last executing test programs: 10m0.611465423s ago: executing program 0 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 10m0.554676824s ago: executing program 0 (id=1099): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r5, &(0x7f0000000040)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r9 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x40, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getresgid(&(0x7f0000000c40), &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r12, @ANYRESHEX=r13, @ANYRES32=r12, @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$eJzs2zFrE2EYB/Dn2rRe7GAHJ1E4cHEK6icwSAUxIEQy6GSgurQipEsUxH4eZz+EX8alg2SLXO5om2sLjWdyEn8/ON6H/O/guSF53uHN27sfDvY/Hr3f+nISaZLFRsSTmETs5lUpKdd0Vm/HnCTq+FXraQDgj/T7w27TPbBco1F3eDsidi4kg2+NNAQAAAAAAAAAAEBti5z/34j4Wj3/f7zifgGA+pz/X1/tch2NusN7xf6twvl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDmT6fTWNL/Sci2vGxGRRkQ7Im5GRCsi8s+b7hcAqG8ynZ/7V83/iEgiwvwHgDXw6vWbF91eb6+fZWnEz+PxYDwo1iJ/9ry39zCb2T176mQ8Hmye5o+KPJvPt2b7hjx/fGm+HQ/uF3mePX3Zq+Q7sb/81weA/1InO3Vuvm+WV0Snc1mez+eiOrc/qMzvVtxprew1AIAFHH36fDA8PHw3+utFsthT7bKhq+/53lpWq4prFT+Sf6INRd0ivc7NDf8wAUt39qWvJmkzDQEAAAAAAAAAAAAAABes4i9HTb8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADr53cAAAD//8h6UUs=") r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r15 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r15, 0x4c09, 0x3) r19 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r15, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r14, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r18, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r16, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r17, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) statx(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x4, r5}, {0x2, 0x3, r6}, {0x2, 0x0, r7}, {0x2, 0x3}, {0x2, 0x2, r8}, {0x2, 0x0, 0xee01}], {0x4, 0x1}, [{0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x1, 0xee01}, {0x8, 0x7, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r19}, {0x8, 0x0, r20}, {0x8, 0x6}], {0x10, 0x1}, {0x20, 0x2}}, 0xac, 0x2) brk(0x6) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r2) 10m0.468181356s ago: executing program 0 (id=1100): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2004}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000007853d6c00e5f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xaf, 0x1, 0x20000000, 0x2d2f45bb, 0xaad1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f0000000700)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f0000000140)="4401", 0x2}, {&(0x7f00000004c0)="1ca0c9120c66fe48fb8f9c3b747a7d146ae8ba9c7cf4a65e7650ee3a35b3f9230c0cb277468f20675f51512bdb08c356ecaf8f17240320", 0x37}, {&(0x7f0000003880)="673f47ecffa0931e47a2d733e7fbc5fe416b1745c8b23f6719f954db610e52b161430dd227163e54234db08c62c9e8ca8e033c9097881fa4a9cb2c6f7718ecf44c7e239197533337206481bc05ba7f915520fd88fc3b4b3b24c87c6b5e9c66542c52f0f72ea5a9abb6480cbcaf58bb4c3e644843a1040f409e6faec629010bab6dff34840450d44312189c1a045c3047c173d8ec1d20904c295edfadc83d96f9dba0dfdf352cbe104b36983c392fc6d659a80dd4a765632d8ecaeaed9ebf43dbc18e1819c1d2e8439d28dbbad53de4d5534a8c03429755e272f088b790d6429d607b8ee3644985e3", 0xe8}], 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 10m0.340343908s ago: executing program 0 (id=1102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000002c0)='cachefiles_write\x00', r1, 0x0, 0x1ffffffffc}, 0x18) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, 0xfffffffffffffffe) modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700)={0x800}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendfile(r4, r4, &(0x7f0000000000)=0x8001, 0x3) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write$tun(r6, 0x0, 0xfce) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000081000000000018110000000400000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000830320000800000085100000ffffffff18250000", @ANYRES32, @ANYBLOB="0000000062000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xef, &(0x7f0000000740)=""/239, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xa, 0x0, 0x5}, 0x10, 0x0, r8, 0x0, &(0x7f00000008c0)=[r2], &(0x7f0000000900), 0x10, 0x2}, 0x94) write$binfmt_elf32(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r9, 0x6, &(0x7f0000000000)={0x8, 0x4, 0x8}) 10m0.050064342s ago: executing program 0 (id=1106): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 9m59.797833686s ago: executing program 0 (id=1110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r5, &(0x7f0000000040)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r9 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x40, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getresgid(&(0x7f0000000c40), &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r12, @ANYRESHEX=r13, @ANYRES32=r12, @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r15 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r15, 0x4c09, 0x3) r19 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r15, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r14, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r18, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r16, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r17, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) statx(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x4, r5}, {0x2, 0x3, r6}, {}, {0x2, 0x3, r7}, {0x2, 0x2, r8}, {0x2, 0x0, 0xee01}], {0x4, 0x1}, [{0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x1, 0xee01}, {0x8, 0x7, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r19}, {0x8, 0x0, r20}, {0x8, 0x6}], {0x10, 0x1}, {0x20, 0x2}}, 0xac, 0x2) brk(0x6) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r2) 9m59.797369966s ago: executing program 32 (id=1110): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, r5, &(0x7f0000000040)) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) r9 = getgid() statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x40, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getresgid(&(0x7f0000000c40), &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r12, @ANYRESHEX=r13, @ANYRES32=r12, @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r15 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r15, 0x4c09, 0x3) r19 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r15, @ANYRESOCT, @ANYRES32=0x0, @ANYRES16=r14, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r18, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593", @ANYRESDEC=r16, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r17, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r19, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) statx(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x4000, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x3}, [{0x2, 0x4}, {0x2, 0x2}, {0x2, 0x7}, {0x2, 0x4, r5}, {0x2, 0x3, r6}, {}, {0x2, 0x3, r7}, {0x2, 0x2, r8}, {0x2, 0x0, 0xee01}], {0x4, 0x1}, [{0x8, 0x2, r9}, {0x8, 0x4, r10}, {0x8, 0x1, 0xee01}, {0x8, 0x7, r11}, {0x8, 0x4, r12}, {0x8, 0x1, r19}, {0x8, 0x0, r20}, {0x8, 0x6}], {0x10, 0x1}, {0x20, 0x2}}, 0xac, 0x2) brk(0x6) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r2) 6m33.842200715s ago: executing program 3 (id=3575): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x591003, 0x0, 0xb}, 0x18) ptrace(0x10, r1) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x4, 0x1, 0x400, 0x3, r1}) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, r4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000580)={'bridge_slave_1\x00', {0x2, 0x4e23, @loopback}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f00000002c0)) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000340)) sendmsg$AUDIT_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfb, {0x8, 0x0, 0x2, r1, 0x1, 0x5, 0x2, 0xa, 0x0, 0x9, 0x1}, ["", ""]}, 0x3c}}, 0x4004) wait4(r1, &(0x7f0000000000), 0x8, &(0x7f0000000040)) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 6m33.784123105s ago: executing program 3 (id=3576): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) unshare(0x6a040000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x3) 6m33.158307706s ago: executing program 3 (id=3588): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m33.056065997s ago: executing program 3 (id=3589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000203, &(0x7f0000000500)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xbcafc9c949abc8b3, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) geteuid() ioprio_get$pid(0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="184e000000d100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r8}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000540)={[{@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) io_uring_setup(0x5aa0, &(0x7f00000002c0)={0x0, 0xba7b, 0x800, 0x1, 0x25a, 0x0, r5}) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m32.843618261s ago: executing program 3 (id=3595): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) accept(0xffffffffffffffff, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 6m31.917943145s ago: executing program 3 (id=3605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x1f) unshare(0x6a040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r11, r11) fstat(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) keyctl$chown(0x4, r9, r11, r12) socket$nl_netfilter(0x10, 0x3, 0xc) 6m31.893533696s ago: executing program 33 (id=3605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x1f) unshare(0x6a040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r9) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r11, r11) fstat(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) keyctl$chown(0x4, r9, r11, r12) socket$nl_netfilter(0x10, 0x3, 0xc) 3.796375941s ago: executing program 2 (id=7487): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000540)}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000020000000000000700000000000000000000000300000000020000000300000081000000000000000100008500000000000000000200000000000000005f4f007cad12c558e3a8f96de91f2444b738a9753b3ddf5f402ac96f8fb22d35f8ca42980b558cfdafdb30107f98111d2e4e9fad5ca38dca8447d64c7e19ee6ce3105304adc4d22cccabba4063e76868eb127c28cd177e09137efa13bccc0736eb6bc51dedf6955735cefaa86c3be31ddf3b4dff1555773cd8453f4d3be09a17263135e3aedb16cedd046cd5d6a658021747b6f874efe3b252"], 0x0, 0x58, 0x0, 0xa}, 0x28) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$sg(0x0, 0x7, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 2.898989184s ago: executing program 2 (id=7509): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(0x0, &(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.323474173s ago: executing program 1 (id=7521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x1f) unshare(0x6a040000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0xe) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r10) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r12, r12) fstat(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00"/28], 0x24}}, 0x0) keyctl$chown(0x4, r10, r12, r13) socket$nl_netfilter(0x10, 0x3, 0xc) 2.037014967s ago: executing program 2 (id=7523): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.972823029s ago: executing program 5 (id=7524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x1f) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x3) 1.87922303s ago: executing program 6 (id=7526): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000020000000000000700000000000000000000000300000000020000000300000081000000000000000100008500000000000000000200000000000000005f4f007cad12c558e3a8f96de91f2444b738a9753b3ddf5f402ac96f8fb22d35f8ca42980b558cfdafdb30107f98111d2e4e9fad5ca38dca8447d64c7e19ee6ce3105304adc4d22cccabba4063e76868eb127c28cd177e09137efa13bccc0736eb6bc51dedf6955735cefaa86c3be31ddf3b4dff1555773cd8453f4d3be09a17263135e3aedb16cedd046cd5d6a658021747b6f874efe3b252"], 0x0, 0x58, 0x0, 0xa}, 0x28) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$sg(0x0, 0x7, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 1.778318582s ago: executing program 1 (id=7527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) 1.730292242s ago: executing program 6 (id=7528): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 1.707791623s ago: executing program 1 (id=7529): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000020000000000000700000000000000000000000300000000020000000300000081000000000000000100008500000000000000000200000000000000005f4f007cad12c558e3a8f96de91f2444b738a9753b3ddf5f402ac96f8fb22d35f8ca42980b558cfdafdb30107f98111d2e4e9fad5ca38dca8447d64c7e19ee6ce3105304adc4d22cccabba4063e76868eb127c28cd177e09137efa13bccc0736eb6bc51dedf6955735cefaa86c3be31ddf3b4dff1555773cd8453f4d3be09a17263135e3aedb16cedd046cd5d6a658021747b6f874efe3b252"], 0x0, 0x58, 0x0, 0xa}, 0x28) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$sg(0x0, 0x7, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 1.706967293s ago: executing program 2 (id=7530): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)=""/250, 0xfa}], 0x2, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.644691735s ago: executing program 6 (id=7531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) (fail_nth: 1) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 1.410381328s ago: executing program 5 (id=7532): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000100}, &(0x7f00000008c0)=0x0, &(0x7f0000000280)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=r1, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x9, 0x1d, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bff5f47e47e2a200000000000007020000f8ffffffb703008b69f67c07de2e77ba8c8a0a2b0008000000b70500000100000085000000820000000054010003000000384b0000f8ffffff000000000000000085000000090000008520000000000000b702000001000000850000008400"], &(0x7f0000000800)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x8, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x6, &(0x7f0000001a80)=[r4], &(0x7f0000001ac0)=[{0x1, 0x2, 0xfffffffa}, {0x2, 0x1, 0xb, 0x7}, {0x1, 0x4, 0xb, 0x7}, {0x5, 0x4, 0xb, 0x8}, {0x5, 0x5, 0xf, 0x3}, {0x3, 0x2, 0xe, 0x9}], 0x10, 0x8001}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x4e21, @local}, 0x10) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) (async) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async, rerun: 64) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f00000006c0)=[{r9, 0xa00f}, {r6, 0xf000}, {0xffffffffffffffff, 0x8001}], 0x3, 0x0, 0x0, 0x0) (async, rerun: 32) readv(r7, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x41) (async, rerun: 32) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c000140000000000000010108000440000000013c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000ed"], 