribute type 3 has an invalid length. [ 322.866559][T21795] netlink: 'syz.4.6358': attribute type 3 has an invalid length. [ 322.868762][T21779] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 322.907445][T21665] EXT4-fs (loop5): Remounting filesystem read-only [ 322.931389][T21809] FAULT_INJECTION: forcing a failure. [ 322.931389][T21809] name failslab, interval 1, probability 0, space 0, times 0 [ 322.944089][T21809] CPU: 1 UID: 0 PID: 21809 Comm: syz.1.6363 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 322.944121][T21809] Tainted: [W]=WARN [ 322.944127][T21809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.944138][T21809] Call Trace: [ 322.944146][T21809] [ 322.944155][T21809] __dump_stack+0x1d/0x30 [ 322.944178][T21809] dump_stack_lvl+0xe8/0x140 [ 322.944256][T21809] dump_stack+0x15/0x1b [ 322.944273][T21809] should_fail_ex+0x265/0x280 [ 322.944367][T21809] should_failslab+0x8c/0xb0 [ 322.944391][T21809] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 322.944418][T21809] ? v9fs_session_init+0x4b/0xde0 [ 322.944445][T21809] kstrdup+0x3e/0xd0 [ 322.944473][T21809] v9fs_session_init+0x4b/0xde0 [ 322.944570][T21809] ? obj_cgroup_charge_account+0x122/0x1a0 [ 322.944601][T21809] ? __rcu_read_unlock+0x4f/0x70 [ 322.944653][T21809] ? should_fail_ex+0xdb/0x280 [ 322.944685][T21809] ? v9fs_mount+0x51/0x590 [ 322.944789][T21809] ? should_failslab+0x8c/0xb0 [ 322.944812][T21809] ? __kmalloc_cache_noprof+0x189/0x320 [ 322.944840][T21809] v9fs_mount+0x67/0x590 [ 322.944870][T21809] ? __pfx_v9fs_mount+0x10/0x10 [ 322.944933][T21809] legacy_get_tree+0x78/0xd0 [ 322.944967][T21809] vfs_get_tree+0x54/0x1d0 [ 322.944995][T21809] do_new_mount+0x207/0x680 [ 322.945022][T21809] path_mount+0x4a4/0xb20 [ 322.945096][T21809] ? user_path_at+0x109/0x130 [ 322.945201][T21809] __se_sys_mount+0x28f/0x2e0 [ 322.945219][T21809] ? fput+0x8f/0xc0 [ 322.945277][T21809] __x64_sys_mount+0x67/0x80 [ 322.945298][T21809] x64_sys_call+0xd36/0x2fb0 [ 322.945317][T21809] do_syscall_64+0xd2/0x200 [ 322.945333][T21809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.945356][T21809] ? clear_bhb_loop+0x40/0x90 [ 322.945376][T21809] ? clear_bhb_loop+0x40/0x90 [ 322.945409][T21809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.945431][T21809] RIP: 0033:0x7f0f8f1be929 [ 322.945447][T21809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.945465][T21809] RSP: 002b:00007f0f8d827038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.945562][T21809] RAX: ffffffffffffffda RBX: 00007f0f8f3e5fa0 RCX: 00007f0f8f1be929 [ 322.945574][T21809] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 322.945585][T21809] RBP: 00007f0f8d827090 R08: 0000200000000340 R09: 0000000000000000 [ 322.945595][T21809] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 322.945608][T21809] R13: 0000000000000000 R14: 00007f0f8f3e5fa0 R15: 00007fff84aced68 [ 322.945627][T21809] [ 323.207710][T21807] loop4: detected capacity change from 0 to 512 [ 323.218933][T21807] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.6362: iget: bad extended attribute block 1 [ 323.249891][T21779] netlink: 'syz.0.6346': attribute type 298 has an invalid length. [ 323.269842][T21814] netlink: 'syz.5.6365': attribute type 10 has an invalid length. [ 323.287454][T21807] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6362: couldn't read orphan inode 15 (err -117) [ 323.307398][T21814] loop5: detected capacity change from 0 to 1024 [ 323.324352][T21779] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.6346: Allocating blocks 497-513 which overlap fs metadata [ 323.376615][T21814] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 449-513 which overlap fs metadata [ 323.453106][T21813] EXT4-fs (loop5): pa ffff88810697ef50: logic 48, phys. 177, len 21 [ 323.461210][T21813] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 323.538517][T21826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21826 comm=syz.1.6367 [ 323.700632][T21837] FAULT_INJECTION: forcing a failure. [ 323.700632][T21837] name failslab, interval 1, probability 0, space 0, times 0 [ 323.713354][T21837] CPU: 0 UID: 0 PID: 21837 Comm: syz.0.6370 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 323.713381][T21837] Tainted: [W]=WARN [ 323.713386][T21837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.713396][T21837] Call Trace: [ 323.713476][T21837] [ 323.713483][T21837] __dump_stack+0x1d/0x30 [ 323.713504][T21837] dump_stack_lvl+0xe8/0x140 [ 323.713520][T21837] dump_stack+0x15/0x1b [ 323.713533][T21837] should_fail_ex+0x265/0x280 [ 323.713559][T21837] should_failslab+0x8c/0xb0 [ 323.713686][T21837] __kmalloc_noprof+0xa5/0x3e0 [ 323.713708][T21837] ? kobject_get_path+0x92/0x1c0 [ 323.713728][T21837] kobject_get_path+0x92/0x1c0 [ 323.713746][T21837] kobject_uevent_env+0x1da/0x570 [ 323.713781][T21837] kobject_uevent+0x1d/0x30 [ 323.713801][T21837] __kobject_del+0x88/0x190 [ 323.713820][T21837] kobject_put+0x127/0x190 [ 323.713839][T21837] net_rx_queue_update_kobjects+0x477/0x520 [ 323.713866][T21837] netdev_unregister_kobject+0xbf/0x270 [ 323.713945][T21837] unregister_netdevice_many_notify+0x1292/0x1690 [ 323.713972][T21837] unregister_netdevice_queue+0x1f5/0x220 [ 