last executing test programs: 47.685152284s ago: executing program 3 (id=397): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x6, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) 47.576078225s ago: executing program 3 (id=399): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x798, &(0x7f0000000800)="$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") chdir(&(0x7f0000000200)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/46, 0x2e) 47.386987138s ago: executing program 3 (id=405): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000540)="$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") r1 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) ftruncate(r1, 0x50000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0100000004000000030000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000100000000000000000000028ef1ba9d45fe992e538128e232c385caacf9d8b6da4e3366b278656a4dea46f1739509fa3a5d0d44b6e796f69a5fcdf3b61958873a6b5b12b05886dc632fde40558de17646bdd4b912a863d9bf8535c6c230a7596743cba5edb68f2280561bba8d3bd4c3903340598ae160056f1c3d4fbf5050aa0b6e3dedd20c2cc53a3450b06735fe825fa39e1f7452d0c26a1e9fee30b5d529bf201e1555bcd68b49693c405e710177bdfd94cb72fbfdfbc040b017a174dd3fc2d480700000065d2a50b4f4a35e60823733c7bc4000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) 47.156846842s ago: executing program 3 (id=406): socket$inet6(0xa, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000600)=""/92, 0x5c}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)=""/15, 0xf}, {&(0x7f00000007c0)}], 0x5, &(0x7f0000000ac0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x7f}, &(0x7f0000000900)=0xfffffffffffffffb, &(0x7f0000000940)=0x5, 0x1, 0xffffffffffffffff, 0xfff, 0x0, 0x27, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x5}, {&(0x7f0000000980)=""/122, 0x7a}, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/111, 0x6f}], 0x1, 0x1, 0x4d72}}], 0xb8, 0x8000}, 0x40051) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ff00"/28], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00100200000000e61b0012800b00010067726574617000000c0002800800070000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44880}, 0x20000810) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x3d, 0xfffffffb, 0x5, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0x10001, 0x5}}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r5, 0x10, 0x3, 0x7c27) r6 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000003000000f70000000000001204000000060000"], &(0x7f0000000240)=""/179, 0x33, 0xb3, 0x0, 0x8, 0x10000, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020a000044000000080000004d7a417b86161859c7346b47924de86dc1b6b6ea2234d7987d08ae1f1a00599484de6b8a09ad1658d9875ffb026449280e729a02c307", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='btrfs_writepage_end_io_hook\x00', r3, 0x0, 0x10000}, 0x18) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0x2, 0x6}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r9, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r9, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 46.748063218s ago: executing program 3 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f00000ad000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00000ae000/0x1000)=nil) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) open(&(0x7f0000000080)='./file0\x00', 0x40c2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000280)={r5, 0x3, r4, 0x9e3}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1037000, 0x1000}, 0x20) 44.71958743s ago: executing program 3 (id=427): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) (fail_nth: 2) 44.71906702s ago: executing program 32 (id=427): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x488) (fail_nth: 2) 6.541301249s ago: executing program 4 (id=836): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) 4.53498481s ago: executing program 4 (id=851): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) getpgid(r3) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.781496132s ago: executing program 5 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) 3.650444254s ago: executing program 4 (id=863): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) flistxattr(r3, 0x0, 0x0) 3.586615605s ago: executing program 1 (id=864): flock(0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) 3.585510145s ago: executing program 4 (id=865): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000540)="$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") lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) 3.393683018s ago: executing program 1 (id=866): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r2, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180000030004000000000000000000000000000004000000"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000140)='./file2\x00', 0x80000002328) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) socket$inet6(0xa, 0x3, 0x6) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x803, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x5, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x7, 0x2, 0x0, 0x7}, {0x0, 0x35, 0x80, 0x8}, {0x81, 0x2, 0x3, 0xad04}, {0x7, 0x0, 0x7, 0x7}]}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.805431097s ago: executing program 4 (id=869): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close_range(r7, r6, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) unshare(0x64000600) 2.795029807s ago: executing program 2 (id=870): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x798, &(0x7f0000000800)="$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") chdir(&(0x7f0000000200)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001200)=""/46, 0x2e) 2.413447133s ago: executing program 1 (id=874): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r0, 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', 0x0, r0) 2.347920314s ago: executing program 1 (id=876): flock(0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) 1.276506941s ago: executing program 1 (id=877): socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = gettid() syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.265608701s