0xf4}}, 0x40) ioctl$EVIOCGREP(r11, 0x80084503, &(0x7f0000000100)=""/104) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0xc0, 0x0, 0x0, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0) (async, rerun: 32) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000640)) (async, rerun: 32) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffefff9, 0x0, 0x4) (async) io_uring_enter(r0, 0x47f9, 0x1, 0x28, 0x0, 0x0) 1.356573499s ago: executing program 1 (id=7533): futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = open(0x0, 0x40c5, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_open_procfs(0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x453, 0x10, 0x70bd2a, 0x25dfdbff, "9fbb8d558c323582adee83c485b1fcf294a2e73c86546726e9694402770f016c73ee7c9785e728af163a423fda75368ebee645a7f17dffc4f461f6a95d8ed04c5aeb7e2cd29de572bed3dae204769fe83db59777c411040a45428713e4a889d264585d4468443e5da327a29d9431b086606ecd93798bed99325bec", ["", "", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x100800a0}, 0x8804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @fwd={0x6}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/101, 0x6f, 0x65, 0x1, 0x2}, 0x28) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) socket(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000f"], 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 1.343039139s ago: executing program 6 (id=7534): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') pivot_root(0x0, &(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.24585823s ago: executing program 5 (id=7536): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4e, 0x2, 0x0, 0xffffffeffffffffd}, {0x800, 0x0, 0x7fffffff, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3c0}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd10200"], 0x1028}}, 0x20000050) 1.24533414s ago: executing program 6 (id=7537): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0xfffffdef, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$binfmt_script(r3, 0x0, 0xd9) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1.217854041s ago: executing program 5 (id=7538): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5, 0xd2, &(0x7f0000001280)=""/210, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000001100)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) 973.718844ms ago: executing program 1 (id=7541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x701083, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000002cc0)={[{@nodiscard}]}, 0x4, 0x578, &(0x7f0000002d00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/234, 0xea) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = fcntl$getown(r2, 0x9) move_pages(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r5 = io_uring_setup(0x51d8, &(0x7f0000000100)={0x0, 0x9f09, 0x10000, 0x2, 0x3c0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000b7c300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000015c0)=""/4091, 0xffb}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) 750.163708ms ago: executing program 2 (id=7544): r0 = openat(0xffffffffffffff9c, 0x0, 0x400042, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000f000000480000000500000042a00a00", @ANYRES32=r5, @ANYBLOB="0500"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0300"/17, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000040000000000000006000000950000000000000039b654aecb0508353bddd3e764cdd3fb32ba32a05462d456b06b61090726b4c2611404edf2a5dc87ee0619eb550f6650301898ed36bc171d0249bf4b309f88c85d6926a88ef05b7e9610be2831ec4b0dfc9859fee70f15f7e376016f5c9c779679915497d1cf1fc7ec366a37bd7dc28cfc88b141871bb94e8de7599865f0a12c36ece6494730315aa10f4ffe2db017707e14eeeef81270951aafc14d81485a1e9e20b8ff549075eea687ca32e10917aefa061a5e6954911627448bdd5b7a"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000021}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x72bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0x4, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) socket$packet(0x11, 0x3, 0x300) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000f7ffffff00009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='fsi_master_gpio_break\x00', r10, 0x0, 0x252}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe0c358f9999a3b9, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @value=r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r11}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r13, 0x2, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0xfffffff8, 0x10}, 0xc) 666.389209ms ago: executing program 4 (id=7545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x4, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 645.957969ms ago: executing program 4 (id=7546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x4, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 615.97747ms ago: executing program 2 (id=7547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x701083, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000002cc0)={[{@nodiscard}]}, 0x4, 0x578, &(0x7f0000002d00)="$eJzs3c+PG1cdAPDvzP5sSLsJ9AAVkACFFEWxs5s2qnppcwGhqhJq4YA4pMuus1pixyH2lu4Sqdu/ASSQOAH/AQckDkg9ceDGBQmJA0IqB6QAESipBJLRjGc37mZMnI3XbuzPR5qdmfc8831vncl78+ydF8DUOh0RuxExHxFvRsRSkZ4US7zSXbLX3bl9c+3u7ZtrSXQ6b/wjyfOztOg5JvOx4pyLEfH6VyO+k9wft7W9c3W1Xq/dKPar7cb1amt759xmY3WjtlFLI2L54vkXL7ywMrS6nmr88tZXNl/95m9+/Zn3f7/75R9kxTpe5PXWY5i6VZ/bj5OZjYhXjyLYGMwU6/kxl4PDya6zj0fE5/Prfylm8n+dAMAk63SWorPUuw8ATLo0HwNL0kpEpGnRCah0x/CejmNpvdlqn73S3Lq23h0rOxFz6ZXNeu38yYU/fS9/8VyS7S/neXl+vr9yYP9CRJyMiB8tPJHvV9aa9fXxdHkAYOpl7fwfniva/4j490KaVioDHVryqR4A8NhYHHcBAICR0/4DwPRZ7PkJAEyHAVr+4sP+3SMvCwAwGu78AWD6HKL9/8ZRlAMAGB33/wAwVb7+2mvZ0rlbPP96/a3travNt86t11pXK42ttcpa88b1ykazuZE/s6fR90TFA6Drzeb15edj6+1qu9ZqV1vbO5cbza1r7cv5c70v1+ZGVjMAoJ+Tp977YxIRuy89kS/RM5eDthomWzruAgBjM/MoB+sgwGOtbLavX4yhHMDoDdSE552E3x15WYDxKH2Y92Lp5of95CGC+J4RfKSc+VTJ+H+n0+mU9A3M8QyTxfg/TK/Djf+/PPRyAKNXNv4PTIdOJzk45//8fhYAMJEe9it8H3QPy/sH7wy/OwKMwYMm8x7K5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYY5HxHcjSSv5XOBp9jOtVCKejIgTMZdc2azXzkfEU3EqIuYWsv3lcRcaAHhE6d+SYv6vM0vPHj+YO598sJCvI+L7P33jx2+vtts3lrP0f+6nL+xNH7Zy77iHnVcQADg6efu9Uqx7buTv3L65treMsjy3LsV/i6mI1+7evpkvWXqR9k7EYt6XOPavJGaLYxYj4pmImBlC/N13I+KTZfVP8rGRE8XMp73xo4j95Ejjpx+Kn+Z53XXW+frEEMoC0+a9SxHxStn1l8bpfF1+/Weps0OIf+tS92R7//fd7Yk/W0SaKeL33pxl1/zpQWM8/9uv3ZfYWermvRvxzGxZ/GQ/flJS/yzt2QHj//nTn/3hy33yOj+LOBPl8XtjVduN69XW9s65zcbqRm2jdm1l5eLyxfMvXnhhpZqPUVf3Rqrv9/eXzj7Vr2xZ/Y/1xN+bFz+Lulha//n9Y784YP1//p83v/25e7sLB+M/94Xy9//p0vhdWZv4pQHjrx77Vd/pu7P4631+/w96/88OGP/9v+6sD/hSAGAEWts7V1fr9dqNh9rIWv/elOwu9DDneeBGVsTBXrzXXXy0oH+Jo6jFITfmjuq3enAjYsgnnN3vKw63qN+KoRf1gRvpwVosjOZN6bNxZ2gnfL24Kfo/lx4wye5d9OMuCQAAAAAAAAAAAAAA0M8o/nRp3HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgcv0vAAD//27J2u4=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/234, 0xea) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) 615.67506ms ago: executing program 4 (id=7548): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4e, 0x2, 0x0, 0xffffffeffffffffd}, {0x800, 0x0, 0x7fffffff, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3c0}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd10200"], 0x1028}}, 0x20000050) 591.50934ms ago: executing program 4 (id=7549): setitimer(0x0, 0x0, 0x0) 554.972021ms ago: executing program 4 (id=7550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240)=0x5, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000020000000000000700000000000000000000000300000000020000000300000081000000000000000100008500000000000000000200000000000000005f4f007cad12c558e3a8f96de91f2444b738a9753b3ddf5f402ac96f8fb22d35f8ca42980b558cfdafdb30107f98111d2e4e9fad5ca38dca8447d64c7e19ee6ce3105304adc4d22cccabba4063e76868eb127c28cd177e09137efa13bccc0736eb6bc51dedf6955735cefaa86c3be31ddf3b4dff1555773cd8453f4d3be09a17263135e3aedb16cedd046cd5d6a658021747b6f874efe3b252"], 0x0, 0x58, 0x0, 0xa}, 0x28) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_open_dev$sg(0x0, 0x7, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) close(r3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) 481.594042ms ago: executing program 4 (id=7551): futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = open(0x0, 0x40c5, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_open_procfs(0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, 0x453, 0x10, 0x70bd2a, 0x25dfdbff, "9fbb8d558c323582adee83c485b1fcf294a2e73c86546726e9694402770f016c73ee7c9785e728af163a423fda75368ebee645a7f17dffc4f461f6a95d8ed04c5aeb7e2cd29de572bed3dae204769fe83db59777c411040a45428713e4a889d264585d4468443e5da327a29d9431b086606ecd93798bed99325bec", ["", "", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x100800a0}, 0x8804) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @fwd={0x6}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000380)=""/101, 0x6f, 0x65, 0x1, 0x2}, 0x28) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) socket(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001e000100000000000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000f"], 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 98.189498ms ago: executing program 5 (id=7552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x4, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vxcan1\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 25.290299ms ago: executing program 5 (id=7553): r0 = socket(0xf, 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") creat(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xf3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_genetlink_get_family_id$devlink(0x0, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000400)='itimer_state\x00', r3, 0x0, 0x4}, 0x61) setitimer(0x0, 0x0, 0x0) 20.17725ms ago: executing program 1 (id=7554): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() recvmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000240)=""/250, 0xfa}], 0x2, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x7, 0x0, 0x7ffc0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xffffffffffffffff) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 6 (id=7555): r0 = socket(0x10, 0x3, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f00000003c0)='d') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xe}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) kernel console output (not intermixed with test programs): 41: comm syz.6.7181: bg 0: block 248: padding at end of block bitmap is not set [ 705.007253][T25698] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7181: Failed to acquire dquot type 1 [ 705.021284][T25698] EXT4-fs (loop6): 1 truncate cleaned up [ 705.043586][T25698] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 705.088521][T25698] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 705.220469][T25711] loop1: detected capacity change from 0 to 512 [ 705.235677][T25712] wireguard0: entered promiscuous mode [ 705.241431][T25712] wireguard0: entered allmulticast mode [ 705.257773][T25711] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.271845][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 705.315874][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 4: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 705.368579][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 705.401160][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 705.424546][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 705.446456][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 705.489710][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 705.513477][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 705.534911][T25724] wireguard0: entered promiscuous mode [ 705.540538][T25724] wireguard0: entered allmulticast mode [ 705.544210][T25729] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7192'. [ 705.550525][T25711] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 18: comm syz.1.7185: lblock 23 mapped to illegal pblock 18 (length 1) [ 705.582501][T25729] 1ªX¹¦À: renamed from 60ªX¹¦À [ 705.593212][T25729] net_ratelimit: 17 callbacks suppressed [ 705.593227][T25729] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 705.605825][T25711] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.7185: path /243/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 705.679361][T25735] loop5: detected capacity change from 0 to 512 [ 705.777210][T25735] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.7193: bad orphan inode 15 [ 705.795649][T25735] ext4_test_bit(bit=14, block=5) = 0 [ 705.875724][T25735] loop7: detected capacity change from 0 to 16384 [ 706.041386][T25749] loop4: detected capacity change from 0 to 512 [ 706.077305][T25751] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7198'. [ 706.108777][T25751] 1·: renamed from 70· (while UP) [ 706.133033][T25751] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 706.202384][T25749] EXT4-fs (loop4): orphan cleanup on readonly fs [ 706.222832][T25749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7197: bg 0: block 248: padding at end of block bitmap is not set [ 706.254419][T25749] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7197: Failed to acquire dquot type 1 [ 706.279211][T25749] EXT4-fs (loop4): 1 truncate cleaned up [ 706.318630][T25749] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 706.345353][T25754] loop2: detected capacity change from 0 to 512 [ 706.357380][T25749] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 706.370098][T25754] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.395092][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 706.495055][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 4: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 706.581263][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 706.604349][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 706.628264][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 706.651709][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 706.675657][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 706.698625][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 706.725662][T25754] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 18: comm syz.2.7201: lblock 23 mapped to illegal pblock 18 (length 1) [ 706.742679][T25754] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.7201: path /156/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 706.820096][T25763] loop1: detected capacity change from 0 to 1024 [ 706.857312][T25763] EXT4-fs: Ignoring removed i_version option [ 706.882717][T25763] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 706.929001][T25763] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.7200: Invalid block bitmap