last executing test programs: 1m13.251321596s ago: executing program 1 (id=4244): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000"/13], 0x28}, 0x20008000) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540), 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d9ff9a841e2eb21486e05ddee41240bc9d3ce3a9a5915be607c5cce0385d1db5d73fe4794696bea5234b5b7209ef99689157147ba0bea60c07affcc3d2706527418b3fbc67dbee9e29d93b4938d36a0e3f01c52cbea346f00e6bf6acce5d8e8eedf69af14bdb88bb7d2d40847bce82093fa40b6ed5f9ee97fdb7265d5342696d18c05b0278e21f98bb64d111424f71bdb84800a55ded9cbfb81313876006e513a28834022aed2e5e1784d02202fc9bca90c3c2552ae9b25346c12942e758c68ba6b3513fed39552171f78882a", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,posixacl,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6c6f6f73652c6e6f657874656e642c6f626a5f757365723d2c6d61736b3d5e4d41595f57524954452c61756469742c6f626aef65ffa05f72cf6c653d67656e6576655b5d2c736d61636b66736861743d63657068002c00"/98]) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r3}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000007f1e1ca456a2a2eaf300"/37], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) 1m12.365522761s ago: executing program 1 (id=4253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) chown(&(0x7f0000000100)='./file0\x00', 0x0, r2) setns(0xffffffffffffffff, 0x24020000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r7, r6) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m11.24040981s ago: executing program 1 (id=4272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000005c0)={0x260, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 1m11.21723054s ago: executing program 1 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}], 0x1, 0x40408c1) recvmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/32, 0x20}, {0x0, 0x3c}], 0x2}, 0x80}], 0x1, 0x10002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m11.045541593s ago: executing program 1 (id=4282): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getresuid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000780)={[{@errors_remount}, {@bsdgroups}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'errors=remount-ro'}}, {@smackfsroot={'smackfsroot', 0x3d, 'Us\r\xf4g_\xde\nnc\xd6\xcb\x80\xef\x8f3\xe6\xab\t=Q/n\x90\x1cP\x16m\xbfU\x82CPj6&QK\xe4\xbb \xf9\xc8\x9c\x19\x82\xb0\xf6I\xf9\x15\xee\x89\xf7?\fV\vc\x04\x1cK\x0f>q\xff13\x9fF\xca0/\xc9\xf1=T\xcc}\x85(\xe2\x92\xf3*{\xa7\xeb\x8d\xc5\x8e\xcb\xa7\xba\xfbq\xd2iom\xa0V\xb0\x83\xe9\x88\xdc\xc4\xc9\x80\x80\x9cK\x92\xce\xa3\x9a\xa7AMLW\xaa\xc7\xa7\xb8\x8e\xa5\x8d\x00\x8c>\x1f\xb3f\xe1xJqV\x18\xda\xbb\xd0`\xd0\xa4\x14\xf6\xe8\xdaO/\xa3\xc6P\x86\xd6 \xc0}\x97\xa7\x99zos\xe9\x164I\xc3z\xee/\x8f\xf8\xf6\x1f\x91Z)<\xd94\xb6\xea-\x14\xa2\x87\x84.7:A\xb8\xd6yo\xa7\b$\xf2m+\xd6\xb0\xc7dUh\xf4'}}, {@dont_measure}, {@euid_gt={'euid>', r3}}, {@hash}]}, 0x4, 0x505, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m10.272347656s ago: executing program 1 (id=4296): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getresuid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000780)={[{@errors_remount}, {@bsdgroups}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'errors=remount-ro'}}, {@smackfsroot={'smackfsroot', 0x3d, 'Us\r\xf4g_\xde\nnc\xd6\xcb\x80\xef\x8f3\xe6\xab\t=Q/n\x90\x1cP\x16m\xbfU\x82CPj6&QK\xe4\xbb \xf9\xc8\x9c\x19\x82\xb0\xf6I\xf9\x15\xee\x89\xf7?\fV\vc\x04\x1cK\x0f>q\xff13\x9fF\xca0/\xc9\xf1=T\xcc}\x85(\xe2\x92\xf3*{\xa7\xeb\x8d\xc5\x8e\xcb\xa7\xba\xfbq\xd2iom\xa0V\xb0\x83\xe9\x88\xdc\xc4\xc9\x80\x80\x9cK\x92\xce\xa3\x9a\xa7AMLW\xaa\xc7\xa7\xb8\x8e\xa5\x8d\x00\x8c>\x1f\xb3f\xe1xJqV\x18\xda\xbb\xd0`\xd0\xa4\x14\xf6\xe8\xdaO/\xa3\xc6P\x86\xd6 \xc0}\x97\xa7\x99zos\xe9\x164I\xc3z\xee/\x8f\xf8\xf6\x1f\x91Z)<\xd94\xb6\xea-\x14\xa2\x87\x84.7:A\xb8\xd6yo\xa7\b$\xf2m+\xd6\xb0\xc7dUh\xf4'}}, {@dont_measure}, {@euid_gt={'euid>', r3}}, {@hash}]}, 0x4, 0x505, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1m10.271887065s ago: executing program 32 (id=4296): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) close(r0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') getresuid(&(0x7f00000001c0), &(0x7f0000000280)=0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x1000008, &(0x7f0000000780)={[{@errors_remount}, {@bsdgroups}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'errors=remount-ro'}}, {@smackfsroot={'smackfsroot', 0x3d, 'Us\r\xf4g_\xde\nnc\xd6\xcb\x80\xef\x8f3\xe6\xab\t=Q/n\x90\x1cP\x16m\xbfU\x82CPj6&QK\xe4\xbb \xf9\xc8\x9c\x19\x82\xb0\xf6I\xf9\x15\xee\x89\xf7?\fV\vc\x04\x1cK\x0f>q\xff13\x9fF\xca0/\xc9\xf1=T\xcc}\x85(\xe2\x92\xf3*{\xa7\xeb\x8d\xc5\x8e\xcb\xa7\xba\xfbq\xd2iom\xa0V\xb0\x83\xe9\x88\xdc\xc4\xc9\x80\x80\x9cK\x92\xce\xa3\x9a\xa7AMLW\xaa\xc7\xa7\xb8\x8e\xa5\x8d\x00\x8c>\x1f\xb3f\xe1xJqV\x18\xda\xbb\xd0`\xd0\xa4\x14\xf6\xe8\xdaO/\xa3\xc6P\x86\xd6 \xc0}\x97\xa7\x99zos\xe9\x164I\xc3z\xee/\x8f\xf8\xf6\x1f\x91Z)<\xd94\xb6\xea-\x14\xa2\x87\x84.7:A\xb8\xd6yo\xa7\b$\xf2m+\xd6\xb0\xc7dUh\xf4'}}, {@dont_measure}, {@euid_gt={'euid>', r3}}, {@hash}]}, 0x4, 0x505, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.22285885s ago: executing program 2 (id=5329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 4.194333361s ago: executing program 2 (id=5330): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 4.097841112s ago: executing program 2 (id=5333): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 3.534569921s ago: executing program 2 (id=5344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.344828961s ago: executing program 5 (id=5363): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000400)=0x7ffd) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6793, 0x13}, 0x0, 0x5, 0x800, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 2.096452275s ago: executing program 5 (id=5365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.662110562s ago: executing program 5 (id=5368): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 1.343610997s ago: executing program 5 (id=5373): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe2$9p(&(0x7f0000000180), 0x80) getuid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x9, 0x10000) 1.308319308s ago: executing program 0 (id=5375): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) 1.240921579s ago: executing program 0 (id=5376): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x2000}, 0x10) 1.17762374s ago: executing program 0 (id=5377): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000"/13], 0x28}, 0x20008000) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540), 0x8000, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB=',loose,posixacl,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB="2c6c6f6f73652c6e6f657874656e642c6f626a5f757365723d2c6d61736b3d5e4d41595f57524954452c61756469742c6f626aef65ffa05f72cf6c653d67656e6576655b5d2c736d61636b66736861743d63657068002c00"/104]) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="a00100000314000127bd7000fbdbdf250900020073797a320000000008004100736977001400330076657468315f746f5f626f6e640000000900020073797a300000000008004100727865001400330076657468315f746f5f687372000000000900020073797a3200000000080041007278650014003300697036677265300000000000000000000900020073797a3200000000080041007278650014003300697036677265746170300000000000000900020073797a300000000008004100736977001400330073797a6b616c6c6572300000000000000900020073797a3100000000080041007369770014003300677265300000000000000000000000000900020073797a3200000000080041007278650014003300000000000000000000000000000000000900020073797a300000000008004100727865001400330076657468315f766972745f77696669000900020073797a300000000008004100720000000000000000000900020073797a320000000008004100736977001400330064756d6d793000"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r3}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000007f1e1ca456a2a2eaf300"/37], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) 1.024821642s ago: executing program 5 (id=5378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x9, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x80, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x4100, 0x20a29}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bond={{0x9}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x6}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}, @IFLA_BOND_ARP_IP_TARGET={0x1c, 0x8, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x48}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @IFLA_MASTER={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fcfff4ff1d000100fcff09ad72d92031325a0000", @ANYRES32=0x0, @ANYBLOB="0000000014000100200100000000000000000000000000000600050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) r9 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r9, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r10}, &(0x7f0000000040), &(0x7f0000000180)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 915.894285ms ago: executing program 4 (id=5379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 798.551947ms ago: executing program 4 (id=5380): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x2000}, 0x10) 797.428147ms ago: executing program 4 (id=5381): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=',$:\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='.dead\x00', &(0x7f0000000100)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb\r+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\xbe\n\xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd8s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|y\xc6\f\x1e\x8fJw\xdc\r\xa7\n}Uc\x05<\xe9\x9f\x87\v\xbcLWk\fcC\xf5\x02z\x1e\xb2a\x18\xaaJ\x14=\bP\xc5e\x9d\xaf;\x8f\x87\xbe\x7f\x84\xdf\x05I:\xe66\x1c:\xe2\xe3\v\x8e\x04\xda\xc5U\xd4\x96\xf2\xc3x\x17\xd2\x98uMB0x0, &(0x7f0000000300)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x4d7c, 0xd06a, 0xa5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) 702.289418ms ago: executing program 4 (id=5383): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) r3 = getuid() r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r6 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@empty, 0x4e21, 0x8a5, 0x4e24, 0x4ea9, 0xa, 0x0, 0x80, 0x33, r5, r6}, {0x401, 0x8, 0xffffffffffffff84, 0x101, 0xf4a8, 0x676, 0x200, 0xfffffffffffffffd}, {0x2000000000000000, 0x7fff, 0x7fffffffffffffff}, 0x954, 0x6e6bb5, 0x957a6d3a686b1a91, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d3, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3502, 0x4, 0x2, 0xd, 0x9, 0x52b2}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}]}]}, 0x28}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1000843, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@ignoreqv}, {@uname={'uname', 0x3d, 'ext4\x00'}}, {@version_L}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\\'}}, {@uid_gt={'uid>', r3}}, {@euid_gt={'euid>', r6}}, {@subj_user={'subj_user', 0x3d, '\''}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '*&}/'}}, {@euid_lt={'euid<', r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')%\\%'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) syz_emit_ethernet(0xe, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) fallocate(r0, 0x3, 0x9, 0x10000) 627.282609ms ago: executing program 4 (id=5384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 508.445152ms ago: executing program 3 (id=5386): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) utime(&(0x7f0000000100)='./file0\x00', 0x0) 490.929361ms ago: executing program 3 (id=5387): socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000400)=0x7ffd) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6793, 0x13}, 0x0, 0x5, 0x800, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 400.379273ms ago: executing program 2 (id=5388): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe2$9p(&(0x7f0000000180), 0x80) getuid() r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x9, 0x10000) 356.143214ms ago: executing program 2 (id=5389): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x190, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x154, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x12c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x34, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x6, 0x6, "4ac6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000480)=[{0x80, 0x7, 0x0, 0x7}, {0x80, 0xff, 0x3}, {0x6, 0x0, 0xff}]}) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0xf7, 0x40, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x10, 0x419830a26a3853e8, 0x74ff, 0x92}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001fc0)=@newtfilter={0x4dc, 0x2c, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x7, 0xe}, {0x7, 0x8}, {0xa, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0x49c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xeb}, @TCA_ROUTE4_POLICE={0x434, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe38}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x1, 0x1, 0x4, 0x2, 0x0, 0x7fffffff, 0x5e, 0x4, 0x3, 0x6, 0x5, 0x0, 0xff, 0x4, 0x9, 0x800, 0x7ff, 0x6, 0x5, 0x5, 0x7, 0xffffffff, 0x3, 0x1, 0x1, 0x1, 0x6, 0x2, 0x9, 0x0, 0x2, 0x50fa47e9, 0x3, 0x7, 0x3, 0x4, 0x3, 0x1ff, 0x1, 0x6, 0x80000000, 0xd6e6, 0x6e, 0xfffffffb, 0x0, 0x9, 0x3, 0x6, 0x0, 0x5, 0x6, 0x9, 0xfffffff9, 0x2, 0x7f, 0xfffffffd, 0x3, 0xffff, 0xa, 0xb, 0x1, 0x40814557, 0x7, 0x0, 0x80, 0x456, 0x3, 0x5, 0x10000, 0x10000, 0x0, 0x1, 0x8001, 0x6, 0x40, 0x6, 0x0, 0x0, 0x3ff80000, 0x800, 0x5750e9ae, 0x2, 0x8, 0x7, 0xf, 0xbd6, 0x7, 0x0, 0x4, 0x8, 0x1, 0x1, 0x6, 0xe, 0x9, 0x0, 0x6, 0x321d3543, 0x9, 0x9, 0x80000001, 0x0, 0x8000, 0x0, 0x2, 0xffff, 0x7, 0x2e30, 0x10, 0x9, 0xffff0446, 0x9, 0x10001, 0x1, 0x2, 0x3, 0x2, 0x2, 0x3ff, 0x7, 0x100, 0x9, 0x1, 0x100, 0x80000001, 0x8, 0x10000, 0x3, 0xbe75, 0x80, 0x3, 0xffffff7f, 0x7, 0x9cc, 0x2, 0x1, 0xbc, 0x7, 0x1, 0x3, 0x6b2, 0x6df79d94, 0x36b, 0x81, 0x3, 0x8001, 0xd, 0x637, 0x6, 0xc97f, 0x6, 0x7, 0x5, 0xfffffffd, 0x5, 0xd3, 0x8d1, 0x3ef, 0x6, 0x2, 0x8, 0xe, 0x2, 0x8, 0x7, 0x1, 0x9, 0x8, 0xfd5e, 0x4, 0x7, 0x8, 0xfffffffb, 0x6, 0x0, 0x2, 0x3, 0x2, 0x80, 0x0, 0x1, 0x10001, 0x4, 0x8, 0x4, 0x7, 0x62, 0x200, 0x9, 0x5, 0x7, 0x8, 0xfffffffe, 0xa, 0xafe, 0x1, 0x1, 0x0, 0x10001, 0x5, 0x1, 0x8, 0x5, 0x7, 0xba1, 0x8, 0x5, 0x8, 0x401, 0x80000001, 0x80, 0xe, 0x41e, 0x101, 0x326, 0x5, 0x0, 0xc, 0x2, 0x3, 0x200, 0x7ff, 0x7, 0xfffffff9, 0x4, 0x3, 0xf8000000, 0x8, 0x9, 0x0, 0x10001, 0x6, 0xed4, 0xe5, 0x5, 0x3, 0x6, 0x10, 0x5, 0x6, 0xd00, 0x100, 0x1000, 0x9, 0x3b2, 0x30, 0xb156, 0x10000000, 0x0, 0x183, 0x7, 0xfffffff8, 0x0, 0xbf, 0xff]}, @TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_ROUTE4_POLICE={0x5c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x3, 0x5, 0x2, {0x3, 0x0, 0x5, 0x2, 0x1ff, 0x1}, {0x7, 0x0, 0xd, 0x9, 0x2ee}, 0xf87, 