323.714079][T21837] __tun_detach+0x7db/0xad0 [ 323.714107][T21837] ? __pfx_tun_chr_close+0x10/0x10 [ 323.714130][T21837] tun_chr_close+0x5a/0x100 [ 323.714150][T21837] __fput+0x298/0x650 [ 323.714176][T21837] fput_close_sync+0x6e/0x120 [ 323.714304][T21837] __x64_sys_close+0x56/0xf0 [ 323.714330][T21837] x64_sys_call+0x2747/0x2fb0 [ 323.714351][T21837] do_syscall_64+0xd2/0x200 [ 323.714365][T21837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 323.714394][T21837] ? clear_bhb_loop+0x40/0x90 [ 323.714473][T21837] ? clear_bhb_loop+0x40/0x90 [ 323.714493][T21837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.714511][T21837] RIP: 0033:0x7f403ccfe929 [ 323.714525][T21837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.714541][T21837] RSP: 002b:00007f403b346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 323.714561][T21837] RAX: ffffffffffffffda RBX: 00007f403cf26080 RCX: 00007f403ccfe929 [ 323.714638][T21837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 323.714687][T21837] RBP: 00007f403b346090 R08: 0000000000000000 R09: 0000000000000000 [ 323.714697][T21837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.714707][T21837] R13: 0000000000000000 R14: 00007f403cf26080 R15: 00007ffc97e9dd88 [ 323.714722][T21837] [ 324.004190][T21845] netlink: 'syz.2.6373': attribute type 3 has an invalid length. [ 324.013499][T21845] netlink: 'syz.2.6373': attribute type 3 has an invalid length. [ 324.052380][T21830] lo speed is unknown, defaulting to 1000 [ 324.113788][T21856] Cannot find add_set index 0 as target [ 324.123884][T21830] chnl_net:caif_netlink_parms(): no params data found [ 324.138845][T21856] serio: Serial port pts0 [ 324.167924][T21830] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.175142][T21830] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.182771][T21830] bridge_slave_0: entered allmulticast mode [ 324.189294][T21830] bridge_slave_0: entered promiscuous mode [ 324.196723][T21830] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.204354][T21830] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.211706][T21830] bridge_slave_1: entered allmulticast mode [ 324.218356][T21830] bridge_slave_1: entered promiscuous mode [ 324.238073][T21830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.248919][T21830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.269793][T21830] team0: Port device team_slave_0 added [ 324.276660][T21830] team0: Port device team_slave_1 added [ 324.294078][T21830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.301273][T21830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.327945][T21830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.358422][T21830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.365460][T21830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.391568][T21830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.446488][T21879] sd 0:0:1:0: device reset [ 324.517621][T21830] hsr_slave_0: entered promiscuous mode [ 324.525176][T21830] hsr_slave_1: entered promiscuous mode [ 324.531102][T21830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.539037][T21830] Cannot create hsr debugfs directory [ 324.662856][T21830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.724692][T21830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.773676][T21830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.834159][T21830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.924296][T21830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 324.941222][T21830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 324.959889][T21830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 324.983459][T21830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 325.074185][T21830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.103331][T21830] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.119918][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.127048][ T9612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.155760][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.162879][ T9612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.185145][T21830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.266558][T21830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.312422][T21945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6400'. [ 325.321485][T21945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6400'. [ 325.339744][T21945] FAULT_INJECTION: forcing a failure. [ 325.339744][T21945] name failslab, interval 1, probability 0, space 0, times 0 [ 325.352612][T21945] CPU: 1 UID: 0 PID: 21945 Comm: syz.2.6400 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 325.352642][T21945] Tainted: [W]=WARN [ 325.352649][T21945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.352661][T21945] Call Trace: [ 325.352667][T21945] [ 325.352674][T21945] __dump_stack+0x1d/0x30 [ 325.352733][T21945] dump_stack_lvl+0xe8/0x140 [ 325.352751][T21945] dump_stack+0x15/0x1b [ 325.352821][T21945] should_fail_ex+0x265/0x280 [ 325.352848][T21945] should_failslab+0x8c/0xb0 [ 325.352938][T21945] __kmalloc_noprof+0xa5/0x3e0 [ 325.352963][T21945] ? offload_action_alloc+0x2b/0x180 [ 325.352992][T21945] offload_action_alloc+0x2b/0x180 [ 325.353018][T21945] tcf_action_offload_add_ex+0x11f/0x3c0 [ 325.353057][T21945] tcf_action_init+0x333/0x6d0 [ 325.353173][T21945] tc_ctl_action+0x291/0x830 [ 325.353209][T21945] ? __pfx_tc_ctl_action+0x10/0x10 [ 325.353295][T21945] rtnetlink_rcv_msg+0x657/0x6d0 [ 325.353396][T21945] netlink_rcv_skb+0x123/0x220 [ 325.353426][T21945] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.353455][T21945] rtnetlink_rcv+0x1c/0x30 [ 325.353476][T21945] netlink_unicast+0x59e/0x670 [ 325.353622][T21945] netlink_sendmsg+0x58b/0x6b0 [ 325.353644][T21945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.353664][T21945] __sock_sendmsg+0x145/0x180 [ 325.353693][T21945] ____sys_sendmsg+0x31e/0x4e0 [ 325.353727][T21945] ___sys_sendmsg+0x17b/0x1d0 [ 325.353850][T21945] __x64_sys_sendmsg+0xd4/0x160 [ 325.353962][T21945] x64_sys_call+0x2999/0x2fb0 [ 325.353983][T21945] do_syscall_64+0xd2/0x200 [ 325.353998][T21945] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.354021][T21945] ? clear_bhb_loop+0x40/0x90 [ 325.354071][T21945] ? clear_bhb_loop+0x40/0x90 [ 325.354093][T21945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.354115][T21945] RIP: 0033:0x7f3a964ce929 [ 325.354191][T21945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.354209][T21945] RSP: 002b:00007f3a94b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.354229][T21945] RAX: ffffffffffffffda RBX: 00007f3a966f5fa0 RCX: 00007f3a964ce929 [ 325.354242][T21945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 325.354327][T21945] RBP: 00007f3a94b37090 R08: 0000000000000000 R09: 0000000000000000 [ 325.354340][T21945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.354353][T21945] R13: 0000000000000000 R14: 00007f3a966f5fa0 R15: 00007fffeaa3e4d8 [ 325.354371][T21945] [ 325.731030][T21957] loop4: detected capacity change from 0 to 164 [ 325.737653][T21957] iso9660: Unknown parameter 'tlk<4vNj(o 7uWB8"ܗOA%mB+\kQk3ƽR% ]:-&K.Z[J{`JsNdaE|}ʀ;5M'z蛯oe(A?)l;ŭ3:dVnމ01777777777777777777777' [ 325.765851][T21962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=21962 comm=syz.1.6402 [ 325.765864][T21958] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=83 sclass=netlink_audit_socket pid=21958 comm=syz.1.6402 [ 325.837912][T21967] bridge_slave_1: left allmulticast mode [ 325.843697][T21967] bridge_slave_1: left promiscuous mode [ 325.849436][T21967] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.852862][T21970] loop4: detected capacity change from 0 to 512 [ 325.865184][T21967] bridge_slave_0: left allmulticast mode [ 325.870969][T21967] bridge_slave_0: left promiscuous mode [ 325.876764][T21967] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.884800][T21970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 325.904979][T21970] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.929099][T21970] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6408: corrupted xattr block 19: overlapping e_value [ 325.946750][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 325.955943][T21970] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6408: corrupted xattr block 19: overlapping e_value [ 325.971273][T21970] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 325.980462][T21970] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.6408: corrupted xattr block 19: overlapping e_value [ 326.068280][T21830] veth0_vlan: entered promiscuous mode [ 326.102353][T21830] veth1_vlan: entered promiscuous mode [ 326.133485][T21830] veth0_macvtap: entered promiscuous mode [ 326.152320][T21830] veth1_macvtap: entered promiscuous mode [ 326.182677][T21989] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6413'. [ 326.197395][T21830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.225761][T21830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.252362][T21830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.255721][T21995] loop4: detected capacity change from 0 to 1024 [ 326.261211][T21830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.276424][T21830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.278674][T21995] EXT4-fs: Ignoring removed nobh option [ 326.285221][T21830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.299643][T21995] EXT4-fs: Ignoring removed bh option [ 326.369000][T21995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6415'. [ 326.442445][T21995] syzkaller1: entered promiscuous mode [ 326.448114][T21995] syzkaller1: entered allmulticast mode [ 326.515167][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6417'. [ 326.780029][T22010] loop5: detected capacity change from 0 to 512 [ 326.796703][T22010] EXT4-fs: inline encryption not supported [ 326.816888][T22010] EXT4-fs: Ignoring removed oldalloc option [ 326.855244][T22010] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 326.890118][T22010] EXT4-fs (loop5): orphan cleanup on readonly fs [ 326.897708][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 326.897785][ T29] audit: type=1400 audit(1751371652.794:17609): avc: denied { setopt } for pid=22014 comm="syz.2.6420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 326.924496][T22010] EXT4-fs (loop5): 1 truncate cleaned up [ 327.023643][T22018] loop5: detected