block 0 in block_group 0 [ 706.972639][T25771] loop5: detected capacity change from 0 to 512 [ 706.986832][T25763] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7200: Failed to acquire dquot type 0 [ 707.010319][T25773] loop4: detected capacity change from 0 to 512 [ 707.029302][T25763] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.7200: Freeing blocks not in datazone - block = 0, count = 4096 [ 707.052036][T25771] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.063196][T25773] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.086184][T25763] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7200: Invalid inode bitmap blk 0 in block_group 0 [ 707.099440][ T3544] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 707.117375][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 707.163627][T25763] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 707.195079][T25763] EXT4-fs (loop1): 1 orphan inode deleted [ 707.203050][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 4: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 707.226165][T25771] lo speed is unknown, defaulting to 1000 [ 707.280216][T25771] lo speed is unknown, defaulting to 1000 [ 707.295753][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 707.325129][T25771] lo speed is unknown, defaulting to 1000 [ 707.335581][T25771] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 707.349280][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 707.372080][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 707.405619][T25771] lo speed is unknown, defaulting to 1000 [ 707.423789][T25789] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7210'. [ 707.431894][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 707.453562][T25771] lo speed is unknown, defaulting to 1000 [ 707.459971][T25771] lo speed is unknown, defaulting to 1000 [ 707.461760][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 707.468059][T25771] lo speed is unknown, defaulting to 1000 [ 707.489418][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 707.492897][T25789] 0ªX¹¦À: renamed from 61ªX¹¦À [ 707.520008][T25773] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 18: comm syz.4.7205: lblock 23 mapped to illegal pblock 18 (length 1) [ 707.534549][T25789] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 707.537122][T25773] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.7205: path /279/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 707.570853][T25771] lo speed is unknown, defaulting to 1000 [ 707.578987][T25771] lo speed is unknown, defaulting to 1000 [ 707.694602][T25805] loop5: detected capacity change from 0 to 1024 [ 707.727592][T25805] EXT4-fs: Ignoring removed i_version option [ 707.733221][T25807] loop2: detected capacity change from 0 to 512 [ 707.742455][T25791] loop6: detected capacity change from 0 to 8192 [ 707.746946][T25805] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 707.776975][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 707.776998][ T29] audit: type=1326 audit(1753154248.033:25944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.807190][ T29] audit: type=1326 audit(1753154248.033:25945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.830850][ T29] audit: type=1326 audit(1753154248.033:25946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.854523][ T29] audit: type=1326 audit(1753154248.033:25947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.865828][T25802] netlink: zone id is out of range [ 707.878164][ T29] audit: type=1326 audit(1753154248.033:25948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.898276][T25802] netlink: zone id is out of range [ 707.906870][ T29] audit: type=1326 audit(1753154248.033:25949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.928683][T25802] netlink: zone id is out of range [ 707.935609][ T29] audit: type=1326 audit(1753154248.033:25950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.940834][T25802] netlink: zone id is out of range [ 707.964339][ T29] audit: type=1326 audit(1753154248.033:25951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 707.969488][T25802] netlink: zone id is out of range [ 707.969498][T25802] netlink: zone id is out of range [ 707.969503][T25802] netlink: zone id is out of range [ 708.008891][ T29] audit: type=1326 audit(1753154248.033:25952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 708.032908][ T29] audit: type=1326 audit(1753154248.033:25953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25790 comm="syz.6.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2121e9a9 code=0x7ffc0000 [ 708.060141][T25807] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.071516][T25805] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7218: Invalid block bitmap block 0 in block_group 0 [ 708.095616][T25807] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.7219: corrupted inode contents [ 708.120916][T25805] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7218: Failed to acquire dquot type 0 [ 708.134331][T25807] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.7219: mark_inode_dirty error [ 708.149590][T25805] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.7218: Freeing blocks not in datazone - block = 0, count = 4096 [ 708.162471][T25807] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.7219: corrupted inode contents [ 708.163633][T25805] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7218: Invalid inode bitmap blk 0 in block_group 0 [ 708.176985][T25807] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.7219: mark_inode_dirty error [ 708.191389][T25805] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 708.199766][T18939] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 708.209593][T25805] EXT4-fs (loop5): 1 orphan inode deleted [ 708.221101][T25807] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.7219: mark inode dirty (error -117) [ 708.249091][T25807] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 708.285539][T25816] wireguard0: entered promiscuous mode [ 708.291359][T25816] wireguard0: entered allmulticast mode [ 708.333241][T25825] loop2: detected capacity change from 0 to 1024 [ 708.340771][T25825] EXT4-fs: Ignoring removed i_version option [ 708.347463][T25825] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 708.360442][T25825] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.7225: Invalid block bitmap block 0 in block_group 0 [ 708.376488][T25825] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7225: Failed to acquire dquot type 0 [ 708.389014][T25825] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.7225: Freeing blocks not in datazone - block = 0, count = 4096 [ 708.409571][T25825] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.7225: Invalid inode bitmap blk 0 in block_group 0 [ 708.423037][T25825] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 708.434713][T18939] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 708.434794][T25825] EXT4-fs (loop2): 1 orphan inode deleted [ 708.493909][T25838] loop2: detected capacity change from 0 to 512 [ 708.525865][T25838] EXT4-fs: Ignoring removed bh option [ 708.532258][T25842] loop1: detected capacity change from 0 to 512 [ 708.540119][T25838] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 708.549336][T25838] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 708.569336][T25834] wireguard0: entered promiscuous mode [ 708.574913][T25834] wireguard0: entered allmulticast mode [ 708.582138][T25838] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 708.591857][T25838] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 708.619857][T25842] ext4 filesystem being mounted at /252/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 708.636053][T25852] loop4: detected capacity change from 0 to 512 [ 708.653092][T25842] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7232: corrupted inode contents [ 708.671836][T25842] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.7232: mark_inode_dirty error [ 708.676097][T25852] EXT4-fs (loop4): orphan cleanup on readonly fs [ 708.684674][T25842] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7232: corrupted inode contents [ 708.692676][T25852] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7236: bg 0: block 248: padding at end of block bitmap is not set [ 708.702781][T25842] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.7232: mark_inode_dirty error [ 708.717808][T25852] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7236: Failed to acquire dquot type 1 [ 708.729061][T25842] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.7232: mark inode dirty (error -117) [ 708.745157][T25852] EXT4-fs (loop4): 1 truncate cleaned up [ 708.753726][T25842] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 708.767328][T25862] wireguard0: entered promiscuous mode [ 708.772894][T25862] wireguard0: entered allmulticast mode [ 708.781966][T25852] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 708.800099][T25852] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 708.838975][T25852] lo speed is unknown, defaulting to 1000 [ 708.846500][T25866] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7239'. [ 708.992317][T25874] wireguard0: entered promiscuous mode [ 708.997968][T25874] wireguard0: entered allmulticast mode [ 709.006664][T25886] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7247'. [ 709.038492][T25891] loop4: detected capacity change from 0 to 128 [ 709.046227][T25886] 1·: renamed from 70· (while UP) [ 709.053833][T25891] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 709.070005][T25894] loop2: detected capacity change from 0 to 512 [ 709.081082][T25891] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 709.091504][T25894] EXT4-fs (loop2): orphan cleanup on readonly fs [ 709.106605][T25894] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7252: bg 0: block 248: padding at end of block bitmap is not set [ 709.110484][T25901] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7254'. [ 709.140130][T25894] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7252: Failed to acquire dquot type 1 [ 709.165164][T25903] loop5: detected capacity change from 0 to 512 [ 709.172246][T25894] EXT4-fs (loop2): 1 truncate cleaned up [ 709.180921][T25894] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 709.192677][T25903] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.204409][T25894] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 709.216241][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 709.229886][T25894] lo speed is unknown, defaulting to 1000 [ 709.263548][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 4: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 709.285622][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 709.312089][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 709.362519][T25922] loop6: detected capacity change from 0 to 512 [ 709.375286][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 709.407020][T25922] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 709.415336][T25922] EXT4-fs (loop6): orphan cleanup on readonly fs [ 709.416570][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 709.443385][T25922] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 709.466098][T25931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7265'. [ 709.478804][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 709.501877][T25922] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 709.509269][T25934] loop1: detected capacity change from 0 to 512 [ 709.521482][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 709.522395][T25922] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7258: bg 0: block 40: padding at end of block bitmap is not set [ 709.556385][T25935] loop4: detected capacity change from 0 to 512 [ 709.564709][T25903] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 18: comm syz.5.7255: lblock 23 mapped to illegal pblock 18 (length 1) [ 709.570266][T25922] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 709.589637][T25934] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.601575][T25922] EXT4-fs (loop6): 1 truncate cleaned up [ 709.602464][T25903] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz.5.7255: path /31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 709.628379][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 709.651008][T25922] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 709.660328][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 4: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 709.683718][T25935] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.699384][T25943] loop2: detected capacity change from 0 to 512 [ 709.708492][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 709.733153][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 709.756831][T25943] EXT4-fs (loop2): orphan cleanup on readonly fs [ 709.763758][T25943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7268: bg 0: block 248: padding at end of block bitmap is not set [ 709.779774][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 709.804714][T25943] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7268: Failed to acquire dquot type 1 [ 709.816570][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 4: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 709.837896][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 709.860677][T25943] EXT4-fs (loop2): 1 truncate cleaned up [ 709.869936][T25943] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 709.880448][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 709.903558][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 709.927831][T25943] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 709.936539][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 709.971053][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 709.997925][T25943] lo speed is unknown, defaulting to 1000 [ 710.004220][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 710.036158][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 710.070828][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 710.077723][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 710.115423][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 710.121939][T25934] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 18: comm syz.1.7266: lblock 23 mapped to illegal pblock 18 (length 1) [ 710.158079][T25935] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 18: comm syz.4.7267: lblock 23 mapped to illegal pblock 18 (length 1) [ 710.174441][T25934] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.7266: path /257/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 