last executing test programs: 1m11.910481178s ago: executing program 2 (id=66): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x0, &(0x7f0000000000), &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m11.873725619s ago: executing program 2 (id=68): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES8=r0], 0x48) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x902r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3, 0x0, 0x539db66b}, 0x18) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102382, 0x18fee, 0x9000, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x5, @private1, 0x9}}, 0x5, 0xd}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000400)={r5, 0x2}, &(0x7f0000000440)=0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b00000000006788bbfa2322f026f9f9527e928fe10568069a0231fbd9b7bc1fb82f0d87d59251bb72b5939b5ae2f0262058640312f8e41e9a0ea9a15deea991095d3c718744967562a327f6ad50eb7b3357560d36304fb05349f5e2f8bf7cb407b9b9c26b87d78f2968b8780311358b7a6d580a15c597571e3ae68fde770702cd0921869cc30b547476fb0d985be12c74770dbf5b3c1b6f1e0971"], 0x30}}, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r6}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9) sendmsg$IEEE802154_LIST_PHY(r9, 0x0, 0x20000004) utimensat(r4, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRES32=r10, @ANYRESHEX=r8, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004"], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x200400c1) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000952b49a387339b9100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket(0x10, 0x803, 0x0) 1m11.517305524s ago: executing program 2 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$pptp(0x18, 0x1, 0x2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe07) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) syz_read_part_table(0x618, &(0x7f0000002200)="$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") r5 = open(&(0x7f0000000280)='./file1\x00', 0x147842, 0x49) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000050000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x140c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x9}, 0x4e5a, 0x10000, 0x4ca3, 0x2, 0x8, 0x9, 0x20b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000040000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x12, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@remote, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x5a}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r10, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) 1m10.956159572s ago: executing program 2 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LIST_IFACE(r2, 0x0, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100001a00070027bd700000000000ff02000000000000000000000000000100000000000000000000000000000000ffff000000000000000020002b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fc020000000000000000000000000001020000000000000000000000000000000200000000000000dd00000000117ef26d9487526200000000000000000000000000000000000000060000000000000000000000000000000000200000000000070000000000002000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000080016"], 0x10c}, 0x1, 0x0, 0x0, 0x8100}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r7, @ANYRES64=r3, @ANYRESHEX=r1, @ANYRESOCT, @ANYRESHEX=r8, @ANYRESDEC=r3, @ANYBLOB="9a291c0be34be343049895750b1c142e77", @ANYRES32=r2, @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x24, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x24}}, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setsig(0x4203, r10, 0x200000000000003, &(0x7f0000000080)={0xf, 0x100, 0xf7ff}) sched_setscheduler(r10, 0x3, &(0x7f00000008c0)=0x401) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) 1m10.332858702s ago: executing program 2 (id=93): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r0, 0x0, 0xfff5, 0x4000000, &(0x7f0000000040)={0xa, 0x4e20, 0xa51, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfff7d}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) unshare(0x2040400) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000040)={0xfffffffb, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r4 = socket(0x10, 0x3, 0x0) rt_sigtimedwait(&(0x7f0000000300)={[0x1]}, 0x0, &(0x7f0000000340), 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000002140)=@newtaction={0x18, 0x31, 0x829, 0x70bd2c, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) socket(0x10, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0x1b8, 0x2e0, 0x0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) mlockall(0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1d) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x9, 0x0}}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000005c0)="a3", 0x1, 0x10, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @local, 0x4}, 0x1c) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m9.962398077s ago: executing program 2 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) 1m9.961140657s ago: executing program 32 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) 1m2.551991788s ago: executing program 0 (id=218): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) 1m2.524436158s ago: executing program 0 (id=219): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m2.4271113s ago: executing program 0 (id=223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000000c0), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x916cbb3977b29d14, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414440c05000000000000000000002400188008000140000000030800024000000003080003400000000308000240000010000c0005800800010052415300"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f000008000000000052e20e481f1e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r5, 0x6, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000']) pipe(&(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f00000006c0)='kfree\x00', r8, 0x0, 0x3}, 0x18) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) dup(r9) 1m2.34414811s ago: executing program 0 (id=225): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000640)={@mcast2}, 0x14) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2b88cd1, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000003c0)='./bus\x00', 0x0, 0xa06000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x1, 0x3}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES64=r6, @ANYRES32=r0, @ANYBLOB="24e4341d6e281bde6ea34a946e120166dfc6280baecf6628a17b6812e4e93a438e5fed6f5b118761a6f11b60013fb62387948be86176f9519f24dbce66d6be4d1e835c0783706c702d7bde5abdc666907db44e5ad6eb56585e4ddce408c554afd1d0b928cc3f004874dec5686b4b1173671dffc7627c0f8422fb8c3d157794b7403d7f1ec3f35425406d3edfefa420968d3f16ed9a53673a029b3537c9"], &(0x7f0000000240)='GPL\x00', 0xe9a1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m1.176932708s ago: executing program 0 (id=238): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) (async, rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x3, 0xd0}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 1m0.583564777s ago: executing program 0 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ff7}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7009500"/65], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0078fe042093b72befa4b5f1accd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x5, 0x1, 0x0, r8}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) r9 = dup(r4) inotify_rm_watch(r9, r5) 1m0.562098807s ago: executing program 33 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ff7}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7009500"/65], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0078fe042093b72befa4b5f1accd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb53, 0x0, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x5, 0x1, 0x0, r8}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) r9 = dup(r4) inotify_rm_watch(r9, r5) 16.74054851s ago: executing program 5 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 16.331262216s ago: executing program 5 (id=969): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r0, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x100}, 0x18) 16.158057249s ago: executing program 5 (id=972): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x812480, &(0x7f0000000700)={[], [{@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 15.975713751s ago: executing program 5 (id=977): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_clone(0x1000080, &(0x7f0000000280)="a827a3eaeb804ae40fc891fc18a0d00cfa90ea73d8d182e8182a06", 0x1b, 0x0, &(0x7f0000000340), &(0x7f0000000380)="4a65271784ede1bee15434452d5404cf00e6707899016fcc392552") sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace(0x10, 0x0) ptrace$getregs(0xc, 0x0, 0xffffffffffffdcaf, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'dummy0\x00', @random="0100c82700"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007bc}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x91511, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6dd0, 0x2}, 0x5c70, 0x7, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) name_to_handle_at(r5, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[], &(0x7f00000047c0), 0x1200) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x25, 0x1, @void}, 0x10) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r8, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 15.479536869s ago: executing program 5 (id=986): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10) ioprio_get$pid(0x1, 0x0) 15.024319446s ago: executing program 5 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="64a1000001"]) 15.016781106s ago: executing program 34 (id=1001): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="64a1000001"]) 6.70441081s ago: executing program 1 (id=1156): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.469060213s ago: executing program 1 (id=1167): syz_clone3(&(0x7f00000006c0)={0x1a0302380, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x53}, 0x58) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x402c00) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = socket(0x2, 0x3, 0xff) connect$inet(r5, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) r6 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) 6.01009901s ago: executing program 1 (id=1175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x2a4, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x28c, 0x1, [@m_bpf={0x8c, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4f, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0xf8, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe215, 0x7fffffff, 0x5, 0x7, 0xd}, 0x70}}]}, {0xae, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x104, 0x1b, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x9, 0x6, 0x8000, 0xf8d}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0xb2, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053fd7bbe1393ecb0aa735b3b1d360493f2ae18bbe6abade7594754d54413afc4df70a136895bf22a05a"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x2d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.793667953s ago: executing program 1 (id=1182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x84700a, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x309) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x600, 0xc, 0x843fffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 5.609255036s ago: executing program 1 (id=1185): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 4.467557073s ago: executing program 1 (id=1193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) (fail_nth: 4) 4.368082655s ago: executing program 35 (id=1193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) process_mrelease(0xffffffffffffffff, 0x0) (fail_nth: 4) 2.094806258s ago: executing program 3 (id=1234): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.775492433s ago: executing program 3 (id=1237): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x1, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) pause() 1.463096757s ago: executing program 6 (id=1244): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x6132}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r5 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5882, 0x1000, 0x2, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r5, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r9, 0x0, 0x1000, 0x7ff, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) 1.442964588s ago: executing program 4 (id=1245): syz_clone3(&(0x7f00000006c0)={0x1a0302380, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x53}, 0x58) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x402c00) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) inotify_init() r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = socket(0x2, 0x3, 0xff) connect$inet(r5, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) r6 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) 1.038858424s ago: executing program 6 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 993.554335ms ago: executing program 6 (id=1247): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0xf4) 991.962145ms ago: executing program 4 (id=1248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="00000000000000000000850000000e00000085000000050000009500000000240300000000fb00a6f152179b7a8c5ac631b9f39b68af7497311be6105fed8ee65761af992818334000"/85], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a00)='fsi_master_gpio_crc_cmd_error\x00', r0, 0x0, 0x4007}, 0x30) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000011c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="78c2348f817f65e9e161cf662ad6fabcaaf9175ebfe2c98c9e22b5eddde484495e7104b82be0e6599b98ff7847959892fffe81dbbff6663f0e1da0b8571c2e3c8756b0742393a5a302e8b7b6bc7d9825ec5e70d80e5f97ec89dc16764f5fe72384a91b487e465ca776820110e3ceb571288ef90d974d2c22dc9b6b99b837a1ad9caa5536041a65efcc37fb979d5bd83cf219a70508dbf7e347c725b21c31914879c02cc0095465997189b63620d222df420ceb70dbe692581ade1219613d2776e2069e14b583460308100b4a0c8c53624c9c60b99fc13f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) acct(0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) removexattr(0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x15, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014004f0504f621f9a98100008500000083000000bf832313136c0222e5a6e009ce26e8d471090000000000005509010000000000950000000000000003700c000000000018120000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x40, 0x1, 0xa36}, 0x10, 0x8ad0, r4, 0x0, &(0x7f0000000700)=[0x1, 0x1], 0x0, 0x10, 0xefb, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000006c0)={r7, r8, 0x12, 0x0, @val=@perf_event={0x4}}, 0x18) r9 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil) shmctl$SHM_INFO(r9, 0xe, &(0x7f0000000b00)=""/88) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000500)={0xfffffffd, 0x3, 0xa, 0xfffffffd, 0x10040, 0x8f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$eJzs0zGIU3ccB/Bf0jNXBRE7uTVchliXEzJer2BDfBwBcwSLDiK62SGLTh1iAoaKg2eHiOByDpbCGSq0TiKCIOLFQcgkinZREYciuFjFpuTu3XItB4UctPD5wHuP/+//+70vfx4v+F/Lxu/D4TATEcPJDdqGrdE9t778zVJl/1x+fl/9YEQmjkTE9+//+GG0k1kbTN86la6fpevSrYnG+aXk7EJ3+64b+Q8PsrEa0I5YuV72Lx8d5znZHLtP7bmTaQ923qzGlU9jeWZb4/CJXvGLbO/h+9H2n+nn3rJuLD+u/Ouz93ac6ZxMvsxFPEqaz5NX2bdvkgOXFqdzF1r14uu9ad+xcQWu0/h4KHft6t1y58XW0v1qrdb9+cnFQrNyu3N60C88fnfueNr3dKO/CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4zdp/bc+Twz2HmzGleWv1qe2dY4fKJXLLd6D+d//frH/E9TkVnpm96k/Ouz93ac6ZxMFr6b/fZR0nyevMq+fZMcuLQ4nbvQqhdf7037jv3DbG4M+Y2Ph3LXrt4td15sLd2v1mrdLXGx0Kzc7pwe9AuP3507Hp/9Uq5GPJ0cxWXHkAgAAAAAAAAAAAAAAAAAAAB/V9k/l5/fVz8YkYkjETGzOPdkVB9Ormx/stY3lT6frdajdGuicX4pObvQ3b7rRv7Dg9/Sejsb0Y6Il/3LRzdOnticA/Gv/BUAAP//FI2HuA==") prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) 967.011395ms ago: executing program 8 (id=1249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010101020000000000000006000000030c0019800800020000001000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 952.480486ms ago: executing program 6 (id=1250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @ldst={0x0, 0x2, 0x3, 0xb, 0x4, 0x10, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x42, @remote}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 951.899326ms ago: executing program 8 (id=1251): syz_clone3(&(0x7f00000006c0)={0x1a0302380, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x53}, 0x58) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x402c00) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) r5 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) 893.950476ms ago: executing program 3 (id=1252): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) rmdir(&(0x7f0000000000)='.