capacity change from 0 to 512 [ 327.030014][ T29] audit: type=1326 audit(1751371652.914:17610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.054667][ T29] audit: type=1326 audit(1751371652.914:17611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.079012][ T29] audit: type=1326 audit(1751371652.914:17612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.102696][ T29] audit: type=1326 audit(1751371652.914:17613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.116888][T22018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.126434][ T29] audit: type=1326 audit(1751371652.914:17614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.152604][T22018] EXT4-fs (loop5): 1 truncate cleaned up [ 327.190173][T22018] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.6422: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 327.213030][T22018] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem [ 327.258376][T22021] lo speed is unknown, defaulting to 1000 [ 327.266278][ T29] audit: type=1326 audit(1751371653.154:17615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.292164][ T29] audit: type=1326 audit(1751371653.154:17616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22019 comm="syz.4.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddcfcce929 code=0x7ffc0000 [ 327.416113][T22036] FAULT_INJECTION: forcing a failure. [ 327.416113][T22036] name failslab, interval 1, probability 0, space 0, times 0 [ 327.428949][T22036] CPU: 0 UID: 0 PID: 22036 Comm: syz.5.6425 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 327.428983][T22036] Tainted: [W]=WARN [ 327.428989][T22036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.429002][T22036] Call Trace: [ 327.429008][T22036] [ 327.429015][T22036] __dump_stack+0x1d/0x30 [ 327.429109][T22036] dump_stack_lvl+0xe8/0x140 [ 327.429129][T22036] dump_stack+0x15/0x1b [ 327.429145][T22036] should_fail_ex+0x265/0x280 [ 327.429175][T22036] should_failslab+0x8c/0xb0 [ 327.429197][T22036] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 327.429291][T22036] ? __kthread_create_on_node+0xcb/0x230 [ 327.429323][T22036] kvasprintf+0x8a/0x110 [ 327.429345][T22036] ? __kmalloc_cache_noprof+0x189/0x320 [ 327.429424][T22036] ? __pfx_napi_threaded_poll+0x10/0x10 [ 327.429445][T22036] __kthread_create_on_node+0xcb/0x230 [ 327.429550][T22036] ? __pfx_napi_threaded_poll+0x10/0x10 [ 327.429571][T22036] kthread_create_on_node+0x89/0xc0 [ 327.429634][T22036] ? netif_napi_add_weight_locked+0x344/0x550 [ 327.429659][T22036] ? sk_skb_reason_drop+0xbd/0x270 [ 327.429750][T22036] ? netif_napi_add_weight_locked+0x2db/0x550 [ 327.429773][T22036] netif_napi_add_weight_locked+0x3c2/0x550 [ 327.429796][T22036] wg_peer_create+0x301/0x430 [ 327.429834][T22036] wg_set_device+0xa20/0x12e0 [ 327.429862][T22036] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 327.429924][T22036] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 327.429996][T22036] genl_family_rcv_msg_doit+0x140/0x1b0 [ 327.430041][T22036] genl_rcv_msg+0x422/0x460 [ 327.430065][T22036] ? __pfx_wg_set_device+0x10/0x10 [ 327.430086][T22036] netlink_rcv_skb+0x123/0x220 [ 327.430113][T22036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.430180][T22036] genl_rcv+0x28/0x40 [ 327.430244][T22036] netlink_unicast+0x59e/0x670 [ 327.430273][T22036] netlink_sendmsg+0x58b/0x6b0 [ 327.430294][T22036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.430314][T22036] __sock_sendmsg+0x145/0x180 [ 327.430395][T22036] ____sys_sendmsg+0x31e/0x4e0 [ 327.430428][T22036] ___sys_sendmsg+0x17b/0x1d0 [ 327.430470][T22036] __x64_sys_sendmsg+0xd4/0x160 [ 327.430534][T22036] x64_sys_call+0x2999/0x2fb0 [ 327.430555][T22036] do_syscall_64+0xd2/0x200 [ 327.430572][T22036] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.430597][T22036] ? clear_bhb_loop+0x40/0x90 [ 327.430615][T22036] ? clear_bhb_loop+0x40/0x90 [ 327.430672][T22036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.430703][T22036] RIP: 0033:0x7fd23d7de929 [ 327.430720][T22036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.430745][T22036] RSP: 002b:00007fd23be47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.430844][T22036] RAX: ffffffffffffffda RBX: 00007fd23da05fa0 RCX: 00007fd23d7de929 [ 327.430856][T22036] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000003 [ 327.430867][T22036] RBP: 00007fd23be47090 R08: 0000000000000000 R09: 0000000000000000 [ 327.430948][T22036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.430959][T22036] R13: 0000000000000000 R14: 00007fd23da05fa0 R15: 00007ffff2710fd8 [ 327.430976][T22036] [ 327.757903][T22036] kthread_run failed with err -12 [ 327.796766][T22042] validate_nla: 1 callbacks suppressed [ 327.796780][T22042] netlink: 'syz.4.6427': attribute type 16 has an invalid length. [ 327.803322][ T29] audit: type=1326 audit(1751371653.683:17617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.1.