0xb4a, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6761}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$eJzs3U9oHOfZAPBnFMmyZeIv5PvIZ4zjjO18YPM5ykpKlIoc0s1qJE8i7YrdVbEpITGxnBrLSUgIaUxp6kvSlpbSU49priGX3FoKLfTQ9lRoDr30EAjk0pKWFkpLKbjs7K61+rOSLctymv5+i/edfeedd953djzPzmrfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlMl0pjSczl1cUzaX+V6XptfpP53fp+tirZZL0RSetf7N0bB9tZB/9nZfZ9radjcbj96nDsbSV748r+++55/L8HB7rLb9Kg7Traf9ZQ74sk4hutRl06t7y89MptaMgu+vZPOhN7b3iRv19rPc9m1bxRy+fLs1maN2rp1ORk6eHTM410Jp/LGmcbzWw+rdSzcrNWT09UTqZjU1MTaTZ6trZYnZ0uz2XdzMceGi+VJtOnRheycr1Rqz781Gijcjqfm8urs0WZ8dLr0SrzWGtHfDpvps2sPJ+mFy4uL01s1dRWobFVOcOrdpzDD97zyWsf/+XiUmuH7FdJ0tkxx8fGxsfHJh+devSxUmlwvDS+OqO0RlwvEQMRrRK3Zaflztq/Qd5gZ49ZNyPi2n/tzMEbbtFAJ/7HXORRjcU4E2mkMVA8rzyGohLTUY9azLde/3Zozfx18f//Hv7jrzdbb2/870b5gyuzD0UR/4+0Xx3pF//XtWIHHoP9aq2+325Nb96r8UZciUtxLpZjOZbile2scc/aWm/HY7idDuxsrbORRTXyaEQt8piPcpGTdnLSmIrJmIxSPBunYyYakcZM5DEXWTTibDSiGVmxR1WiHlmUoxm1qEcaJ6ISJyONsZiKqZiINLIYjbNRi8WoxmxMR7mo5UJcLLb7xJp23ff15378wm8+eac1fb3Q2CYdSVof5vZ/FPHnTQqtC/c3Ef9bJQY6e/euxCR2yd6bfFd36MgNt+5aEf8H73QzAAAAgNsoKb59TyJiKO4vpmbyuezLd7pZAAAAwA4qftd8uJUMtabuj6R1/l/aoOSHEcO73jwAAABgByTFGLskIkbigfZUd7jURl8CAAAAAP+Gir//H2klIxFvFhnO/wEAAOBz5pv9rrH/8Z7iGrsj0VgYTn76p6jXh5KrC2ceTC6XW+XKl+9qL9dJvnS9xubMoeRAp5IimRy8sj+JiMFKdjjpXv3yn52xBJ8Wz4dWLkDY71r/yRYNiM0bULyK78TRdpmj59vp+e6c9lpGZvK5bLRSm3t8LOl8OdJ87cWLX42i+9+qzh9I4sLF5aXR519aPl+05WqrlquXO5eHT7pLRbQHVGzSlmvd0RT3b9zjoWIgRme9I+31lnr737ma7MDm/U961/lWHGuXOTbSTkdW939va51jo4+PRbl8YKCZnWm+dq2n951WjK30fLjb2+Qm3oW34ni7zPETx9vJBq0YX9WKF9e3Yrx3+9/YtrjhVrxz9M0zf/1FLckmtmrFxC22AuBOuVBc9WclCu0rotA/rrW1AtqauLuvu+TNHOUurHzK6C7fE+sGY110T7cT3d+KE+0yJ9qfJwYPbRBXShsc0V+++PIvO0f0R977wQ+fOfKrD9bE9ZtoxXtxsl2mk8S9P+8TY1t9/u6aqPpua4l3+663MTeevD48MZS0bz4UVx66ePncC0svLL04Pj4xWXqkVHp0PIaKjwqdpE9LRR6A/2xb3WPng69dL9rvLjzJI1ucVd97/ScFo/F8vBTLcT5OFaMNIuKBjWsd6fkZwqktzlpHeu7wcmqLc8uVsuNryw4fT6JP2YmeLfa/3y+Sv92mNwQAdsGxLeJwEve0L/vz+t2dJdaUuCtJTvWed38lIg71i7mtWH6yfePc7tlx9I/lvX7fSb+wGxsFAD7nsvqnyUjz7aRezxeeHZuaGis3T2dpvVZ5Oq3n07NZmlebWb1yulydzdKFeq1Zq3S/Op7OGmljcWGhVm+mM7V6ulBr5GeKO7+nnVu/N7L5crWZVxoLc1m5kaWVWrVZrjTT6bxRSRcWn5zLG6ezerFwYyGr5DN5pdzMa9W0UVusV7LRNG1kWU/BfDqrNvOZPBtK82q6UM/ny/WrETG3OJ+l01mjUs8XmrV2hd115dWZWn2+qHZ0fff/sNvbGwA+C15948qlc8vLS69sb+J3N1L4TvcRAFhNlAYAAAAAAAAAAAAAgM++9cP1Wrk3NRBwKLY9fPDV4WhN7Nvu4q2JZzo9uYVRjJtMDMYOV7j5xP+/3+7MTlS4vp6hbs7dW4373LfqPd3T2cS7tBF2cuK5J564tJKTDPZu3iffPHj6oyy6vdukno3/p2w01PXtAxF7fvS9ds4X+xROBne4px9GxDYWv5ZsUmZ3j0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCP+FQAA//+XX0rH") write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000580)={0x14, 0x49, 0x1, {0x0, 0x1, 0x5}}, 0x14) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 343.837084ms ago: executing program 3 (id=5390): socket(0x2, 0x80805, 0x0) r0 = socket(0x2c, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = accept(r0, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000180)=0x80) sendfile(r2, r3, &(0x7f00000001c0), 0x8) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) add_key$keyring(&(0x7f00000008c0), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='attr\x00') fchown(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_io_uring_setup(0x6da4, &(0x7f0000000400)={0x0, 0x3604, 0x200, 0xffffffff, 0x65}, &(0x7f00000000c0), &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000024c0)={0x6, 0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000480)=""/202, 0xca}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000005c0)=""/223, 0xdf}, {&(0x7f00000006c0)=""/231, 0x14a}, {&(0x7f0000000380)=""/15, 0xf}], 0x0}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x120) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x3) sendfile(r9, r8, 0x0, 0x7ffff000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000940)={0x80, 0x18, 0x2, 0xfffffff7, 0x4, 0x9}) 295.916065ms ago: executing program 3 (id=5391): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 293.791705ms ago: executing program 3 (id=5392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 287.844245ms ago: executing program 0 (id=5393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 237.948406ms ago: executing program 3 (id=5394): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 234.954596ms ago: executing program 4 (id=5395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xfe, 0x70a, &(0x7f00000232c0)="$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") r1 = open(&(0x7f0000000240)='./file0\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000a00)="7e7e70e1edffffffffffffffff49ab2625c268738d4f5c17016a641de99e1734ebfd538e6c4c6ca25141446976aeea97c442d522b78e2f54885fd3262b3d7c5f44ad595c36a4d565661b0d677ab361d9dacb25f251b1b275d097d2b3db0cb479c872ea07900ed52ec6754745d968696028d707eaaeddb72ce9fd111d6fd994fbda16db260ce654d30eeb308e105b67b9f725822743d39ceb930d782395110bf4c84ea88ce44fbb2ca5ae07443f966722ea0bef5dc025514a64e7a63f1bb2555429fd8271be545a8d7d70c563612e3f91d2ac317bffbbc1b4ca86f9cc62bf4aa9", 0xe0, 0xb866, 0x0, 0x2, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, r1}]) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) write$binfmt_misc(r5, &(0x7f0000000940)="4bc51d8bc3b45e32d31b9670dcb93704457118b5e0d103e3750cf68dff53bf607fee6641a300bfb03123d1d569d771c45f4087ffdda0f65d41491c9efb6fd91eb1f8c9ec99daeab55a45002063cbe18b6a4cb772d8df18690a10725537ec3e03be947ff937813f79a9a0f342c030a0c9adfd070d98acf9bbc8bb89fa8b222cc47968110c3410d3a4bc110b8bf9f4d82485a5f8ceac0dae4d89ff13efc4d759a3ae4045ebf3", 0xa5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x5, 0x0, 0x0, 0xd, 0x0, 0x861}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d52f90b9b39094bf70e06d038e7ff7fc6e5539b324b298b089b0708376d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31310d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db38b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1040}}, 0x1006) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) close(r9) 113.422538ms ago: executing program 5 (id=5396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xa, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0xfe, 0x70a, &(0x7f00000232c0)="$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") r1 = open(&(0x7f0000000240)='./file0\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000a00)="7e7e70e1edffffffffffffffff49ab2625c268738d4f5c17016a641de99e1734ebfd538e6c4c6ca25141446976aeea97c442d522b78e2f54885fd3262b3d7c5f44ad595c36a4d565661b0d677ab361d9dacb25f251b1b275d097d2b3db0cb479c872ea07900ed52ec6754745d968696028d707eaaeddb72ce9fd111d6fd994fbda16db260ce654d30eeb308e105b67b9f725822743d39ceb930d782395110bf4c84ea88ce44fbb2ca5ae07443f966722ea0bef5dc025514a64e7a63f1bb2555429fd8271be545a8d7d70c563612e3f91d2ac317bffbbc1b4ca86f9cc62bf4aa9", 0xe0, 0xb866, 0x0, 0x2, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, r1}]) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYRES64=r1, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) write$binfmt_misc(r5, &(0x7f0000000940)="4bc51d8bc3b45e32d31b9670dcb93704457118b5e0d103e3750cf68dff53bf607fee6641a300bfb03123d1d569d771c45f4087ffdda0f65d41491c9efb6fd91eb1f8c9ec99daeab55a45002063cbe18b6a4cb772d8df18690a10725537ec3e03be947ff937813f79a9a0f342c030a0c9adfd070d98acf9bbc8bb89fa8b222cc47968110c3410d3a4bc110b8bf9f4d82485a5f8ceac0dae4d89ff13efc4d759a3ae4045ebf3", 0xa5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x5, 0x0, 0x0, 0xd, 0x0, 0x861}, 0x1c) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000240)}, {&(0x7f0000000540)=""/129, 0x81}, {&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000000880)=""/134, 0x86}], 0x6) close(r9) 34.467809ms ago: executing program 0 (id=5397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) 0s ago: executing program 0 (id=5398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 07f8a5b6070a0 RDI: 0000000000000005 [ 365.017809][T18103] RBP: 00007f8a5b607090 R08: 0000000000000000 R09: 0000000000000000 [ 365.017901][T18103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.017917][T18103] R13: 0000000000000000 R14: 00007f8a5d1c5fa0 R15: 00007fff141bbdf8 [ 365.017942][T18103] [ 365.332679][T18113] 9pnet: p9_errstr2errno: server reported unknown error [ 365.378515][T18115] loop5: detected capacity change from 0 to 512 [ 365.417493][T18115] EXT4-fs (loop5): orphan cleanup on readonly fs [ 365.428221][T18115] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4761: bg 0: block 248: padding at end of block bitmap is not set [ 365.444483][T18115] Quota error (device loop5): write_blk: dquota write failed [ 365.452007][T18115] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 365.462055][T18115] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4761: Failed to acquire dquot type 1 [ 365.497767][T18115] EXT4-fs (loop5): 1 truncate cleaned up [ 365.526021][ T29] audit: type=1326 audit(1753829000.249:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 365.549909][ T29] audit: type=1326 audit(1753829000.249:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 365.573420][ T29] audit: type=1326 audit(1753829000.249:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 365.597027][ T29] audit: type=1326 audit(1753829000.249:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 365.620556][ T29] audit: type=1326 audit(1753829000.249:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 365.627672][T18122] FAULT_INJECTION: forcing a failure. [ 365.627672][T18122] name failslab, interval 1, probability 0, space 0, times 0 [ 365.644100][ T29] audit: type=1326 audit(1753829000.249:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18114 comm="syz.5.4761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 365.656745][T18122] CPU: 0 UID: 0 PID: 18122 Comm: syz.2.4763 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 365.656776][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.656789][T18122] Call Trace: [ 365.656796][T18122] [ 365.656804][T18122] __dump_stack+0x1d/0x30 [ 365.656891][T18122] dump_stack_lvl+0xe8/0x140 [ 365.656920][T18122] dump_stack+0x15/0x1b [ 365.656943][T18122] should_fail_ex+0x265/0x280 [ 365.656988][T18122] ? tcf_action_init_1+0x11e/0x4a0 [ 365.657024][T18122] should_failslab+0x8c/0xb0 [ 365.657134][T18122] __kmalloc_cache_noprof+0x4c/0x320 [ 365.657180][T18122] tcf_action_init_1+0x11e/0x4a0 [ 365.657244][T18122] tcf_action_init+0x267/0x6d0 [ 365.657308][T18122] tc_ctl_action+0x291/0x830 [ 365.657459][T18122] ? __pfx_tc_ctl_action+0x10/0x10 [ 365.657495][T18122] rtnetlink_rcv_msg+0x657/0x6d0 [ 365.657530][T18122] ? avc_has_perm_noaudit+0x1b1/0x200 [ 365.657572][T18122] netlink_rcv_skb+0x120/0x220 [ 365.657687][T18122] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 365.657726][T18122] rtnetlink_rcv+0x1c/0x30 [ 365.657754][T18122] netlink_unicast+0x5a8/0x680 [ 365.657828][T18122] netlink_sendmsg+0x58b/0x6b0 [ 365.657858][T18122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.657886][T18122] __sock_sendmsg+0x145/0x180 [ 365.657921][T18122] ____sys_sendmsg+0x31e/0x4e0 [ 365.658046][T18122] ___sys_sendmsg+0x17b/0x1d0 [ 365.658087][T18122] __x64_sys_sendmsg+0xd4/0x160 [ 365.658165][T18122] x64_sys_call+0x2999/0x2fb0 [ 365.658196][T18122] do_syscall_64+0xd2/0x200 [ 365.658243][T18122] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 365.658282][T18122] ? clear_bhb_loop+0x40/0x90 [ 365.658313][T18122] ? clear_bhb_loop+0x40/0x90 [ 365.658352][T18122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.658427][T18122] RIP: 0033:0x7fd4bf36e9a9 [ 365.658448][T18122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.658474][T18122] RSP: 002b:00007fd4bd9ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.658500][T18122] RAX: ffffffffffffffda RBX: 00007fd4bf596080 RCX: 00007fd4bf36e9a9 [ 365.658518][T18122] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 365.658537][T18122] RBP: 00007fd4bd9ae090 R08: 0000000000000000 R09: 0000000000000000 [ 365.658618][T18122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.658690][T18122] R13: 0000000000000000 R14: 00007fd4bf596080 R15: 00007ffe54d14df8 [ 365.658712][T18122] [ 365.708086][T18115] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.4761: iget: bad i_size value: 360287970189639690 [ 365.786386][T18129] netlink: 'syz.3.4766': attribute type 13 has an invalid length. [ 365.803015][T18130] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.4761: iget: bad i_size value: 360287970189639690 [ 365.964658][T18123] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.4761: iget: bad i_size value: 360287970189639690 [ 366.014038][T18140] 9pnet: p9_errstr2errno: server reported unknown error [ 366.063917][T18142] FAULT_INJECTION: forcing a failure. [ 366.063917][T18142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.064046][T18136] netlink: 'syz.3.4767': attribute type 10 has an invalid length. [ 366.077063][T18142] CPU: 1 UID: 0 PID: 18142 Comm: syz.4.4769 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 366.077153][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.077171][T18142] Call Trace: [ 366.077181][T18142] [ 366.077193][T18142] __dump_stack+0x1d/0x30 [ 366.077238][T18142] dump_stack_lvl+0xe8/0x140 [ 366.077343][T18142] dump_stack+0x15/0x1b [ 366.077407][T18142] should_fail_ex+0x265/0x280 [ 366.077449][T18142] should_fail+0xb/0x20 [ 366.077492][T18142] should_fail_usercopy+0x1a/0x20 [ 366.077576][T18142] _copy_from_user+0x1c/0xb0 [ 366.077673][T18142] __se_sys_mount+0x10d/0x2e0 [ 366.077722][T18142] ? __bpf_trace_sys_enter+0x10/0x30 [ 366.077756][T18142] ? trace_sys_enter+0xd0/0x110 [ 366.077787][T18142] __x64_sys_mount+0x67/0x80 [ 366.077830][T18142] x64_sys_call+0xd36/0x2fb0 [ 366.077858][T18142] do_syscall_64+0xd2/0x200 [ 366.078029][T18142] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 366.078063][T18142] ? clear_bhb_loop+0x40/0x90 [ 366.078091][T18142] ? clear_bhb_loop+0x40/0x90 [ 366.078120][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.078300][T18142] RIP: 0033:0x7f0e85d9e9a9 [ 366.078392][T18142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.078417][T18142] RSP: 002b:00007f0e843e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.078443][T18142] RAX: ffffffffffffffda RBX: 00007f0e85fc6080 RCX: 00007f0e85d9e9a9 [ 366.078461][T18142] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 366.078478][T18142] RBP: 00007f0e843e6090 R08: 0000200000000080 R09: 0000000000000000 [ 366.078501][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.078518][T18142] R13: 0000000000000001 R14: 00007f0e85fc6080 R15: 00007ffd89261768 [ 366.078551][T18142] [ 366.304092][T18146] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 366.338763][T18151] tipc: Started in network mode [ 366.343674][T18151] tipc: Node identity f613edb0e687, cluster identity 4711 [ 366.351062][T18151] tipc: Enabled bearer , priority 0 [ 366.379532][T18155] loop4: detected capacity change from 0 to 1024 [ 366.386220][T18156] loop3: detected capacity change from 0 to 1024 [ 366.401946][T18156] FAULT_INJECTION: forcing a failure. [ 366.401946][T18156] name failslab, interval 1, probability 0, space 0, times 0 [ 366.414818][T18156] CPU: 1 UID: 0 PID: 18156 Comm: syz.3.4776 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 366.414853][T18156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.414891][T18156] Call Trace: [ 366.414899][T18156] [ 366.414908][T18156] __dump_stack+0x1d/0x30 [ 366.414935][T18156] dump_stack_lvl+0xe8/0x140 [ 366.414978][T18156] dump_stack+0x15/0x1b [ 366.414998][T18156] should_fail_ex+0x265/0x280 [ 366.415053][T18156] should_failslab+0x8c/0xb0 [ 366.415079][T18156] __kmalloc_noprof+0xa5/0x3e0 [ 366.415109][T18156] ? ext4_convert_inline_data_nolock+0x8d/0x4c0 [ 366.415227][T18156] ext4_convert_inline_data_nolock+0x8d/0x4c0 [ 366.415265][T18156] ext4_convert_inline_data+0x2b8/0x350 [ 366.415307][T18156] ext4_fallocate+0xa6/0x660 [ 366.415422][T18156] vfs_fallocate+0x413/0x450 [ 366.415442][T18156] __x64_sys_fallocate+0x7a/0xd0 [ 366.415461][T18156] x64_sys_call+0x2b88/0x2fb0 [ 366.415490][T18156] do_syscall_64+0xd2/0x200 [ 366.415590][T18156] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 366.415622][T18156] ? clear_bhb_loop+0x40/0x90 [ 366.415651][T18156] ? clear_bhb_loop+0x40/0x90 [ 366.415679][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.415778][T18156] RIP: 0033:0x7fd81689e9a9 [ 366.415836][T18156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.415858][T18156] RSP: 002b:00007fd814eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 366.415882][T18156] RAX: ffffffffffffffda RBX: 00007fd816ac5fa0 RCX: 00007fd81689e9a9 [ 366.415895][T18156] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000004 [ 366.415907][T18156] RBP: 00007fd814eff090 R08: 0000000000000000 R09: 0000000000000000 [ 366.415919][T18156] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 366.415970][T18156] R13: 0000000000000000 R14: 00007fd816ac5fa0 R15: 00007ffc0b205538 [ 366.415994][T18156] [ 366.636455][T18165] netlink: 'syz.3.4778': attribute type 13 has an invalid length. [ 366.640599][T18168] openvswitch: netlink: Message has 6 unknown bytes. [ 366.655392][T18169] loop4: detected capacity change from 0 to 512 [ 366.662430][T18169] ext2: Unknown parameter 'dont_hash' [ 366.761425][T18182] loop0: detected capacity change from 0 to 164 [ 366.797234][T18179] netlink: 'syz.2.4782': attribute type 10 has an invalid length. [ 367.305124][T18209] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 367.350276][T18211] netlink: 'syz.5.4794': attribute type 13 has an invalid length. [ 367.468361][ T3399] tipc: Node number set to 278195632 [ 367.801146][T18221] netlink: 'syz.5.4798': attribute type 10 has an invalid length. [ 367.819970][T18221] dummy0: left allmulticast mode [ 367.825070][T18221] dummy0: left promiscuous mode [ 367.830254][T18221] bridge0: port 3(dummy0) entered disabled state [ 367.835128][T18230] __nla_validate_parse: 3 callbacks suppressed [ 367.835178][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4802'. [ 367.853132][T18221] dummy0: entered promiscuous mode [ 367.858718][T18221] team0: Port device dummy0 added [ 367.869996][T18233] tipc: Enabled bearer , priority 0 [ 367.892133][T18233] tipc: Disabling bearer [ 367.924534][T18240] netlink: 'syz.4.4806': attribute type 13 has an invalid length. [ 367.935940][T18242] loop0: detected capacity change from 0 to 512 [ 367.943009][T18242] EXT4-fs: Ignoring removed i_version option [ 367.959443][T18242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 367.997670][T18249] loop2: detected capacity change from 0 to 512 [ 368.004699][T18249] ext2: Unknown parameter 'dont_hash' [ 368.015513][T18242] EXT4-fs (loop0): 1 truncate cleaned up [ 368.129453][T18256] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 368.985216][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 368.985235][ T29] audit: type=1400 audit(1753829003.707:6776): avc: denied { bind } for pid=18274 comm="syz.5.