ago: executing program 2 (id=878): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000005000000e30000000000000004000000000b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18c41000004000d574fb711e948df93ff22a39c67675700018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000095000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x2a, 0x2, 0x0) socket(0x0, 0x3, 0x1) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@gettfilter={0x54, 0x2e, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xd, 0x90220d2abc74039d}, {0x8, 0xffe0}, {0x1, 0xfffa}}, [{0x8, 0xb, 0x8000}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffff4}, {0x8, 0xb, 0x7f}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0xa}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[], 0x18}], 0x1}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r4, 0x11, 0x6, @remote}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffe0}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 913.961166ms ago: executing program 5 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000540)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) 795.870928ms ago: executing program 5 (id=882): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 783.706318ms ago: executing program 2 (id=883): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000090001007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x5c, "631abb8eadf59cfaacbea36f13b30d543f04403d0b9872abc97037b8520fe17c64e1fdf59b2e8f9f643e61f1aaf70a3eef97fced9e74d5d86e36ad3088a4cc1755b7b231914982e573651a88b341b6da4738c21ac8ae83936a2f90a6"}, &(0x7f0000000180)=0x64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000080000000000000001000000183900000500000000000000000000009500000000000000e8db7ce5b1cee78993ee8bf1237ab3749e9dcb6550a1a7d79fb705df26ec8e4116736368f06e"], &(0x7f0000000300)='GPL\x00', 0x1, 0xa2, &(0x7f00000004c0)=""/162, 0x41100, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x8, 0x5, 0x27a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r1], &(0x7f00000009c0)=[{0x4, 0x1, 0x7, 0x1}], 0x10, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 754.764809ms ago: executing program 5 (id=885): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwrite64(0xffffffffffffffff, &(0x7f0000000080)='3', 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, r2, 0x4483fb19ecd4d5f, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x40004) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000001800), &(0x7f0000001840)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 481.494273ms ago: executing program 4 (id=892): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xb4e80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1], &(0x7f0000000c00)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b500f8ffff9000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'dummy0\x00'}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001400000004"], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x43}, 0x81}], 0x2c) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) r9 = memfd_create(&(0x7f0000000080), 0x0) splice(r7, 0x0, r9, 0x0, 0x408cd, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000180)=0x7) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r11, 0x0, 0x5, &(0x7f0000000240)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x7e, 0x4f04}, 0x3c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000340)=0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 389.189864ms ago: executing program 1 (id=893): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r2, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180000030004000000000000000000000000000004000000"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x80000002328) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) socket$inet6(0xa, 0x3, 0x6) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x803, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r6, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r6, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x5, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x7, 0x2, 0x0, 0x7}, {0x0, 0x35, 0x80, 0x8}, {0x81, 0x2, 0x3, 0xad04}, {0x7, 0x0, 0x7, 0x7}]}) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x2, 0x0}) 361.935105ms ago: executing program 5 (id=894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRESHEX=r2], 0x1, 0x522, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) inotify_init1(0x100000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) 340.028245ms ago: executing program 0 (id=896): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 322.959875ms ago: executing program 0 (id=897): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x0, 0x2, 0x5, 0x8, 0x0, 0xe2b, 0x5205, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9821, 0x4}, 0x10182, 0x100000000}, 0x0, 0xffffffffffffffff, r1, 0x8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16=r0], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './cgroup', [{}, {}, {0x20, 'kmem_cache_free\x00'}, {0x20, 'GPL\x00'}, {0x20, '\xbbhK\"\xff\xffh\x8d'}, {0x20, '#! '}, {0x20, '$'}, {0x20, ',-'}], 0xa, "3cae1a6d0f5334967c90746f348762da8d52f204d19937e4b26eba7757ca983132c6b998b5c6e443a0d2"}, 0xffffffffffffffd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001000000e2e80300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000080abce7c78da66e5", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa1}, @generic={0x5, 0x0, 0x2, 0x1ff, 0x8}, @ldst={0x2, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @jmp={0x5, 0x0, 0xb, 0x9, 0x9, 0xfffffffffffffffc, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close(0x3) chdir(&(0x7f0000000480)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x3}, 0xfffffffffffffd8c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004090) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 318.819185ms ago: executing program 2 (id=898): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000000}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x0, 0x2, 0x5, 0x8, 0x0, 0xe2b, 0x5205, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9821, 0x4}, 0x10182, 0x100000000}, 0x0, 0xffffffffffffffff, r1, 