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f1be929 code=0x7ffc0000 [ 327.810327][T22042] netlink: 'syz.4.6427': attribute type 17 has an invalid length. [ 327.834727][ T29] audit: type=1326 audit(1751371653.683:17618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22039 comm="syz.1.6428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f1be929 code=0x7ffc0000 [ 327.871370][T22038] lo speed is unknown, defaulting to 1000 [ 327.878396][T22043] program syz.4.6427 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.911662][T22048] loop5: detected capacity change from 0 to 2048 [ 327.937374][T22042] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.945332][T22042] batman_adv: batadv0: Interface activated: team0 [ 327.956330][T22048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6429'. [ 327.976068][T22042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.047779][T22048] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6429'. [ 328.060692][T22021] chnl_net:caif_netlink_parms(): no params data found [ 328.119269][T22057] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 328.132740][T22057] pim6reg1: entered promiscuous mode [ 328.138145][T22057] pim6reg1: entered allmulticast mode [ 328.189151][T22021] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.196438][T22021] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.206760][T22021] bridge_slave_0: entered allmulticast mode [ 328.214010][T22021] bridge_slave_0: entered promiscuous mode [ 328.221557][T22021] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.228721][T22021] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.236550][T22021] bridge_slave_1: entered allmulticast mode [ 328.243738][T22021] bridge_slave_1: entered promiscuous mode [ 328.270774][T22021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.282472][T22021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.303327][T22077] sd 0:0:1:0: device reset [ 328.316049][T22081] FAULT_INJECTION: forcing a failure. [ 328.316049][T22081] name failslab, interval 1, probability 0, space 0, times 0 [ 328.328914][T22081] CPU: 1 UID: 0 PID: 22081 Comm: syz.2.6441 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 328.328942][T22081] Tainted: [W]=WARN [ 328.328999][T22081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.329090][T22081] Call Trace: [ 328.329096][T22081] [ 328.329105][T22081] __dump_stack+0x1d/0x30 [ 328.329155][T22081] dump_stack_lvl+0xe8/0x140 [ 328.329171][T22081] dump_stack+0x15/0x1b [ 328.329187][T22081] should_fail_ex+0x265/0x280 [ 328.329217][T22081] should_failslab+0x8c/0xb0 [ 328.329316][T22081] __kmalloc_noprof+0xa5/0x3e0 [ 328.329341][T22081] ? rds_cmsg_rdma_args+0x295/0xc10 [ 328.329372][T22081] rds_cmsg_rdma_args+0x295/0xc10 [ 328.329410][T22081] ? should_fail_ex+0xdb/0x280 [ 328.329433][T22081] ? should_failslab+0x8c/0xb0 [ 328.329508][T22081] ? __rcu_read_unlock+0x4f/0x70 [ 328.329541][T22081] rds_cmsg_send+0x24e/0x3d0 [ 328.329563][T22081] rds_sendmsg+0xca7/0x14a0 [ 328.329590][T22081] ? __pfx_rds_sendmsg+0x10/0x10 [ 328.329613][T22081] __sock_sendmsg+0x145/0x180 [ 328.329654][T22081] ____sys_sendmsg+0x31e/0x4e0 [ 328.329683][T22081] ___sys_sendmsg+0x17b/0x1d0 [ 328.329721][T22081] __x64_sys_sendmsg+0xd4/0x160 [ 328.329801][T22081] x64_sys_call+0x2999/0x2fb0 [ 328.329818][T22081] do_syscall_64+0xd2/0x200 [ 328.329884][T22081] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 328.329909][T22081] ? clear_bhb_loop+0x40/0x90 [ 328.329927][T22081] ? clear_bhb_loop+0x40/0x90 [ 328.329991][T22081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.330013][T22081] RIP: 0033:0x7f3a964ce929 [ 328.330026][T22081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.330045][T22081] RSP: 002b:00007f3a94b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.330076][T22081] RAX: ffffffffffffffda RBX: 00007f3a966f5fa0 RCX: 00007f3a964ce929 [ 328.330090][T22081] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 328.330103][T22081] RBP: 00007f3a94b37090 R08: 0000000000000000 R09: 0000000000000000 [ 328.330113][T22081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.330124][T22081] R13: 0000000000000000 R14: 00007f3a966f5fa0 R15: 00007fffeaa3e4d8 [ 328.330213][T22081] [ 328.351719][T22075] FAULT_INJECTION: forcing a failure. [ 328.351719][T22075] name failslab, interval 1, probability 0, space 0, times 0 [ 328.571519][T22075] CPU: 0 UID: 0 PID: 22075 Comm: syz.4.6438 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 328.571539][T22075] Tainted: [W]=WARN [ 328.571543][T22075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.571613][T22075] Call Trace: [ 328.571618][T22075] [ 328.571625][T22075] __dump_stack+0x1d/0x30 [ 328.571639][T22075] dump_stack_lvl+0xe8/0x140 [ 328.571671][T22075] dump_stack+0x15/0x1b [ 328.571680][T22075] should_fail_ex+0x265/0x280 [ 328.571697][T22075] should_failslab+0x8c/0xb0 [ 328.571711][T22075] kmem_cache_alloc_noprof+0x50/0x310 [ 328.571754][T22075] ? skb_clone+0x151/0x1f0 [ 328.571765][T22075] skb_clone+0x151/0x1f0 [ 328.571808][T22075] __netlink_deliver_tap+0x2c9/0x500 [ 328.571836][T22075] netlink_unicast+0x64c/0x670 [ 328.571866][T22075] netlink_sendmsg+0x58b/0x6b0 [ 328.571877][T22075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.571907][T22075] __sock_sendmsg+0x145/0x180 [ 328.571921][T22075] ____sys_sendmsg+0x31e/0x4e0 [ 328.571940][T22075] ___sys_sendmsg+0x17b/0x1d0 [ 328.572021][T22075] __x64_sys_sendmsg+0xd4/0x160 [ 328.572040][T22075] x64_sys_call+0x2999/0x2fb0 [ 