710.175246][T25935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.7267: path /292/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 710.219153][T25949] loop5: detected capacity change from 0 to 512 [ 710.225809][T25949] EXT4-fs: Ignoring removed bh option [ 710.248347][T25949] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 710.258238][T25949] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 710.285398][T25949] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 710.331314][T25949] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 710.482466][T25961] loop4: detected capacity change from 0 to 512 [ 710.539303][T25965] FAULT_INJECTION: forcing a failure. [ 710.539303][T25965] name failslab, interval 1, probability 0, space 0, times 0 [ 710.552116][T25965] CPU: 1 UID: 0 PID: 25965 Comm: syz.1.7276 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 710.552144][T25965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.552160][T25965] Call Trace: [ 710.552169][T25965] [ 710.552179][T25965] __dump_stack+0x1d/0x30 [ 710.552277][T25965] dump_stack_lvl+0xe8/0x140 [ 710.552421][T25965] dump_stack+0x15/0x1b [ 710.552437][T25965] should_fail_ex+0x265/0x280 [ 710.552503][T25965] should_failslab+0x8c/0xb0 [ 710.552529][T25965] __kmalloc_noprof+0xa5/0x3e0 [ 710.552591][T25965] ? bpf_test_init+0xa9/0x160 [ 710.552632][T25965] bpf_test_init+0xa9/0x160 [ 710.552665][T25965] bpf_prog_test_run_xdp+0x274/0x910 [ 710.552755][T25965] ? kstrtouint+0x76/0xc0 [ 710.552782][T25965] ? __rcu_read_unlock+0x4f/0x70 [ 710.552808][T25965] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 710.552911][T25965] bpf_prog_test_run+0x22a/0x390 [ 710.552954][T25965] __sys_bpf+0x3dc/0x790 [ 710.553055][T25965] __x64_sys_bpf+0x41/0x50 [ 710.553114][T25965] x64_sys_call+0x2478/0x2fb0 [ 710.553140][T25965] do_syscall_64+0xd2/0x200 [ 710.553158][T25965] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 710.553184][T25965] ? clear_bhb_loop+0x40/0x90 [ 710.553229][T25965] ? clear_bhb_loop+0x40/0x90 [ 710.553258][T25965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.553285][T25965] RIP: 0033:0x7f157291e9a9 [ 710.553304][T25965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.553327][T25965] RSP: 002b:00007f1570f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.553345][T25965] RAX: ffffffffffffffda RBX: 00007f1572b45fa0 RCX: 00007f157291e9a9 [ 710.553416][T25965] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 710.553428][T25965] RBP: 00007f1570f87090 R08: 0000000000000000 R09: 0000000000000000 [ 710.553439][T25965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.553451][T25965] R13: 0000000000000000 R14: 00007f1572b45fa0 R15: 00007ffcdc47f7a8 [ 710.553485][T25965] [ 710.764185][T25968] FAULT_INJECTION: forcing a failure. [ 710.764185][T25968] name failslab, interval 1, probability 0, space 0, times 0 [ 710.776878][T25968] CPU: 1 UID: 0 PID: 25968 Comm: syz.2.7272 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 710.776968][T25968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.776984][T25968] Call Trace: [ 710.776996][T25968] [ 710.777007][T25968] __dump_stack+0x1d/0x30 [ 710.777032][T25968] dump_stack_lvl+0xe8/0x140 [ 710.777055][T25968] dump_stack+0x15/0x1b [ 710.777072][T25968] should_fail_ex+0x265/0x280 [ 710.777174][T25968] should_failslab+0x8c/0xb0 [ 710.777198][T25968] kmem_cache_alloc_node_noprof+0x57/0x320 [ 710.777224][T25968] ? __alloc_skb+0x101/0x320 [ 710.777294][T25968] __alloc_skb+0x101/0x320 [ 710.777330][T25968] netlink_alloc_large_skb+0xba/0xf0 [ 710.777400][T25968] netlink_sendmsg+0x3cf/0x6b0 [ 710.777425][T25968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.777444][T25968] __sock_sendmsg+0x145/0x180 [ 710.777468][T25968] ____sys_sendmsg+0x31e/0x4e0 [ 710.777579][T25968] ___sys_sendmsg+0x17b/0x1d0 [ 710.777708][T25968] __x64_sys_sendmsg+0xd4/0x160 [ 710.777755][T25968] x64_sys_call+0x2999/0x2fb0 [ 710.777779][T25968] do_syscall_64+0xd2/0x200 [ 710.777797][T25968] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 710.777906][T25968] ? clear_bhb_loop+0x40/0x90 [ 710.777926][T25968] ? clear_bhb_loop+0x40/0x90 [ 710.778001][T25968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.778022][T25968] RIP: 0033:0x7ff48bf8e9a9 [ 710.778037][T25968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.778055][T25968] RSP: 002b:00007ff48a5ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.778076][T25968] RAX: ffffffffffffffda RBX: 00007ff48c1b6160 RCX: 00007ff48bf8e9a9 [ 710.778088][T25968] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000b [ 710.778100][T25968] RBP: 00007ff48a5ad090 R08: 0000000000000000 R09: 0000000000000000 [ 710.778159][T25968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.778175][T25968] R13: 0000000000000000 R14: 00007ff48c1b6160 R15: 00007fffc1064438 [ 710.778196][T25968] [ 711.030914][T25961] EXT4-fs (loop4): orphan cleanup on readonly fs [ 711.086651][T25961] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7273: bg 0: block 248: padding at end of block bitmap is not set [ 711.168506][T25961] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7273: Failed to acquire dquot type 1 [ 711.201043][T25961] EXT4-fs (loop4): 1 truncate cleaned up [ 711.227649][T25979] wireguard0: entered promiscuous mode [ 711.233207][T25979] wireguard0: entered allmulticast mode [ 711.464443][T25961] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 711.477076][T25961] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 711.542055][T25961] lo speed is unknown, defaulting to 1000 [ 711.651633][T25986] lo speed is unknown, defaulting to 1000 [ 711.691257][T25998] netlink: 'syz.5.7282': attribute type 83 has an invalid length. [ 711.920523][T26014] loop2: detected capacity change from 0 to 512 [ 711.945535][T26014] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 711.962836][T26014] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.7293: corrupted inode contents [ 711.976103][T26014] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.7293: mark_inode_dirty error [ 711.989015][T26014] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.7293: corrupted inode contents [ 712.001464][T26014] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.7293: mark_inode_dirty error [ 712.014588][T26022] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7296'. [ 712.015057][T26014] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.7293: mark inode dirty (error -117) [ 712.024545][T26022] 0·: renamed from 71· (while UP) [ 712.037222][T26014] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 712.051996][T26022] net_ratelimit: 18 callbacks suppressed [ 712.052012][T26022] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 712.107046][T26026] loop6: detected capacity change from 0 to 128 [ 712.114113][T26026] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 712.126618][T26012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.135383][T26012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.161978][T26026] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 712.196291][T26012] loop1: detected capacity change from 0 to 8192 [ 712.234568][T26020] loop4: detected capacity change from 0 to 8192 [ 712.308054][T26038] FAULT_INJECTION: forcing a failure. [ 712.308054][T26038] name failslab, interval 1, probability 0, space 0, times 0 [ 712.320797][T26038] CPU: 0 UID: 0 PID: 26038 Comm: syz.6.7304 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 712.320889][T26038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.320906][T26038] Call Trace: [ 712.320915][T26038] [ 712.320925][T26038] __dump_stack+0x1d/0x30 [ 712.320989][T26038] dump_stack_lvl+0xe8/0x140 [ 712.321008][T26038] dump_stack+0x15/0x1b [ 712.321028][T26038] should_fail_ex+0x265/0x280 [ 712.321086][T26038] should_failslab+0x8c/0xb0 [ 712.321115][T26038] kmem_cache_alloc_node_noprof+0x57/0x320 [ 712.321145][T26038] ? __alloc_skb+0x101/0x320 [ 712.321241][T26038] __alloc_skb+0x101/0x320 [ 712.321280][T26038] netlink_alloc_large_skb+0xba/0xf0 [ 712.321346][T26038] netlink_sendmsg+0x3cf/0x6b0 [ 712.321383][T26038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 712.321409][T26038] __sock_sendmsg+0x145/0x180 [ 712.321440][T26038] ____sys_sendmsg+0x345/0x4e0 [ 712.321476][T26038] ___sys_sendmsg+0x17b/0x1d0 [ 712.321587][T26038] __sys_sendmmsg+0x178/0x300 [ 712.321625][T26038] __x64_sys_sendmmsg+0x57/0x70 [ 712.321659][T26038] x64_sys_call+0x2f2f/0x2fb0 [ 712.321738][T26038] do_syscall_64+0xd2/0x200 [ 712.321762][T26038] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 712.321793][T26038] ? clear_bhb_loop+0x40/0x90 [ 712.321867][T26038] ? clear_bhb_loop+0x40/0x90 [ 712.321895][T26038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.321927][T26038] RIP: 0033:0x7f6e2121e9a9 [ 712.321947][T26038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.321966][T26038] RSP: 002b:00007f6e1f887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 712.321985][T26038] RAX: ffffffffffffffda RBX: 00007f6e21445fa0 RCX: 00007f6e2121e9a9 [ 712.321999][T26038] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 712.322017][T26038] RBP: 00007f6e1f887090 R08: 0000000000000000 R09: 0000000000000000 [ 712.322033][T26038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.322048][T26038] R13: 0000000000000000 R14: 00007f6e21445fa0 R15: 00007ffc28bf72b8 [ 712.322070][T26038] [ 712.565324][T26034] lo speed is unknown, defaulting to 1000 [ 712.580614][T26030] loop2: detected capacity change from 0 to 8192 [ 712.593900][T26040] netlink: 'syz.6.7305': attribute type 21 has an invalid length. [ 712.601980][T26040] netlink: 164 bytes leftover after parsing attributes in process `syz.6.7305'. [ 712.738354][T26048] loop6: detected capacity change from 0 to 512 [ 712.748648][T26048] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 712.762549][T26048] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.7308: corrupted inode contents [ 712.774935][T26048] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.7308: mark_inode_dirty error [ 712.786538][T26048] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.7308: corrupted inode contents [ 712.798925][T26048] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.7308: mark_inode_dirty error [ 712.811360][T26048] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.7308: mark inode dirty (error -117) [ 712.824609][T26048] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 712.909738][T26054] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7309'. [ 712.918968][T26054] 1·: renamed from 70· (while UP) [ 712.925580][T26054] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 713.038721][T26060] loop4: detected capacity change from 0 to 128 [ 713.045460][T26060] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 713.073864][T26064] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7315'. [ 713.077171][T26060] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 713.124184][T26069] loop1: detected capacity change from 0 to 512 [ 713.132059][T26069] EXT4-fs (loop1): orphan cleanup on readonly fs [ 713.139380][T26069] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7317: bg 0: block 248: padding at end of block bitmap is not set [ 713.154128][T26069] __quota_error: 209 callbacks suppressed [ 713.154142][T26069] Quota error (device loop1): write_blk: dquota write failed [ 713.167490][T26069] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 713.177580][T26069] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7317: Failed to acquire dquot type 1 [ 713.189729][T26069] EXT4-fs (loop1): 1 truncate cleaned up [ 713.207624][T26065] lo speed is unknown, defaulting to 1000 [ 713.213619][T26069] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 713.247083][T26065] netlink: 'syz.6.7311': attribute type 83 has an invalid length. [ 713.248504][T26069] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 713.264003][T26075] loop4: detected capacity change from 0 to 128 [ 713.267696][T26077] Quota error (device loop1): do_check_range: Getting block 1536 out of range 0-5 [ 713.271421][T26075] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 713.291949][T26072] wireguard0: entered promiscuous mode [ 713.292317][T26075] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 713.297580][T26072] wireguard0: entered allmulticast mode [ 713.342163][T26069] lo speed is unknown, defaulting to 1000 [ 713.423494][T26086] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7322'. [ 713.442424][T26086] 1·: renamed from 70· (while UP) [ 713.449332][T26086] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 713.501908][T26090] loop5: detected capacity change from 0 to 1024 [ 713.509588][T26090] EXT4-fs: Ignoring removed i_version option [ 713.517707][T26090] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 713.521630][T26094] loop7: detected capacity change from 0 to 16384 [ 713.570651][T26090] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7324: Invalid block bitmap block 0 in block_group 0 [ 713.608512][T26084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.626531][T26084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.630805][T26090] Quota error (device loop5): write_blk: dquota write failed [ 713.642008][T26090] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 713.652339][T26090] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7324: Failed to acquire dquot type 0 [ 713.653189][T26094] blk_print_req_error: 27 callbacks suppressed [ 713.653208][T26094] I/O error, dev loop7, sector 12288 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 713.682145][T26090] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.7324: Freeing blocks not in datazone - block = 0, count = 4096 [ 713.684620][T26094] I/O error, dev loop7, sector 12544 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 713.716174][T26090] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7324: Invalid inode bitmap blk 0 in block_group 0 [ 713.729193][ T3544] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 713.738306][ T3544] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 713.751948][T26090] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 713.761375][T26084] loop4: detected capacity change from 0 to 8192 [ 713.791922][ T29] audit: type=1326 audit(1753154254.053:26144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26083 comm="syz.4.7321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262c9be9a9 code=0x7ffc0000 [ 713.815924][ T29] audit: type=1326 audit(1753154254.053:26145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26083 comm="syz.4.7321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262c9be9a9 code=0x7ffc0000 [ 713.839637][ T29] audit: type=1326 audit(1753154254.053:26146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26083 