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 369.043416][T18273] netlink: 'syz.2.4816': attribute type 10 has an invalid length. [ 369.120445][T18282] tipc: Enabled bearer , priority 0 [ 369.128398][T18282] tipc: Disabling bearer [ 369.132048][ T29] audit: type=1400 audit(1753829003.857:6777): avc: denied { create } for pid=18274 comm="syz.5.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 369.154374][ T29] audit: type=1400 audit(1753829003.877:6778): avc: denied { setopt } for pid=18274 comm="syz.5.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 369.252222][T18285] 9pnet_fd: Insufficient options for proto=fd [ 369.291762][T18291] loop3: detected capacity change from 0 to 512 [ 369.299425][T18291] ext2: Unknown parameter 'dont_hash' [ 369.488370][T18303] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 369.571922][T18306] netlink: 'syz.0.4830': attribute type 10 has an invalid length. [ 369.634398][T18310] ALSA: seq fatal error: cannot create timer (-19) [ 369.886996][T18316] loop0: detected capacity change from 0 to 1024 [ 370.069879][T18316] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 370.185275][T18323] loop0: detected capacity change from 0 to 1024 [ 370.262387][T18331] 9pnet_fd: Insufficient options for proto=fd [ 370.269544][T18329] tipc: Enabled bearer , priority 0 [ 370.277429][T18329] tipc: Disabling bearer [ 370.311922][T18335] syzkaller0: entered allmulticast mode [ 370.359686][T18340] loop5: detected capacity change from 0 to 512 [ 370.370911][T18340] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 370.385132][T18340] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.400308][T18340] EXT4-fs (loop5): mount failed [ 370.409249][T18346] FAULT_INJECTION: forcing a failure. [ 370.409249][T18346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.419051][T18323] FAULT_INJECTION: forcing a failure. [ 370.419051][T18323] name failslab, interval 1, probability 0, space 0, times 0 [ 370.422647][T18346] CPU: 1 UID: 0 PID: 18346 Comm: syz.4.4844 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 370.422764][T18346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.422782][T18346] Call Trace: [ 370.422793][T18346] [ 370.422804][T18346] __dump_stack+0x1d/0x30 [ 370.422844][T18346] dump_stack_lvl+0xe8/0x140 [ 370.422873][T18346] dump_stack+0x15/0x1b [ 370.422952][T18346] should_fail_ex+0x265/0x280 [ 370.423000][T18346] should_fail+0xb/0x20 [ 370.423037][T18346] should_fail_usercopy+0x1a/0x20 [ 370.423082][T18346] _copy_to_user+0x20/0xa0 [ 370.423139][T18346] simple_read_from_buffer+0xb5/0x130 [ 370.423249][T18346] proc_fail_nth_read+0x100/0x140 [ 370.423318][T18346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.423440][T18346] vfs_read+0x19d/0x6f0 [ 370.423479][T18346] ? __rcu_read_unlock+0x4f/0x70 [ 370.423529][T18346] ? __rcu_read_unlock+0x4f/0x70 [ 370.423559][T18346] ? __fget_files+0x184/0x1c0 [ 370.423588][T18346] ksys_read+0xda/0x1a0 [ 370.423632][T18346] __x64_sys_read+0x40/0x50 [ 370.423880][T18346] x64_sys_call+0x2d77/0x2fb0 [ 370.423920][T18346] do_syscall_64+0xd2/0x200 [ 370.423949][T18346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 370.424018][T18346] ? clear_bhb_loop+0x40/0x90 [ 370.424050][T18346] ? clear_bhb_loop+0x40/0x90 [ 370.424152][T18346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.424181][T18346] RIP: 0033:0x7f0e85d9d3bc [ 370.424222][T18346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.424248][T18346] RSP: 002b:00007f0e84407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.424275][T18346] RAX: ffffffffffffffda RBX: 00007f0e85fc5fa0 RCX: 00007f0e85d9d3bc [ 370.424293][T18346] RDX: 000000000000000f RSI: 00007f0e844070a0 RDI: 0000000000000006 [ 370.424312][T18346] RBP: 00007f0e84407090 R08: 0000000000000000 R09: 0000000000000000 [ 370.424328][T18346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.424434][T18346] R13: 0000000000000000 R14: 00007f0e85fc5fa0 R15: 00007ffd89261768 [ 370.424467][T18346] [ 370.425263][ T29] audit: type=1326 audit(1753829005.146:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18345 comm="syz.4.4844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e85d9e9a9 code=0x0 [ 370.435252][T18323] CPU: 0 UID: 0 PID: 18323 Comm: syz.0.4834 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 370.435371][T18323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.435387][T18323] Call Trace: [ 370.435395][T18323] [ 370.435406][T18323] __dump_stack+0x1d/0x30 [ 370.435435][T18323] dump_stack_lvl+0xe8/0x140 [ 370.435462][T18323] dump_stack+0x15/0x1b [ 370.435485][T18323] should_fail_ex+0x265/0x280 [ 370.435569][T18323] ? __iomap_dio_rw+0x14b/0x1250 [ 370.435610][T18323] should_failslab+0x8c/0xb0 [ 370.435640][T18323] __kmalloc_cache_noprof+0x4c/0x320 [ 370.435681][T18323] __iomap_dio_rw+0x14b/0x1250 [ 370.435763][T18323] ? ext4_xattr_security_get+0x32/0x40 [ 370.435800][T18323] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 370.435839][T18323] ? __vfs_getxattr+0x2aa/0x2c0 [ 370.436018][T18323] ? ext4_journal_check_start+0x11a/0x1b0 [ 370.436058][T18323] iomap_dio_rw+0x40/0x90 [ 370.436097][T18323] ext4_file_write_iter+0xad9/0xf00 [ 370.436260][T18323] do_iter_readv_writev+0x41e/0x4c0 [ 370.436404][T18323] vfs_writev+0x2df/0x8b0 [ 370.436446][T18323] __se_sys_pwritev2+0xfc/0x1c0 [ 370.436523][T18323] __x64_sys_pwritev2+0x67/0x80 [ 370.436551][T18323] x64_sys_call+0x1cea/0x2fb0 [ 370.436611][T18323] do_syscall_64+0xd2/0x200 [ 370.436639][T18323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 370.436720][T18323] ? clear_bhb_loop+0x40/0x90 [ 370.436763][T18323] ? clear_bhb_loop+0x40/0x90 [ 370.436793][T18323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.436825][T18323] RIP: 0033:0x7f16f966e9a9 [ 370.436847][T18323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.436898][T18323] RSP: 002b:00007f16f7cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 370.436923][T18323] RAX: ffffffffffffffda RBX: 00007f16f9895fa0 RCX: 00007f16f966e9a9 [ 370.436942][T18323] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 370.436967][T18323] RBP: 00007f16f7cd7090 R08: 0000000000000000 R09: 0000000000000003 [ 370.436985][T18323] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 370.437073][T18323] R13: 0000000000000000 R14: 00007f16f9895fa0 R15: 00007ffffc05c228 [ 370.437096][T18323] [ 370.921752][ T29] audit: type=1400 audit(1753829005.646:6780): avc: denied { read } for pid=18350 comm="syz.0.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 370.942527][T18356] loop2: detected capacity change from 0 to 512 [ 370.949507][T18356] ext2: Unknown parameter 'dont_hash' [ 370.971297][T18352] kKC: renamed from batadv_slave_0 [ 371.042213][T18360] loop0: detected capacity change from 0 to 512 [ 371.056576][T18360] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 371.067006][T18360] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 371.082217][T18360] EXT4-fs (loop0): mount failed [ 371.094782][T18360] loop0: detected capacity change from 0 to 1024 [ 371.101513][T18360] EXT4-fs: Ignoring removed nobh option [ 371.107150][T18360] EXT4-fs: Ignoring removed bh option [ 371.113153][T18360] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 371.285737][T18375] loop3: detected capacity change from 0 to 512 [ 371.295928][T18375] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 371.305650][T18375] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.4853: iget: bad i_size value: 12154757448730 [ 371.329604][T18376] loop0: detected capacity change from 0 to 512 [ 371.340208][T18375] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4853: couldn't read orphan inode 13 (err -117) [ 371.376242][T18372] netlink: 'syz.4.4851': attribute type 10 has an invalid length. [ 371.385034][T18376] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 371.397742][T18376] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 371.412711][T18372] dummy0: left allmulticast mode [ 371.418289][T18372] dummy0: left promiscuous mode [ 371.423438][T18372] bridge0: port 3(dummy0) entered disabled state [ 371.423524][T18375] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 371.444380][T18376] EXT4-fs (loop0): mount failed [ 371.450371][T18372] dummy0: entered promiscuous mode [ 371.455883][T18372] team0: Port device dummy0 added [ 371.465022][T18382] tipc: Started in network mode [ 371.470022][T18382] tipc: Node identity 726ebd6f74d7, cluster identity 4711 [ 371.477273][T18382] tipc: Enabled bearer , priority 0 [ 371.485344][T18382] tipc: Disabling bearer [ 371.488068][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4853'. [ 371.517868][T18376] loop0: detected capacity change from 0 to 1024 [ 371.645679][T18376] EXT4-fs: Ignoring removed nobh option [ 371.651424][T18376] EXT4-fs: Ignoring removed bh option [ 371.657255][T18376] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 371.728490][T18400] loop3: detected capacity change from 0 to 1024 [ 371.739519][T18402] netlink: 'syz.4.4861': attribute type 13 has an invalid length. [ 371.745490][T18400] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm +}[@: Allocating blocks 385-513 which overlap fs metadata [ 371.761633][T18400] EXT4-fs (loop3): pa ffff888106ab5f50: logic 16, phys. 129, len 24 [ 371.769766][T18400] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 371.775625][T18406] loop5: detected capacity change from 0 to 512 [ 371.906497][T18406] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 371.918808][T18406] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 371.935240][T18406] EXT4-fs (loop5): mount failed [ 371.950651][T18406] loop5: detected capacity change from 0 to 1024 [ 371.957486][T18406] EXT4-fs: Ignoring removed nobh option [ 371.985275][T18406] EXT4-fs: Ignoring removed bh option [ 371.991251][T18406] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 372.017816][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4867'. [ 372.025547][T18424] netlink: 'syz.4.4866': attribute type 10 has an invalid length. [ 372.037754][T18433] tipc: Enabling of bearer rejected, already enabled [ 372.054031][T18406] ip6tnl1: entered promiscuous mode [ 372.071684][T18406] netdevsim netdevsim5 eth0: entered promiscuous mode [ 372.078789][T18406] netdevsim netdevsim5 eth1: entered promiscuous mode [ 372.086128][T18406] netdevsim netdevsim5 eth2: entered promiscuous mode [ 372.093095][T18422] loop0: detected capacity change from 0 to 512 [ 372.093223][T18406] netdevsim netdevsim5 eth3: entered promiscuous mode [ 372.100199][T18422] EXT4-fs: Ignoring removed i_version option [ 372.112934][T18422] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 372.126328][T18422] EXT4-fs (loop0): 1 truncate cleaned up [ 372.154012][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4869'. [ 372.168019][T18442] loop3: detected capacity change from 0 to 512 [ 372.176023][T18442] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 372.184325][T18442] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #13: comm syz.3.4870: iget: bad i_size value: 12154757448730 [ 372.197377][T18442] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4870: couldn't read orphan inode 13 (err -117) [ 372.212296][T18442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 372.231180][T18444] loop4: detected capacity change from 0 to 512 [ 372.239611][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4870'. [ 372.243947][T18446] loop5: detected capacity change from 0 to 128 [ 372.250024][T18444] EXT4-fs: Ignoring removed i_version option [ 372.257654][T18446] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.261490][T18444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 372.272756][ T29] audit: type=1400 audit(1753829006.996:6781): avc: denied { create } for pid=18445 comm="syz.5.4871" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 372.282758][T18446] EXT4-fs (loop5): resizing filesystem from 64 to 2 blocks [ 372.304531][T18444] EXT4-fs (loop4): 1 truncate cleaned up [ 372.309768][T18446] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 372.517596][T18461] vlan2: entered promiscuous mode [ 372.522980][T18461] vlan2: entered allmulticast mode [ 372.523540][T18463] loop5: detected capacity change from 0 to 512 [ 372.528129][T18461] hsr_slave_1: entered allmulticast mode [ 372.534921][T18463] ext2: Unknown parameter 'dont_hash' [ 372.732548][T18468] loop3: detected capacity change from 0 to 512 [ 372.739442][T18468] ext2: Unknown parameter 'dont_hash' [ 372.747548][T18466] netlink: 'syz.2.4877': attribute type 13 has an invalid length. [ 372.951870][T18475] netlink: 'syz.3.4878': attribute type 10 has an invalid length. [ 372.959742][T18475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4878'. [ 373.194162][T18475] team0: Port device dummy0 removed [ 373.199729][T18475] bridge0: port 3(dummy0) entered blocking state [ 373.206140][T18475] bridge0: port 3(dummy0) entered disabled state [ 373.254720][T18474] netlink: 'syz.2.4879': attribute type 10 has an invalid length. [ 373.300528][T18478] tipc: Enabling of bearer rejected, failed to enable media [ 373.330991][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4881'. [ 373.368480][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4881'. [ 373.414179][T18486] loop0: detected capacity change from 0 to 512 [ 373.435595][T18486] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 373.450113][T18480] loop4: detected capacity change from 0 to 8192 [ 373.451359][T18486] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.4883: iget: bad i_size value: 12154757448730 [ 373.481343][T18486] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4883: couldn't read orphan inode 13 (err -117) [ 373.505831][T18480] loop4: p2 p3 p4 [ 373.509638][T18480] loop4: p2 start 2936012800 is beyond EOD, truncated [ 373.516474][T18480] loop4: p3 start 1912602624 is beyond EOD, truncated [ 373.523354][T18480] loop4: p4 size 656640 extends beyond EOD, truncated [ 373.550782][T18486] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 373.568050][T18492] syzkaller0: entered promiscuous mode [ 373.573675][T18492] syzkaller0: entered allmulticast mode [ 373.629441][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 373.780822][T18511] 9pnet: p9_errstr2errno: server reported unknown error [ 373.897330][T18519] loop0: detected capacity change from 0 to 764 [ 373.907753][T18521] loop2: detected capacity change from 0 to 164 [ 373.915312][T18521] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 