328.572068][T22075] do_syscall_64+0xd2/0x200 [ 328.572079][T22075] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 328.572093][T22075] ? clear_bhb_loop+0x40/0x90 [ 328.572105][T22075] ? clear_bhb_loop+0x40/0x90 [ 328.572224][T22075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.572269][T22075] RIP: 0033:0x7fddcfcce929 [ 328.572301][T22075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.572312][T22075] RSP: 002b:00007fddce337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.572339][T22075] RAX: ffffffffffffffda RBX: 00007fddcfef5fa0 RCX: 00007fddcfcce929 [ 328.572352][T22075] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 000000000000000b [ 328.572364][T22075] RBP: 00007fddce337090 R08: 0000000000000000 R09: 0000000000000000 [ 328.572383][T22075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.572395][T22075] R13: 0000000000000000 R14: 00007fddcfef5fa0 R15: 00007ffd285bc6c8 [ 328.572406][T22075] [ 328.805233][T22021] team0: Port device team_slave_0 added [ 328.820207][T22021] team0: Port device team_slave_1 added [ 328.837764][T22021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.844833][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.871070][T22021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.886551][T22021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.893677][T22021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.919808][T22021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.977288][T22105] netlink: 'syz.1.6447': attribute type 15 has an invalid length. [ 328.994434][T22107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6451'. [ 329.003858][T22109] loop5: detected capacity change from 0 to 2048 [ 329.015920][T22021] hsr_slave_0: entered promiscuous mode [ 329.022510][T22103] loop4: detected capacity change from 0 to 128 [ 329.029243][T22103] vfat: Unknown parameter '18446744073709551615" 9)&7ީV1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb' [ 329.046466][T22021] hsr_slave_1: entered promiscuous mode [ 329.052752][T22021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.053836][T22112] FAULT_INJECTION: forcing a failure. [ 329.053836][T22112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.060525][T22021] Cannot create hsr debugfs directory [ 329.073490][T22112] CPU: 1 UID: 0 PID: 22112 Comm: syz.1.6453 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 329.073521][T22112] Tainted: [W]=WARN [ 329.073548][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.073560][T22112] Call Trace: [ 329.073568][T22112] [ 329.073577][T22112] __dump_stack+0x1d/0x30 [ 329.073605][T22112] dump_stack_lvl+0xe8/0x140 [ 329.073675][T22112] dump_stack+0x15/0x1b [ 329.073771][T22112] should_fail_ex+0x265/0x280 [ 329.073800][T22112] should_fail+0xb/0x20 [ 329.073826][T22112] should_fail_usercopy+0x1a/0x20 [ 329.073918][T22112] _copy_from_iter+0xcf/0xe40 [ 329.073947][T22112] ? __build_skb_around+0x1a0/0x200 [ 329.074004][T22112] ? __alloc_skb+0x223/0x320 [ 329.074032][T22112] netlink_sendmsg+0x471/0x6b0 [ 329.074054][T22112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.074131][T22112] __sock_sendmsg+0x145/0x180 [ 329.074211][T22112] ____sys_sendmsg+0x31e/0x4e0 [ 329.074243][T22112] ___sys_sendmsg+0x17b/0x1d0 [ 329.074290][T22112] __x64_sys_sendmsg+0xd4/0x160 [ 329.074323][T22112] x64_sys_call+0x2999/0x2fb0 [ 329.074412][T22112] do_syscall_64+0xd2/0x200 [ 329.074429][T22112] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.074454][T22112] ? clear_bhb_loop+0x40/0x90 [ 329.074474][T22112] ? clear_bhb_loop+0x40/0x90 [ 329.074560][T22112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.074577][T22112] RIP: 0033:0x7f0f8f1be929 [ 329.074592][T22112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.074615][T22112] RSP: 002b:00007f0f8d827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.074634][T22112] RAX: ffffffffffffffda RBX: 00007f0f8f3e5fa0 RCX: 00007f0f8f1be929 [ 329.074647][T22112] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 329.074676][T22112] RBP: 00007f0f8d827090 R08: 0000000000000000 R09: 0000000000000000 [ 329.074688][T22112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.074701][T22112] R13: 0000000000000000 R14: 00007f0f8f3e5fa0 R15: 00007fff84aced68 [ 329.074719][T22112] [ 329.330487][T22113] syzkaller1: entered promiscuous mode [ 329.336187][T22113] syzkaller1: entered allmulticast mode [ 329.369931][T22124] x_tables: duplicate underflow at hook 1 [ 329.424726][T22021] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.456595][T22130] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 329.484679][T22133] sd 0:0:1:0: device reset [ 329.492638][T22021] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.518403][T22138] x_tables: duplicate underflow at hook 1 [ 329.542811][T22021] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.632326][T22021] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.711076][T22021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.722754][T22021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.740966][T22021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.764350][T22163] lo speed is unknown, defaulting to 1000 [ 