comm="syz.4.7321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f262c9be9a9 code=0x7ffc0000 [ 713.859673][T26090] EXT4-fs (loop5): 1 orphan inode deleted [ 713.863277][ T29] audit: type=1326 audit(1753154254.053:26147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26083 comm="syz.4.7321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262c9be9a9 code=0x7ffc0000 [ 713.893173][T26094] I/O error, dev loop7, sector 12288 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 713.902736][T26094] buffer_io_error: 3321 callbacks suppressed [ 713.902752][T26094] Buffer I/O error on dev loop7, logical block 1536, async page read [ 713.992237][T26102] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7327'. [ 714.075366][T26092] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.085141][T26092] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 714.093635][T26092] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 714.098441][T26108] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7331'. [ 714.102222][T26092] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 714.119475][T26092] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 714.127900][T26092] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 714.136312][T26092] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 714.144734][T26092] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 714.153152][T26092] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 714.161561][T26092] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 714.176054][T26092] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.189256][T26092] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.202173][T26092] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.202734][T26108] 0ªX¹¦À: renamed from 61ªX¹¦À [ 714.215426][T26092] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.230190][T26092] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.231006][T26110] loop5: detected capacity change from 0 to 512 [ 714.243511][T26092] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 714.271283][T26110] EXT4-fs: Ignoring removed bh option [ 714.281158][T26108] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 714.344225][T26110] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 714.353560][T26110] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 714.409026][T26112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.438268][T26110] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 714.440755][T26112] loop2: detected capacity change from 0 to 512 [ 714.454199][T26110] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 714.464100][T26112] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 714.504811][T26112] EXT4-fs (loop2): 1 truncate cleaned up [ 714.536088][T26118] loop5: detected capacity change from 0 to 512 [ 714.548075][T26116] wireguard0: entered promiscuous mode [ 714.553655][T26116] wireguard0: entered allmulticast mode [ 714.566472][T26121] loop4: detected capacity change from 0 to 512 [ 714.575390][T26118] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.588795][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 714.612174][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 4: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 714.634234][T26121] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 714.637409][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 714.671867][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 714.697418][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 714.727880][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 4: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 714.765085][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 714.790296][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 714.797195][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 714.832388][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 714.857059][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 714.864209][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 714.901073][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 714.924718][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 714.925317][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 714.968720][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 714.990953][T26121] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 18: comm syz.4.7335: lblock 23 mapped to illegal pblock 18 (length 1) [ 714.996995][T26130] loop6: detected capacity change from 0 to 128 [ 715.005879][T26121] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.7335: path /304/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 715.011823][T26118] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #2: block 18: comm syz.5.7334: lblock 23 mapped to illegal pblock 18 (length 1) [ 715.067063][T26130] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 715.088447][T26118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz.5.7334: path /44/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 715.108850][T26132] wireguard0: entered promiscuous mode [ 715.114389][T26132] wireguard0: entered allmulticast mode [ 715.117082][T26130] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 715.416276][T26137] loop2: detected capacity change from 0 to 512 [ 715.432553][T26138] loop6: detected capacity change from 0 to 1024 [ 715.439620][T26138] EXT4-fs: Ignoring removed i_version option [ 715.446474][T26138] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 715.458697][T26138] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7339: Invalid block bitmap block 0 in block_group 0 [ 715.474058][T26138] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7339: Failed to acquire dquot type 0 [ 715.486930][T26138] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.7339: Freeing blocks not in datazone - block = 0, count = 4096 [ 715.487192][T26137] EXT4-fs (loop2): orphan cleanup on readonly fs [ 715.517315][T26138] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7339: Invalid inode bitmap blk 0 in block_group 0 [ 715.519174][T26137] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7338: bg 0: block 248: padding at end of block bitmap is not set [ 715.544856][ T3549] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:52: Failed to release dquot type 0 [ 715.557023][T26138] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 715.574807][T26137] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7338: Failed to acquire dquot type 1 [ 715.593512][T26138] EXT4-fs (loop6): 1 orphan inode deleted [ 715.608204][T26137] EXT4-fs (loop2): 1 truncate cleaned up [ 715.654177][T26137] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 715.685714][T26150] loop5: detected capacity change from 0 to 512 [ 715.699931][T26137] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 715.727659][T26137] lo speed is unknown, defaulting to 1000 [ 715.747034][T26150] EXT4-fs: Ignoring removed bh option [ 715.756905][T26150] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 715.766055][T26150] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 715.791758][T26150] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 715.804856][T26144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.806944][T26150] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 715.821558][T26144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.950259][T26162] loop2: detected capacity change from 0 to 512 [ 715.957600][T26154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.966098][T26154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.976981][T26144] loop4: detected capacity change from 0 to 8192 [ 716.018419][T26162] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.7349: bad orphan inode 15 [ 716.042441][T26162] ext4_test_bit(bit=14, block=5) = 0 [ 716.075996][T26154] loop6: detected capacity change from 0 to 8192 [ 716.145244][T26168] loop7: detected capacity change from 0 to 16384 [ 716.154194][T26167] loop5: detected capacity change from 0 to 512 [ 716.183297][T26167] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.200627][T26167] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7350: corrupted inode contents [ 716.215297][T26167] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.7350: mark_inode_dirty error [ 716.228504][T26167] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7350: corrupted inode contents [ 716.240895][T26167] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.7350: mark_inode_dirty error [ 716.257514][T26167] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.7350: mark inode dirty (error -117) [ 716.273561][T26167] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 716.316909][T26177] loop1: detected capacity change from 0 to 1024 [ 716.323998][T26177] EXT4-fs: Ignoring removed i_version option [ 716.333131][T26177] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 716.346583][T26177] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.7354: Invalid block bitmap block 0 in block_group 0 [ 716.362099][T26177] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7354: Failed to acquire dquot type 0 [ 716.374110][T26177] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.7354: Freeing blocks not in datazone - block = 0, count = 4096 [ 716.389150][T26177] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.7354: Invalid inode bitmap blk 0 in block_group 0 [ 716.407668][T26177] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 716.429877][ T3536] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:39: Failed to release dquot type 0 [ 716.461881][T26177] EXT4-fs (loop1): 1 orphan inode deleted [ 716.510168][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7357'. [ 716.588533][T26191] loop1: detected capacity change from 0 to 512 [ 716.595494][T26191] EXT4-fs: Ignoring removed bh option [ 716.602329][T26191] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 716.612399][T26191] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 716.644701][T26191] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 716.666813][T26191] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 716.704046][T26198] loop7: detected capacity change from 0 to 16384 [ 716.722716][T26203] loop1: detected capacity change from 0 to 512 [ 716.722716][T26200] loop4: detected capacity change from 0 to 512 [ 716.745757][T26200] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.769253][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 716.769437][T26203] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.798150][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 4: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 716.830560][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 716.852969][T26203] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7363: corrupted inode contents [ 716.877983][T26203] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.7363: mark_inode_dirty error [ 716.908148][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 716.945823][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 716.968170][T26203] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7363: corrupted inode contents [ 716.991524][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 717.019175][T26196] loop6: detected capacity change from 0 to 8192 [ 717.030490][T26203] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.7363: mark_inode_dirty error [ 717.056484][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 717.082335][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 717.082753][T26203] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.7363: mark inode dirty (error -117) [ 717.106631][T26200] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 18: comm syz.4.7361: lblock 23 mapped to illegal pblock 18 (length 1) [ 717.131322][T26200] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.7361: path /306/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 717.153892][T26203] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 717.182175][T26222] loop5: detected capacity change from 0 to 1024 [ 717.190429][T26222] EXT4-fs: Ignoring removed i_version option [ 717.197029][T26222] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 717.212738][T26222] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7369: Invalid block bitmap block 0 in block_group 0 [ 717.244532][T26222] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7369: Failed to acquire dquot type 0 [ 717.263439][T26222] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.7369: Freeing blocks not in datazone - block = 0, count = 4096 [ 717.277491][T26222] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7369: Invalid inode bitmap blk 0 in block_group 0 [ 717.290757][T26222] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 717.301094][ T3544] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 717.302521][T26222] EXT4-fs (loop5): 1 orphan inode deleted [ 717.333481][T26227] wireguard0: entered promiscuous mode [ 717.339119][T26227] wireguard0: entered allmulticast mode [ 717.504831][T26234] loop5: detected capacity change from 0 to 512 [ 717.531923][T26234] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 717.582012][T26230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.595780][T26234] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7372: invalid block [ 717.620694][T26230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.670014][T26239] FAULT_INJECTION: forcing a failure. [ 717.670014][T26239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.683351][T26239] CPU: 0 UID: 0 PID: 26239 Comm: syz.1.7373 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 717.683384][T26239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 717.683399][T26239] Call Trace: [ 717.683418][T26239] [ 717.683426][T26239] __dump_stack+0x1d/0x30 [ 717.683460][T26239] dump_stack_lvl+0xe8/0x140 [ 717.683485][T26239] dump_stack+0x15/0x1b [ 717.683506][T26239] should_fail_ex+0x265/0x280 [ 717.683540][T26239] should_fail+0xb/0x20 [ 717.683598][T26239] should_fail_usercopy+0x1a/0x20 [ 717.683661][T26239] strncpy_from_user+0x25/0x230 [ 717.683736][T26239] ? __kmalloc_cache_noprof+0x189/0x320 [ 717.683771][T26239] __se_sys_memfd_create+0x1ff/0x590 [ 717.683809][T26239] __x64_sys_memfd_create+0x31/0x40 [ 717.683873][T26239] x64_sys_call+0x122f/0x2fb0 [ 717.683897][T26239] do_syscall_64+0xd2/0x200 [ 717.683915][T26239] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 717.683944][T26239] ? clear_bhb_loop+0x40/0x90 [ 717.683971][T26239] ? clear_bhb_loop+0x40/0x90 [ 717.683998][T26239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.684024][T26239] RIP: 0033:0x7f157291e9a9 [ 