373.925482][T18521] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 373.933927][T18519] Symlink component flag not implemented [ 373.934240][T18521] rock: directory entry would overflow storage [ 373.940075][T18519] Symlink component flag not implemented (7) [ 373.945846][T18521] rock: sig=0x4f50, size=4, remaining=3 [ 373.945870][T18521] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 373.970588][T18523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62996 sclass=netlink_route_socket pid=18523 comm=syz.3.4893 [ 374.006931][T18525] tipc: Enabling of bearer rejected, already enabled [ 374.033900][T18527] netlink: 'syz.3.4895': attribute type 13 has an invalid length. [ 374.043839][T18527] tipc: Resetting bearer [ 374.224111][T18537] netlink: 'syz.3.4899': attribute type 10 has an invalid length. [ 374.235000][T18537] dummy0: left promiscuous mode [ 374.240121][T18537] bridge0: port 3(dummy0) entered disabled state [ 374.248069][T18537] dummy0: entered promiscuous mode [ 374.253650][T18537] team0: Port device dummy0 added [ 374.373410][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 374.373503][ T29] audit: type=1326 audit(1753829009.094:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.403382][ T29] audit: type=1326 audit(1753829009.094:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.426929][ T29] audit: type=1326 audit(1753829009.094:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.450460][ T29] audit: type=1326 audit(1753829009.094:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.474072][ T29] audit: type=1326 audit(1753829009.094:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.497651][ T29] audit: type=1326 audit(1753829009.094:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.521161][ T29] audit: type=1326 audit(1753829009.094:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.544759][ T29] audit: type=1326 audit(1753829009.094:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.568332][ T29] audit: type=1326 audit(1753829009.094:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.591865][ T29] audit: type=1326 audit(1753829009.094:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18547 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4bf36e9a9 code=0x7ffc0000 [ 374.635452][T18556] tipc: Enabling of bearer rejected, failed to enable media [ 374.667220][T18553] netlink: 'syz.2.4905': attribute type 10 has an invalid length. [ 374.703332][T18560] FAULT_INJECTION: forcing a failure. [ 374.703332][T18560] name failslab, interval 1, probability 0, space 0, times 0 [ 374.716116][T18560] CPU: 0 UID: 0 PID: 18560 Comm: syz.0.4908 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 374.716204][T18560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.716221][T18560] Call Trace: [ 374.716229][T18560] [ 374.716238][T18560] __dump_stack+0x1d/0x30 [ 374.716264][T18560] dump_stack_lvl+0xe8/0x140 [ 374.716320][T18560] dump_stack+0x15/0x1b [ 374.716339][T18560] should_fail_ex+0x265/0x280 [ 374.716369][T18560] should_failslab+0x8c/0xb0 [ 374.716394][T18560] __kmalloc_node_noprof+0xa9/0x410 [ 374.716480][T18560] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 374.716512][T18560] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 374.716594][T18560] ? mntput_no_expire+0x6f/0x3c0 [ 374.716628][T18560] ? selinux_capable+0x1f9/0x270 [ 374.716657][T18560] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 374.716686][T18560] __vmalloc_noprof+0x83/0xc0 [ 374.716770][T18560] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 374.716895][T18560] bpf_prog_alloc_no_stats+0x47/0x390 [ 374.716929][T18560] ? bpf_prog_alloc+0x2a/0x150 [ 374.717077][T18560] bpf_prog_alloc+0x3c/0x150 [ 374.717122][T18560] bpf_prog_load+0x514/0x1070 [ 374.717161][T18560] ? security_bpf+0x2b/0x90 [ 374.717183][T18560] __sys_bpf+0x51d/0x790 [ 374.717228][T18560] __x64_sys_bpf+0x41/0x50 [ 374.717316][T18560] x64_sys_call+0x2478/0x2fb0 [ 374.717340][T18560] do_syscall_64+0xd2/0x200 [ 374.717391][T18560] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 374.717423][T18560] ? clear_bhb_loop+0x40/0x90 [ 374.717449][T18560] ? clear_bhb_loop+0x40/0x90 [ 374.717472][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.717561][T18560] RIP: 0033:0x7f16f966e9a9 [ 374.717576][T18560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.717596][T18560] RSP: 002b:00007f16f7cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.717619][T18560] RAX: ffffffffffffffda RBX: 00007f16f9895fa0 RCX: 00007f16f966e9a9 [ 374.717693][T18560] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 374.717705][T18560] RBP: 00007f16f7cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.717716][T18560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.717732][T18560] R13: 0000000000000000 R14: 00007f16f9895fa0 R15: 00007ffffc05c228 [ 374.717752][T18560] [ 374.717759][T18560] syz.0.4908: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 374.885209][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4912'. [ 374.901040][T18560] ,cpuset=/,mems_allowed=0 [ 374.981567][T18560] CPU: 0 UID: 0 PID: 18560 Comm: syz.0.4908 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 374.981602][T18560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.981618][T18560] Call Trace: [ 374.981627][T18560] [ 374.981637][T18560] __dump_stack+0x1d/0x30 [ 374.981664][T18560] dump_stack_lvl+0xe8/0x140 [ 374.981762][T18560] dump_stack+0x15/0x1b [ 374.981799][T18560] warn_alloc+0x12b/0x1a0 [ 374.981886][T18560] ? should_failslab+0x8c/0xb0 [ 374.981918][T18560] __vmalloc_node_range_noprof+0x497/0xe00 [ 374.981979][T18560] ? selinux_capable+0x1f9/0x270 [ 374.982017][T18560] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 374.982054][T18560] __vmalloc_noprof+0x83/0xc0 [ 374.982085][T18560] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 374.982177][T18560] bpf_prog_alloc_no_stats+0x47/0x390 [ 374.982211][T18560] ? bpf_prog_alloc+0x2a/0x150 [ 374.982246][T18560] bpf_prog_alloc+0x3c/0x150 [ 374.982319][T18560] bpf_prog_load+0x514/0x1070 [ 374.982417][T18560] ? security_bpf+0x2b/0x90 [ 374.982438][T18560] __sys_bpf+0x51d/0x790 [ 374.982500][T18560] __x64_sys_bpf+0x41/0x50 [ 374.982555][T18560] x64_sys_call+0x2478/0x2fb0 [ 374.982579][T18560] do_syscall_64+0xd2/0x200 [ 374.982665][T18560] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 374.982693][T18560] ? clear_bhb_loop+0x40/0x90 [ 374.982713][T18560] ? clear_bhb_loop+0x40/0x90 [ 374.982736][T18560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.982900][T18560] RIP: 0033:0x7f16f966e9a9 [ 374.982919][T18560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.982939][T18560] RSP: 002b:00007f16f7cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.982958][T18560] RAX: ffffffffffffffda RBX: 00007f16f9895fa0 RCX: 00007f16f966e9a9 [ 374.982970][T18560] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 374.982984][T18560] RBP: 00007f16f7cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.982997][T18560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.983008][T18560] R13: 0000000000000000 R14: 00007f16f9895fa0 R15: 00007ffffc05c228 [ 374.983040][T18560] [ 375.199827][T18560] Mem-Info: [ 375.203103][T18560] active_anon:12755 inactive_anon:32 isolated_anon:0 [ 375.203103][T18560] active_file:16616 inactive_file:2616 isolated_file:0 [ 375.203103][T18560] unevictable:0 dirty:138 writeback:0 [ 375.203103][T18560] slab_reclaimable:3135 slab_unreclaimable:90375 [ 375.203103][T18560] mapped:32983 shmem:3599 pagetables:1177 [ 375.203103][T18560] sec_pagetables:0 bounce:0 [ 375.203103][T18560] kernel_misc_reclaimable:0 [ 375.203103][T18560] free:1804803 free_pcp:7252 free_cma:0 [ 375.248402][T18560] Node 0 active_anon:51020kB inactive_anon:128kB active_file:66464kB inactive_file:10464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131932kB dirty:552kB writeback:0kB shmem:14396kB writeback_tmp:0kB kernel_stack:3232kB pagetables:4476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.277662][T18560] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.306395][T18560] lowmem_reserve[]: 0 2882 7860 7860 [ 375.311820][T18560] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 375.342368][T18560] lowmem_reserve[]: 0 0 4978 4978 [ 375.347455][T18560] Node 0 Normal free:4256640kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44524kB inactive_anon:128kB active_file:66464kB inactive_file:10464kB unevictable:0kB writepending:552kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32264kB local_pcp:12868kB free_cma:0kB [ 375.369637][T18579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4915'. [ 375.379739][T18560] lowmem_reserve[]: 0 0 0 0 [ 375.393600][T18560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.406593][T18560] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 375.411126][T18579] program syz.3.4915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.422799][T18560] Node 0 Normal: 154*4kB (UM) 1349*8kB (UM) 391*16kB (UM) 490*32kB (UM) 183*64kB (UME) 51*128kB (UM) 26*256kB (UME) 26*512kB (UME) 51*1024kB (UME) 66*2048kB (UM) 976*4096kB (UM) = 4256640kB [ 375.451066][T18560] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 375.460456][T18560] 20550 total pagecache pages [ 375.465180][T18560] 40 pages in swap cache [ 375.469455][T18560] Free swap = 124836kB [ 375.473705][T18560] Total swap = 124996kB [ 375.477880][T18560] 2097051 pages RAM [ 375.481702][T18560] 0 pages HighMem/MovableOnly [ 375.486409][T18560] 80813 pages reserved [ 375.547206][T18586] loop2: detected capacity change from 0 to 512 [ 375.564420][T18586] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4919: Failed to acquire dquot type 1 [ 375.577277][T18586] EXT4-fs (loop2): 1 truncate cleaned up [ 375.584439][T18586] EXT4-fs mount: 36 callbacks suppressed [ 375.584458][T18586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.603100][T18586] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.626023][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.639787][T18589] netlink: 'syz.5.4920': attribute type 10 has an invalid length. [ 375.727935][T18599] syzkaller0: entered promiscuous mode [ 375.733548][T18599] syzkaller0: entered allmulticast mode [ 375.874411][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4926'. [ 375.931336][T18615] loop2: detected capacity change from 0 to 512 [ 375.941234][T18616] loop5: detected capacity change from 0 to 512 [ 375.947788][T18616] EXT4-fs: Ignoring removed i_version option [ 375.954428][T18616] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 375.955020][T18615] EXT4-fs (loop2): 1 orphan inode deleted [ 375.966245][T18616] EXT4-fs (loop5): 1 truncate cleaned up [ 375.970708][T18615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.976269][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 375.988830][T18616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.000646][T18615] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.028079][T18615] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 376.046810][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.189831][T18625] loop2: detected capacity change from 0 to 512 [ 376.196424][T18625] ext2: Unknown parameter 'dont_hash' [ 376.222205][T18627] loop3: detected capacity change from 0 to 512 [ 376.233934][T18627] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 376.248948][T18627] EXT4-fs (loop3): mount failed [ 376.263365][T18627] loop3: detected capacity change from 0 to 1024 [ 376.270172][T18627] EXT4-fs: Ignoring removed nobh option [ 376.275930][T18627] EXT4-fs: Ignoring removed bh option [ 376.281672][T18627] EXT4-fs (loop3): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 376.294474][T18627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.313508][T18627] tipc: Resetting bearer [ 376.319438][T18627] syzkaller0: left allmulticast mode [ 376.325597][T18627] netdevsim netdevsim3 eth0: entered promiscuous mode [ 376.333331][T18627] netdevsim netdevsim3 eth1: entered promiscuous mode [ 376.340286][T18627] netdevsim netdevsim3 eth2: entered promiscuous mode [ 376.347329][T18627] netdevsim netdevsim3 eth3: entered promiscuous mode [ 376.354240][T18627] vlan2: left allmulticast mode [ 376.359145][T18627] hsr_slave_1: left allmulticast mode [ 376.365166][T18627] gre1: entered promiscuous mode [ 376.438502][T18635] can0: slcan on ttyS3. [ 376.503071][T18635] can0 (unregistered): slcan off ttyS3. [ 376.504571][T18640] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4934'. [ 376.520960][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.562005][T18640] loop4: detected capacity change from 0 to 1024 [ 376.574913][T18640] EXT4-fs: Ignoring removed nobh option [ 376.583502][T18640] EXT4-fs: Ignoring removed bh option [ 376.661599][T18646] loop0: detected capacity change from 0 to 1024 [ 376.710020][T18640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.723348][T18646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.736922][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.748448][T18648] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 376.749594][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4934'. [ 376.766787][T18646] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.852602][T13136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.882046][T18654] SELinux: ebitmap: truncated map [ 376.894041][T18654] SELinux: failed to load policy [ 376.951283][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.960900][T18663] FAULT_INJECTION: forcing a failure. [ 376.960900][T18663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.974274][T18663] CPU: 0 UID: 0 PID: 18663 Comm: syz.0.4941 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 376.974310][T18663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.974350][T18663] Call Trace: [ 376.974356][T18663] [ 376.974364][T18663] __dump_stack+0x1d/0x30 [ 376.974388][T18663] dump_stack_lvl+0xe8/0x140 [ 376.974411][T18663] dump_stack+0x15/0x1b [ 376.974483][T18663] should_fail_ex+0x265/0x280 [ 376.974523][T18663] should_fail+0xb/0x20 [ 376.974558][T18663] should_fail_usercopy+0x1a/0x20 [ 376.974590][T18663] _copy_from_user+0x1c/0xb0 [ 376.974656][T18663] memdup_user+0x5e/0xd0 [ 376.974679][T18663] strndup_user+0x68/0xb0 [ 376.974759][T18663] keyctl_keyring_search+0xee/0x2e0 [ 376.974798][T18663] __se_sys_keyctl+0x2d4/0xb80 [ 376.974826][T18663] ? __rcu_read_unlock+0x4f/0x70 [ 376.974848][T18663] ? __fget_files+0x184/0x1c0 [ 376.974950][T18663] ? fput+0x8f/0xc0 [ 376.974982][T18663] __x64_sys_keyctl+0x67/0x80 [ 376.975064][T18663] x64_sys_call+0x2e7f/0x2fb0 [ 376.975089][T18663] do_syscall_64+0xd2/0x200 [ 376.975108][T18663] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 376.975209][T18663] ? clear_bhb_loop+0x40/0x90 [ 376.975261][T18663] ? clear_bhb_loop+0x40/0x90 [ 376.975284][T18663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.975305][T18663] RIP: 0033:0x7f16f966e9a9 [ 376.975360][T18663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.975384][T18663] RSP: 002b:00007f16f7cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 376.975404][T18663] RAX: ffffffffffffffda RBX: 00007f16f9895fa0 RCX: 00007f16f966e9a9 [ 376.975416][T18663] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 000000000000000a [ 376.975428][T18663] RBP: 00007f16f7cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 376.975440][T18663] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 376.975459][T18663] R13: 0000000000000001 R14: 00007f16f9895fa0 R15: 00007ffffc05c228 [ 376.975488][T18663] [ 377.344115][T18677] loop2: detected capacity change from 0 to 512 [ 377.350699][T18677] EXT4-fs: Ignoring removed i_version option [ 377.357367][T18677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 377.368558][T18677] EXT4-fs (loop2): 1 truncate cleaned up [ 377.375124][T18677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.422518][T18679] validate_nla: 1 callbacks suppressed [ 377.422535][T18679] netlink: 'syz.5.4945': attribute type 10 has an invalid length. [ 377.479339][T18683] loop5: detected capacity change from 0 to 512 [ 