329.768070][T22021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.784371][T22169] FAULT_INJECTION: forcing a failure. [ 329.784371][T22169] name failslab, interval 1, probability 0, space 0, times 0 [ 329.797388][T22169] CPU: 0 UID: 0 PID: 22169 Comm: wg1 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 329.797416][T22169] Tainted: [W]=WARN [ 329.797422][T22169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.797432][T22169] Call Trace: [ 329.797439][T22169] [ 329.797446][T22169] __dump_stack+0x1d/0x30 [ 329.797518][T22169] dump_stack_lvl+0xe8/0x140 [ 329.797534][T22169] dump_stack+0x15/0x1b [ 329.797549][T22169] should_fail_ex+0x265/0x280 [ 329.797578][T22169] ? __pfx_resume_store+0x10/0x10 [ 329.797610][T22169] should_failslab+0x8c/0xb0 [ 329.797696][T22169] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 329.797720][T22169] ? resume_store+0xf2/0x3d0 [ 329.797739][T22169] ? __pfx_resume_store+0x10/0x10 [ 329.797762][T22169] kstrndup+0x80/0x130 [ 329.797786][T22169] resume_store+0xf2/0x3d0 [ 329.797877][T22169] ? _copy_from_iter+0x6b5/0xe40 [ 329.797934][T22169] ? __pfx_resume_store+0x10/0x10 [ 329.797957][T22169] kobj_attr_store+0x4a/0x70 [ 329.797981][T22169] ? __pfx_kobj_attr_store+0x10/0x10 [ 329.798131][T22169] sysfs_kf_write+0xfe/0x120 [ 329.798155][T22169] ? __pfx_sysfs_kf_write+0x10/0x10 [ 329.798188][T22169] kernfs_fop_write_iter+0x1c1/0x2d0 [ 329.798209][T22169] iter_file_splice_write+0x5ef/0x970 [ 329.798249][T22169] ? __pfx_iter_file_splice_write+0x10/0x10 [ 329.798330][T22169] direct_splice_actor+0x153/0x2a0 [ 329.798399][T22169] ? shmem_mmap+0x31/0xb0 [ 329.798419][T22169] splice_direct_to_actor+0x30f/0x680 [ 329.798447][T22169] ? __pfx_direct_splice_actor+0x10/0x10 [ 329.798498][T22169] do_splice_direct+0xda/0x150 [ 329.798549][T22169] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 329.798595][T22169] do_sendfile+0x380/0x650 [ 329.798620][T22169] __x64_sys_sendfile64+0x105/0x150 [ 329.798643][T22169] x64_sys_call+0xb39/0x2fb0 [ 329.798664][T22169] do_syscall_64+0xd2/0x200 [ 329.798800][T22169] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.798874][T22169] ? clear_bhb_loop+0x40/0x90 [ 329.798893][T22169] ? clear_bhb_loop+0x40/0x90 [ 329.798914][T22169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.798992][T22169] RIP: 0033:0x7f3a964ce929 [ 329.799007][T22169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.799126][T22169] RSP: 002b:00007f3a94b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 329.799144][T22169] RAX: ffffffffffffffda RBX: 00007f3a966f5fa0 RCX: 00007f3a964ce929 [ 329.799183][T22169] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 329.799195][T22169] RBP: 00007f3a94b37090 R08: 0000000000000000 R09: 0000000000000000 [ 329.799206][T22169] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000002 [ 329.799234][T22169] R13: 0000000000000000 R14: 00007f3a966f5fa0 R15: 00007fffeaa3e4d8 [ 329.799250][T22169] [ 329.801368][T22172] 9pnet_fd: Insufficient options for proto=fd [ 330.066803][T22021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.123042][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6480'. [ 330.130807][T22021] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.148802][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.156023][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.177097][T22021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.187618][T22021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.222943][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.224575][T22204] blktrace: Concurrent blktraces are not allowed on sg0 [ 330.230053][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.277806][T22198] lo speed is unknown, defaulting to 1000 [ 330.332472][T22204] vhci_hcd: invalid port number 96 [ 330.337652][T22204] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 330.370680][T22021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.516465][T22021] veth0_vlan: entered promiscuous mode [ 330.534667][T22021] veth1_vlan: entered promiscuous mode [ 330.546499][T22232] loop5: detected capacity change from 0 to 512 [ 330.565061][T22232] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.574353][T22021] veth0_macvtap: entered promiscuous mode [ 330.595208][T22232] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 330.609955][T22021] veth1_macvtap: entered promiscuous mode [ 330.627281][T22239] loop9: detected capacity change from 0 to 7 [ 330.633933][T22232] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.6491: iget: bad extended attribute block 1 [ 330.641354][T22239] buffer_io_error: 38 callbacks suppressed [ 330.641442][T22239] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.654112][T22021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.671295][T22239] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.679291][T22239] loop9: unable to read partition table [ 330.680621][T22232] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.6491: couldn't read orphan inode 15 (err -117) [ 330.700763][T22239] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 330.700763][T22239] U) failed (rc=-5) [ 330.706469][T22021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.756666][T22232] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7904 