717.684042][T26239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.684124][T26239] RSP: 002b:00007f1570f44e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 717.684142][T26239] RAX: ffffffffffffffda RBX: 00000000000004de RCX: 00007f157291e9a9 [ 717.684155][T26239] RDX: 00007f1570f44ef0 RSI: 0000000000000000 RDI: 00007f15729a16fc [ 717.684167][T26239] RBP: 0000200000000c40 R08: 00007f1570f44bb7 R09: 00007f1570f44e40 [ 717.684193][T26239] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 717.684210][T26239] R13: 00007f1570f44ef0 R14: 00007f1570f44eb0 R15: 0000200000000380 [ 717.684293][T26239] [ 717.893053][T26234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7372: invalid indirect mapped block 4294967295 (level 1) [ 717.955928][T26241] wireguard0: entered promiscuous mode [ 717.961544][T26241] wireguard0: entered allmulticast mode [ 717.975205][T26234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7372: invalid indirect mapped block 4294967295 (level 1) [ 718.033222][T26244] FAULT_INJECTION: forcing a failure. [ 718.033222][T26244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.046400][T26244] CPU: 1 UID: 0 PID: 26244 Comm: syz.6.7374 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 718.046452][T26244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 718.046476][T26244] Call Trace: [ 718.046484][T26244] [ 718.046493][T26244] __dump_stack+0x1d/0x30 [ 718.046514][T26244] dump_stack_lvl+0xe8/0x140 [ 718.046533][T26244] dump_stack+0x15/0x1b [ 718.046549][T26244] should_fail_ex+0x265/0x280 [ 718.046630][T26244] should_fail+0xb/0x20 [ 718.046656][T26244] should_fail_usercopy+0x1a/0x20 [ 718.046755][T26244] _copy_to_user+0x20/0xa0 [ 718.046848][T26244] simple_read_from_buffer+0xb5/0x130 [ 718.046879][T26244] proc_fail_nth_read+0x100/0x140 [ 718.046988][T26244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.047023][T26244] vfs_read+0x19d/0x6f0 [ 718.047060][T26244] ? __rcu_read_unlock+0x4f/0x70 [ 718.047095][T26244] ? __fget_files+0x184/0x1c0 [ 718.047116][T26244] ? finish_task_switch+0xad/0x2b0 [ 718.047145][T26244] ksys_read+0xda/0x1a0 [ 718.047214][T26244] __x64_sys_read+0x40/0x50 [ 718.047247][T26244] x64_sys_call+0x2d77/0x2fb0 [ 718.047275][T26244] do_syscall_64+0xd2/0x200 [ 718.047294][T26244] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 718.047372][T26244] ? clear_bhb_loop+0x40/0x90 [ 718.047445][T26244] ? clear_bhb_loop+0x40/0x90 [ 718.047475][T26244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.047496][T26244] RIP: 0033:0x7f6e2121d3bc [ 718.047511][T26244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 718.047573][T26244] RSP: 002b:00007f6e1f887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.047597][T26244] RAX: ffffffffffffffda RBX: 00007f6e21445fa0 RCX: 00007f6e2121d3bc [ 718.047612][T26244] RDX: 000000000000000f RSI: 00007f6e1f8870a0 RDI: 0000000000000005 [ 718.047669][T26244] RBP: 00007f6e1f887090 R08: 0000000000000000 R09: 0000000000000000 [ 718.047681][T26244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.047695][T26244] R13: 0000000000000000 R14: 00007f6e21445fa0 R15: 00007ffc28bf72b8 [ 718.047715][T26244] [ 718.109572][T26234] EXT4-fs (loop5): 2 truncates cleaned up [ 718.296338][T26230] loop2: detected capacity change from 0 to 8192 [ 718.306449][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 718.306467][ T29] audit: type=1326 audit(1753154258.573:26411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.449223][ T29] audit: type=1326 audit(1753154258.663:26412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.464855][T26250] loop6: detected capacity change from 0 to 512 [ 718.472926][ T29] audit: type=1326 audit(1753154258.663:26413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.503228][ T29] audit: type=1326 audit(1753154258.663:26414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.526936][ T29] audit: type=1326 audit(1753154258.673:26415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.529052][T26250] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.7377: bad orphan inode 15 [ 718.550601][ T29] audit: type=1326 audit(1753154258.673:26416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.550641][ T29] audit: type=1326 audit(1753154258.673:26417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.608850][ T29] audit: type=1326 audit(1753154258.673:26418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.632552][ T29] audit: type=1326 audit(1753154258.713:26419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.714744][T26250] ext4_test_bit(bit=14, block=5) = 0 [ 718.804214][T26250] loop7: detected capacity change from 0 to 16384 [ 718.831119][ T29] audit: type=1326 audit(1753154258.803:26420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26229 comm="syz.2.7371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 718.956919][T26261] wireguard0: entered promiscuous mode [ 718.962572][T26261] wireguard0: entered allmulticast mode [ 719.212797][T26270] loop6: detected capacity change from 0 to 512 [ 719.221266][T26272] loop4: detected capacity change from 0 to 512 [ 719.248194][T26270] EXT4-fs (loop6): orphan cleanup on readonly fs [ 719.268418][T26272] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.280034][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 719.284209][T26270] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7384: bg 0: block 248: padding at end of block bitmap is not set [ 719.320148][T26274] loop2: detected capacity change from 0 to 1164 [ 719.330178][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 4: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 719.347421][T26274] iso9660: Unknown parameter '' [ 719.364864][T26270] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7384: Failed to acquire dquot type 1 [ 719.365782][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 719.400217][T26270] EXT4-fs (loop6): 1 truncate cleaned up [ 719.406821][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 719.446823][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 719.489568][T26270] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 719.500848][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 719.531783][T26270] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 719.574632][T26270] lo speed is unknown, defaulting to 1000 [ 719.581656][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 719.647099][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 719.681520][T26274] nfs4: Bad value for 'source' [ 719.693668][T26274] Cannot find add_set index 0 as target [ 719.708645][T26272] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 18: comm syz.4.7386: lblock 23 mapped to illegal pblock 18 (length 1) [ 719.753908][T26272] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 19: comm syz.4.7386: path /313/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 719.806227][T26286] netlink: 'syz.2.7388': attribute type 27 has an invalid length. [ 719.845300][T26286] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.852651][T26286] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.896160][T26286] 0ªX¹¦À: left allmulticast mode [ 719.922858][T26289] loop2: detected capacity change from 0 to 164 [ 719.982830][T26289] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 720.016977][T26096] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 720.034985][T26286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.063903][T26286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.088614][T26286] 1·: left allmulticast mode [ 720.093322][T26286] hsr_slave_0: left allmulticast mode [ 720.098987][T26286] hsr_slave_1: left allmulticast mode [ 720.144489][T26286] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.153597][T26286] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.162659][T26286] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.171762][T26286] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.361020][T26300] FAULT_INJECTION: forcing a failure. [ 720.361020][T26300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.374335][T26300] CPU: 1 UID: 0 PID: 26300 Comm: syz.6.7393 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 720.374371][T26300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 720.374410][T26300] Call Trace: [ 720.374418][T26300] [ 720.374428][T26300] __dump_stack+0x1d/0x30 [ 720.374500][T26300] dump_stack_lvl+0xe8/0x140 [ 720.374524][T26300] dump_stack+0x15/0x1b [ 720.374545][T26300] should_fail_ex+0x265/0x280 [ 720.374576][T26300] should_fail+0xb/0x20 [ 720.374681][T26300] should_fail_usercopy+0x1a/0x20 [ 720.374818][T26300] _copy_from_user+0x1c/0xb0 [ 720.374843][T26300] ___sys_sendmsg+0xc1/0x1d0 [ 720.374900][T26300] __x64_sys_sendmsg+0xd4/0x160 [ 720.375008][T26300] x64_sys_call+0x2999/0x2fb0 [ 720.375035][T26300] do_syscall_64+0xd2/0x200 [ 720.375058][T26300] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 720.375087][T26300] ? clear_bhb_loop+0x40/0x90 [ 720.375112][T26300] ? clear_bhb_loop+0x40/0x90 [ 720.375189][T26300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.375216][T26300] RIP: 0033:0x7f6e2121e9a9 [ 720.375235][T26300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.375257][T26300] RSP: 002b:00007f6e1f887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.375276][T26300] RAX: ffffffffffffffda RBX: 00007f6e21445fa0 RCX: 00007f6e2121e9a9 [ 720.375288][T26300] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 720.375337][T26300] RBP: 00007f6e1f887090 R08: 0000000000000000 R09: 0000000000000000 [ 720.375352][T26300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.375363][T26300] R13: 0000000000000000 R14: 00007f6e21445fa0 R15: 00007ffc28bf72b8 [ 720.375382][T26300] [ 720.436920][T26303] loop7: detected capacity change from 0 to 16384 [ 720.548483][T26302] blk_print_req_error: 15 callbacks suppressed [ 720.548507][T26302] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 720.652761][T26302] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0 [ 720.666355][T26306] wireguard0: entered promiscuous mode [ 720.671999][T26306] wireguard0: entered allmulticast mode [ 720.678829][T26302] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 10 prio class 0 [ 720.688935][T26302] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 720.698450][T26302] buffer_io_error: 2392 callbacks suppressed [ 720.698466][T26302] Buffer I/O error on dev loop7, logical block 256, async page read [ 720.733273][T26301] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 720.743159][T26301] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 720.751698][T26301] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 720.760197][T26301] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 720.768586][T26301] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 720.777106][T26301] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 720.785473][T26301] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 720.793904][T26301] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 720.802362][T26301] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 720.810785][T26301] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 720.823623][T26301] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 721.050195][T26321] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7400'. [ 721.078196][T26321] 0·: renamed from hsr0 (while UP) [ 721.085881][T26321] 0·: entered allmulticast mode [ 721.090906][T26321] hsr_slave_0: entered allmulticast mode [ 721.096610][T26321] hsr_slave_1: entered allmulticast mode [ 721.109316][T26322] loop1: detected capacity change from 0 to 512 [ 721.112774][T26321] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 721.148879][T26322] EXT4-fs mount: 110 callbacks suppressed [ 721.148897][T26322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.174728][T26322] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.193404][T26329] loop6: detected capacity change from 0 to 512 [ 721.203223][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 721.226310][T26329] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 721.227114][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 4: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 721.234697][T26329] EXT4-fs (loop6): orphan cleanup on readonly fs [ 721.260524][T26332] loop4: detected capacity change from 0 to 512 [ 721.263642][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 721.289064][T26329] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 721.305142][T25223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.311746][T26329] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 721.321306][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 721.343168][T26329] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7402: bg 0: block 40: padding at end of block bitmap is not set [ 721.357724][T26329] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 721.361011][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 721.387595][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 721.390060][T26332] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 721.420035][T26329] EXT4-fs (loop6): 1 truncate cleaned up [ 721.428027][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 721.450994][T26332] EXT4-fs (loop4): orphan cleanup on readonly fs [ 721.457941][T26329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 721.473229][T26332] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 721.488432][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 721.511706][T26322] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 18: comm syz.1.7401: lblock 23 mapped to illegal pblock 18 (length 1) [ 721.527588][T26332] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 721.530680][T26322] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.7401: path /284/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 721.535170][T26329] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 721.557270][T26332] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7403: bg 0: block 40: padding at end of block bitmap is not set [ 721.592731][T26332] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 721.602161][T26332] EXT4-fs (loop4): 1 truncate cleaned up [ 721.609644][T26332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 721.631413][T26348] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7409'. [ 721.641372][T26348] 0ªX¹¦À: renamed from caif0 [ 721.649019][T26348] 0ªX¹¦À: entered allmulticast mode [ 721.654311][T26348] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 721.686790][T26332] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 721.794010][T26357] x_tables: duplicate underflow at hook 2 [ 721.996149][T21538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.022536][T26364] loop1: detected