377.494777][T18683] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.509853][T18683] EXT4-fs (loop5): mount failed [ 377.522434][T18683] loop5: detected capacity change from 0 to 1024 [ 377.529286][T18683] EXT4-fs: Ignoring removed nobh option [ 377.534908][T18683] EXT4-fs: Ignoring removed bh option [ 377.540657][T18683] EXT4-fs (loop5): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 377.554856][T18683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.573049][T18683] ip6erspan0: entered promiscuous mode [ 377.663511][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.696481][T18693] loop3: detected capacity change from 0 to 512 [ 377.703125][T18693] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 377.705672][T18691] syzkaller0: entered promiscuous mode [ 377.717091][T18691] syzkaller0: entered allmulticast mode [ 377.995562][T18700] loop5: detected capacity change from 0 to 512 [ 378.005069][T18700] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 378.093976][T18700] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.4951: iget: bad i_size value: 12154757448730 [ 378.186931][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.210804][T18700] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.4951: couldn't read orphan inode 13 (err -117) [ 378.260627][T18700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.277326][T18705] syzkaller0: entered promiscuous mode [ 378.282925][T18705] syzkaller0: entered allmulticast mode [ 378.300213][T18700] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 378.317610][T18700] __nla_validate_parse: 2 callbacks suppressed [ 378.317629][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4951'. [ 378.320053][T18710] loop2: detected capacity change from 0 to 1024 [ 378.339579][T18710] EXT4-fs: dax option not supported [ 378.444688][T18713] netlink: 'syz.2.4956': attribute type 10 has an invalid length. [ 378.457871][T18718] loop4: detected capacity change from 0 to 512 [ 378.467087][T18718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.495894][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.789543][T18744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4964'. [ 378.853561][T18747] loop3: detected capacity change from 0 to 512 [ 378.871983][T18747] EXT4-fs: Ignoring removed i_version option [ 378.894610][T18747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 378.947911][T18747] EXT4-fs (loop3): 1 truncate cleaned up [ 378.954290][T18747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.102491][T18752] syzkaller0: entered promiscuous mode [ 379.108083][T18752] syzkaller0: entered allmulticast mode [ 379.134233][T18754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4968'. [ 379.150643][T18754] program syz.2.4968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.232538][T18758] loop0: detected capacity change from 0 to 512 [ 379.241960][T18758] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 379.250574][T18758] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.4969: iget: bad i_size value: 12154757448730 [ 379.270301][T18758] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4969: couldn't read orphan inode 13 (err -117) [ 379.286003][T18758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.331255][T18758] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 379.358307][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.369973][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4969'. [ 379.424500][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 379.424518][ T29] audit: type=1326 audit(1753829014.142:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.455021][ T29] audit: type=1326 audit(1753829014.142:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.478621][ T29] audit: type=1326 audit(1753829014.142:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.502606][ T29] audit: type=1326 audit(1753829014.142:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.526161][ T29] audit: type=1326 audit(1753829014.142:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.549921][ T29] audit: type=1326 audit(1753829014.142:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.573516][ T29] audit: type=1326 audit(1753829014.142:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.597085][ T29] audit: type=1326 audit(1753829014.142:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.620856][ T29] audit: type=1326 audit(1753829014.142:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.644397][ T29] audit: type=1326 audit(1753829014.142:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18768 comm="syz.4.4974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e85d9e9a9 code=0x7ffc0000 [ 379.669868][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.795999][T13136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.800898][T18779] syzkaller0: entered promiscuous mode [ 379.810696][T18779] syzkaller0: entered allmulticast mode [ 379.836766][T18783] netlink: 'syz.5.4978': attribute type 13 has an invalid length. [ 379.862226][T18785] loop0: detected capacity change from 0 to 512 [ 379.875897][T18780] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 379.894281][T18785] ext2: Unknown parameter 'dont_hash' [ 379.944179][T18789] netlink: 'syz.2.4979': attribute type 13 has an invalid length. [ 380.104587][T18795] netlink: 'syz.0.4977': attribute type 10 has an invalid length. [ 380.112490][T18795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4977'. [ 380.125308][T18795] team0: Port device dummy0 removed [ 380.130746][T18795] bridge0: port 3(dummy0) entered blocking state [ 380.137292][T18795] bridge0: port 3(dummy0) entered disabled state [ 380.143834][T18795] dummy0: entered allmulticast mode [ 380.450948][T18800] syzkaller0: entered promiscuous mode [ 380.456626][T18800] syzkaller0: entered allmulticast mode [ 380.672309][T18810] loop3: detected capacity change from 0 to 512 [ 380.685522][T18810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.775327][T18818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4989'. [ 380.839298][T18824] loop4: detected capacity change from 0 to 512 [ 380.846029][T18824] EXT4-fs: Ignoring removed i_version option [ 380.871391][T18824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 380.893743][T18824] EXT4-fs (loop4): 1 truncate cleaned up [ 380.912813][T18825] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 380.922229][T18824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.969616][T18830] syzkaller0: entered promiscuous mode [ 380.975264][T18830] syzkaller0: entered allmulticast mode [ 381.044807][T18836] syzkaller0: entered promiscuous mode [ 381.050392][T18836] syzkaller0: entered allmulticast mode [ 381.331891][T18839] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 381.353923][T18841] tipc: Enabled bearer , priority 0 [ 381.361192][T18841] syzkaller0: entered promiscuous mode [ 381.366764][T18841] syzkaller0: entered allmulticast mode [ 381.374373][T18841] tipc: Resetting bearer [ 381.382195][T18841] tipc: Disabling bearer [ 381.650612][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.655364][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4997'. [ 381.742147][T18846] loop0: detected capacity change from 0 to 8192 [ 381.742159][T18851] syzkaller0: entered promiscuous mode [ 381.742179][T18851] syzkaller0: entered allmulticast mode [ 381.749812][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.771102][T18846] loop0: p2 p3 p4 [ 381.774975][T18846] loop0: p2 start 2936012800 is beyond EOD, truncated [ 381.781813][T18846] loop0: p3 start 1912602624 is beyond EOD, truncated [ 381.788643][T18846] loop0: p4 size 656640 extends beyond EOD, truncated [ 381.868501][T18865] loop2: detected capacity change from 0 to 512 [ 381.875175][T18865] ext2: Unknown parameter 'dont_hash' [ 382.081283][T18878] netlink: 'syz.2.5001': attribute type 10 has an invalid length. [ 382.092586][T18878] team0: Port device dummy0 removed [ 382.098114][T18878] bridge0: port 3(dummy0) entered blocking state [ 382.104528][T18878] bridge0: port 3(dummy0) entered disabled state [ 382.111195][T18878] dummy0: entered allmulticast mode [ 382.140320][T18877] loop3: detected capacity change from 0 to 512 [ 382.153179][T18877] EXT4-fs: Ignoring removed i_version option [ 382.191520][T18877] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.268222][T18877] EXT4-fs (loop3): 1 truncate cleaned up [ 382.283525][T18877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.408451][T18887] loop5: detected capacity change from 0 to 512 [ 382.415597][T18887] ext2: Unknown parameter 'dont_hash' [ 382.826522][T18891] netlink: 'syz.5.5006': attribute type 10 has an invalid length. [ 383.018415][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.381467][T18891] team0: Port device dummy0 removed [ 383.387020][T18891] bridge0: port 3(dummy0) entered blocking state [ 383.393462][T18891] bridge0: port 3(dummy0) entered disabled state [ 383.399990][T18891] dummy0: entered allmulticast mode [ 383.457303][T18901] pim6reg1: entered promiscuous mode [ 383.462710][T18901] pim6reg1: entered allmulticast mode [ 383.506833][T18903] syzkaller0: entered promiscuous mode [ 383.512424][T18903] syzkaller0: entered allmulticast mode [ 383.824517][T18915] syzkaller0: entered promiscuous mode [ 383.830242][T18915] syzkaller0: entered allmulticast mode [ 384.017470][T18921] __nla_validate_parse: 6 callbacks suppressed [ 384.017491][T18921] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 384.043036][T18920] tipc: Enabled bearer , priority 0 [ 384.050442][T18920] syzkaller0: entered promiscuous mode [ 384.055970][T18920] syzkaller0: entered allmulticast mode [ 384.063863][T18920] tipc: Resetting bearer [ 384.074924][T18920] tipc: Disabling bearer [ 384.320647][T18931] loop4: detected capacity change from 0 to 1024 [ 384.338575][T18931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.375716][T18931] 9pnet_fd: Insufficient options for proto=fd [ 384.396380][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.460623][T18942] loop5: detected capacity change from 0 to 512 [ 384.471213][T18942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.535038][T18945] syzkaller0: entered promiscuous mode [ 384.540668][T18945] syzkaller0: entered allmulticast mode [ 384.808751][T18956] loop2: detected capacity change from 0 to 512 [ 384.959358][T18956] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 384.969304][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 384.969326][ T29] audit: type=1326 audit(1753829019.689:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18959 comm="syz.0.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.002084][T18956] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.5032: iget: bad i_size value: 12154757448730 [ 385.002103][ T29] audit: type=1326 audit(1753829019.689:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18959 comm="syz.0.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.038965][ T29] audit: type=1326 audit(1753829019.689:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18959 comm="syz.0.5033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.063646][T18967] loop4: detected capacity change from 0 to 512 [ 385.070435][T18956] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.5032: couldn't read orphan inode 13 (err -117) [ 385.083630][T18956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.127364][T18967] ext2: Unknown parameter 'dont_hash' [ 385.159184][T18956] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 385.191737][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5032'. [ 385.203339][ T29] audit: type=1326 audit(1753829019.919:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.227143][ T29] audit: type=1326 audit(1753829019.919:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.305951][ T29] audit: type=1326 audit(1753829019.969:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.329572][ T29] audit: type=1326 audit(1753829019.969:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.353149][ T29] audit: type=1326 audit(1753829019.969:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.376710][ T29] audit: type=1326 audit(1753829019.969:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.400355][ T29] audit: type=1326 audit(1753829019.969:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18968 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f966e9a9 code=0x7ffc0000 [ 385.479606][T18976] netlink: 'syz.4.5036': attribute type 10 has an invalid length. [ 385.487515][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5036'. [ 385.508560][T18976] team0: Port device dummy0 removed [ 385.513995][T18976] bridge0: port 3(dummy0) entered blocking state [ 385.520420][T18976] bridge0: port 3(dummy0) entered disabled state [ 385.527024][T18976] dummy0: entered allmulticast mode [ 385.618707][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.956719][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.998430][T18982] syzkaller0: entered promiscuous mode [ 386.003969][T18982] syzkaller0: entered allmulticast mode [ 386.068215][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5044'. [ 386.075431][T18991] loop2: detected capacity change from 0 to 512 [ 386.119677][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5044'. [ 386.182856][T18989] loop5: detected capacity change from 0 to 8192 [ 386.191243][T18991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.204422][T18991] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.237736][T18989] loop5: p2 p3 p4 [ 386.241636][T18989] loop5: p2 start 2936012800 is beyond EOD, truncated [ 386.248498][T18989] loop5: p3 start 1912602624 is beyond EOD, truncated [ 386.255319][T18989] loop5: p4 size 656640 extends beyond EOD, truncated [ 386.267191][T18991] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.5045: iget: bad i_size value: 2533274857506816 [ 386.410348][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5047'. [ 386.425088][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.461440][T19009] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 386.489477][T18997] loop4: detected capacity change from 0 to 512 [ 386.490345][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5049'. [ 386.496398][T18997] EXT4-fs: Ignoring removed i_version option [ 386.511456][T18997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 386.523171][T18997] EXT4-fs (loop4): 1 truncate cleaned up [ 386.529390][T18997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.560693][T19024] loop2: detected capacity change from 0 to 512 [ 386.567892][T19024] EXT4-fs: Ignoring removed i_version option [ 386.574292][T19024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 386.586367][T19024] EXT4-fs (loop2): 1 truncate cleaned up [ 386.592572][T19024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.967046][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.998223][T19029] loop4: detected capacity change from 0 to 512 [ 387.005273][T19029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.017439][T19029] EXT4-fs (loop4): 1 truncate cleaned up [ 387.023658][T19029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.151014][T19029] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5051'. [ 387.160469][T19029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5051'. [ 387.293601][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.314934][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.410677][T19040] netlink: 'syz.2.5055': attribute type 10 has an invalid length. [ 387.429370][T19040] dummy0: left allmulticast mode [ 387.434503][T19040] dummy0: left promiscuous mode [ 387.439719][T19040] bridge0: port 3(dummy0) entered disabled state [ 387.450409][T19040] dummy0: entered promiscuous mode [ 387.456116][T19040] team0: Port device dummy0 added [ 387.573073][T19062] syzkaller0: entered promiscuous mode [ 387.578631][T19062] syzkaller0: entered allmulticast mode [ 387.624185][T19060] syzkaller0: entered promiscuous mode [ 387.629956][T19060] syzkaller0: entered