\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x79, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f0000000640), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'dvmrp1\x00', 0x4}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4, 0x0, 0x8000000000000000}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1000000000010000eaffffff95c0c8b0be75980125e80cf797a06c14446baa2ebd1ecb59d8c0007302b94d11101bbf9cd2ae650e160f9953290e2264531e1f258673c5cefc18540823e86a89768526495df2ccf2975a8a96794dd56fb4fbe6e18dcf7556bdfc93883f579b2d454b995cd969fafed52e944b0dc5b20748fd9e30f7b5e8b842cf5bf39c7b1d4ab0af3797e75ed49283787e785fef23b8bdeaa3098a462297ff8469a31304372514662d3430fff605e6e4568ef7f17e1e7a51e07bc916a44d3ce45644f3", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x8}, {0xffff, 0x10}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x20044000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kmem_cache_free\x00', r6, 0x0, 0x8000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) tkill(r2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 862.036537ms ago: executing program 7 (id=1254): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 834.081687ms ago: executing program 7 (id=1255): socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 825.134948ms ago: executing program 4 (id=1256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010101020000000000000006000000030c0019800800020000001000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 756.892468ms ago: executing program 4 (id=1257): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 727.032849ms ago: executing program 6 (id=1258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000001000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030529bd7000fcffffff00003ddf", @ANYRES32=0x0, @ANYBLOB="15830600000000002000128008000100767469001400028008000400ffffffff080002"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x6b2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36c00000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) dup(r4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x8000, 0x2, @loopback, @mcast1, 0x1, 0x8, 0x430c, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x20000000000001f9, 0x0, &(0x7f0000000140)='GPL\x00', 0xf3, 0x35, &(0x7f0000000340)=""/53, 0x41100, 0x0, '\x00', r7, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xe, 0x9, 0xffffffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000640)=[{0x4, 0x5, 0xf, 0xc}, {0x2, 0x5, 0xb, 0x2}, {0x3, 0x4, 0x4, 0x5}, {0x2, 0x2, 0xc, 0x3}], 0x10, 0xfff, @void, @value}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r8) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$inet(0x2, 0x80000, 0x2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10, &(0x7f0000000040)=0x306f, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000f80)={{}, "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"}) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 711.929179ms ago: executing program 4 (id=1259): sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='task_newtask\x00', r1, 0x0, 0x3}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 633.84633ms ago: executing program 4 (id=1260): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3, 0x800000000004, @thr={&(0x7f0000000200)="be1cad583fc6d9598e99ad0038f412569568f94e2d3e4442636f3e8f67e649092a632cbef4792fa23b3d3b03646aa371c1ea6890faec98746fbab0ac18ac76463ebd535fb4df770cfdd575a4501c55fc2555b7bb6689e2526eaaa4", &(0x7f0000000280)="5ef30f8ba1f21980eddab30c86ed60aa79b6af60c274b20742ea52c9d9b4bf21a77d76296cb8e2dd3a6206e847189e6bbb2412d65c7718b2de494721d4283d0e64e41baae123e4f4a102c37de52f969ef223ea3f9f4d25fe2fef47a54cc194079b0660b5394403b7441c22a1d00183f2f4b1034bce9b5cf5dd63c318c8800e46952d7c2101c8af062eecdf62612ea51df7cda56397be6268f6147c99db44a068824258eea6b204c8ac3bd7926061f3cac10513bb57874a404390beb00b920fbf4ca48949ef4efd64b71289f391aaf8bdbd95889c213f2e67e118d50ad19da9098985dfffe0743e4b"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x800, 0x9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) inotify_rm_watch(0xffffffffffffffff, 0x0) timer_gettime(r0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000de5000/0x4000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f00000000c0)="7af918442dc148b0c6396a94de681beae6a01b", &(0x7f0000000100)=""/175, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\x00\x00\x0178z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 606.84276ms ago: executing program 7 (id=1261): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000000)='\xe1\x00\x00\x00W>`', 0x0) close(r0) 507.462952ms ago: executing program 7 (id=1262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="050000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) 506.320472ms ago: executing program 8 (id=1263): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000089e51e147e080846906595bf5cf966f7a275c76ecabca7be36de5fec6e41c1b5f34a9fed0fb9bbdead9ce69d7e75750151590249d2297d22ddbb729744b65ed3e638b1e9a4cb50e2780d426fa28ff2225792ca796f31b9f0f5d997e9d0da8776605d9d56ef4807a8740ded0e14529d8b87d822737cff77d29aaeec460342feac98ba35b8cff9ec55fcc8608152c8dd1b0e67f2fb3d36af4bbdf58d7829422b64542b0169d020c013162a18050b10a9291e7f9fb1fb30761c750d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000900)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e8458e6f5f76e0e4e781bfca4c928c956321dd514877569805db6602f1584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26ce40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a6b657ff95930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299deb9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8356985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725416101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35c498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c1761f1322b03cc9ea586d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f9156e35424", 0x45c) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 454.301603ms ago: executing program 7 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 419.862663ms ago: executing program 6 (id=1265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") chmod(&(0x7f0000000340)='./file1\x00', 0x0) 418.919723ms ago: executing program 3 (id=1266): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 416.597714ms ago: executing program 7 (id=1267): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000400)="2ec8425d4ce2ef0035", 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1001, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x8}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 368.317484ms ago: executing program 8 (id=1268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010101020000000000000006000000030c0019800800020000001000"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 329.610635ms ago: executing program 3 (id=1269): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 261.145566ms ago: executing program 8 (id=1270): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x812480, &(0x7f0000000700)={[], [{@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 130.879828ms ago: executing program 8 (id=1271): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061116800db580000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents(r0, 0xffffffffffffffff, 0x5a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x110) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x1ff, 0x71a643b7, 0xffff, 0x8, 0x0, "94c4b15a156463b92984f070c4a583863b6598"}) r5 = dup3(r4, r3, 0x0) read$rfkill(r5, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@aname={'aname', 0x3d, 'access'}}]}}) 0s ago: executing program 3 (id=1272): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): 88.948093][ T6250] ? hugetlbfs_get_inode+0x267/0x370 [ 88.948181][ T6250] hugetlb_file_setup+0x298/0x3d0 [ 88.948211][ T6250] ksys_mmap_pgoff+0x157/0x310 [ 88.948308][ T6250] x64_sys_call+0x1602/0x2fb0 [ 88.948334][ T6250] do_syscall_64+0xd2/0x200 [ 88.948353][ T6250] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.948387][ T6250] ? clear_bhb_loop+0x40/0x90 [ 88.948413][ T6250] ? clear_bhb_loop+0x40/0x90 [ 88.948458][ T6250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.948482][ T6250] RIP: 0033:0x7f5716a3e929 [ 88.948500][ T6250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.948517][ T6250] RSP: 002b:00007f57150a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 88.948535][ T6250] RAX: ffffffffffffffda RBX: 00007f5716c65fa0 RCX: 00007f5716a3e929 [ 88.948621][ T6250] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 88.948636][ T6250] RBP: 00007f57150a7090 R08: ffffffffffffffff R09: 0000000027fa7000 [ 88.948651][ T6250] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 88.948666][ T6250] R13: 0000000000000000 R14: 00007f5716c65fa0 R15: 00007ffc572d2d58 [ 88.948689][ T6250] [ 89.162140][ T6240] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 89.162140][ T6240] U) failed (rc=-5) [ 89.244114][ T6260] loop5: detected capacity change from 0 to 1024 [ 89.293784][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 89.302780][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 89.368317][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.828'. [ 89.396880][ T6268] netlink: 72 bytes leftover after parsing attributes in process `syz.4.830'. [ 89.452479][ T6273] SELinux: policydb magic number 0x19 does not match expected magic number 0xf97cff8c [ 89.462310][ T6273] SELinux: failed to load policy [ 89.497882][ T6278] loop3: detected capacity change from 0 to 2048 [ 89.579644][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 89.633312][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 89.751720][ T6294] netlink: 'syz.1.829': attribute type 1 has an invalid length. [ 89.761902][ T6298] loop5: detected capacity change from 0 to 256 [ 89.772992][ T6298] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 89.784964][ T6305] syz!: rxe_newlink: already configured on team_slave_0 [ 89.904196][ T6306] loop6: detected capacity change from 0 to 512 [ 89.923089][ T6306] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 89.953627][ T6306] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 89.995026][ T6306] EXT4-fs (loop6): 1 truncate cleaned up [ 90.166254][ T6324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.847'. [ 90.285806][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'. [ 90.294855][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'. [ 90.355587][ T6334] loop4: detected capacity change from 0 to 128 [ 90.391233][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'. [ 90.400319][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'. [ 90.448034][ T6341] bio_check_eod: 104 callbacks suppressed [ 90.448051][ T6341] syz.4.850: attempt to access beyond end of device [ 90.448051][ T6341] loop4: rw=2049, sector=361, nr_sectors = 1 limit=128 [ 90.453786][ T6343] loop1: detected capacity change from 0 to 1024 [ 90.491741][ T6343] loop9: detected capacity change from 0 to 7 [ 90.498061][ T6343] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.517110][ T6343] Buffer I/O error on dev loop9, logical block 0, async page read [ 90.525131][ T6343] loop9: unable to read partition table [ 90.536519][ T6343] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 90.536519][ T6343] U) failed (rc=-5) [ 90.608281][ T6359] SELinux: policydb magic number 0x380 does not match expected magic number 0xf97cff8c [ 90.625279][ T6363] FAULT_INJECTION: forcing a failure. [ 90.625279][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 90.638063][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.5.858 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 90.638158][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.638171][ T6363] Call Trace: [ 90.638196][ T6363] [ 90.638203][ T6363] __dump_stack+0x1d/0x30 [ 90.638309][ T6363] dump_stack_lvl+0xe8/0x140 [ 90.638333][ T6363] dump_stack+0x15/0x1b [ 90.638349][ T6363] should_fail_ex+0x265/0x280 [ 90.638387][ T6363] should_failslab+0x8c/0xb0 [ 90.638418][ T6363] kmem_cache_alloc_noprof+0x50/0x310 [ 90.638530][ T6363] ? radix_tree_node_alloc+0x8a/0x1f0 [ 90.638670][ T6363] radix_tree_node_alloc+0x8a/0x1f0 [ 90.638769][ T6363] idr_get_free+0x1fa/0x550 [ 90.638809][ T6363] idr_alloc_u32+0xca/0x180 [ 90.638830][ T6363] idr_alloc+0x6e/0xd0 [ 90.638846][ T6363] tipc_conn_alloc+0x158/0x240 [ 90.638877][ T6363] tipc_topsrv_kern_subscr+0xbd/0x1b0 [ 90.638927][ T6363] tipc_group_create+0x24d/0x290 [ 90.638963][ T6363] tipc_sk_join+0x130/0x2e0 [ 90.638995][ T6363] tipc_setsockopt+0x598/0x620 [ 90.639028][ T6363] ? __pfx_tipc_setsockopt+0x10/0x10 [ 90.639090][ T6363] __sys_setsockopt+0x181/0x200 [ 90.639139][ T6363] __x64_sys_setsockopt+0x64/0x80 [ 90.639171][ T6363] x64_sys_call+0x2bd5/0x2fb0 [ 90.639258][ T6363] do_syscall_64+0xd2/0x200 [ 90.639280][ T6363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.639390][ T6363] ? clear_bhb_loop+0x40/0x90 [ 90.639416][ T6363] ? clear_bhb_loop+0x40/0x90 [ 90.639443][ T6363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.639463][ T6363] RIP: 0033:0x7f5716a3e929 [ 90.639483][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.639588][ T6363] RSP: 002b:00007f57150a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.639636][ T6363] RAX: ffffffffffffffda RBX: 00007f5716c65fa0 RCX: 00007f5716a3e929 [ 90.639648][ T6363] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 90.639660][ T6363] RBP: 00007f57150a7090 R08: 0000000000000010 R09: 0000000000000000 [ 90.639689][ T6363] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 90.639703][ T6363] R13: 0000000000000000 R14: 00007f5716c65fa0 R15: 00007ffc572d2d58 [ 90.639728][ T6363] [ 90.640372][ T6359] SELinux: failed to load policy [ 90.660439][ T6361] loop1: detected capacity change from 0 to 8192 [ 90.706199][ T6357] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 90.814984][ T6334] syz.4.850: attempt to access beyond end of device [ 90.814984][ T6334] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 90.911077][ T6334] syz.4.850: attempt to access beyond end of device [ 90.911077][ T6334] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 90.927903][ T6334] syz.4.850: attempt to access beyond end of device [ 90.927903][ T6334] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 90.942926][ T6334] syz.4.850: attempt to access beyond end of device [ 90.942926][ T6334] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 90.957448][ T6334] syz.4.850: attempt to access beyond end of device [ 90.957448][ T6334] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 90.960946][ T6374] loop1: detected capacity change from 0 to 1024 [ 90.971010][ T6334] syz.4.850: attempt to access beyond end of device [ 90.971010][ T6334] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 90.993230][ T6334] syz.4.850: attempt to access beyond end of device [ 90.993230][ T6334] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 91.006810][ T6334] syz.4.850: attempt to access beyond end of device [ 91.006810][ T6334] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 91.032575][ T6334] syz.4.850: attempt to access beyond end of device [ 91.032575][ T6334] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 91.086118][ T6383] ipvlan2: entered promiscuous mode [ 91.100320][ T6383] bridge0: port 3(ipvlan2) entered blocking state [ 91.107179][ T6383] bridge0: port 3(ipvlan2) entered disabled state [ 91.115922][ T6383] ipvlan2: entered allmulticast mode [ 91.121267][ T6383] bridge0: entered allmulticast mode [ 91.129388][ T6383] ipvlan2: left allmulticast mode [ 91.134597][ T6383] bridge0: left allmulticast mode [ 91.248159][ T6380] FAULT_INJECTION: forcing a failure. [ 91.248159][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.261647][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.3.867 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 91.261759][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.261775][ T6380] Call Trace: [ 91.261782][ T6380] [ 91.261789][ T6380] __dump_stack+0x1d/0x30 [ 91.261858][ T6380] dump_stack_lvl+0xe8/0x140 [ 91.261890][ T6380] dump_stack+0x15/0x1b [ 91.261985][ T6380] should_fail_ex+0x265/0x280 [ 91.262023][ T6380] should_fail+0xb/0x20 [ 91.262056][ T6380] should_fail_usercopy+0x1a/0x20 [ 91.262167][ T6380] _copy_to_user+0x20/0xa0 [ 91.262191][ T6380] environ_read+0x206/0x320 [ 91.262226][ T6380] ? __pfx_environ_read+0x10/0x10 [ 91.262253][ T6380] vfs_readv+0x3fb/0x690 [ 91.262365][ T6380] __x64_sys_preadv+0xfd/0x1c0 [ 91.262394][ T6380] x64_sys_call+0x1503/0x2fb0 [ 91.262528][ T6380] do_syscall_64+0xd2/0x200 [ 91.262550][ T6380] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.262613][ T6380] ? clear_bhb_loop+0x40/0x90 [ 91.262640][ T6380] ? clear_bhb_loop+0x40/0x90 [ 91.262713][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.262739][ T6380] RIP: 0033:0x7efc5393e929 [ 91.262758][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.262775][ T6380] RSP: 002b:00007efc51fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 91.262793][ T6380] RAX: ffffffffffffffda RBX: 00007efc53b65fa0 RCX: 00007efc5393e929 [ 91.262806][ T6380] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 000000000000000a [ 91.262821][ T6380] RBP: 00007efc51fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.262863][ T6380] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 91.262887][ T6380] R13: 0000000000000000 R14: 00007efc53b65fa0 R15: 00007ffdba96ae88 [ 91.262911][ T6380] [ 91.267527][ T6400] loop1: detected capacity change from 0 to 512 [ 91.292123][ T6401] loop6: detected capacity change from 0 to 1024 [ 91.295893][ T6400] EXT4-fs: Ignoring removed nobh option [ 91.517827][ T6408] SELinux: policydb magic number 0x380 does not match expected magic number 0xf97cff8c [ 91.530280][ T6400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.872: corrupted inode contents [ 91.544626][ T6408] SELinux: failed to load policy [ 91.550256][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 91.550273][ T29] audit: type=1326 audit(1750457475.291:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.6.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1e1ae929 code=0x7ffc0000 [ 91.582745][ T29] audit: type=1326 audit(1750457475.331:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6407 comm="syz.6.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1e1ae929 code=0x7ffc0000 [ 91.606225][ T29] audit: type=1326 audit(1750457475.331:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c5bbe929 code=0x7ffc0000 [ 91.630377][ T29] audit: type=1326 audit(1750457475.331:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.4.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c5bbe929 code=0x7ffc0000 [ 91.630417][ T6400] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.872: mark_inode_dirty error [ 91.630966][ T6400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.872: corrupted inode contents [ 91.660513][ T6412] loop5: detected capacity change from 0 to 512 [ 91.668822][ T6400] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.872: mark_inode_dirty error [ 91.694973][ T6412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.695868][ T6400] Quota error (device loop1): write_blk: dquota write failed [ 91.711205][ T6400] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 91.722734][ T6400] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.872: Failed to acquire dquot type 0 [ 91.735283][ T6400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.872: corrupted inode contents [ 91.736516][ T6412] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.747978][ T6400] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.872: mark_inode_dirty error [ 91.767277][ T6412] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.875: corrupted xattr block 19: overlapping e_value [ 91.770360][ T6400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.872: corrupted inode contents [ 91.786439][ T6412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 91.805147][ T6412] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.875: corrupted xattr block 19: overlapping e_value [ 91.842550][ T6418] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.875: corrupted xattr block 19: overlapping e_value [ 91.862522][ T6420] loop4: detected capacity change from 0 to 1024 [ 91.870437][ T6400] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.872: mark_inode_dirty error [ 91.895266][ T6412] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 91.902135][ T6400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.872: corrupted inode contents [ 91.909143][ T6412] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.875: corrupted xattr block 19: overlapping e_value [ 91.918201][ T6418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 91.956330][ T6400] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 91.974456][ T6424] netlink: 'syz.3.878': attribute type 1 has an invalid length. [ 91.977466][ T6418] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.875: corrupted xattr block 19: overlapping e_value [ 92.002835][ T6400] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.872: corrupted inode contents [ 92.003400][ T6418] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.875: corrupted xattr block 19: overlapping e_value [ 92.029353][ T6418] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 92.055427][ T6427] loop4: detected capacity change from 0 to 128 [ 92.068295][ T6400] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.872: mark_inode_dirty error [ 92.110732][ T6400] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 92.120742][ T29] audit: type=1326 audit(1750457475.861:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c5bbe929 code=0x7ffc0000 [ 92.176623][ T29] audit: type=1326 audit(1750457475.861:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f38c5bbe929 code=0x7ffc0000 [ 92.200027][ T29] audit: type=1326 audit(1750457475.861:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c5bbe929 code=0x7ffc0000 [ 92.224049][ T29] audit: type=1326 audit(1750457475.861:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.4.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f38c5bbe929 code=0x7ffc0000 [ 92.258108][ T6400] EXT4-fs (loop1): 1 truncate cleaned up [ 92.266492][ T6400] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.288485][ T6432] syz.5.880 (6432): /proc/6432/oom_adj is deprecated, please use /proc/6432/oom_score_adj instead. [ 92.312875][ T6434] FAULT_INJECTION: forcing a failure. [ 92.312875][ T6434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.326054][ T6434] CPU: 1 UID: 0 PID: 6434 Comm: syz.4.881 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 92.326127][ T6434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.326142][ T6434] Call Trace: [ 92.326151][ T6434] [ 92.326160][ T6434] __dump_stack+0x1d/0x30 [ 92.326237][ T6434] dump_stack_lvl+0xe8/0x140 [ 92.326321][ T6434] dump_stack+0x15/0x1b [ 92.326342][ T6434] should_fail_ex+0x265/0x280 [ 92.326382][ T6434] should_fail+0xb/0x20 [ 92.326417][ T6434] should_fail_usercopy+0x1a/0x20 [ 92.326516][ T6434] _copy_from_user+0x1c/0xb0 [ 92.326542][ T6434] __sys_bpf+0x178/0x790 [ 92.326591][ T6434] __x64_sys_bpf+0x41/0x50 [ 92.326621][ T6434] x64_sys_call+0x2478/0x2fb0 [ 92.326720][ T6434] do_syscall_64+0xd2/0x200 [ 92.326743][ T6434] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.326776][ T6434] ? clear_bhb_loop+0x40/0x90 [ 92.326843][ T6434] ? clear_bhb_loop+0x40/0x90 [ 92.326941][ T6434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.326967][ T6434] RIP: 0033:0x7f38c5bbe929 [ 92.326986][ T6434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.327009][ T6434] RSP: 002b:00007f38c4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.327030][ T6434] RAX: ffffffffffffffda RBX: 00007f38c5de5fa0 RCX: 00007f38c5bbe929 [ 92.327046][ T6434] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000008 [ 92.327061][ T6434] RBP: 00007f38c4227090 R08: 0000000000000000 R09: 0000000000000000 [ 92.327080][ T6434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.327161][ T6434] R13: 0000000000000000 R14: 00007f38c5de5fa0 R15: 00007ffefe8282d8 [ 92.327233][ T6434] [ 92.522991][ T6430] netlink: 'syz.6.882': attribute type 1 has an invalid length. [ 92.546280][ T6436] loop3: detected capacity change from 0 to 1024 [ 92.666691][ T6453] loop6: detected capacity change from 0 to 1024 [ 92.748276][ T6453] EXT4-fs: Ignoring removed bh option [ 92.774036][ T6453] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.775585][ T6462] loop4: detected capacity change from 0 to 1024 [ 92.792790][ T6460] loop3: detected capacity change from 0 to 1024 [ 92.793552][ T6453] EXT4-fs error (device loop6): ext4_quota_enable:7124: comm syz.6.889: inode #2304: comm syz.6.889: iget: illegal inode # [ 92.812122][ T6458] loop5: detected capacity change from 0 to 128 [ 92.820101][ T6453] EXT4-fs (loop6): Remounting filesystem read-only [ 92.826727][ T6453] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 92.842575][ T6453] EXT4-fs (loop6): mount failed [ 92.851187][ T6460] loop9: detected capacity change from 0 to 7 [ 92.857660][ T6460] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.869257][ T6460] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.877209][ T6460] loop9: unable to read partition table [ 92.932374][ T6460] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 92.932374][ T6460] U) failed (rc=-5) [ 92.948019][ T6470] loop1: detected capacity change from 0 to 256 [ 92.965211][ T6470] vfat: Unknown parameter '18446744073709551615aGd50.)TW*: [ 92.965211][ T6470] /qF梾ΚAn[THo;İSe"U W8aؔ]bfZRpdKyIYb.rأDdO- f\GL 5Nws@ЛѮ!l1lJ%Tm[fPM' [ 93.150416][ T6489] loop1: detected capacity change from 0 to 1024 [ 93.379418][ T6498] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.429559][ T6500] loop3: detected capacity change from 0 to 1024 [ 93.441581][ T6500] loop9: detected capacity change from 0 to 7 [ 93.447954][ T6500] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.459552][ T6500] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.467530][ T6500] loop9: unable to read partition table [ 93.473663][ T6500] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 93.473663][ T6500] U) failed (rc=-5) [ 93.515255][ T6506] loop3: detected capacity change from 0 to 512 [ 93.523504][ T6506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.556959][ T6506] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.570427][ T6506] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.908: corrupted xattr block 19: overlapping e_value [ 93.584370][ T6506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 93.593642][ T6506] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.908: corrupted xattr block 19: overlapping e_value [ 93.607539][ T6506] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 93.616623][ T6506] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.908: corrupted xattr block 19: overlapping e_value [ 93.654449][ T6514] FAULT_INJECTION: forcing a failure. [ 93.654449][ T6514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 93.668048][ T6514] CPU: 1 UID: 0 PID: 6514 Comm: syz.1.909 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 93.668085][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.668102][ T6514] Call Trace: [ 93.668111][ T6514] [ 93.668121][ T6514] __dump_stack+0x1d/0x30 [ 93.668154][ T6514] dump_stack_lvl+0xe8/0x140 [ 93.668180][ T6514] dump_stack+0x15/0x1b [ 93.668245][ T6514] should_fail_ex+0x265/0x280 [ 93.668280][ T6514] should_fail_alloc_page+0xf2/0x100 [ 93.668305][ T6514] __alloc_frozen_pages_noprof+0xff/0x360 [ 93.668438][ T6514] alloc_pages_mpol+0xb3/0x250 [ 93.668557][ T6514] vma_alloc_folio_noprof+0x1aa/0x300 [ 93.668598][ T6514] do_wp_page+0x673/0x2400 [ 93.668667][ T6514] ? __rcu_read_lock+0x37/0x50 [ 93.668695][ T6514] handle_mm_fault+0x77d/0x2be0 [ 93.668718][ T6514] ? mas_walk+0xf2/0x120 [ 93.668758][ T6514] do_user_addr_fault+0x636/0x1090 [ 93.668944][ T6514] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 93.669037][ T6514] exc_page_fault+0x62/0xa0 [ 93.669099][ T6514] asm_exc_page_fault+0x26/0x30 [ 93.669119][ T6514] RIP: 0033:0x7f1ef3590ca3 [ 93.669174][ T6514] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 93.669253][ T6514] RSP: 002b:00007f1ef1d364a0 EFLAGS: 00010202 [ 93.669269][ T6514] RAX: 0000000000000400 RBX: 00007f1ef1d36540 RCX: 00007f1ee9917000 [ 93.669281][ T6514] RDX: 00007f1ef1d366e0 RSI: 0000000000000059 RDI: 00007f1ef1d365e0 [ 93.669294][ T6514] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000ac [ 93.669306][ T6514] R10: 00000000000000c2 R11: 00007f1ef1d36540 R12: 0000000000000001 [ 93.669317][ T6514] R13: 00007f1ef376c120 R14: 0000000000000020 R15: 00007f1ef1d365e0 [ 93.669337][ T6514] [ 93.669543][ T6514] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 93.865893][ T6514] loop1: detected capacity change from 0 to 512 [ 93.872667][ T6514] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 93.971225][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 93.978879][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 93.986343][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 93.993807][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.001280][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.008820][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.016397][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.023962][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.031480][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.033486][ T6532] loop1: detected capacity change from 0 to 2048 [ 94.038886][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.052793][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.060246][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.067858][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.075364][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.082798][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.090210][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.097696][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.105122][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.112626][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.120122][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.127548][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.135074][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.142516][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.149994][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.157489][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.164931][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.172511][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.180067][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.187515][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.195047][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.202508][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.209934][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.217404][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.224938][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.232387][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.233390][ T6534] __nla_validate_parse: 5 callbacks suppressed [ 94.233485][ T6534] netlink: 1072 bytes leftover after parsing attributes in process `syz.5.917'. [ 