capacity change from 0 to 512 [ 722.033452][T26364] EXT4-fs (loop1): orphan cleanup on readonly fs [ 722.040866][T26364] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7415: bg 0: block 248: padding at end of block bitmap is not set [ 722.070610][T26369] loop2: detected capacity change from 0 to 128 [ 722.083774][T26364] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7415: Failed to acquire dquot type 1 [ 722.152807][T21490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.171855][T23442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.187996][T26364] EXT4-fs (loop1): 1 truncate cleaned up [ 723.006325][T26364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.049022][T26376] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7419'. [ 723.062584][T26374] loop4: detected capacity change from 0 to 1024 [ 723.074216][T26364] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 723.089572][T26376] 1ªX¹¦À: renamed from 60ªX¹¦À [ 723.096078][T26374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.113321][T26376] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 723.132162][T26364] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 723.142383][T26374] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.7418: Allocating blocks 385-513 which overlap fs metadata [ 723.168080][T26374] EXT4-fs (loop4): pa ffff888106a498c0: logic 16, phys. 129, len 24 [ 723.172422][T26364] lo speed is unknown, defaulting to 1000 [ 723.176127][T26374] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 723.365235][T21538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.383353][T26391] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7422'. [ 723.395258][T26391] 0ªX¹¦À: renamed from 61ªX¹¦À [ 723.428488][T26391] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 723.452322][T21490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.484494][T26393] loop6: detected capacity change from 0 to 512 [ 723.509986][T26393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 723.530483][T26393] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 723.544130][T26399] FAULT_INJECTION: forcing a failure. [ 723.544130][T26399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.557333][T26399] CPU: 0 UID: 0 PID: 26399 Comm: syz.4.7424 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 723.557360][T26399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.557440][T26399] Call Trace: [ 723.557448][T26399] [ 723.557458][T26399] __dump_stack+0x1d/0x30 [ 723.557483][T26399] dump_stack_lvl+0xe8/0x140 [ 723.557506][T26399] dump_stack+0x15/0x1b [ 723.557534][T26399] should_fail_ex+0x265/0x280 [ 723.557585][T26399] should_fail+0xb/0x20 [ 723.557619][T26399] should_fail_usercopy+0x1a/0x20 [ 723.557653][T26399] _copy_to_user+0x20/0xa0 [ 723.557674][T26399] simple_read_from_buffer+0xb5/0x130 [ 723.557709][T26399] proc_fail_nth_read+0x100/0x140 [ 723.557828][T26399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.557882][T26399] vfs_read+0x19d/0x6f0 [ 723.557919][T26399] ? __rcu_read_unlock+0x4f/0x70 [ 723.557997][T26399] ? __fget_files+0x184/0x1c0 [ 723.558020][T26399] ksys_read+0xda/0x1a0 [ 723.558117][T26399] __x64_sys_read+0x40/0x50 [ 723.558154][T26399] x64_sys_call+0x2d77/0x2fb0 [ 723.558179][T26399] do_syscall_64+0xd2/0x200 [ 723.558202][T26399] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 723.558307][T26399] ? clear_bhb_loop+0x40/0x90 [ 723.558335][T26399] ? clear_bhb_loop+0x40/0x90 [ 723.558363][T26399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.558387][T26399] RIP: 0033:0x7f262c9bd3bc [ 723.558403][T26399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 723.558434][T26399] RSP: 002b:00007f262b027030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.558454][T26399] RAX: ffffffffffffffda RBX: 00007f262cbe5fa0 RCX: 00007f262c9bd3bc [ 723.558503][T26399] RDX: 000000000000000f RSI: 00007f262b0270a0 RDI: 0000000000000007 [ 723.558517][T26399] RBP: 00007f262b027090 R08: 0000000000000000 R09: 0000000000000000 [ 723.558529][T26399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.558542][T26399] R13: 0000000000000000 R14: 00007f262cbe5fa0 R15: 00007ffc4133b248 [ 723.558560][T26399] [ 723.559545][T26393] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.7425: corrupted inode contents [ 723.787943][T26393] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.7425: mark_inode_dirty error [ 723.808371][T26393] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.7425: corrupted inode contents [ 723.840040][T26393] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.7425: mark_inode_dirty error [ 723.854484][T26393] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.7425: mark inode dirty (error -117) [ 723.868793][T26393] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 723.895555][T23442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.932457][ T29] kauditd_printk_skb: 861 callbacks suppressed [ 723.932476][ T29] audit: type=1400 audit(1753154264.203:27274): avc: denied { create } for pid=26420 comm="syz.1.7434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 724.013914][T26429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7435'. [ 724.023661][ T29] audit: type=1400 audit(1753154264.293:27275): avc: denied { firmware_load } for pid=26423 comm="syz.2.7435" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 724.093171][T26434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7439'. [ 724.155260][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7439'. [ 724.183276][T26434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.190816][T26434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.191404][T26439] netlink: 9004 bytes leftover after parsing attributes in process `syz.5.7441'. [ 724.207981][T26434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.215518][T26434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.332382][ T29] audit: type=1326 audit(1753154264.603:27276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.353063][T26442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.356381][ T29] audit: type=1326 audit(1753154264.603:27277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.388483][ T29] audit: type=1326 audit(1753154264.603:27278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.394631][T26447] loop1: detected capacity change from 0 to 512 [ 724.412147][ T29] audit: type=1326 audit(1753154264.603:27279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.412197][ T29] audit: type=1326 audit(1753154264.603:27280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.412230][ T29] audit: type=1326 audit(1753154264.603:27281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.412263][ T29] audit: type=1326 audit(1753154264.603:27282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.472130][T26447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.489518][ T29] audit: type=1326 audit(1753154264.603:27283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26441 comm="syz.5.7442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8540fee9a9 code=0x7ffc0000 [ 724.549853][T26447] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 724.571153][T26447] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7444: corrupted inode contents [ 724.583605][T26447] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.7444: mark_inode_dirty error [ 724.597449][T26447] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7444: corrupted inode contents [ 724.610769][T26447] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.7444: mark_inode_dirty error [ 724.623424][T26447] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.7444: mark inode dirty (error -117) [ 724.637824][T26447] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 724.661785][T21538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.751819][T26465] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7452'. [ 724.761035][T26465] 0·: renamed from 71· (while UP) [ 724.775786][T26465] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 724.844868][T26472] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7455'. [ 724.845619][T26476] 0ªX¹¦À: renamed from 61ªX¹¦À [ 724.860922][T26475] loop7: detected capacity change from 0 to 16384 [ 724.867814][T26476] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 724.887420][T26472] 0·: renamed from 71· (while UP) [ 724.896184][T26472] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 724.919459][T26475] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 724.930506][T26475] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 724.946863][T26475] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 724.956549][T26478] wireguard0: entered promiscuous mode [ 724.962169][T26478] wireguard0: entered allmulticast mode [ 724.973675][T26473] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 724.986951][T26457] loop5: detected capacity change from 0 to 8192 [ 725.023001][T26485] loop6: detected capacity change from 0 to 512 [ 725.033354][T26485] EXT4-fs (loop6): orphan cleanup on readonly fs [ 725.041784][T26485] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7460: bg 0: block 248: padding at end of block bitmap is not set [ 725.056569][T26485] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7460: Failed to acquire dquot type 1 [ 725.070778][T26485] EXT4-fs (loop6): 1 truncate cleaned up [ 725.077197][T26485] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 725.092462][T26485] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 725.108382][T26485] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 725.130492][T26485] lo speed is unknown, defaulting to 1000 [ 725.178957][T23442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.284827][T26487] loop4: detected capacity change from 0 to 8192 [ 725.311463][T26514] loop2: detected capacity change from 0 to 512 [ 725.319426][T26514] EXT4-fs (loop2): orphan cleanup on readonly fs [ 725.326493][T26514] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7473: bg 0: block 248: padding at end of block bitmap is not set [ 725.341553][T26514] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7473: Failed to acquire dquot type 1 [ 725.353290][T26518] loop6: detected capacity change from 0 to 512 [ 725.353379][T26514] EXT4-fs (loop2): 1 truncate cleaned up [ 725.366397][T26514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 725.381013][T26514] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 725.390746][T26518] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 725.399156][T26518] EXT4-fs (loop6): orphan cleanup on readonly fs [ 725.405832][T26518] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 725.420948][T26518] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 725.429356][T26514] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 725.434858][T26518] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7472: bg 0: block 40: padding at end of block bitmap is not set [ 725.456246][T26514] lo speed is unknown, defaulting to 1000 [ 725.476804][T26518] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 725.493804][T26518] EXT4-fs (loop6): 1 truncate cleaned up [ 725.500143][T26518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 725.528170][T26518] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 725.540596][T23091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.575892][T26534] loop2: detected capacity change from 0 to 512 [ 725.585067][T26534] EXT4-fs (loop2): orphan cleanup on readonly fs [ 725.592555][T26534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7477: bg 0: block 248: padding at end of block bitmap is not set [ 725.609562][T26534] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7477: Failed to acquire dquot type 1 [ 725.623229][T26534] EXT4-fs (loop2): 1 truncate cleaned up [ 725.638052][T26534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 725.646405][T26542] batman_adv: batadv0: Adding interface: gretap1 [ 725.657887][T26542] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.684551][T26542] batman_adv: batadv0: Interface activated: gretap1 [ 725.692064][T26534] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 725.701756][T26544] loop1: detected capacity change from 0 to 128 [ 725.708984][T26544] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 725.724482][T26544] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 725.725871][T26546] loop5: detected capacity change from 0 to 128 [ 725.740588][T26546] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 725.741121][T26534] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 725.766482][T26546] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 725.801564][T26534] lo speed is unknown, defaulting to 1000 [ 725.821587][T26554] 1ªX¹¦À: renamed from 60ªX¹¦À [ 725.831998][T26554] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 725.882803][T23091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.898811][T26556] loop1: detected capacity change from 0 to 128 [ 725.907758][T26556] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 725.927809][T26556] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 725.953352][T26561] loop4: detected capacity change from 0 to 512 [ 725.977122][T26561] EXT4-fs (loop4): orphan cleanup on readonly fs [ 725.984345][T26561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7488: bg 0: block 248: padding at end of block bitmap is not set [ 726.000347][T26561] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.7488: Failed to acquire dquot type 1 [ 726.018233][T26561] EXT4-fs (loop4): 1 truncate cleaned up [ 726.045467][T26561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 726.088774][T26561] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 726.118426][T26561] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 726.142246][T26561] lo speed is unknown, defaulting to 1000 [ 726.150895][ T2959] Process accounting resumed [ 726.184783][T21490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.230678][T23442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.278289][T26582] wireguard0: entered promiscuous mode [ 726.283903][T26582] wireguard0: entered allmulticast mode [ 726.291373][T26585] __nla_validate_parse: 2 callbacks suppressed [ 726.291392][T26585] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7497'. [ 726.311510][T26585] 1·: renamed from 70· (while UP) [ 726.318775][T26585] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 726.345435][T26590] wireguard0: entered promiscuous mode [ 726.351050][T26590] wireguard0: entered allmulticast mode [ 726.538134][T26608] loop5: detected capacity change from 0 to 128 [ 726.553105][T26608] syz.5.7506: attempt to access beyond end of device [ 726.553105][T26608] loop5: rw=2051, sector=128, nr_sectors = 913 limit=128 [ 726.559309][T26593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.569771][T26608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33560 sclass=netlink_route_socket pid=26608 comm=syz.5.7506 [ 726.594305][T26593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.649919][T26593] loop4: detected capacity change from 0 to 8192 [ 726.845255][T26611] sit0: entered allmulticast mode [ 726.877362][T26622] loop5: detected capacity change from 0 to 512 [ 726.889721][T26622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.903170][T26622] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 726.920699][T26622] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7510: corrupted inode contents [ 726.933586][T26622] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.7510: mark_inode_dirty error [ 726.945497][T26622] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7510: corrupted inode contents [ 726.957811][T26622] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.7510: mark_inode_dirty error [ 726.970118][T26622] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.7510: mark inode dirty (error -117) [ 726.983099][T26622] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 727.005572][T25223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.052729][T26634] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7515'. [ 727.066836][T26634] 0ªX¹¦À: renamed from 61ªX¹¦À [ 727.083542][T26634] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 727.143894][T26641] loop1: detected capacity change from 0 to 512 [ 727.168886][T26641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.201359][T26641] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 727.230936][T26641] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7518: corrupted inode contents [ 727.248063][T26641] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.7518: mark_inode_dirty error [ 727.260463][T26641] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.7518: corrupted inode contents [ 727.276092][T26641] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.7518: mark_inode_dirty error [ 727.296756][T26641] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.7518: mark inode dirty (error -117) [ 727.316781][T26641] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 727.356521][T21538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.411666][T26652] loop1: detected capacity change from 0 to 512 [ 727.443341][T26652] EXT4-fs (loop1): orphan cleanup on readonly fs [ 727.463297][T26652] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7521: bg 0: block 248: padding at end of block bitmap is not set [ 727.489918][T26652] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7521: Failed to acquire dquot type 1 [ 727.514796][T26652] EXT4-fs (loop1): 1 truncate cleaned up [ 727.531575][T26652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 727.562174][T26652] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 727.589431][T26653] lo speed is unknown, defaulting to 1000 [ 727.619934][T26652] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 727.649221][T26658] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7522'. [ 727.662573][T26660] loop2: detected capacity change from 0 to 512 [ 727.671987][T26658] 1·: renamed from 70· (while UP) [ 727.684791][T26658] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 727.709974][T26653] netlink: 'syz.4.7520': attribute type 83 has an invalid length. [ 727.711388][T26652] lo speed is unknown, defaulting to 1000 [ 727.727281][T26664] loop5: detected capacity change from 0 to 512 [ 727.736405][T26660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.753691][T26660] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 727.769999][T26660] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.7523: corrupted inode contents [ 727.785202][T26664] EXT4-fs (loop5): orphan cleanup on readonly fs [ 727.799521][T26664] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7524: bg 0: block 248: padding at end of block bitmap is not set [ 727.808991][T26660] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.7523: mark_inode_dirty error [ 727.827780][T26660] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.7523: corrupted inode contents [ 727.840524][T26664] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7524: Failed to acquire dquot type 1 [ 727.853514][T26660] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.7523: mark_inode_dirty error [ 727.854286][T21538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.868455][T26664] EXT4-fs (loop5): 1 truncate cleaned up [ 727.875887][T26660] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.7523: mark inode dirty (error -117) [ 727.881653][T26664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 727.913693][T26660] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 727.931323][T26664] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 727.956205][T26676] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7528'. [ 727.967348][T26676] 1ªX¹¦À: renamed from 60ªX¹¦À [ 727.973650][T26664] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 727.984721][T23091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.994092][T26676] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 728.025803][T26664] lo speed is unknown, defaulting to 1000 [ 728.039803][T26684] FAULT_INJECTION: forcing a failure. [ 728.039803][T26684] name failslab, interval 1, probability 0, space 0, times 0 [ 728.052669][T26684] CPU: 0 UID: 0 PID: 26684 Comm: syz.6.7531 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 728.052781][T26684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 728.052794][T26684] Call Trace: [ 728.052800][T26684] [ 728.052807][T26684] __dump_stack+0x1d/0x30 [ 728.052828][T26684] dump_stack_lvl+0xe8/0x140 [ 728.052850][T26684] dump_stack+0x15/0x1b [ 728.052871][T26684] should_fail_ex+0x265/0x280 [ 728.052982][T26684] should_failslab+0x8c/0xb0 [ 728.053004][T26684] __kvmalloc_node_noprof+0x123/0x4e0 [ 728.053094][T26684] ? file_tty_write+0x1a8/0x670 [ 728.053130][T26684] file_tty_write+0x1a8/0x670 [ 728.053183][T26684] ? __pfx_tty_write+0x10/0x10 [ 728.053211][T26684] tty_write+0x25/0x30 [ 728.053235][T26684] vfs_write+0x49d/0x8e0 [ 728.053293][T26684] ksys_write+0xda/0x1a0 [ 728.053329][T26684] __x64_sys_write+0x40/0x50 [ 728.053446][T26684] x64_sys_call+0x2cdd/0x2fb0 [ 728.053472][T26684] do_syscall_64+0xd2/0x200 [ 728.053496][T26684] ? clear_bhb_loop+0x40/0x90 [ 728.053517][T26684] ? clear_bhb_loop+0x40/0x90 [ 728.053538][T26684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.053574][T26684] RIP: 0033:0x7f6e2121e9a9 [ 728.053591][T26684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 728.053614][T26684] RSP: 002b:00007f6e1f887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 728.053649][T26684] RAX: ffffffffffffffda RBX: 00007f6e21445fa0 RCX: 00007f6e2121e9a9 [ 728.053664][T26684] RDX: 00000000fffffedf RSI: 0000200000000000 RDI: 0000000000000008 [ 728.053687][T26684] RBP: 00007f6e1f887090 R08: 0000000000000000 R09: 0000000000000000 [ 728.053703][T26684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.053718][T26684] R13: 0000000000000000 R14: 00007f6e21445fa0 R15: 00007ffc28bf72b8 [ 728.053740][T26684] [ 728.248515][T26682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.263473][T26682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.278946][T25223] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.352805][T26682] loop2: detected capacity change from 0 to 8192 [ 728.509862][T26707] loop6: detected capacity change from 0 to 512 [ 728.537727][T26707] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 728.545812][T26707] EXT4-fs (loop6): orphan cleanup on readonly fs [ 728.554577][T26707] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 728.587088][T26707] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 728.595284][T26707] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7537: bg 0: block 40: padding at end of block bitmap is not set [ 728.622430][T26707] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 728.633783][T26707] EXT4-fs (loop6): 1 truncate cleaned up [ 728.640082][T26707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.657078][T26707] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 728.710348][T26717] loop1: detected capacity change from 0 to 512 [ 728.716928][T26705] loop5: detected capacity change from 0 to 8192 [ 728.730467][T26717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.743556][T26717] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.760513][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 728.781562][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 4: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 728.802148][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 728.827376][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 728.859778][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 728.880764][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 728.902215][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 728.925298][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 728.946586][T26717] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 18: comm syz.1.7541: lblock 23 mapped to illegal pblock 18 (length 1) [ 728.963413][T26727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7544'. [ 728.963800][T26717] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz.1.7541: path /320/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 729.049676][T26733] loop2: detected capacity change from 0 to 512 [ 729.069776][T26733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.093683][T26733] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.110051][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 729.132831][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 4: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1 [ 729.154948][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 729.195077][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 729.274253][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 729.276574][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 729.276593][ T29] audit: type=1326 audit(1753154269.543:27498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="syz.2.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.324523][ T29] audit: type=1326 audit(1753154269.543:27499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="syz.2.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.348265][ T29] audit: type=1326 audit(1753154269.543:27500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="syz.2.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.356020][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 729.371930][ T29] audit: type=1326 audit(1753154269.543:27501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.371970][ T29] audit: type=1326 audit(1753154269.543:27502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.422026][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 729.438419][ T29] audit: type=1326 audit(1753154269.543:27503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.438456][ T29] audit: type=1326 audit(1753154269.543:27504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.438498][ T29] audit: type=1326 audit(1753154269.543:27505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.438526][ T29] audit: type=1326 audit(1753154269.543:27506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.552328][ T29] audit: type=1326 audit(1753154269.543:27507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26732 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff48bf8e9a9 code=0x7ffc0000 [ 729.597443][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 729.620066][T26733] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 18: comm syz.2.7547: lblock 23 mapped to illegal pblock 18 (length 1) [ 729.653971][T21538] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.665699][T26751] loop5: detected capacity change from 0 to 128 [ 729.672686][T26751] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 729.675723][T26733] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.7547: path /215/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 729.685029][T23442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.714396][T26751] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 729.724960][T21538] ================================================================== [ 729.733210][T21538] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 729.740990][T21538] [ 729.743332][T21538] write to 0xffff888237c25e68 of 1 bytes by task 26746 on cpu 0: [ 729.751075][T21538] folios_put_refs+0x285/0x2d0 [ 729.755886][T21538] folio_batch_move_lru+0x1fd/0x230 [ 729.761148][T21538] folio_add_lru+0x14a/0x1f0 [ 729.765784][T21538] migrate_pages_batch+0x10d2/0x17d0 [ 729.771120][T21538] migrate_pages+0xf5f/0x1770 [ 729.775829][T21538] __se_sys_mbind+0x975/0xac0 [ 729.780540][T21538] __x64_sys_mbind+0x78/0x90 [ 729.785170][T21538] x64_sys_call+0x14af/0x2fb0 [ 729.789875][T21538] do_syscall_64+0xd2/0x200 [ 729.794403][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.800338][T21538] [ 729.802886][T21538] read to 0xffff888237c25e68 of 1 bytes by task 21538 on cpu 1: [ 729.810546][T21538] __lru_add_drain_all+0x12b/0x3f0 [ 729.815709][T21538] lru_add_drain_all+0x10/0x20 [ 729.820511][T21538] invalidate_bdev+0x47/0x70 [ 729.825129][T21538] ext4_put_super+0x624/0x7d0 [ 729.829856][T21538] generic_shutdown_super+0xe6/0x210 [ 729.835174][T21538] kill_block_super+0x2a/0x70 [ 729.839894][T21538] ext4_kill_sb+0x42/0x80 [ 729.844258][T21538] deactivate_locked_super+0x75/0x1c0 [ 729.849665][T21538] deactivate_super+0x97/0xa0 [ 729.854466][T21538] cleanup_mnt+0x269/0x2e0 [ 729.858910][T21538] __cleanup_mnt+0x19/0x20 [ 729.863361][T21538] task_work_run+0x131/0x1a0 [ 729.867990][T21538] exit_to_user_mode_loop+0xe4/0x100 [ 729.873397][T21538] do_syscall_64+0x1d6/0x200 [ 729.878016][T21538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.883937][T21538] [ 729.886278][T21538] value changed: 0x01 -> 0x00 [ 729.890969][T21538] [ 729.893310][T21538] Reported by Kernel Concurrency Sanitizer on: [ 729.899498][T21538] CPU: 1 UID: 0 PID: 21538 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 729.910462][T21538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.920556][T21538] ================================================================== [ 729.969988][T23091] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.167260][T26755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.175898][T26755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.211631][T26755] loop1: detected capacity change from 0 to 8192