allmulticast mode [ 387.710961][T19072] loop3: detected capacity change from 0 to 512 [ 387.717836][T19072] EXT4-fs: Ignoring removed i_version option [ 387.724480][T19072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.736506][T19072] EXT4-fs (loop3): 1 truncate cleaned up [ 387.742660][T19072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.863711][T19082] loop2: detected capacity change from 0 to 512 [ 387.871851][T19082] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 387.880356][T19082] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #13: comm syz.2.5070: iget: bad i_size value: 12154757448730 [ 387.893366][T19082] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.5070: couldn't read orphan inode 13 (err -117) [ 387.906133][T19082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.919729][T19082] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 388.098926][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.209287][T19090] syzkaller0: entered promiscuous mode [ 388.214886][T19090] syzkaller0: entered allmulticast mode [ 388.381794][T19092] loop4: detected capacity change from 0 to 512 [ 388.391256][T19092] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 388.399647][T19092] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.5073: iget: bad i_size value: 12154757448730 [ 388.406183][T19095] loop2: detected capacity change from 0 to 512 [ 388.412795][T19092] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5073: couldn't read orphan inode 13 (err -117) [ 388.419465][T19095] ext2: Unknown parameter 'dont_hash' [ 388.446613][T19092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.468818][T19092] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 388.490605][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.526926][T19100] tipc: Enabling of bearer rejected, already enabled [ 388.535191][T19097] netlink: 'syz.0.5074': attribute type 10 has an invalid length. [ 388.535580][T19100] syzkaller0: entered allmulticast mode [ 388.549599][T19097] dummy0: left allmulticast mode [ 388.554640][T19097] dummy0: left promiscuous mode [ 388.559785][T19097] bridge0: port 3(dummy0) entered disabled state [ 388.570533][T19097] dummy0: entered promiscuous mode [ 388.576049][T19097] team0: Port device dummy0 added [ 388.625913][T19106] loop3: detected capacity change from 0 to 512 [ 388.633764][T19106] ext2: Unknown parameter 'dont_hash' [ 388.652195][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.036438][T19125] syzkaller0: entered promiscuous mode [ 389.042029][T19125] syzkaller0: entered allmulticast mode [ 389.334019][T19130] __nla_validate_parse: 6 callbacks suppressed [ 389.334042][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5086'. [ 389.511756][T19131] loop5: detected capacity change from 0 to 512 [ 389.525746][T19131] EXT4-fs: Ignoring removed i_version option [ 389.540965][T19131] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.568926][T19131] EXT4-fs (loop5): 1 truncate cleaned up [ 389.575268][T19131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.671285][T19140] netlink: 'syz.3.5088': attribute type 10 has an invalid length. [ 389.699530][T19143] tipc: Enabled bearer , priority 0 [ 389.719718][T19143] syzkaller0: entered promiscuous mode [ 389.725253][T19143] syzkaller0: entered allmulticast mode [ 389.747463][T19143] tipc: Resetting bearer [ 389.775381][T19143] tipc: Disabling bearer [ 389.883474][T19153] loop4: detected capacity change from 0 to 512 [ 389.904730][T19153] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 389.920324][T19153] EXT4-fs (loop4): mount failed [ 389.946094][T19160] loop3: detected capacity change from 0 to 1024 [ 389.963511][T19153] loop4: detected capacity change from 0 to 1024 [ 389.970545][T19153] EXT4-fs: Ignoring removed nobh option [ 389.976299][T19153] EXT4-fs: Ignoring removed bh option [ 389.980530][T19160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.982276][T19153] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 389.998101][T19167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5096'. [ 390.010075][T19160] 9pnet_fd: Insufficient options for proto=fd [ 390.021572][T19153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.045122][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.047063][T19153] ip6erspan0: entered promiscuous mode [ 390.061682][T19153] netdevsim netdevsim4 eth0: entered promiscuous mode [ 390.070056][T19153] netdevsim netdevsim4 eth1: entered promiscuous mode [ 390.076992][T19153] netdevsim netdevsim4 eth2: entered promiscuous mode [ 390.085152][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.094370][T19167] loop0: detected capacity change from 0 to 512 [ 390.094706][T19153] netdevsim netdevsim4 eth3: entered promiscuous mode [ 390.101447][T19167] EXT4-fs: Ignoring removed i_version option [ 390.113939][T19167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 390.151408][T19171] syzkaller0: entered promiscuous mode [ 390.157037][T19171] syzkaller0: entered allmulticast mode [ 390.165143][T19167] EXT4-fs (loop0): 1 truncate cleaned up [ 390.171482][T19167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.281414][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.295744][T19178] syzkaller0: entered promiscuous mode [ 390.301332][T19178] syzkaller0: entered allmulticast mode [ 390.308457][T19182] netlink: 'syz.2.5101': attribute type 13 has an invalid length. [ 390.421719][T19188] syzkaller0: entered promiscuous mode [ 390.427341][T19188] syzkaller0: entered allmulticast mode [ 390.545607][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5104'. [ 390.610600][T19197] loop5: detected capacity change from 0 to 512 [ 390.617392][T19197] EXT4-fs: Ignoring removed i_version option [ 390.624412][T19197] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.636395][T19197] EXT4-fs (loop5): 1 truncate cleaned up [ 390.639297][T19199] syzkaller0: entered promiscuous mode [ 390.642912][T19197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.647769][T19199] syzkaller0: entered allmulticast mode [ 390.787000][T13136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.826521][T19204] tipc: Enabled bearer , priority 0 [ 390.833983][T19204] syzkaller0: entered promiscuous mode [ 390.839497][T19204] syzkaller0: entered allmulticast mode [ 390.846822][T19204] tipc: Resetting bearer [ 390.853782][T19204] tipc: Disabling bearer [ 390.936242][T19206] pim6reg1: entered promiscuous mode [ 390.940671][T19208] loop3: detected capacity change from 0 to 512 [ 390.941635][T19206] pim6reg1: entered allmulticast mode [ 390.948659][T19208] ext2: Unknown parameter 'dont_hash' [ 391.215744][T19211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5111'. [ 391.330072][T19216] loop2: detected capacity change from 0 to 512 [ 391.340261][T19216] EXT4-fs: Ignoring removed i_version option [ 391.346978][T19216] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 391.359778][T19216] EXT4-fs (loop2): 1 truncate cleaned up [ 391.366167][T19216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.650977][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.881907][T19229] loop3: detected capacity change from 0 to 512 [ 391.888699][T19229] ext2: Unknown parameter 'dont_hash' [ 391.968869][T19233] loop5: detected capacity change from 0 to 1024 [ 391.992429][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.022565][T19233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.104741][T19233] 9pnet_fd: Insufficient options for proto=fd [ 392.131379][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.183471][T19245] loop2: detected capacity change from 0 to 512 [ 392.200755][T19245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 392.315740][T19250] loop5: detected capacity change from 0 to 512 [ 392.347505][T19250] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 392.356174][T19250] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.5125: iget: bad i_size value: 12154757448730 [ 392.370702][T19245] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 392.395736][T19250] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5125: couldn't read orphan inode 13 (err -117) [ 392.410571][T19245] EXT4-fs (loop2): 1 truncate cleaned up [ 392.442010][T19250] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 392.491745][T19255] loop4: detected capacity change from 0 to 512 [ 392.512079][T19255] __quota_error: 116 callbacks suppressed [ 392.512103][T19255] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 392.612074][T19250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5125'. [ 392.621170][T19255] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.741329][T19255] EXT4-fs (loop4): mount failed [ 392.764638][T19255] loop4: detected capacity change from 0 to 1024 [ 392.821424][T19255] EXT4-fs: Ignoring removed nobh option [ 392.835902][T19255] EXT4-fs: Ignoring removed bh option [ 392.849340][T19255] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 392.916762][T19269] loop2: detected capacity change from 0 to 512 [ 392.931478][T19269] ext2: Unknown parameter 'dont_hash' [ 393.100371][T19280] loop0: detected capacity change from 0 to 1024 [ 393.239747][T19286] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 393.263454][T19280] 9pnet_fd: Insufficient options for proto=fd [ 393.604898][T19296] loop0: detected capacity change from 0 to 1024 [ 393.611961][T19296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.680581][ T29] audit: type=1326 audit(1753829028.385:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.705629][ T29] audit: type=1326 audit(1753829028.415:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.711409][T19306] netlink: 'syz.3.5142': attribute type 13 has an invalid length. [ 393.736647][ T29] audit: type=1326 audit(1753829028.415:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.742491][T19306] tipc: Resetting bearer [ 393.760680][ T29] audit: type=1326 audit(1753829028.415:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.790101][ T29] audit: type=1326 audit(1753829028.415:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.813746][ T29] audit: type=1326 audit(1753829028.415:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.837349][ T29] audit: type=1326 audit(1753829028.415:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.860987][ T29] audit: type=1326 audit(1753829028.415:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.884542][ T29] audit: type=1326 audit(1753829028.415:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19303 comm="syz.5.5144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 393.961489][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5139'. [ 393.981486][T19312] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5139'. [ 393.994568][T19317] loop4: detected capacity change from 0 to 512 [ 394.004006][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5139'. [ 394.027422][T19317] EXT4-fs: Ignoring removed i_version option [ 394.034396][T19317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 394.046233][T19317] EXT4-fs (loop4): 1 truncate cleaned up [ 394.050195][T19320] loop5: detected capacity change from 0 to 512 [ 394.065341][T19320] ext2: Unknown parameter 'dont_hash' [ 394.099416][T19322] syzkaller0: entered promiscuous mode [ 394.105127][T19322] syzkaller0: entered allmulticast mode [ 394.194038][T19326] tipc: Enabled bearer , priority 0 [ 394.201475][T19326] syzkaller0: entered promiscuous mode [ 394.207017][T19326] syzkaller0: entered allmulticast mode [ 394.215321][T19326] tipc: Resetting bearer [ 394.241066][T19326] tipc: Disabling bearer [ 394.255623][T19328] tipc: Enabled bearer , priority 0 [ 394.263071][T19328] syzkaller0: entered promiscuous mode [ 394.268587][T19328] syzkaller0: entered allmulticast mode [ 394.276276][T19328] tipc: Resetting bearer [ 394.300574][T19328] tipc: Disabling bearer [ 394.468198][T19332] 9pnet: p9_errstr2errno: server reported unknown error [ 394.475698][T19337] loop2: detected capacity change from 0 to 512 [ 394.483460][T19337] EXT4-fs (loop2): orphan cleanup on readonly fs [ 394.490750][T19337] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5156: bg 0: block 248: padding at end of block bitmap is not set [ 394.505424][T19337] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5156: Failed to acquire dquot type 1 [ 394.519446][T19337] EXT4-fs (loop2): 1 truncate cleaned up [ 394.534104][T19337] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5156: iget: bad i_size value: 360287970189639690 [ 394.706060][T19337] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5156: iget: bad i_size value: 360287970189639690 [ 394.736080][T19348] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 394.742765][T19337] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.5156: iget: bad i_size value: 360287970189639690 [ 394.757835][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5159'. [ 394.766936][T19352] loop4: detected capacity change from 0 to 512 [ 394.773597][T19352] ext2: Unknown parameter 'dont_hash' [ 394.822110][T19347] loop0: detected capacity change from 0 to 512 [ 394.829912][T19347] EXT4-fs: Ignoring removed i_version option [ 394.840564][T19347] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 394.919311][T19347] EXT4-fs (loop0): 1 truncate cleaned up [ 395.354226][T19363] loop2: detected capacity change from 0 to 512 [ 395.363748][T19363] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 395.378997][T19363] EXT4-fs (loop2): mount failed [ 395.392058][T19363] loop2: detected capacity change from 0 to 1024 [ 395.398936][T19363] EXT4-fs: Ignoring removed nobh option [ 395.404619][T19363] EXT4-fs: Ignoring removed bh option [ 395.410587][T19363] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 395.430078][T19363] vxlan0: entered promiscuous mode [ 395.436220][T19363] ip6erspan0: entered promiscuous mode [ 395.476844][T19369] tipc: Enabling of bearer rejected, already enabled [ 395.544953][T19377] tipc: Enabled bearer , priority 0 [ 395.552786][T19377] syzkaller0: entered promiscuous mode [ 395.558359][T19377] syzkaller0: entered allmulticast mode [ 395.571029][T19379] netlink: 'syz.3.5169': attribute type 13 has an invalid length. [ 395.579809][T19379] tipc: Resetting bearer [ 395.589441][T19377] tipc: Resetting bearer [ 395.614358][T19377] tipc: Disabling bearer [ 395.718468][T19383] netlink: 'syz.4.5170': attribute type 10 has an invalid length. [ 395.726629][T19391] loop2: detected capacity change from 0 to 1024 [ 395.731292][T19389] syzkaller0: entered promiscuous mode [ 395.738721][T19389] syzkaller0: entered allmulticast mode [ 395.745613][T19383] dummy0: left allmulticast mode [ 395.750806][T19383] dummy0: left promiscuous mode [ 395.755877][T19383] bridge0: port 3(dummy0) entered disabled state [ 395.764081][T19383] dummy0: entered promiscuous mode [ 395.769578][T19383] team0: Port device dummy0 added [ 395.776873][T19391] 9pnet_fd: Insufficient options for proto=fd [ 395.835763][T19396] syzkaller0: entered promiscuous mode [ 395.841326][T19396] syzkaller0: entered allmulticast mode [ 395.970757][T19399] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 395.973683][T19402] loop2: detected capacity change from 0 to 512 [ 395.989044][T19403] tipc: Enabled bearer , priority 0 [ 395.993841][T19402] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 395.996376][T19403] syzkaller0: entered promiscuous mode [ 396.010992][T19402] EXT4-fs (loop2): mount failed [ 396.015889][T19403] syzkaller0: entered allmulticast mode [ 396.026762][T19403] tipc: Resetting bearer [ 396.034007][T19403] tipc: Disabling bearer [ 396.045438][T19402] loop2: detected capacity change from 0 to 1024 [ 396.052105][T19402] EXT4-fs: Ignoring removed nobh option [ 396.057794][T19402] EXT4-fs: Ignoring removed bh option [ 396.063715][T19402] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 396.204189][T19414] loop2: detected capacity change from 0 to 512 [ 396.210798][T19414] ext2: Unknown parameter 'dont_hash' [ 396.277419][T19419] ALSA: seq fatal error: cannot create timer (-19) [ 396.329510][T19427] loop5: detected capacity change from 0 to 1024 [ 396.347000][T19427] 9pnet_fd: Insufficient options for proto=fd [ 396.366252][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5186'. [ 396.462627][T19438] loop3: detected capacity change from 0 to 512 [ 396.478267][T19436] loop0: detected capacity change from 0 to 512 [ 396.490907][T19438] ext2: Unknown parameter 'dont_hash' [ 396.497867][T19436] EXT4-fs: Ignoring removed i_version option [ 396.759892][T19436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 396.845287][T19436] EXT4-fs (loop0): 1 truncate cleaned up [ 396.937350][T19442] syzkaller0: entered promiscuous mode [ 396.943183][T19442] syzkaller0: entered allmulticast mode [ 396.992726][T19445] syzkaller0: entered promiscuous mode [ 396.998416][T19445] syzkaller0: entered allmulticast mode [ 397.164334][T19448] loop2: detected capacity change from 0 to 512 [ 397.205217][T19448] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 397.220183][T19448] EXT4-fs (loop2): mount failed [ 397.232262][T19448] loop2: detected capacity change from 0 to 1024 [ 397.240132][T19448] EXT4-fs: Ignoring removed nobh option [ 397.246460][T19448] EXT4-fs: Ignoring removed bh option [ 397.252379][T19448] EXT4-fs (loop2): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 397.288290][T19459] loop4: detected capacity change from 0 to 512 [ 397.315362][T19459] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 397.323984][T19459] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.5193: iget: bad i_size value: 12154757448730 [ 397.337170][T19459] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.5193: couldn't read orphan inode 13 (err -117) [ 397.355326][T19462] loop5: detected capacity change from 0 to 512 [ 397.362636][T19462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.375023][T19462] EXT4-fs (loop5): 1 truncate cleaned up [ 397.385025][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5193'. [ 397.546635][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5198'. [ 397.614887][T19484] loop3: detected capacity change from 0 to 512 [ 397.627302][T19484] EXT4-fs: Ignoring removed i_version option [ 397.635565][T19484] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 397.647258][T19484] EXT4-fs (loop3): 1 truncate cleaned up [ 397.661493][T19481] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 397.682356][T19491] tipc: Enabled bearer , priority 0 [ 397.689600][T19491] syzkaller0: entered promiscuous mode [ 397.695237][T19491] syzkaller0: entered allmulticast mode [ 397.703031][T19491] tipc: Resetting bearer [ 397.710070][T19491] tipc: Disabling bearer [ 397.836041][T19493] loop9: detected capacity change from 0 to 7 [ 397.842424][T19493] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.850357][T19493] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.858289][T19493] loop9: unable to read partition table [ 397.864054][T19493] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 397.864054][T19493] ) failed (rc=-5) [ 397.877892][T19493] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.886733][T19493] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5204'. [ 397.917325][T19497] loop4: detected capacity change from 0 to 512 [ 397.934921][T19497] __quota_error: 123 callbacks suppressed [ 397.934937][T19497] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 397.951139][T19497] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 397.966185][T19497] EXT4-fs (loop4): mount failed [ 397.992744][T19501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5216'. [ 398.057363][T19509] loop5: detected capacity change from 0 to 512 [ 398.069165][T19509] EXT4-fs: Ignoring removed i_version option [ 398.085660][T19509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 398.097545][T19509] EXT4-fs (loop5): 1 truncate cleaned up [ 398.308924][T19517] loop0: detected capacity change from 0 to 512 [ 398.316824][T19517] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 398.325247][T19517] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.5211: iget: bad i_size value: 12154757448730 [ 398.327199][T19515] netlink: 'syz.4.5210': attribute type 10 has an invalid length. [ 398.338166][T19517] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.5211: couldn't read orphan inode 13 (err -117) [ 398.398525][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5211'. [ 398.498592][T19533] tipc: Enabling of bearer rejected, already enabled [ 398.557467][T19532] syzkaller0: entered promiscuous mode [ 398.563013][T19532] syzkaller0: entered allmulticast mode [ 398.603466][T19543] tipc: Enabling of bearer rejected, already enabled [ 398.725544][T19549] tipc: Enabled bearer , priority 0 [ 398.732667][T19549] syzkaller0: entered promiscuous mode [ 398.738324][T19549] syzkaller0: entered allmulticast mode [ 398.746326][T19549] tipc: Resetting bearer [ 398.753782][T19549] tipc: Disabling bearer [ 398.813690][T19551] loop5: detected capacity change from 0 to 1024 [ 398.828718][T19551] 9pnet_fd: Insufficient options for proto=fd [ 398.991110][T19565] loop5: detected capacity change from 0 to 512 [ 398.997822][T19565] EXT4-fs: Ignoring removed i_version option [ 399.004357][T19565] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 399.015676][T19565] EXT4-fs (loop5): 1 truncate cleaned up [ 399.080354][T19568] loop3: detected capacity change from 0 to 512 [ 399.087400][T19568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.098999][T19568] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 399.113805][T19568] EXT4-fs (loop3): 1 truncate cleaned up [ 399.447825][T19578] 9pnet: p9_errstr2errno: server reported unknown error [ 399.460766][T19581] loop3: detected capacity change from 0 to 512 [ 399.467559][T19581] EXT4-fs: Ignoring removed i_version option [ 399.472862][T19580] syzkaller0: entered promiscuous mode [ 399.473931][T19581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 399.479142][T19580] syzkaller0: entered allmulticast mode [ 399.491008][T19581] EXT4-fs (loop3): 1 truncate cleaned up [ 399.565190][T19585] loop0: detected capacity change from 0 to 512 [ 399.571850][T19585] ext2: Unknown parameter 'dont_hash' [ 399.974005][T19596] loop4: detected capacity change from 0 to 1024 [ 399.981592][T19596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.124703][T19601] loop5: detected capacity change from 0 to 512 [ 400.131993][T19601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 400.143827][T19601] EXT4-fs (loop5): 1 truncate cleaned up [ 400.204361][T19603] __nla_validate_parse: 2 callbacks suppressed [ 400.204375][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'. [ 400.221247][T19603] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5239'. [ 400.246268][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5239'. [ 400.281822][T19607] tipc: Enabling of bearer rejected, already enabled [ 400.453036][T19608] netlink: 'syz.5.5251': attribute type 10 has an invalid length. [ 400.464431][T19608] dummy0: left allmulticast mode [ 400.470260][T19608] dummy0: left promiscuous mode [ 400.475337][T19608] bridge0: port 3(dummy0) entered disabled state [ 400.488924][T19608] dummy0: entered promiscuous mode [ 400.495076][T19608] team0: Port device dummy0 added [ 400.661844][T19619] syzkaller0: entered promiscuous mode [ 400.667435][T19619] syzkaller0: entered allmulticast mode [ 400.828999][T19620] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 400.902133][T19632] loop3: detected capacity change from 0 to 512 [ 400.909868][T19632] ext2: Unknown parameter 'dont_hash' [ 400.933285][T19628] netlink: 'syz.4.5248': attribute type 10 has an invalid length. [ 401.020235][T19641] loop5: detected capacity change from 0 to 512 [ 401.035984][T19641] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 401.053902][T19641] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 401.069180][T19641] EXT4-fs (loop5): 1 truncate cleaned up [ 401.086701][T19644] syzkaller0: entered promiscuous mode [ 401.092387][T19644] syzkaller0: entered allmulticast mode [ 401.239374][T19650] loop4: detected capacity change from 0 to 512 [ 401.256046][T19650] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 401.269923][T19652] syzkaller0: entered promiscuous mode [ 401.274514][T19650] EXT4-fs (loop4): 1 truncate cleaned up [ 401.275475][T19652] syzkaller0: entered allmulticast mode [ 401.381187][T19655] syzkaller0: entered promiscuous mode [ 401.386796][T19655] syzkaller0: entered allmulticast mode [ 401.399580][ T29] audit: type=1326 audit(1753829036.111:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19658 comm="syz.5.5262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x0 [ 401.496940][T19663] loop0: detected capacity change from 0 to 512 [ 401.518427][T19664] loop5: detected capacity change from 0 to 764 [ 401.545169][T19668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5265'. [ 401.556963][T19661] Symlink component flag not implemented [ 401.562793][T19661] Symlink component flag not implemented (7) [ 401.576456][T19672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=19672 comm=syz.4.5266 [ 401.659785][T19666] netlink: 'syz.2.5264': attribute type 10 has an invalid length. [ 401.678352][T19674] netlink: 'syz.4.5266': attribute type 10 has an invalid length. [ 401.716088][T19663] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 401.726565][T19663] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 401.750032][T19663] EXT4-fs (loop0): mount failed [ 401.796761][T19663] loop0: detected capacity change from 0 to 1024 [ 401.803579][T19663] EXT4-fs: Ignoring removed nobh option [ 401.809385][T19663] EXT4-fs: Ignoring removed bh option [ 401.815416][T19663] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 401.841139][T19663] netdevsim netdevsim0 eth0: entered promiscuous mode [ 401.850772][T19663] netdevsim netdevsim0 eth1: entered promiscuous mode [ 401.857878][T19663] netdevsim netdevsim0 eth2: entered promiscuous mode [ 401.864788][T19663] netdevsim netdevsim0 eth3: entered promiscuous mode [ 401.905000][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'. [ 401.954231][T19692] loop3: detected capacity change from 0 to 1024 [ 401.969908][T19693] loop2: detected capacity change from 0 to 512 [ 401.980992][T19693] EXT4-fs: Ignoring removed i_version option [ 401.987363][T19697] loop0: detected capacity change from 0 to 512 [ 401.987982][T19693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 402.004164][T19692] 9pnet_fd: Insufficient options for proto=fd [ 402.005362][T19697] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 402.019523][T19697] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.5273: iget: bad i_size value: 12154757448730 [ 402.027198][T19693] EXT4-fs (loop2): 1 truncate cleaned up [ 402.033119][T19697] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.5273: couldn't read orphan inode 13 (err -117) [ 402.056638][T19697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5273'. [ 402.086191][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5275'. [ 402.208009][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5277'. [ 402.238114][T19715] loop0: detected capacity change from 0 to 512 [ 402.244927][T19715] ext2: Unknown parameter 'dont_hash' [ 402.272131][T19716] loop3: detected capacity change from 0 to 512 [ 402.279780][T19716] EXT4-fs: Ignoring removed i_version option [ 402.286427][T19716] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 402.298145][T19716] EXT4-fs (loop3): 1 truncate cleaned up [ 402.605928][T19724] syzkaller0: entered promiscuous mode [ 402.611494][T19724] syzkaller0: entered allmulticast mode [ 402.638983][T19725] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 402.873203][T19727] loop2: detected capacity change from 0 to 512 [ 402.885651][T19727] ext2: Unknown parameter 'dont_hash' [ 402.941544][T19729] tipc: Enabled bearer , priority 0 [ 402.949196][T19729] syzkaller0: entered promiscuous mode [ 402.954950][T19729] syzkaller0: entered allmulticast mode [ 402.963403][T19729] tipc: Resetting bearer [ 402.970682][T19729] tipc: Disabling bearer [ 403.154619][ T29] audit: type=1326 audit(1753829037.830:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.178299][ T29] audit: type=1326 audit(1753829037.830:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.201831][ T29] audit: type=1326 audit(1753829037.830:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.225552][ T29] audit: type=1326 audit(1753829037.830:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.249050][ T29] audit: type=1326 audit(1753829037.830:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.272737][ T29] audit: type=1326 audit(1753829037.830:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.296342][ T29] audit: type=1326 audit(1753829037.830:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.319844][ T29] audit: type=1326 audit(1753829037.840:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.343620][ T29] audit: type=1326 audit(1753829037.840:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.367363][ T29] audit: type=1326 audit(1753829037.840:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19736 comm="syz.5.5284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5cf9e9a9 code=0x7ffc0000 [ 403.486703][T19742] pim6reg1: entered promiscuous mode [ 403.492103][T19742] pim6reg1: entered allmulticast mode [ 403.548254][T19750] loop4: detected capacity change from 0 to 512 [ 403.559018][T19751] loop3: detected capacity change from 0 to 1024 [ 403.566537][T19751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 403.578471][T19750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 403.590254][T19750] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 403.661325][T19750] EXT4-fs (loop4): 1 truncate cleaned up [ 403.759697][T19759] netlink: 'syz.0.5293': attribute type 10 has an invalid length. [ 403.788728][T19757] syzkaller0: entered promiscuous mode [ 403.794329][T19757] syzkaller0: entered allmulticast mode [ 403.846992][T19770] pim6reg1: entered promiscuous mode [ 403.852372][T19770] pim6reg1: entered allmulticast mode [ 403.874424][T19771] loop2: detected capacity change from 0 to 512 [ 403.881288][T19771] EXT4-fs: Ignoring removed i_version option [ 403.896576][T19771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 403.941427][T19771] EXT4-fs (loop2): 1 truncate cleaned up [ 403.997231][T19789] loop5: detected capacity change from 0 to 1024 [ 404.052589][T19794] loop5: detected capacity change from 0 to 164 [ 404.060069][T19794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.069106][T19794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.080518][T19794] rock: directory entry would overflow storage [ 404.086890][T19794] rock: sig=0x4f50, size=4, remaining=3 [ 404.092586][T19794] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 404.129569][T19798] loop4: detected capacity change from 0 to 512 [ 404.136447][T19798] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 404.157477][T19798] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 404.157865][T19798] EXT4-fs (loop4): 1 truncate cleaned up [ 404.323356][T19804] netlink: 'syz.0.5309': attribute type 10 has an invalid length. [ 404.367636][T19808] syzkaller0: entered promiscuous mode [ 404.373160][T19808] syzkaller0: entered allmulticast mode [ 404.444333][T19812] syzkaller0: entered promiscuous mode [ 404.449910][T19812] syzkaller0: entered allmulticast mode [ 404.539810][T19823] loop0: detected capacity change from 0 to 512 [ 404.547395][T19823] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 404.551785][T19820] syzkaller0: entered promiscuous mode [ 404.559843][T19823] EXT4-fs (loop0): 1 truncate cleaned up [ 404.562736][T19820] syzkaller0: entered allmulticast mode [ 404.618302][T19828] loop2: detected capacity change from 0 to 1024 [ 404.641185][T19834] FAULT_INJECTION: forcing a failure. [ 404.641185][T19834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.654339][T19834] CPU: 1 UID: 0 PID: 19834 Comm: syz.0.5319 