94.239858][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.239883][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.239904][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.255011][ T6534] loop5: detected capacity change from 0 to 1024 [ 94.255182][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.291143][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.298675][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.306144][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.313654][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.321083][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.328570][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.336101][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.343570][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.351005][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.358462][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.365932][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.373575][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.381001][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.388460][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.395874][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.403348][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.410780][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.418206][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.425678][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.433106][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.440530][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.447960][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.455496][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.463025][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.470448][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.477886][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.485376][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.492823][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.500520][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.507937][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.515360][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.522784][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.530259][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.537742][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.545164][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.552595][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.560052][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.567538][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.574958][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.582386][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.589891][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.597412][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.604841][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.612291][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.619722][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.627200][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.634646][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.642075][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.649483][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.656906][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.664401][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.671834][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.679274][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.686727][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.694194][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.701634][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.709031][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.716492][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.723976][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.731566][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.739093][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.746592][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.754114][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.761651][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.769076][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.776666][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.784121][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.791642][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.795089][ T6542] loop3: detected capacity change from 0 to 8192 [ 94.799046][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.799078][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.820393][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.824399][ T6542] syzkaller0: entered allmulticast mode [ 94.827906][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.840866][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.848290][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.855751][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.863214][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.870610][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.878101][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.885579][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.892992][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.900389][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.907860][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.915303][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.922818][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.930263][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.937804][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.945237][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.952726][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.960199][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.967623][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.975141][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.982653][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.990128][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 94.997555][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.004974][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.012528][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.019961][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.027454][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.034879][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.042323][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.049757][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.057238][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.064667][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.072094][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.079611][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.087060][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.094634][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.102066][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.109478][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.116898][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.124453][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.131884][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.139283][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.146716][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.154144][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.161617][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.169041][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.176455][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.183908][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.191358][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.198905][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.206333][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.213784][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.221203][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.225923][ T6542] syzkaller0 (unregistering): left allmulticast mode [ 95.228794][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.242995][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.250409][ T5024] hid-generic 0000:0002:0009.0001: unknown main item tag 0x0 [ 95.262760][ T5024] hid-generic 0000:0002:0009.0001: hidraw0: HID v100.00 Device [syz0] on syz0 [ 95.547318][ T6552] loop6: detected capacity change from 0 to 8192 [ 95.731490][ T6563] SELinux: syz.3.928 (6563) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 95.834256][ T6573] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 95.844957][ T6573] SELinux: failed to load policy [ 95.884741][ T6571] loop4: detected capacity change from 0 to 8192 [ 95.956070][ T6586] SELinux: failed to load policy [ 96.199739][ T6595] loop5: detected capacity change from 0 to 8192 [ 96.233469][ T6601] loop6: detected capacity change from 0 to 1024 [ 96.265152][ T6601] loop9: detected capacity change from 0 to 7 [ 96.284897][ T6601] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.298260][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.944'. [ 96.307269][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.5.944'. [ 96.309955][ T6601] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.324864][ T6601] loop9: unable to read partition table [ 96.333157][ T6601] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 96.333157][ T6601] U) failed (rc=-5) [ 96.481472][ T6615] loop5: detected capacity change from 0 to 128 [ 96.511892][ T6612] loop6: detected capacity change from 0 to 8192 [ 96.525278][ T6618] loop1: detected capacity change from 0 to 1024 [ 96.548034][ T6618] loop9: detected capacity change from 0 to 7 [ 96.593557][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 96.593571][ T29] audit: type=1326 audit(1750457480.341:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.629180][ T6618] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.637626][ T6620] bio_check_eod: 332 callbacks suppressed [ 96.637639][ T6620] syz.5.948: attempt to access beyond end of device [ 96.637639][ T6620] loop5: rw=2049, sector=417, nr_sectors = 1 limit=128 [ 96.671862][ T6618] Buffer I/O error on dev loop9, logical block 0, async page read [ 96.679802][ T6618] loop9: unable to read partition table [ 96.711247][ T6624] loop6: detected capacity change from 0 to 2048 [ 96.713205][ T29] audit: type=1326 audit(1750457480.371:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.741675][ T29] audit: type=1326 audit(1750457480.371:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.751443][ T6618] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 96.751443][ T6618] U) failed (rc=-5) [ 96.765009][ T29] audit: type=1326 audit(1750457480.371:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.802966][ T29] audit: type=1326 audit(1750457480.371:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.826344][ T29] audit: type=1326 audit(1750457480.371:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.850378][ T29] audit: type=1326 audit(1750457480.371:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.874379][ T29] audit: type=1326 audit(1750457480.371:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.897855][ T29] audit: type=1326 audit(1750457480.371:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.920394][ T6615] syz.5.948: attempt to access beyond end of device [ 96.920394][ T6615] loop5: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 96.921995][ T29] audit: type=1326 audit(1750457480.371:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6614 comm="syz.5.948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5716a3e929 code=0x7ffc0000 [ 96.934943][ T6615] syz.5.948: attempt to access beyond end of device [ 96.934943][ T6615] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 96.976914][ T6615] syz.5.948: attempt to access beyond end of device [ 96.976914][ T6615] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 96.995354][ T6623] loop4: detected capacity change from 0 to 8192 [ 97.012901][ T6615] syz.5.948: attempt to access beyond end of device [ 97.012901][ T6615] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 97.028199][ T6615] syz.5.948: attempt to access beyond end of device [ 97.028199][ T6615] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 97.042070][ T6615] syz.5.948: attempt to access beyond end of device [ 97.042070][ T6615] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 97.066023][ T6615] syz.5.948: attempt to access beyond end of device [ 97.066023][ T6615] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 97.087575][ T6615] syz.5.948: attempt to access beyond end of device [ 97.087575][ T6615] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 97.131049][ T4406] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 97.147311][ T6615] syz.5.948: attempt to access beyond end of device [ 97.147311][ T6615] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 97.181623][ T4406] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 97.247360][ T6628] loop1: detected capacity change from 0 to 8192 [ 97.364424][ T6642] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 97.474847][ T6634] loop6: detected capacity change from 0 to 8192 [ 97.534889][ T6646] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 97.549905][ T6651] IPVS: stopping master sync thread 6653 ... [ 97.557057][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.962'. [ 97.566874][ T6646] SELinux: failed to load policy [ 97.568654][ T6651] loop8: detected capacity change from 0 to 16384 [ 97.589337][ T6634] syzkaller0: entered allmulticast mode [ 97.610492][ T6634] syzkaller0 (unregistering): left allmulticast mode [ 97.663499][ T6658] loop5: detected capacity change from 0 to 512 [ 97.672530][ T6658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.735457][ T6658] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.750518][ T6658] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.964: corrupted xattr block 19: overlapping e_value [ 97.764975][ T6655] loop8: detected capacity change from 16384 to 0 [ 97.772871][ C1] I/O error, dev loop8, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 97.829773][ T6658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 97.854575][ T6656] loop1: detected capacity change from 0 to 8192 [ 97.861693][ T6658] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.964: corrupted xattr block 19: overlapping e_value [ 97.931625][ T6658] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 97.954266][ T6658] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.964: corrupted xattr block 19: overlapping e_value [ 98.057210][ T6669] loop6: detected capacity change from 0 to 8192 [ 98.125015][ T6668] loop1: detected capacity change from 0 to 8192 [ 98.238775][ T6681] loop5: detected capacity change from 0 to 1024 [ 98.252263][ T6679] loop1: detected capacity change from 0 to 2048 [ 98.307472][ T6681] loop9: detected capacity change from 0 to 7 [ 98.313924][ T6681] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.324079][ T6681] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.331997][ T6681] loop9: unable to read partition table [ 98.338029][ T6681] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 98.338029][ T6681] U) failed (rc=-5) [ 98.354944][ T3316] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 98.369888][ T6691] loop6: detected capacity change from 0 to 2048 [ 98.369979][ T3316] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 98.428625][ T6694] loop5: detected capacity change from 0 to 1024 [ 98.496910][ T6694] EXT4-fs: Ignoring removed nobh option [ 98.522322][ T6694] EXT4-fs: Ignoring removed bh option [ 98.611451][ T6697] loop1: detected capacity change from 0 to 8192 [ 98.699638][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.977'. [ 98.903877][ T6715] SELinux: failed to load policy [ 99.005708][ T6724] loop3: detected capacity change from 0 to 2048 [ 99.042890][ T6717] loop6: detected capacity change from 0 to 8192 [ 99.144553][ T6732] loop1: detected capacity change from 0 to 128 [ 99.172653][ T6732] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.176046][ T6734] loop4: detected capacity change from 0 to 8192 [ 99.205038][ T6737] loop3: detected capacity change from 0 to 8192 [ 99.338955][ T6752] loop1: detected capacity change from 0 to 2048 [ 99.362587][ T6752] EXT4-fs mount: 37 callbacks suppressed [ 99.362608][ T6752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.433711][ T6761] loop3: detected capacity change from 0 to 1024 [ 99.492192][ T6761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.539588][ T5891] bridge_slave_1: left allmulticast mode [ 99.545330][ T5891] bridge_slave_1: left promiscuous mode [ 99.551087][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.579898][ T5891] bridge_slave_0: left allmulticast mode [ 99.586646][ T5891] bridge_slave_0: left promiscuous mode [ 99.592396][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.603569][ T3316] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 99.627586][ T6768] loop4: detected capacity change from 0 to 512 [ 99.627714][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.647120][ T6768] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.658203][ T5891] erspan0: left allmulticast mode [ 99.661047][ T3316] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 99.664072][ T5891] erspan0: left promiscuous mode [ 99.673473][ T6768] EXT4-fs (loop4): orphan cleanup on readonly fs [ 99.677060][ T5891] GPL: port 1(erspan0) entered disabled state [ 99.684133][ T6768] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1004: bg 0: block 248: padding at end of block bitmap is not set [ 99.705299][ T6768] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1004: Failed to acquire dquot type 1 [ 99.718025][ T6768] EXT4-fs (loop4): 1 truncate cleaned up [ 99.718549][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.735031][ T6768] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.758061][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.855143][ T6782] loop3: detected capacity change from 0 to 8192 [ 99.903947][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.913684][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.923113][ T5891] bond0 (unregistering): Released all slaves [ 99.937071][ T6767] geneve2: entered promiscuous mode [ 99.968029][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.027316][ T6795] futex_wake_op: syz.4.1011 tries to shift op by -1; fix this program [ 100.110794][ T5891] hsr_slave_0: left promiscuous mode [ 100.123520][ T5891] hsr_slave_1: left promiscuous mode [ 100.132779][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.153709][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.198801][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 100.207918][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 100.381204][ T6803] loop6: detected capacity change from 0 to 8192 [ 100.524899][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 100.592512][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 100.644076][ T6814] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1018'. [ 100.680395][ T6806] bridge_slave_0: left allmulticast mode [ 100.686135][ T6806] bridge_slave_0: left promiscuous mode [ 100.691813][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.701921][ T6806] bridge_slave_1: left allmulticast mode [ 100.707618][ T6806] bridge_slave_1: left promiscuous mode [ 100.713758][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.724433][ T6816] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 100.733759][ T6806] bond0: (slave bond_slave_0): Releasing backup interface [ 100.743949][ T6806] bond0: (slave bond_slave_1): Releasing backup interface [ 100.757346][ T6806] team0: Port device team_slave_0 removed [ 100.766686][ T6806] team0: Port device team_slave_1 removed [ 100.773786][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.781236][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.790835][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.798354][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.822604][ T6806] team0: Port device geneve1 removed [ 100.908925][ T6826] FAULT_INJECTION: forcing a failure. [ 100.908925][ T6826] name failslab, interval 1, probability 0, space 0, times 0 [ 100.921624][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.6.1022 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 100.921652][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.921730][ T6826] Call Trace: [ 100.921736][ T6826] [ 100.921744][ T6826] __dump_stack+0x1d/0x30 [ 100.921765][ T6826] dump_stack_lvl+0xe8/0x140 [ 100.921806][ T6826] dump_stack+0x15/0x1b [ 100.921833][ T6826] should_fail_ex+0x265/0x280 [ 100.921874][ T6826] should_failslab+0x8c/0xb0 [ 100.921901][ T6826] kmem_cache_alloc_bulk_noprof+0x5b/0x410 [ 100.921951][ T6826] bpf_test_run_xdp_live+0xcaa/0xfe0 [ 100.921983][ T6826] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 100.922031][ T6826] ? synchronize_rcu+0x45/0x320 [ 100.922064][ T6826] ? 0xffffffffa0205540 [ 100.922081][ T6826] ? bpf_test_run_xdp_live+0x29d/0xfe0 [ 100.922161][ T6826] bpf_prog_test_run_xdp+0x4f5/0x910 [ 100.922195][ T6826] ? __rcu_read_unlock+0x4f/0x70 [ 100.922223][ T6826] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.922311][ T6826] bpf_prog_test_run+0x22a/0x390 [ 100.922331][ T6826] __sys_bpf+0x3dc/0x790 [ 100.922367][ T6826] __x64_sys_bpf+0x41/0x50 [ 100.922399][ T6826] x64_sys_call+0x2478/0x2fb0 [ 100.922430][ T6826] do_syscall_64+0xd2/0x200 [ 100.922448][ T6826] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 100.922472][ T6826] ? clear_bhb_loop+0x40/0x90 [ 100.922496][ T6826] ? clear_bhb_loop+0x40/0x90 [ 100.922562][ T6826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.922589][ T6826] RIP: 0033:0x7f4d1e1ae929 [ 100.922608][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.922630][ T6826] RSP: 002b:00007f4d1c817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.922651][ T6826] RAX: ffffffffffffffda RBX: 00007f4d1e3d5fa0 RCX: 00007f4d1e1ae929 [ 100.922730][ T6826] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 100.922745][ T6826] RBP: 00007f4d1c817090 R08: 0000000000000000 R09: 0000000000000000 [ 100.922759][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.922770][ T6826] R13: 0000000000000000 R14: 00007f4d1e3d5fa0 R15: 00007fff2a4b8918 [ 100.922789][ T6826] [ 101.243865][ T6835] SELinux: failed to load policy [ 101.260523][ T6763] chnl_net:caif_netlink_parms(): no params data found [ 101.414459][ T5891] IPVS: stop unused estimator thread 0... [ 101.432977][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.440333][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.485985][ T6763] bridge_slave_0: entered allmulticast mode [ 101.501905][ T6763] bridge_slave_0: entered promiscuous mode [ 101.519786][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.526951][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.534387][ T6763] bridge_slave_1: entered allmulticast mode [ 101.540862][ T6763] bridge_slave_1: entered promiscuous mode [ 101.557041][ T6845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 101.566130][ T6845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 101.585609][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.604992][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 101.605006][ T29] audit: type=1326 audit(1750457485.351:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.637900][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.647744][ T6849] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1029'. [ 101.650139][ T29] audit: type=1326 audit(1750457485.381:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.680478][ T29] audit: type=1326 audit(1750457485.381:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.704019][ T29] audit: type=1326 audit(1750457485.381:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.727624][ T29] audit: type=1326 audit(1750457485.381:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.727934][ T6850] loop1: detected capacity change from 0 to 2048 [ 101.751008][ T29] audit: type=1326 audit(1750457485.381:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.751047][ T29] audit: type=1326 audit(1750457485.381:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.751085][ T29] audit: type=1326 audit(1750457485.381:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.751176][ T29] audit: type=1326 audit(1750457485.381:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.751211][ T29] audit: type=1326 audit(1750457485.381:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6846 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef36ce929 code=0x7ffc0000 [ 101.904310][ T6856] loop6: detected capacity change from 0 to 128 [ 101.913910][ T6763] team0: Port device team_slave_0 added [ 101.922209][ T6856] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 101.930814][ T6856] FAT-fs (loop6): Filesystem has been set read-only [ 101.939199][ T6763] team0: Port device team_slave_1 added [ 101.985186][ T6856] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1032'. [ 102.013137][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 102.022222][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 102.042258][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.049255][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.075327][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.086639][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1032'. [ 102.104525][ T6863] wireguard0: entered promiscuous mode [ 102.123036][ T6864] 0: renamed from hsr_slave_1 (while UP) [ 102.130471][ T6864] 0: entered allmulticast mode [ 102.137550][ T6864] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 102.146762][ T6867] loop3: detected capacity change from 0 to 8192 [ 102.159724][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.166802][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.192879][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.212076][ T6861] bond2: entered promiscuous mode [ 102.217247][ T6861] bond2: entered allmulticast mode [ 102.225354][ T6861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.245540][ T6861] bond2 (unregistering): Released all slaves [ 102.279219][ T6867] syzkaller0: entered allmulticast mode [ 102.291998][ T6867] syzkaller0 (unregistering): left allmulticast mode [ 102.372250][ T6878] loop6: detected capacity change from 0 to 8192 [ 102.382526][ T6763] hsr_slave_0: entered promiscuous mode [ 102.388741][ T6763] hsr_slave_1: entered promiscuous mode [ 102.481968][ T6887] loop6: detected capacity change from 0 to 512 [ 102.499907][ T6763] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 102.509968][ T6763] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 102.519685][ T6763] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 102.533489][ T6889] loop4: detected capacity change from 0 to 2048 [ 102.541135][ T6887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.550375][ T6763] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 102.556063][ T6887] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.588930][ T6887] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1042: Failed to acquire dquot type 0 [ 102.624295][ T6900] loop4: detected capacity change from 0 to 512 [ 102.641251][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.650587][ T6900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.667519][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.683822][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.695630][ T6900] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.708311][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.710102][ T6900] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1044: corrupted xattr block 19: overlapping e_value [ 102.715425][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.730001][ T6900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 102.746758][ T6900] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1044: corrupted xattr block 19: overlapping e_value [ 102.761209][ T6900] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 102.765826][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.772739][ T6900] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1044: corrupted xattr block 19: overlapping e_value [ 102.777297][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.802899][ T4406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.820713][ T6763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.831185][ T6763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.875365][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.937768][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.039413][ T6929] loop1: detected capacity change from 0 to 8192 [ 103.138448][ T6943] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 103.189890][ T6945] SELinux: failed to load policy [ 103.251161][ T6938] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.332511][ T6938] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.381130][ T6963] loop3: detected capacity change from 0 to 2048 [ 103.394542][ T6938] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.423325][ T6963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.440935][ T6763] veth0_vlan: entered promiscuous mode [ 103.452072][ T6763] veth1_vlan: entered promiscuous mode [ 103.492017][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 103.519094][ T6938] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.564168][ T6763] veth0_macvtap: entered promiscuous mode [ 103.570125][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.577623][ T6763] veth1_macvtap: entered promiscuous mode [ 103.593175][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.604368][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.619168][ T6938] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.644406][ T6972] loop3: detected capacity change from 0 to 2048 [ 103.652526][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.665473][ T6938] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.678752][ T6938] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.725295][ T6972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.743820][ T6938] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.794212][ T6763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.803150][ T6763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.812795][ T6763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.821582][ T6763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.834993][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 103.850688][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.859839][ T6980] netlink: 'syz.4.1069': attribute type 1 has an invalid length. [ 103.886644][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.944015][ T6978] loop1: detected capacity change from 0 to 8192 [ 103.955417][ T6988] FAULT_INJECTION: forcing a failure. [ 103.955417][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 103.968790][ T6988] CPU: 1 UID: 0 PID: 6988 Comm: syz.4.1072 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 103.968877][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.968899][ T6988] Call Trace: [ 103.968905][ T6988] [ 103.968913][ T6988] __dump_stack+0x1d/0x30 [ 103.968936][ T6988] dump_stack_lvl+0xe8/0x140 [ 103.968958][ T6988] dump_stack+0x15/0x1b [ 103.968975][ T6988] should_fail_ex+0x265/0x280 [ 103.969078][ T6988] ? tcf_block_get_ext+0x19e/0xb30 [ 103.969110][ T6988] should_failslab+0x8c/0xb0 [ 103.969219][ T6988] __kmalloc_cache_noprof+0x4c/0x320 [ 103.969252][ T6988] tcf_block_get_ext+0x19e/0xb30 [ 103.969316][ T6988] ? __kmalloc_noprof+0x1dd/0x3e0 [ 103.969350][ T6988] ? __pfx_drr_init_qdisc+0x10/0x10 [ 103.969375][ T6988] tcf_block_get+0x67/0xa0 [ 103.969468][ T6988] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 103.969508][ T6988] drr_init_qdisc+0x2c/0xb0 [ 103.969562][ T6988] qdisc_create+0x591/0x9e0 [ 103.969594][ T6988] tc_modify_qdisc+0xe2c/0x1380 [ 103.969635][ T6988] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 103.969663][ T6988] rtnetlink_rcv_msg+0x657/0x6d0 [ 103.969705][ T6988] netlink_rcv_skb+0x123/0x220 [ 103.969745][ T6988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.969853][ T6988] rtnetlink_rcv+0x1c/0x30 [ 103.969950][ T6988] netlink_unicast+0x59e/0x670 [ 103.969990][ T6988] netlink_sendmsg+0x58b/0x6b0 [ 103.970016][ T6988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.970037][ T6988] __sock_sendmsg+0x145/0x180 [ 103.970063][ T6988] ____sys_sendmsg+0x31e/0x4e0 [ 103.970109][ T6988] ___sys_sendmsg+0x17b/0x1d0 [ 103.970178][ T6988] __x64_sys_sendmsg+0xd4/0x160 [ 103.970222][ T6988] x64_sys_call+0x2999/0x2fb0 [ 103.970329][ T6988] do_syscall_64+0xd2/0x200 [ 103.970352][ T6988] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.970384][ T6988] ? clear_bhb_loop+0x40/0x90 [ 103.970469][ T6988] ? clear_bhb_loop+0x40/0x90 [ 103.970569][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.970591][ T6988] RIP: 0033:0x7f38c5bbe929 [ 103.970610][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.970630][ T6988] RSP: 002b:00007f38c4227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.970710][ T6988] RAX: ffffffffffffffda RBX: 00007f38c5de5fa0 RCX: 00007f38c5bbe929 [ 103.970763][ T6988] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 103.970778][ T6988] RBP: 00007f38c4227090 R08: 0000000000000000 R09: 0000000000000000 [ 103.970792][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.970805][ T6988] R13: 0000000000000000 R14: 00007f38c5de5fa0 R15: 00007ffefe8282d8 [ 103.970827][ T6988] [ 104.280276][ T6989] loop3: detected capacity change from 0 to 2048 [ 104.335481][ T6989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.355600][ T7000] loop7: detected capacity change from 0 to 512 [ 104.368034][ T7000] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.392944][ T7000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.409507][ T7000] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.425371][ T7000] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1077: corrupted xattr block 19: overlapping e_value [ 104.426068][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 104.456099][ T7000] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 104.478522][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.484360][ T7000] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1077: corrupted xattr block 19: overlapping e_value [ 104.505273][ T7000] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 104.520645][ T7000] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1077: corrupted xattr block 19: overlapping e_value [ 104.532995][ T7019] loop1: detected capacity change from 0 to 256 [ 104.563933][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.574411][ T6763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.581127][ T7019] FAT-fs (loop1): Directory bread(block 64) failed [ 104.591333][ T7019] FAT-fs (loop1): Directory bread(block 65) failed [ 104.598108][ T7019] FAT-fs (loop1): Directory bread(block 66) failed [ 104.617889][ T7019] FAT-fs (loop1): Directory bread(block 67) failed [ 104.637982][ T7019] FAT-fs (loop1): Directory bread(block 68) failed [ 104.661634][ T7019] FAT-fs (loop1): Directory bread(block 69) failed [ 104.670269][ T7029] loop6: detected capacity change from 0 to 1024 [ 104.681381][ T7019] FAT-fs (loop1): Directory bread(block 70) failed [ 104.687950][ T7019] FAT-fs (loop1): Directory bread(block 71) failed [ 104.688238][ T7024] loop7: detected capacity change from 0 to 8192 [ 104.701030][ T7019] FAT-fs (loop1): Directory bread(block 72) failed [ 104.707758][ T7019] FAT-fs (loop1): Directory bread(block 73) failed [ 104.720304][ T7029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.741776][ T7029] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.756323][ T7019] bio_check_eod: 104 callbacks suppressed [ 104.756364][ T7019] syz.1.1084: attempt to access beyond end of device [ 104.756364][ T7019] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 104.779926][ T7019] syz.1.1084: attempt to access beyond end of device [ 104.779926][ T7019] loop1: rw=2051, sector=1288, nr_sectors = 32 limit=256 [ 104.796009][ T7019] syz.1.1084: attempt to access beyond end of device [ 104.796009][ T7019] loop1: rw=2051, sector=1352, nr_sectors = 32 limit=256 [ 104.818190][ T7019] syz.1.1084: attempt to access beyond end of device [ 104.818190][ T7019] loop1: rw=2051, sector=1384, nr_sectors = 32 limit=256 [ 104.844400][ T7029] netlink: 'syz.6.1087': attribute type 21 has an invalid length. [ 104.852660][ T7029] netlink: 'syz.6.1087': attribute type 1 has an invalid length. [ 104.870155][ T7038] loop7: detected capacity change from 0 to 2048 [ 104.889544][ T4406] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /160/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 104.924150][ T5894] kworker/u8:58: attempt to access beyond end of device [ 104.924150][ T5894] loop1: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 104.944277][ T5894] kworker/u8:58: attempt to access beyond end of device [ 104.944277][ T5894] loop1: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 104.944559][ T4406] EXT4-fs (loop6): Remounting filesystem read-only [ 104.957973][ T5894] kworker/u8:58: attempt to access beyond end of device [ 104.957973][ T5894] loop1: rw=1, sector=1416, nr_sectors = 4 limit=256 [ 104.989020][ T7038] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.092136][ T4406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.111076][ T7050] loop1: detected capacity change from 0 to 8192 [ 105.135882][ T6763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.193221][ T7056] loop3: detected capacity change from 0 to 512 [ 105.200408][ T7056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.227358][ T7058] loop1: detected capacity change from 0 to 2048 [ 105.243697][ T7052] loop6: detected capacity change from 0 to 8192 [ 105.245116][ T7056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.266799][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.275631][ T7056] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.326613][ T7065] SELinux: failed to load policy [ 105.337302][ T3316] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 105.364963][ T7068] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.383547][ T3316] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 105.394076][ T7070] loop6: detected capacity change from 0 to 8192 [ 105.394530][ T7072] loop7: detected capacity change from 0 to 512 [ 105.406839][ T7056] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1098: corrupted xattr block 19: overlapping e_value [ 105.423313][ T7072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.426828][ T7070] syzkaller0: entered allmulticast mode [ 105.435042][ T7056] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 105.446549][ T7056] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1098: corrupted xattr block 19: overlapping e_value [ 105.447342][ T7070] syzkaller0 (unregistering): left allmulticast mode [ 105.460706][ T7056] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 105.478093][ T7056] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1098: corrupted xattr block 19: overlapping e_value [ 105.479549][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.496186][ T7072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.514256][ T7072] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.530800][ T7072] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1103: corrupted xattr block 19: overlapping e_value [ 105.547523][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.551655][ T7072] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 105.567974][ T7072] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1103: corrupted xattr block 19: overlapping e_value [ 105.591738][ T7072] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 105.600943][ T7072] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.1103: corrupted xattr block 19: overlapping e_value [ 105.635682][ T6763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.687566][ T7086] loop1: detected capacity change from 0 to 512 [ 105.704322][ T7086] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.737330][ T7086] EXT4-fs (loop1): mount failed [ 105.791706][ T7099] SELinux: failed to load policy [ 105.833323][ T7105] __nla_validate_parse: 8 callbacks suppressed [ 105.833338][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 105.834578][ T7101] loop7: detected capacity change from 0 to 8192 [ 105.839625][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1113'. [ 105.890980][ T7108] loop1: detected capacity change from 0 to 512 [ 105.899461][ T7108] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.922147][ T7108] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.940562][ T7108] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.954345][ T7108] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1114: corrupted xattr block 19: overlapping e_value [ 105.968340][ T7108] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 105.977520][ T7108] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1114: corrupted xattr block 19: overlapping e_value [ 105.992101][ T7108] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 105.992238][ T7112] Falling back ldisc for ttyS3. [ 106.001797][ T7108] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1114: corrupted xattr block 19: overlapping e_value [ 106.034392][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.073967][ T7114] loop7: detected capacity change from 0 to 8192 [ 106.086195][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.095176][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.104280][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.106351][ T7114] syzkaller0: entered allmulticast mode [ 106.118805][ T7121] loop6: detected capacity change from 0 to 128 [ 106.127060][ T7114] syzkaller0 (unregistering): left allmulticast mode [ 106.138409][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.147384][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.156947][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.184313][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.193322][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 106.206534][ T7126] syz.6.1119: attempt to access beyond end of device [ 106.206534][ T7126] loop6: rw=2049, sector=889, nr_sectors = 1 limit=128 [ 106.232671][ T7130] loop1: detected capacity change from 0 to 764 [ 106.239864][ T7130] iso9660: Unknown parameter '184467440737095516150177777777777777777777701777777777777777777777' [ 106.336408][ T7138] SELinux: failed to load policy [ 106.376197][ T7145] netem: change failed [ 106.381214][ T7145] SELinux: Context Gm1LhHSiK\: is not valid (left unmapped). [ 106.397485][ T7121] syz.6.1119: attempt to access beyond end of device [ 106.397485][ T7121] loop6: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 106.414431][ T7143] loop1: detected capacity change from 0 to 8192 [ 106.421572][ T7121] syz.6.1119: attempt to access beyond end of device [ 106.421572][ T7121] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 106.539464][ T7153] netlink: 'syz.7.1129': attribute type 1 has an invalid length. [ 106.562222][ T7151] loop1: detected capacity change from 0 to 2048 [ 106.613403][ T7151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.632410][ T7157] loop4: detected capacity change from 0 to 2048 [ 106.638868][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 106.638886][ T29] audit: type=1326 audit(1750457490.381:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f38c5bbe9b7 code=0x7ffc0000 [ 106.668702][ T29] audit: type=1326 audit(1750457490.381:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38c5bbd290 code=0x7ffc0000 [ 106.692352][ T29] audit: type=1326 audit(1750457490.381:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c5bbe52b code=0x7ffc0000 [ 106.720382][ T29] audit: type=1326 audit(1750457490.391:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f38c5bbd58a code=0x7ffc0000 [ 106.720883][ T7161] FAULT_INJECTION: forcing a failure. [ 106.720883][ T7161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.744649][ T29] audit: type=1326 audit(1750457490.391:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c5bbe52b code=0x7ffc0000 [ 106.756909][ T7161] CPU: 0 UID: 0 PID: 7161 Comm: syz.6.1132 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 106.756982][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.757001][ T7161] Call Trace: [ 106.757012][ T7161] [ 106.757022][ T7161] __dump_stack+0x1d/0x30 [ 106.757124][ T7161] dump_stack_lvl+0xe8/0x140 [ 106.757151][ T7161] dump_stack+0x15/0x1b [ 106.757173][ T7161] should_fail_ex+0x265/0x280 [ 106.757240][ T7161] should_fail+0xb/0x20 [ 106.757304][ T7161] should_fail_usercopy+0x1a/0x20 [ 106.757359][ T7161] _copy_to_user+0x20/0xa0 [ 106.757422][ T7161] simple_read_from_buffer+0xb5/0x130 [ 106.757521][ T7161] proc_fail_nth_read+0x100/0x140 [ 106.757550][ T7161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 106.757594][ T7161] vfs_read+0x1a0/0x6f0 [ 106.757696][ T7161] ? __rcu_read_unlock+0x4f/0x70 [ 106.757726][ T7161] ? __fget_files+0x184/0x1c0 [ 106.757757][ T7161] ksys_read+0xda/0x1a0 [ 106.757941][ T7161] __x64_sys_read+0x40/0x50 [ 106.757985][ T7161] x64_sys_call+0x2d77/0x2fb0 [ 106.758061][ T7161] do_syscall_64+0xd2/0x200 [ 106.758086][ T7161] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.758121][ T7161] ? clear_bhb_loop+0x40/0x90 [ 106.758149][ T7161] ? clear_bhb_loop+0x40/0x90 [ 106.758227][ T7161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.758256][ T7161] RIP: 0033:0x7f4d1e1ad33c [ 106.758278][ T7161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 106.758303][ T7161] RSP: 002b:00007f4d1c817030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.758328][ T7161] RAX: ffffffffffffffda RBX: 00007f4d1e3d5fa0 RCX: 00007f4d1e1ad33c [ 106.758352][ T7161] RDX: 000000000000000f RSI: 00007f4d1c8170a0 RDI: 0000000000000004 [ 106.758370][ T7161] RBP: 00007f4d1c817090 R08: 0000000000000000 R09: 0000000000000000 [ 106.758439][ T7161] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 106.758457][ T7161] R13: 0000000000000000 R14: 00007f4d1e3d5fa0 R15: 00007fff2a4b8918 [ 106.758483][ T7161] [ 106.946772][ T7182] FAULT_INJECTION: forcing a failure. [ 106.946772][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 106.948537][ T29] audit: type=1326 audit(1750457490.391:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38c5bbe52b code=0x7ffc0000 [ 106.956502][ T7182] CPU: 0 UID: 0 PID: 7182 Comm: syz.6.1138 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 106.956537][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.956553][ T7182] Call Trace: [ 106.956563][ T7182] [ 106.956574][ T7182] __dump_stack+0x1d/0x30 [ 106.956605][ T7182] dump_stack_lvl+0xe8/0x140 [ 106.956658][ T7182] dump_stack+0x15/0x1b [ 106.956680][ T7182] should_fail_ex+0x265/0x280 [ 106.956726][ T7182] should_failslab+0x8c/0xb0 [ 106.956820][ T7182] kmem_cache_alloc_noprof+0x50/0x310 [ 106.956856][ T7182] ? getname_flags+0x80/0x3b0 [ 106.956890][ T7182] getname_flags+0x80/0x3b0 [ 106.956956][ T7182] path_setxattrat+0x223/0x310 [ 106.957010][ T7182] __x64_sys_lsetxattr+0x71/0x90 [ 106.957050][ T7182] x64_sys_call+0x1e36/0x2fb0 [ 106.957077][ T7182] do_syscall_64+0xd2/0x200 [ 106.957102][ T7182] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.957200][ T7182] ? clear_bhb_loop+0x40/0x90 [ 106.957282][ T7182] ? clear_bhb_loop+0x40/0x90 [ 106.957349][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.957377][ T7182] RIP: 0033:0x7f4d1e1ae929 [ 106.957400][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.957473][ T7182] RSP: 002b:00007f4d1c7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 106.957499][ T7182] RAX: ffffffffffffffda RBX: 00007f4d1e3d6080 RCX: 00007f4d1e1ae929 [ 106.957542][ T7182] RDX: 00002000000001c0 RSI: 0000200000000240 RDI: 0000200000000140 [ 106.957636][ T7182] RBP: 00007f4d1c7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.957652][ T7182] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 106.957669][ T7182] R13: 0000000000000001 R14: 00007f4d1e3d6080 R15: 00007fff2a4b8918 [ 106.957696][ T7182] [ 107.070152][ T7184] loop6: detected capacity change from 0 to 8192 [ 107.073056][ T29] audit: type=1400 audit(1750457490.461:3608): avc: denied { getopt } for pid=7166 comm="syz.7.