vs 220 free clusters [ 330.780596][T22021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.789651][T22021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.798584][T22021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.807490][T22021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.822218][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6495'. [ 330.831323][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6495'. [ 330.899104][T22253] loop5: detected capacity change from 0 to 2048 [ 330.912221][T22255] FAULT_INJECTION: forcing a failure. [ 330.912221][T22255] name failslab, interval 1, probability 0, space 0, times 0 [ 330.925141][T22255] CPU: 0 UID: 0 PID: 22255 Comm: syz.1.6498 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 330.925220][T22255] Tainted: [W]=WARN [ 330.925228][T22255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.925240][T22255] Call Trace: [ 330.925245][T22255] [ 330.925315][T22255] __dump_stack+0x1d/0x30 [ 330.925335][T22255] dump_stack_lvl+0xe8/0x140 [ 330.925353][T22255] dump_stack+0x15/0x1b [ 330.925395][T22255] should_fail_ex+0x265/0x280 [ 330.925420][T22255] ? nl80211_prepare_wdev_dump+0x16b/0x3b0 [ 330.925452][T22255] should_failslab+0x8c/0xb0 [ 330.925474][T22255] __kmalloc_cache_noprof+0x4c/0x320 [ 330.925528][T22255] nl80211_prepare_wdev_dump+0x16b/0x3b0 [ 330.925560][T22255] nl80211_dump_mpp+0x93/0x430 [ 330.925587][T22255] ? __alloc_skb+0x1b2/0x320 [ 330.925671][T22255] genl_dumpit+0xac/0x110 [ 330.925697][T22255] netlink_dump+0x38c/0x7f0 [ 330.925727][T22255] __netlink_dump_start+0x43e/0x520 [ 330.925757][T22255] genl_family_rcv_msg_dumpit+0x115/0x180 [ 330.925868][T22255] ? __pfx_genl_start+0x10/0x10 [ 330.925891][T22255] ? __pfx_genl_dumpit+0x10/0x10 [ 330.925974][T22255] ? __pfx_genl_done+0x10/0x10 [ 330.926000][T22255] genl_rcv_msg+0x3f0/0x460 [ 330.926069][T22255] ? __pfx_nl80211_dump_mpp+0x10/0x10 [ 330.926094][T22255] netlink_rcv_skb+0x123/0x220 [ 330.926277][T22255] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.926307][T22255] genl_rcv+0x28/0x40 [ 330.926326][T22255] netlink_unicast+0x59e/0x670 [ 330.926406][T22255] netlink_sendmsg+0x58b/0x6b0 [ 330.926464][T22255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.926480][T22255] __sock_sendmsg+0x145/0x180 [ 330.926503][T22255] ____sys_sendmsg+0x31e/0x4e0 [ 330.926533][T22255] ___sys_sendmsg+0x17b/0x1d0 [ 330.926574][T22255] __x64_sys_sendmsg+0xd4/0x160 [ 330.926691][T22255] x64_sys_call+0x2999/0x2fb0 [ 330.926775][T22255] do_syscall_64+0xd2/0x200 [ 330.926793][T22255] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.926830][T22255] ? clear_bhb_loop+0x40/0x90 [ 330.926852][T22255] ? clear_bhb_loop+0x40/0x90 [ 330.926900][T22255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.926931][T22255] RIP: 0033:0x7f0f8f1be929 [ 330.926947][T22255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.926973][T22255] RSP: 002b:00007f0f8d827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.926992][T22255] RAX: ffffffffffffffda RBX: 00007f0f8f3e5fa0 RCX: 00007f0f8f1be929 [ 330.927005][T22255] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003 [ 330.927019][T22255] RBP: 00007f0f8d827090 R08: 0000000000000000 R09: 0000000000000000 [ 330.927032][T22255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.927095][T22255] R13: 0000000000000000 R14: 00007f0f8f3e5fa0 R15: 00007fff84aced68 [ 330.927113][T22255] [ 331.231802][T22253] loop5: p1 < > p3 p4 < > [ 331.280409][T22266] ================================================================== [ 331.288981][T22266] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 331.296565][T22266] [ 331.298900][T22266] write to 0xffff88810f71931d of 1 bytes by task 1035 on cpu 1: [ 331.306712][T22266] sg_finish_rem_req+0x11f/0x270 [ 331.307690][T22253] loop5: p3 start 4284289 is beyond EOD, [ 331.311676][T22266] sg_rq_end_io_usercontext+0x38/0x1c0 [ 331.317481][T22253] truncated [ 331.322859][T22266] process_scheduled_works+0x4cb/0x9d0 [ 331.331629][T22266] worker_thread+0x582/0x770 [ 331.336228][T22266] kthread+0x489/0x510 [ 331.340293][T22266] ret_from_fork+0xda/0x150 [ 331.344795][T22266] ret_from_fork_asm+0x1a/0x30 [ 331.349556][T22266] [ 331.351873][T22266] read to 0xffff88810f71931d of 1 bytes by task 22266 on cpu 0: [ 331.359493][T22266] sg_common_write+0x961/0xc30 [ 331.364275][T22266] sg_new_write+0x7b6/0x890 [ 331.368788][T22266] sg_ioctl+0xb81/0x1360 [ 331.373056][T22266] __se_sys_ioctl+0xce/0x140 [ 331.377669][T22266] __x64_sys_ioctl+0x43/0x50 [ 331.382260][T22266] x64_sys_call+0x19a8/0x2fb0 [ 331.386933][T22266] do_syscall_64+0xd2/0x200 [ 331.391444][T22266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.397338][T22266] [ 331.399653][T22266] value changed: 0x01 -> 0x00 [ 331.404317][T22266] [ 331.406627][T22266] Reported by Kernel Concurrency Sanitizer on: [ 331.412769][T22266] CPU: 0 UID: 0 PID: 22266 Comm: syz.5.6499 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 331.426831][T22266] Tainted: [W]=WARN [ 331.430624][T22266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.440676][T22266] ==================================================================