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 404.654400][T19834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.654473][T19834] Call Trace: [ 404.654481][T19834] [ 404.654538][T19834] __dump_stack+0x1d/0x30 [ 404.654565][T19834] dump_stack_lvl+0xe8/0x140 [ 404.654656][T19834] dump_stack+0x15/0x1b [ 404.654676][T19834] should_fail_ex+0x265/0x280 [ 404.654726][T19834] should_fail+0xb/0x20 [ 404.654761][T19834] should_fail_usercopy+0x1a/0x20 [ 404.654799][T19834] _copy_to_user+0x20/0xa0 [ 404.654822][T19834] simple_read_from_buffer+0xb5/0x130 [ 404.654862][T19834] proc_fail_nth_read+0x100/0x140 [ 404.654901][T19834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.654941][T19834] vfs_read+0x19d/0x6f0 [ 404.654999][T19834] ? __rcu_read_unlock+0x4f/0x70 [ 404.655022][T19834] ? __fget_files+0x184/0x1c0 [ 404.655044][T19834] ksys_read+0xda/0x1a0 [ 404.655076][T19834] __x64_sys_read+0x40/0x50 [ 404.655185][T19834] x64_sys_call+0x2d77/0x2fb0 [ 404.655206][T19834] do_syscall_64+0xd2/0x200 [ 404.655226][T19834] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 404.655253][T19834] ? clear_bhb_loop+0x40/0x90 [ 404.655281][T19834] ? clear_bhb_loop+0x40/0x90 [ 404.655303][T19834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.655325][T19834] RIP: 0033:0x7f16f966d3bc [ 404.655347][T19834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.655366][T19834] RSP: 002b:00007f16f7cd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.655395][T19834] RAX: ffffffffffffffda RBX: 00007f16f9895fa0 RCX: 00007f16f966d3bc [ 404.655408][T19834] RDX: 000000000000000f RSI: 00007f16f7cd70a0 RDI: 0000000000000007 [ 404.655421][T19834] RBP: 00007f16f7cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 404.655433][T19834] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 404.655445][T19834] R13: 0000000000000000 R14: 00007f16f9895fa0 R15: 00007ffffc05c228 [ 404.655464][T19834] [ 404.714022][T19838] loop4: detected capacity change from 0 to 164 [ 404.872186][T19838] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.881139][T19838] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 404.891162][T19828] 9pnet_fd: Insufficient options for proto=fd [ 404.900636][T19838] rock: directory entry would overflow storage [ 404.907001][T19838] rock: sig=0x4f50, size=4, remaining=3 [ 404.912593][T19838] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 404.929654][T19846] netlink: 'syz.0.5325': attribute type 10 has an invalid length. [ 405.014989][T19858] loop2: detected capacity change from 0 to 512 [ 405.022073][T19858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 405.024345][T19854] syzkaller0: entered promiscuous mode [ 405.034561][T19858] EXT4-fs (loop2): 1 truncate cleaned up [ 405.037654][T19854] syzkaller0: entered allmulticast mode [ 405.088268][T19863] pim6reg1: entered promiscuous mode [ 405.093713][T19863] pim6reg1: entered allmulticast mode [ 405.205601][T19869] loop4: detected capacity change from 0 to 764 [ 405.212911][T19869] rock: directory entry would overflow storage [ 405.219190][T19869] rock: sig=0x4654, size=5, remaining=4 [ 405.253238][T19866] syzkaller0: entered promiscuous mode [ 405.258890][T19866] syzkaller0: entered allmulticast mode [ 405.316245][T19881] FAULT_INJECTION: forcing a failure. [ 405.316245][T19881] name failslab, interval 1, probability 0, space 0, times 0 [ 405.329042][T19881] CPU: 1 UID: 0 PID: 19881 Comm: syz.4.5339 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 405.329139][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.329155][T19881] Call Trace: [ 405.329164][T19881] [ 405.329172][T19881] __dump_stack+0x1d/0x30 [ 405.329202][T19881] dump_stack_lvl+0xe8/0x140 [ 405.329239][T19881] dump_stack+0x15/0x1b [ 405.329260][T19881] should_fail_ex+0x265/0x280 [ 405.329338][T19881] should_failslab+0x8c/0xb0 [ 405.329366][T19881] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 405.329436][T19881] ? __d_alloc+0x3d/0x350 [ 405.329466][T19881] __d_alloc+0x3d/0x350 [ 405.329489][T19881] ? mpol_shared_policy_init+0xbd/0x4c0 [ 405.329596][T19881] d_alloc_pseudo+0x1e/0x80 [ 405.329674][T19881] alloc_file_pseudo+0x71/0x160 [ 405.329699][T19881] ? __se_sys_memfd_create+0x1cc/0x590 [ 405.329813][T19881] __shmem_file_setup+0x1de/0x210 [ 405.329912][T19881] shmem_file_setup+0x3b/0x50 [ 405.329975][T19881] __se_sys_memfd_create+0x2c3/0x590 [ 405.330015][T19881] __x64_sys_memfd_create+0x31/0x40 [ 405.330053][T19881] x64_sys_call+0x122f/0x2fb0 [ 405.330119][T19881] do_syscall_64+0xd2/0x200 [ 405.330144][T19881] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 405.330204][T19881] ? clear_bhb_loop+0x40/0x90 [ 405.330240][T19881] ? clear_bhb_loop+0x40/0x90 [ 405.330275][T19881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.330302][T19881] RIP: 0033:0x7f0e85d9e9a9 [ 405.330322][T19881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.330345][T19881] RSP: 002b:00007f0e84406e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 405.330369][T19881] RAX: ffffffffffffffda RBX: 0000000000000476 RCX: 00007f0e85d9e9a9 [ 405.330383][T19881] RDX: 00007f0e84406ef0 RSI: 0000000000000000 RDI: 00007f0e85e216fc [ 405.330451][T19881] RBP: 0000200000000540 R08: 00007f0e84406bb7 R09: 00007f0e84406e40 [ 405.330467][T19881] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 405.330489][T19881] R13: 00007f0e84406ef0 R14: 00007f0e84406eb0 R15: 00002000000009c0 [ 405.330542][T19881] [ 405.348970][T19879] netlink: 'syz.0.5338': attribute type 10 has an invalid length. [ 405.562102][T19886] tipc: Enabling of bearer rejected, already enabled [ 405.606301][T19889] loop3: detected capacity change from 0 to 512 [ 405.613018][T19889] ext2: Unknown parameter 'dont_hash' [ 405.682394][T19895] syzkaller0: entered promiscuous mode [ 405.687980][T19895] syzkaller0: entered allmulticast mode [ 405.720142][T19896] loop0: detected capacity change from 0 to 764 [ 405.781200][T19901] tipc: Enabled bearer , priority 0 [ 405.788566][T19901] syzkaller0: entered promiscuous mode [ 405.794093][T19901] syzkaller0: entered allmulticast mode [ 405.801557][T19901] tipc: Resetting bearer [ 405.808565][T19901] tipc: Disabling bearer [ 406.291457][T19917] 9pnet_fd: Insufficient options for proto=fd [ 406.374463][T19915] netlink: 'syz.5.5351': attribute type 10 has an invalid length. [ 406.413736][T19922] loop4: detected capacity change from 0 to 512 [ 406.428934][T19924] pim6reg1: entered promiscuous mode [ 406.431043][T19922] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 406.434336][T19924] pim6reg1: entered allmulticast mode [ 406.453009][T19922] EXT4-fs (loop4): mount failed [ 406.476615][T19922] loop4: detected capacity change from 0 to 1024 [ 406.499434][T19922] EXT4-fs: Ignoring removed nobh option [ 406.515436][T19922] EXT4-fs: Ignoring removed bh option [ 406.525906][T19922] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 406.541398][T19928] syzkaller0: entered promiscuous mode [ 406.547057][T19928] syzkaller0: entered allmulticast mode [ 406.565073][T19922] EXT4-fs mount: 80 callbacks suppressed [ 406.565143][T19922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.588004][T19922] netdevsim netdevsim4 eth0: entered promiscuous mode [ 406.595070][T19922] netdevsim netdevsim4 eth1: entered promiscuous mode [ 406.602814][T19922] netdevsim netdevsim4 eth2: entered promiscuous mode [ 406.610311][T19922] netdevsim netdevsim4 eth3: entered promiscuous mode [ 406.656847][T19934] loop5: detected capacity change from 0 to 512 [ 406.664390][T19934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 406.675702][T19934] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 406.690468][T19934] EXT4-fs (loop5): 1 truncate cleaned up [ 406.696683][T19934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.716236][T19935] __nla_validate_parse: 2 callbacks suppressed [ 406.716254][T19935] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 406.723678][T19941] loop0: detected capacity change from 0 to 1024 [ 406.749444][T19941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.773362][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.784013][T13136] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.797810][T19945] loop4: detected capacity change from 0 to 512 [ 406.809948][T19945] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 406.825051][T19945] EXT4-fs (loop4): mount failed [ 406.841511][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.851659][T19945] loop4: detected capacity change from 0 to 1024 [ 406.863989][T19945] EXT4-fs: Ignoring removed nobh option [ 406.869911][T19945] EXT4-fs: Ignoring removed bh option [ 406.875746][T19945] EXT4-fs (loop4): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 406.886365][T19952] loop5: detected capacity change from 0 to 512 [ 406.893513][T19952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 406.900464][T19955] loop0: detected capacity change from 0 to 512 [ 406.904814][T19945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.910339][T19955] ext2: Unknown parameter 'dont_hash' [ 406.929265][T19952] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 406.951687][T19952] EXT4-fs (loop5): 1 truncate cleaned up [ 406.958047][T19952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.089988][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.100646][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.482307][T19962] loop3: detected capacity change from 0 to 512 [ 407.489236][T19962] ext2: Unknown parameter 'dont_hash' [ 407.505721][T19964] 9pnet_fd: Insufficient options for proto=fd [ 407.623230][T19971] syzkaller0: entered promiscuous mode [ 407.628822][T19971] syzkaller0: entered allmulticast mode [ 407.662171][T19973] pim6reg1: entered promiscuous mode [ 407.667640][T19973] pim6reg1: entered allmulticast mode [ 407.850306][T19981] loop4: detected capacity change from 0 to 512 [ 407.882017][T19981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 407.923242][T19981] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 407.966767][T19981] EXT4-fs (loop4): 1 truncate cleaned up [ 407.977275][T19990] loop5: detected capacity change from 0 to 1024 [ 407.994438][T19981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.118021][T19990] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.162415][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.173106][T19993] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 408.215853][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5378'. [ 408.270154][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.282261][T20001] loop5: detected capacity change from 0 to 512 [ 408.289285][T20001] EXT4-fs: Ignoring removed i_version option [ 408.295802][T20001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 408.313620][T20001] EXT4-fs (loop5): 1 truncate cleaned up [ 408.319954][T20001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.427422][T20010] loop3: detected capacity change from 0 to 164 [ 408.435238][T20010] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 408.444111][T20010] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 408.452787][T20008] netlink: 'syz.4.5381': attribute type 10 has an invalid length. [ 408.452925][T20010] rock: directory entry would overflow storage [ 408.467044][T20010] rock: sig=0x4f50, size=4, remaining=3 [ 408.473117][T20010] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 408.510562][T20013] loop4: detected capacity change from 0 to 1024 [ 408.520364][T20013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.525396][T20013] 9pnet_fd: Insufficient options for proto=fd [ 408.558224][T12624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.650800][T20018] syzkaller0: entered promiscuous mode [ 408.656444][T20018] syzkaller0: entered allmulticast mode [ 408.705103][T20024] loop3: detected capacity change from 0 to 512 [ 408.712263][T20024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 408.732742][T20024] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 408.748533][T20024] EXT4-fs (loop3): 1 truncate cleaned up [ 408.756251][T20024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.776430][T20027] loop2: detected capacity change from 0 to 1024 [ 408.793105][T20027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.831121][T12844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.842745][T12477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.911990][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 408.912008][ T29] audit: type=1326 audit(1753829043.617:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20038 comm="syz.2.5389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4bf36e9a9 code=0x0 [ 408.988355][T20036] syzkaller0: entered promiscuous mode [ 408.994101][T20036] syzkaller0: entered allmulticast mode [ 408.999125][T20044] loop4: detected capacity change from 0 to 164 [ 409.007646][T20044] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 409.017179][T20044] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 409.026185][T20044] rock: directory entry would overflow storage [ 409.032418][T20044] rock: sig=0x4f50, size=4, remaining=3 [ 409.032645][T20042] loop2: detected capacity change from 0 to 764 [ 409.037993][T20044] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 409.075822][T16731] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.111069][T20047] loop5: detected capacity change from 0 to 164 [ 409.118745][T20047] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 409.129370][T20047] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 409.141339][T20047] rock: directory entry would overflow storage [ 409.141361][T20047] rock: sig=0x4f50, size=4, remaining=3 [ 409.141375][T20047] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 409.141469][T20044] ================================================================== [ 409.141506][T20044] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 409.141557][T20044] [ 409.141564][T20044] write to 0xffffffff8688ea30 of 8 bytes by task 20047 on cpu 1: [ 409.141583][T20044] data_alloc+0x271/0x2b0 [ 409.141618][T20044] prb_reserve+0x808/0xaf0 [ 409.141655][T20044] vprintk_store+0x56d/0x860 [ 409.141674][T20044] vprintk_emit+0x178/0x650 [ 409.141693][T20044] vprintk_default+0x26/0x30 [ 409.141714][T20044] vprintk+0x1d/0x30 [ 409.141742][T20044] _printk+0x79/0xa0 [ 409.141775][T20044] rock_check_overflow+0x19c/0x1c0 [ 409.141809][T20044] get_rock_ridge_filename+0x1df/0x5b0 [ 409.141833][T20044] isofs_lookup+0x3c4/0x930 [ 409.141852][T20044] path_openat+0xcf0/0x2170 [ 409.141881][T20044] do_filp_open+0x109/0x230 [ 409.141909][T20044] do_sys_openat2+0xa6/0x110 [ 409.141937][T20044] __x64_sys_open+0xe6/0x110 [ 409.141968][T20044] x64_sys_call+0x14d4/0x2fb0 [ 409.141992][T20044] do_syscall_64+0xd2/0x200 [ 409.142016][T20044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.142042][T20044] [ 409.142050][T20044] read to 0xffffffff8688ea30 of 16 bytes by task 20044 on cpu 0: [ 409.142070][T20044] _prb_read_valid+0x1bc/0x920 [ 409.142108][T20044] prb_read_valid+0x3c/0x60 [ 409.142142][T20044] printk_get_next_message+0xc8/0x510 [ 409.142167][T20044] console_flush_all+0x290/0x730 [ 409.142192][T20044] console_unlock+0xa1/0x330 [ 409.142212][T20044] do_con_write+0x28d7/0x2940 [ 409.142233][T20044] con_write+0x24/0x40 [ 409.142275][T20044] n_tty_write+0x7db/0xb10 [ 409.142294][T20044] file_tty_write+0x38c/0x670 [ 409.142326][T20044] tty_write+0x25/0x30 [ 409.142355][T20044] vfs_write+0x49d/0x8e0 [ 409.142391][T20044] ksys_write+0xda/0x1a0 [ 409.142426][T20044] __x64_sys_write+0x40/0x50 [ 409.142462][T20044] x64_sys_call+0x2cdd/0x2fb0 [ 409.142485][T20044] do_syscall_64+0xd2/0x200 [ 409.142506][T20044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.142529][T20044] [ 409.142534][T20044] Reported by Kernel Concurrency Sanitizer on: [ 409.142548][T20044] CPU: 0 UID: 0 PID: 20044 Comm: syz.4.5395 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 409.142583][T20044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.142599][T20044] ==================================================================