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.073338][ T29] audit: type=1326 audit(1750457490.581:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f38c5bbd13a code=0x7ffc0000 [ 107.264893][ T7190] netlink: 'syz.7.1145': attribute type 1 has an invalid length. [ 107.267526][ T29] audit: type=1326 audit(1750457490.581:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f38c5bbd13a code=0x7ffc0000 [ 107.299550][ T29] audit: type=1326 audit(1750457490.581:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7156 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f38c5bbd13a code=0x7ffc0000 [ 107.344091][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.405250][ T7195] loop1: detected capacity change from 0 to 128 [ 107.490434][ T7200] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 107.507783][ T7198] loop6: detected capacity change from 0 to 8192 [ 107.576740][ T7202] loop3: detected capacity change from 0 to 8192 [ 107.630841][ T7207] loop4: detected capacity change from 0 to 8192 [ 107.647100][ T7213] loop7: detected capacity change from 0 to 1024 [ 107.686129][ T7207] syzkaller0: entered allmulticast mode [ 107.694456][ T7207] syzkaller0 (unregistering): left allmulticast mode [ 107.695968][ T7216] loop6: detected capacity change from 0 to 2048 [ 107.708812][ T7213] loop9: detected capacity change from 0 to 7 [ 107.726640][ T7213] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.734778][ T7213] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.742730][ T7213] loop9: unable to read partition table [ 107.748574][ T7213] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 107.748574][ T7213] U) failed (rc=-5) [ 107.765610][ T7216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.889166][ T4406] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 107.924780][ T7240] loop1: detected capacity change from 0 to 128 [ 107.934300][ T4406] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 107.970977][ T4406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.031944][ T7251] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 108.053148][ T7253] FAULT_INJECTION: forcing a failure. [ 108.053148][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 108.065999][ T7253] CPU: 1 UID: 0 PID: 7253 Comm: syz.7.1172 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 108.066036][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.066114][ T7253] Call Trace: [ 108.066121][ T7253] [ 108.066129][ T7253] __dump_stack+0x1d/0x30 [ 108.066212][ T7253] dump_stack_lvl+0xe8/0x140 [ 108.066234][ T7253] dump_stack+0x15/0x1b [ 108.066256][ T7253] should_fail_ex+0x265/0x280 [ 108.066320][ T7253] ? tcf_block_get_ext+0x19e/0xb30 [ 108.066357][ T7253] should_failslab+0x8c/0xb0 [ 108.066408][ T7253] __kmalloc_cache_noprof+0x4c/0x320 [ 108.066446][ T7253] tcf_block_get_ext+0x19e/0xb30 [ 108.066477][ T7253] ? __kmalloc_noprof+0x1dd/0x3e0 [ 108.066539][ T7253] ? __pfx_drr_init_qdisc+0x10/0x10 [ 108.066564][ T7253] tcf_block_get+0x67/0xa0 [ 108.066651][ T7253] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 108.066687][ T7253] drr_init_qdisc+0x2c/0xb0 [ 108.066708][ T7253] qdisc_create+0x591/0x9e0 [ 108.066755][ T7253] tc_modify_qdisc+0xe2c/0x1380 [ 108.066793][ T7253] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 108.066821][ T7253] rtnetlink_rcv_msg+0x657/0x6d0 [ 108.066871][ T7253] netlink_rcv_skb+0x123/0x220 [ 108.066910][ T7253] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.066959][ T7253] rtnetlink_rcv+0x1c/0x30 [ 108.066979][ T7253] netlink_unicast+0x59e/0x670 [ 108.067133][ T7253] netlink_sendmsg+0x58b/0x6b0 [ 108.067229][ T7253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.067254][ T7253] __sock_sendmsg+0x145/0x180 [ 108.067285][ T7253] ____sys_sendmsg+0x31e/0x4e0 [ 108.067346][ T7253] ___sys_sendmsg+0x17b/0x1d0 [ 108.067397][ T7253] __x64_sys_sendmsg+0xd4/0x160 [ 108.067445][ T7253] x64_sys_call+0x2999/0x2fb0 [ 108.067541][ T7253] do_syscall_64+0xd2/0x200 [ 108.067563][ T7253] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.067591][ T7253] ? clear_bhb_loop+0x40/0x90 [ 108.067611][ T7253] ? clear_bhb_loop+0x40/0x90 [ 108.067637][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.067696][ T7253] RIP: 0033:0x7f3dc662e929 [ 108.067795][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.067864][ T7253] RSP: 002b:00007f3dc4c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.067888][ T7253] RAX: ffffffffffffffda RBX: 00007f3dc6855fa0 RCX: 00007f3dc662e929 [ 108.067900][ T7253] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 108.067991][ T7253] RBP: 00007f3dc4c97090 R08: 0000000000000000 R09: 0000000000000000 [ 108.068005][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.068020][ T7253] R13: 0000000000000000 R14: 00007f3dc6855fa0 R15: 00007fff5ffe65c8 [ 108.068043][ T7253] [ 108.069614][ T7251] SELinux: failed to load policy [ 108.189207][ T7246] loop3: detected capacity change from 0 to 8192 [ 108.404611][ T7264] loop6: detected capacity change from 0 to 2048 [ 108.461277][ T7264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.480432][ T7268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7268 comm=syz.1.1175 [ 108.503630][ T7277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=298 sclass=netlink_route_socket pid=7277 comm=syz.7.1180 [ 108.592118][ T4406] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 108.614984][ T4406] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 108.664749][ T4406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.716990][ T7285] loop3: detected capacity change from 0 to 512 [ 108.724213][ T7285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.768112][ T7285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.782035][ T7285] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.795033][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1184: corrupted xattr block 19: overlapping e_value [ 108.850381][ T7285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 108.859530][ T7292] loop6: detected capacity change from 0 to 2048 [ 108.870008][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1184: corrupted xattr block 19: overlapping e_value [ 108.963146][ T7297] FAULT_INJECTION: forcing a failure. [ 108.963146][ T7297] name failslab, interval 1, probability 0, space 0, times 0 [ 108.976082][ T7297] CPU: 1 UID: 0 PID: 7297 Comm: syz.4.1188 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 108.976110][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.976166][ T7297] Call Trace: [ 108.976175][ T7297] [ 108.976184][ T7297] __dump_stack+0x1d/0x30 [ 108.976210][ T7297] dump_stack_lvl+0xe8/0x140 [ 108.976232][ T7297] dump_stack+0x15/0x1b [ 108.976247][ T7297] should_fail_ex+0x265/0x280 [ 108.976345][ T7297] should_failslab+0x8c/0xb0 [ 108.976410][ T7297] __kmalloc_node_noprof+0xa9/0x410 [ 108.976445][ T7297] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 108.976482][ T7297] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 108.976608][ T7297] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 108.976649][ T7297] __vmalloc_noprof+0x83/0xc0 [ 108.976687][ T7297] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 108.976726][ T7297] ? ppp_poll+0xd1/0x170 [ 108.976778][ T7297] bpf_prog_alloc_no_stats+0x47/0x390 [ 108.976815][ T7297] ? bpf_prog_alloc+0x2a/0x150 [ 108.976847][ T7297] ? ppp_poll+0xd1/0x170 [ 108.976924][ T7297] bpf_prog_alloc+0x3c/0x150 [ 108.977003][ T7297] ? ppp_poll+0xd1/0x170 [ 108.977076][ T7297] bpf_prog_create+0x73/0x130 [ 108.977114][ T7297] ? __pfx_ppp_ioctl+0x10/0x10 [ 108.977143][ T7297] ppp_get_filter+0x113/0x160 [ 108.977227][ T7297] ppp_ioctl+0xb93/0x11c0 [ 108.977253][ T7297] ? __fget_files+0x184/0x1c0 [ 108.977280][ T7297] ? __pfx_ppp_ioctl+0x10/0x10 [ 108.977310][ T7297] __se_sys_ioctl+0xce/0x140 [ 108.977347][ T7297] __x64_sys_ioctl+0x43/0x50 [ 108.977383][ T7297] x64_sys_call+0x19a8/0x2fb0 [ 108.977406][ T7297] do_syscall_64+0xd2/0x200 [ 108.977429][ T7297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.977461][ T7297] ? clear_bhb_loop+0x40/0x90 [ 108.977522][ T7297] ? clear_bhb_loop+0x40/0x90 [ 108.977543][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.977618][ T7297] RIP: 0033:0x7f38c5bbe929 [ 108.977645][ T7297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.977680][ T7297] RSP: 002b:00007f38c4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.977742][ T7297] RAX: ffffffffffffffda RBX: 00007f38c5de5fa0 RCX: 00007f38c5bbe929 [ 108.977819][ T7297] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 108.977833][ T7297] RBP: 00007f38c4227090 R08: 0000000000000000 R09: 0000000000000000 [ 108.977845][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.977858][ T7297] R13: 0000000000000000 R14: 00007f38c5de5fa0 R15: 00007ffefe8282d8 [ 108.977882][ T7297] [ 108.977891][ T7297] syz.4.1188: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 109.026609][ T7285] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 109.031079][ T7297] ,cpuset=/ [ 109.036515][ T7285] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1184: corrupted xattr block 19: overlapping e_value [ 109.043125][ T7297] ,mems_allowed=0 [ 109.285454][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.287913][ T7297] CPU: 1 UID: 0 PID: 7297 Comm: syz.4.1188 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 109.287946][ T7297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.287964][ T7297] Call Trace: [ 109.287974][ T7297] [ 109.288033][ T7297] __dump_stack+0x1d/0x30 [ 109.288063][ T7297] dump_stack_lvl+0xe8/0x140 [ 109.288091][ T7297] dump_stack+0x15/0x1b [ 109.288177][ T7297] warn_alloc+0x12b/0x1a0 [ 109.288221][ T7297] ? should_failslab+0x8c/0xb0 [ 109.288258][ T7297] __vmalloc_node_range_noprof+0x497/0xe00 [ 109.288316][ T7297] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 109.288384][ T7297] __vmalloc_noprof+0x83/0xc0 [ 109.288425][ T7297] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 109.288467][ T7297] ? ppp_poll+0xd1/0x170 [ 109.288524][ T7297] bpf_prog_alloc_no_stats+0x47/0x390 [ 109.288574][ T7297] ? bpf_prog_alloc+0x2a/0x150 [ 109.288614][ T7297] ? ppp_poll+0xd1/0x170 [ 109.288645][ T7297] bpf_prog_alloc+0x3c/0x150 [ 109.288706][ T7297] ? ppp_poll+0xd1/0x170 [ 109.288736][ T7297] bpf_prog_create+0x73/0x130 [ 109.288815][ T7297] ? __pfx_ppp_ioctl+0x10/0x10 [ 109.288847][ T7297] ppp_get_filter+0x113/0x160 [ 109.288883][ T7297] ppp_ioctl+0xb93/0x11c0 [ 109.288911][ T7297] ? __fget_files+0x184/0x1c0 [ 109.288942][ T7297] ? __pfx_ppp_ioctl+0x10/0x10 [ 109.289041][ T7297] __se_sys_ioctl+0xce/0x140 [ 109.289080][ T7297] __x64_sys_ioctl+0x43/0x50 [ 109.289118][ T7297] x64_sys_call+0x19a8/0x2fb0 [ 109.289147][ T7297] do_syscall_64+0xd2/0x200 [ 109.289222][ T7297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.289258][ T7297] ? clear_bhb_loop+0x40/0x90 [ 109.289301][ T7297] ? clear_bhb_loop+0x40/0x90 [ 109.289331][ T7297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.289359][ T7297] RIP: 0033:0x7f38c5bbe929 [ 109.289386][ T7297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.289488][ T7297] RSP: 002b:00007f38c4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.289515][ T7297] RAX: ffffffffffffffda RBX: 00007f38c5de5fa0 RCX: 00007f38c5bbe929 [ 109.289559][ T7297] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000003 [ 109.289576][ T7297] RBP: 00007f38c4227090 R08: 0000000000000000 R09: 0000000000000000 [ 109.289594][ T7297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.289667][ T7297] R13: 0000000000000000 R14: 00007f38c5de5fa0 R15: 00007ffefe8282d8 [ 109.289693][ T7297] [ 109.289702][ T7297] Mem-Info: [ 109.549003][ T7297] active_anon:7281 inactive_anon:0 isolated_anon:0 [ 109.549003][ T7297] active_file:19566 inactive_file:2276 isolated_file:0 [ 109.549003][ T7297] unevictable:0 dirty:165 writeback:0 [ 109.549003][ T7297] slab_reclaimable:3328 slab_unreclaimable:15654 [ 109.549003][ T7297] mapped:33007 shmem:4354 pagetables:1046 [ 109.549003][ T7297] sec_pagetables:0 bounce:0 [ 109.549003][ T7297] kernel_misc_reclaimable:0 [ 109.549003][ T7297] free:1837585 free_pcp:40285 free_cma:0 [ 109.594667][ T7297] Node 0 active_anon:29124kB inactive_anon:0kB active_file:78264kB inactive_file:9104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132028kB dirty:660kB writeback:0kB shmem:17416kB writeback_tmp:0kB kernel_stack:4272kB pagetables:4184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 109.624117][ T7297] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.653367][ T7297] lowmem_reserve[]: 0 2882 7860 7860 [ 109.658706][ T7297] Node 0 DMA32 free:2947736kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 109.689660][ T7297] lowmem_reserve[]: 0 0 4978 4978 [ 109.694768][ T7297] Node 0 Normal free:4387132kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29168kB inactive_anon:0kB active_file:78264kB inactive_file:9100kB unevictable:0kB writepending:676kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:157512kB local_pcp:54120kB free_cma:0kB [ 109.727266][ T7297] lowmem_reserve[]: 0 0 0 0 [ 109.731998][ T7297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.744823][ T7297] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947736kB [ 109.761517][ T7297] Node 0 Normal: 595*4kB (UME) 422*8kB (UME) 764*16kB (UME) 538*32kB (UME) 335*64kB (UME) 182*128kB (UME) 175*256kB (UME) 89*512kB (UME) 42*1024kB (UME) 18*2048kB (UME) 1010*4096kB (UM) = 4387132kB [ 109.781449][ T7297] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 109.790771][ T7297] 26159 total pagecache pages [ 109.796185][ T7297] 0 pages in swap cache [ 109.800421][ T7297] Free swap = 124996kB [ 109.804604][ T7297] Total swap = 124996kB [ 109.808772][ T7297] 2097051 pages RAM [ 109.812794][ T7297] 0 pages HighMem/MovableOnly [ 109.817536][ T7297] 80810 pages reserved [ 109.837810][ T7306] loop3: detected capacity change from 0 to 512 [ 109.845018][ T7306] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.863632][ T7306] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 109.916050][ T7306] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 109.943491][ T7306] EXT4-fs (loop3): orphan cleanup on readonly fs [ 109.987123][ T7306] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.1191: Bad quota inum: 1, type: 2 [ 109.998789][ T7306] EXT4-fs (loop3): Remounting filesystem read-only [ 110.005383][ T7306] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 110.021174][ T7306] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 110.036431][ T7306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.080000][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.126415][ T7316] netlink: 'syz.6.1197': attribute type 1 has an invalid length. [ 110.134468][ T7314] loop4: detected capacity change from 0 to 8192 [ 110.148004][ T5891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.168509][ T7325] loop7: detected capacity change from 0 to 8192 [ 110.203535][ T7328] loop3: detected capacity change from 0 to 512 [ 110.230771][ T5891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.241813][ T7328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.283764][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.312543][ T7328] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.318371][ T5891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.340746][ T7328] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1201: corrupted xattr block 19: overlapping e_value [ 110.354852][ T7328] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 110.363904][ T7328] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1201: corrupted xattr block 19: overlapping e_value [ 110.378601][ T7328] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 110.387874][ T7328] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.1201: corrupted xattr block 19: overlapping e_value [ 110.418123][ T5891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.430205][ T7346] FAULT_INJECTION: forcing a failure. [ 110.430205][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 110.442917][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.4.1206 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 110.442951][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.442967][ T7346] Call Trace: [ 110.442975][ T7346] [ 110.443034][ T7346] __dump_stack+0x1d/0x30 [ 110.443057][ T7346] dump_stack_lvl+0xe8/0x140 [ 110.443083][ T7346] dump_stack+0x15/0x1b [ 110.443098][ T7346] should_fail_ex+0x265/0x280 [ 110.443134][ T7346] should_failslab+0x8c/0xb0 [ 110.443161][ T7346] __kvmalloc_node_noprof+0x123/0x4e0 [ 110.443243][ T7346] ? xt_alloc_entry_offsets+0x48/0x50 [ 110.443317][ T7346] ? refill_obj_stock+0x254/0x2e0 [ 110.443353][ T7346] xt_alloc_entry_offsets+0x48/0x50 [ 110.443449][ T7346] translate_table+0xa9/0x1070 [ 110.443482][ T7346] ? __rcu_read_unlock+0x4f/0x70 [ 110.443509][ T7346] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 110.443603][ T7346] ? should_fail_ex+0xdb/0x280 [ 110.443636][ T7346] ? _copy_from_user+0x89/0xb0 [ 110.443657][ T7346] do_ip6t_set_ctl+0x678/0x840 [ 110.443728][ T7346] ? kstrtoull+0x111/0x140 [ 110.443780][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.443800][ T7346] ? __rcu_read_unlock+0x4f/0x70 [ 110.443865][ T7346] nf_setsockopt+0x199/0x1b0 [ 110.443897][ T7346] ipv6_setsockopt+0x11a/0x130 [ 110.443932][ T7346] tcp_setsockopt+0x95/0xb0 [ 110.443999][ T7346] sock_common_setsockopt+0x66/0x80 [ 110.444036][ T7346] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.444129][ T7346] __sys_setsockopt+0x181/0x200 [ 110.444174][ T7346] __x64_sys_setsockopt+0x64/0x80 [ 110.444249][ T7346] x64_sys_call+0x2bd5/0x2fb0 [ 110.444278][ T7346] do_syscall_64+0xd2/0x200 [ 110.444331][ T7346] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.444367][ T7346] ? clear_bhb_loop+0x40/0x90 [ 110.444395][ T7346] ? clear_bhb_loop+0x40/0x90 [ 110.444485][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.444514][ T7346] RIP: 0033:0x7f38c5bbe929 [ 110.444535][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.444560][ T7346] RSP: 002b:00007f38c4227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.444586][ T7346] RAX: ffffffffffffffda RBX: 00007f38c5de5fa0 RCX: 00007f38c5bbe929 [ 110.444603][ T7346] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 110.444638][ T7346] RBP: 00007f38c4227090 R08: 0000000000000518 R09: 0000000000000000 [ 110.444677][ T7346] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000001 [ 110.444693][ T7346] R13: 0000000000000000 R14: 00007f38c5de5fa0 R15: 00007ffefe8282d8 [ 110.444720][ T7346] [ 110.544234][ T7350] SELinux: failed to load policy [ 110.775574][ T7356] SELinux: policydb magic number 0x6e000078 does not match expected magic number 0xf97cff8c [ 110.786134][ T7356] SELinux: failed to load policy [ 110.799543][ T7355] SELinux: policydb magic number 0x6e000078 does not match expected magic number 0xf97cff8c [ 110.858665][ T7355] SELinux: failed to load policy [ 110.882857][ T5891] bridge_slave_1: left allmulticast mode [ 110.888571][ T5891] bridge_slave_1: left promiscuous mode [ 110.895043][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.916203][ T5891] bridge_slave_0: left allmulticast mode [ 110.921989][ T5891] bridge_slave_0: left promiscuous mode [ 110.927699][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.929146][ T7358] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 110.955025][ T7358] SELinux: failed to load policy [ 110.960805][ T7374] loop7: detected capacity change from 0 to 1024 [ 110.989686][ T7374] loop9: detected capacity change from 0 to 7 [ 111.014214][ T7374] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.022336][ T7374] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.030257][ T7374] loop9: unable to read partition table [ 111.036074][ T7374] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 111.036074][ T7374] U) failed (rc=-5) [ 111.088375][ T7379] syz!: rxe_newlink: already configured on team_slave_0 [ 111.144698][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.155210][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.171256][ T5891] bond0 (unregistering): Released all slaves [ 111.181743][ T5891] bond1 (unregistering): Released all slaves [ 111.212019][ T7385] netlink: 'syz.7.1221': attribute type 1 has an invalid length. [ 111.305518][ T7392] SELinux: failed to load policy [ 111.341482][ T5891] hsr_slave_0: left promiscuous mode [ 111.351297][ T5891] hsr_slave_1: left promiscuous mode [ 111.363861][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.371378][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.379030][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.386622][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.404588][ T5891] veth1_macvtap: left promiscuous mode [ 111.410337][ T5891] veth0_macvtap: left promiscuous mode [ 111.417001][ T5891] veth1_vlan: left promiscuous mode [ 111.428942][ T5891] veth0_vlan: left promiscuous mode [ 111.505008][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 111.541201][ T7319] chnl_net:caif_netlink_parms(): no params data found [ 111.609519][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.616783][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.624063][ T7319] bridge_slave_0: entered allmulticast mode [ 111.630605][ T7319] bridge_slave_0: entered promiscuous mode [ 111.637883][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.645079][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.652359][ T7319] bridge_slave_1: entered allmulticast mode [ 111.659497][ T7319] bridge_slave_1: entered promiscuous mode [ 111.691145][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.711751][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 111.711765][ T29] audit: type=1326 audit(1750457495.461:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.752771][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.759128][ T29] audit: type=1326 audit(1750457495.461:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.785517][ T29] audit: type=1326 audit(1750457495.461:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.808992][ T29] audit: type=1326 audit(1750457495.461:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.832664][ T29] audit: type=1326 audit(1750457495.461:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.856244][ T29] audit: type=1326 audit(1750457495.461:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.856282][ T29] audit: type=1326 audit(1750457495.461:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.903466][ T29] audit: type=1326 audit(1750457495.461:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.926856][ T29] audit: type=1326 audit(1750457495.461:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.950330][ T29] audit: type=1326 audit(1750457495.461:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc662e929 code=0x7ffc0000 [ 111.997533][ T7319] team0: Port device team_slave_0 added [ 112.004253][ T7319] team0: Port device team_slave_1 added [ 112.033389][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.040445][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.066508][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.085289][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.092339][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.118435][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.148736][ T5891] IPVS: stop unused estimator thread 0... [ 112.219210][ T7423] loop3: detected capacity change from 0 to 8192 [ 112.245640][ T7319] hsr_slave_0: entered promiscuous mode [ 112.251840][ T7319] hsr_slave_1: entered promiscuous mode [ 112.261979][ T7319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.271934][ T7319] Cannot create hsr debugfs directory [ 112.307923][ T7429] netlink: 'syz.6.1233': attribute type 1 has an invalid length. [ 112.480049][ T7319] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 112.493807][ T7319] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 112.503761][ T7319] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 112.537049][ T7319] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 112.589616][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.619302][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.639875][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.647023][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.664544][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.671786][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.671881][ T7451] loop4: detected capacity change from 0 to 1024 [ 112.702864][ T7452] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 112.711891][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.734455][ T7451] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.764661][ T3308] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /237/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 112.786140][ T3308] EXT4-fs (loop4): Remounting filesystem read-only [ 112.797323][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.836292][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.940455][ T7477] loop4: detected capacity change from 0 to 128 [ 112.994398][ T7474] netlink: 'syz.6.1244': attribute type 1 has an invalid length. [ 113.003690][ T7319] veth0_vlan: entered promiscuous mode [ 113.009551][ T7484] bio_check_eod: 339 callbacks suppressed [ 113.009649][ T7484] syz.4.1245: attempt to access beyond end of device [ 113.009649][ T7484] loop4: rw=2049, sector=705, nr_sectors = 1 limit=128 [ 113.019084][ T7319] veth1_vlan: entered promiscuous mode [ 113.068942][ T7319] veth0_macvtap: entered promiscuous mode [ 113.090889][ T7319] veth1_macvtap: entered promiscuous mode [ 113.118039][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.127131][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.146604][ T7319] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.155484][ T7319] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.159851][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.159851][ T7477] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 113.164284][ T7319] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.183607][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.183607][ T7477] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 113.186463][ T7319] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.200093][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.200093][ T7477] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 113.222680][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.222680][ T7477] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 113.236211][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.236211][ T7477] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 113.249736][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.249736][ T7477] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 113.264028][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.264028][ T7477] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 113.277551][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.277551][ T7477] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 113.291115][ T7477] syz.4.1245: attempt to access beyond end of device [ 113.291115][ T7477] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 113.430226][ T7500] loop8: detected capacity change from 0 to 128 [ 113.463016][ T7498] loop6: detected capacity change from 0 to 8192 [ 113.492540][ T7494] loop4: detected capacity change from 0 to 2048 [ 113.512574][ T7498] syzkaller0: entered allmulticast mode [ 113.520501][ T7498] syzkaller0 (unregistering): left allmulticast mode [ 113.701485][ T7518] vti0: entered promiscuous mode [ 113.706520][ T7518] vti0: entered allmulticast mode [ 113.747506][ T7518] netlink: 'syz.6.1258': attribute type 4 has an invalid length. [ 113.813580][ T7518] netlink: 'syz.6.1258': attribute type 4 has an invalid length. [ 113.870484][ T7526] SELinux: failed to load policy [ 113.911435][ T7530] loop8: detected capacity change from 0 to 1024 [ 113.938486][ T7530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.961107][ T7530] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.970626][ T7540] loop6: detected capacity change from 0 to 512 [ 114.014683][ T7319] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.024222][ T7540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.062981][ T7540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.081981][ T7540] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.128708][ T7550] loop8: detected capacity change from 0 to 1024 [ 114.152406][ T7540] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1265: corrupted xattr block 19: overlapping e_value [ 114.166746][ T7551] loop3: detected capacity change from 0 to 2048 [ 114.174557][ T7550] loop9: detected capacity change from 0 to 7 [ 114.180874][ T7550] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.188830][ T7550] Buffer I/O error on dev loop9, logical block 0, async page read [ 114.196724][ T7550] loop9: unable to read partition table [ 114.202444][ T7550] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 114.202444][ T7550] U) failed (rc=-5) [ 114.203502][ T7540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 114.228583][ T7551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.252496][ T7540] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1265: corrupted xattr block 19: overlapping e_value [ 114.305113][ T7540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 114.351545][ T7540] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1265: corrupted xattr block 19: overlapping e_value [ 114.376180][ T3312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 114.395910][ T5846] ================================================================== [ 114.404143][ T5846] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 114.412692][ T5846] [ 114.415030][ T5846] write to 0xffff888119649d08 of 44 bytes by task 7557 on cpu 1: [ 114.422763][ T5846] tty_set_termios+0xc0/0x8c0 [ 114.427466][ T5846] set_termios+0x35b/0x4e0 [ 114.431903][ T5846] tty_mode_ioctl+0x379/0x5c0 [ 114.436601][ T5846] n_tty_ioctl_helper+0x91/0x210 [ 114.441562][ T5846] n_tty_ioctl+0x101/0x200 [ 114.445998][ T5846] tty_ioctl+0x845/0xb80 [ 114.450267][ T5846] __se_sys_ioctl+0xce/0x140 [ 114.454882][ T5846] __x64_sys_ioctl+0x43/0x50 [ 114.459527][ T5846] x64_sys_call+0x19a8/0x2fb0 [ 114.464221][ T5846] do_syscall_64+0xd2/0x200 [ 114.468738][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.474645][ T5846] [ 114.476984][ T5846] read to 0xffff888119649d21 of 1 bytes by task 5846 on cpu 0: [ 114.484535][ T5846] n_tty_receive_char_flow_ctrl+0x23/0x1a0 [ 114.490364][ T5846] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 114.495928][ T5846] tty_port_default_lookahead_buf+0x8e/0xc0 [ 114.501855][ T5846] flush_to_ldisc+0x281/0x360 [ 114.506561][ T5846] process_scheduled_works+0x4ce/0x9d0 [ 114.512048][ T5846] worker_thread+0x582/0x770 [ 114.516664][ T5846] kthread+0x486/0x510 [ 114.520755][ T5846] ret_from_fork+0xdd/0x150 [ 114.525271][ T5846] ret_from_fork_asm+0x1a/0x30 [ 114.530050][ T5846] [ 114.532384][ T5846] value changed: 0x11 -> 0x29 [ 114.537065][ T5846] [ 114.539396][ T5846] Reported by Kernel Concurrency Sanitizer on: [ 114.545561][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: kworker/u8:18 Not tainted 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 114.558253][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.568324][ T5846] Workqueue: events_unbound flush_to_ldisc [ 114.574168][ T5846] ================================================================== [ 114.594133][ T3312] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 114.613454][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.635698][ T4406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.