0x8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES16=r0], 0x2, 0x699, &(0x7f0000000140)="$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") r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './cgroup', [{}, {}, {0x20, 'kmem_cache_free\x00'}, {0x20, 'GPL\x00'}, {0x20, '\xbbhK\"\xff\xffh\x8d'}, {0x20, '#! '}, {0x20, '$'}, {0x20, ',-'}], 0xa, "3cae1a6d0f5334967c90746f348762da8d52f204d19937e4b26eba7757ca983132c6b998b5c6e443a0d2"}, 0xffffffffffffffd9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001000000e2e80300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000080abce7c78da", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xa1}, @generic={0x5, 0x0, 0x2, 0x1ff, 0x8}, @ldst={0x2, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @jmp={0x5, 0x0, 0xb, 0x9, 0x9, 0xfffffffffffffffc, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close(0x3) chdir(&(0x7f0000000480)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0x3}, 0xfffffffffffffd8c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004090) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000080)="020000000980ffff", 0x8) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 300.830706ms ago: executing program 5 (id=899): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000090001007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x5c, "631abb8eadf59cfaacbea36f13b30d543f04403d0b9872abc97037b8520fe17c64e1fdf59b2e8f9f643e61f1aaf70a3eef97fced9e74d5d86e36ad3088a4cc1755b7b231914982e573651a88b341b6da4738c21ac8ae83936a2f90a6"}, &(0x7f0000000180)=0x64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000080000000000000001000000183900000500000000000000000000009500000000000000e8db7ce5b1cee78993ee8bf1237ab3749e9dcb6550a1a7d79fb705df26ec8e4116736368f06e"], &(0x7f0000000300)='GPL\x00', 0x1, 0xa2, &(0x7f00000004c0)=""/162, 0x41100, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x8, 0x5, 0x27a}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r1], &(0x7f00000009c0)=[{0x4, 0x1, 0x7, 0x1}], 0x10, 0x3, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x785, &(0x7f0000001900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 256.389926ms ago: executing program 0 (id=900): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x1, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x480, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/159, 0x9f}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/177, 0xb1}], 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x31, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000000000000008000000", @ANYRESOCT], 0x38}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26, 0x0, 0x8000a, 0x3793, 0x0, @void, @value}, 0x28) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x4004010) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 171.895628ms ago: executing program 0 (id=901): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000080)='3', 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, r2, 0x4483fb19ecd4d5f, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x40004) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000001800), &(0x7f0000001840)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 153.198718ms ago: executing program 2 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) 40.03416ms ago: executing program 2 (id=903): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', r2, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180000030004000000000000000000000000000004000000"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x80000002328) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) socket$inet6(0xa, 0x3, 0x6) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x803, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r6, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x5, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x7, 0x2, 0x0, 0x7}, {0x0, 0x35, 0x80, 0x8}, {0x81, 0x2, 0x3, 0xad04}, {0x7, 0x0, 0x7, 0x7}]}) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x2, 0x0}) 21.25644ms ago: executing program 0 (id=904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x7800, 0x20, 0x1, 0x10001, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x5d, [@local, @local]}]}}}}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xd}) 0s ago: executing program 0 (id=905): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x10010, 0xffffffffffffdffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = gettid() syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) getpgid(r4) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f00000007c0)={0x100002000, &(0x7f0000000300), 0x0, &(0x7f00000003c0), {0xc}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[r0], 0x1}, 0x58) kernel console output (not intermixed with test programs): 1 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.993781][ T3876] RSP: 002b:00007feb30dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 53.993799][ T3876] RAX: ffffffffffffffda RBX: 00007feb32985fa0 RCX: 00007feb3276d169 [ 53.993814][ T3876] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000001004 [ 53.993827][ T3876] RBP: 00007feb30dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.993885][ T3876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.993896][ T3876] R13: 0000000000000000 R14: 00007feb32985fa0 R15: 00007fffda240368 [ 53.993915][ T3876] [ 54.004127][ T3872] serio: Serial port ptm0 [ 54.258760][ T3888] loop4: detected capacity change from 0 to 2048 [ 54.277925][ T3888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.292105][ T3888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.444060][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.464144][ T3897] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 54.464216][ T3896] capability: warning: `syz.0.129' uses deprecated v2 capabilities in a way that may be insecure [ 54.839570][ T3903] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 55.160414][ T3909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3909 comm=syz.4.132 [ 55.172870][ T3909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3909 comm=syz.4.132 [ 55.675908][ T3933] loop0: detected capacity change from 0 to 164 [ 55.780470][ T3933] process 'syz.0.140' launched '/dev/fd/7' with NULL argv: empty string added [ 55.810233][ T3933] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.175068][ T3946] pimreg: entered allmulticast mode [ 56.276826][ T3959] netlink: 'syz.1.143': attribute type 10 has an invalid length. [ 56.287310][ T3959] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.295893][ T3959] : (slave team0): Enslaving as an active interface with an up link [ 56.548405][ T3971] 9pnet_fd: Insufficient options for proto=fd [ 56.623264][ T3976] netlink: 36 bytes leftover after parsing attributes in process `syz.2.152'. [ 56.961110][ T3983] loop4: detected capacity change from 0 to 512 [ 57.230049][ T3983] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.250026][ T3983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.262978][ T3983] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.276215][ T3988] loop0: detected capacity change from 0 to 164 [ 57.420657][ T3988] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 57.440578][ T3994] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 57.479042][ T3988] Zero length message leads to an empty skb [ 57.884537][ T4007] loop0: detected capacity change from 0 to 2048 [ 57.943595][ T4007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.094285][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.241306][ T4018] 9pnet_fd: Insufficient options for proto=fd [ 58.328005][ T4023] loop2: detected capacity change from 0 to 512 [ 58.359854][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.394779][ T4023] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.519913][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 58.519937][ T29] audit: type=1326 audit(1743255953.579:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbc95559359 code=0x7ffc0000 [ 58.602422][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.636641][ T29] audit: type=1326 audit(1743255953.609:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.660105][ T29] audit: type=1326 audit(1743255953.609:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.683446][ T29] audit: type=1326 audit(1743255953.609:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.706909][ T29] audit: type=1326 audit(1743255953.609:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.730358][ T29] audit: type=1326 audit(1743255953.609:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.753748][ T29] audit: type=1326 audit(1743255953.609:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.777160][ T29] audit: type=1326 audit(1743255953.609:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 58.800632][ T29] audit: type=1326 audit(1743255953.609:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc955bbad0 code=0x7ffc0000 [ 58.823967][ T29] audit: type=1326 audit(1743255953.609:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc955bd169 code=0x7ffc0000 [ 60.038785][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.111400][ T4039] block device autoloading is deprecated and will be removed. [ 60.453457][ T4039] blktrace: Concurrent blktraces are not allowed on loop1 [ 60.544133][ T4038] loop0: detected capacity change from 0 to 512 [ 60.552246][ T4038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.564560][ T4038] EXT4-fs (loop0): 1 truncate cleaned up [ 60.570721][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.588744][ T4059] 9pnet_fd: Insufficient options for proto=fd [ 60.629306][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.698033][ T4067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 60.708062][ T4067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.718023][ T4067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 60.727884][ T4067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.737753][ T4067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 60.747671][ T4067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.757549][ T4067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan3 [ 60.767564][ T4067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.778413][ T4067] ipvlan4: entered promiscuous mode [ 60.783796][ T4067] ipvlan4: entered allmulticast mode [ 60.791631][ T4067] batman_adv: batadv0: Adding interface: ipvlan4 [ 60.798090][ T4067] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.823975][ T4067] batman_adv: batadv0: Interface activated: ipvlan4 [ 60.885915][ T4070] loop1: detected capacity change from 0 to 1024 [ 60.897765][ T4070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.923743][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.948724][ T4074] loop1: detected capacity change from 0 to 2048 [ 60.967679][ T4074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.981870][ T4074] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.003206][ T4079] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 61.180260][ T4081] blktrace: Concurrent blktraces are not allowed on loop7 [ 61.210282][ T4087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.248212][ T4081] loop3: detected capacity change from 0 to 512 [ 61.254953][ T4081] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.267588][ T4081] EXT4-fs (loop3): 1 truncate cleaned up [ 61.273965][ T4081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.290146][ T4090] 9pnet_fd: Insufficient options for proto=fd [ 61.321200][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.385816][ T4099] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 61.393869][ T4099] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.423236][ T4103] : renamed from bond0 (while UP) [ 62.167820][ T4131] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 62.514842][ T4141] loop2: detected capacity change from 0 to 2048 [ 62.532069][ T4141] EXT4-fs: Ignoring removed bh option [ 62.559740][ T4141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.568800][ T4150] loop4: detected capacity change from 0 to 2048 [ 62.608097][ T4150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.631812][ T4150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.662529][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.014900][ T4167] blktrace: Concurrent blktraces are not allowed on loop7 [ 63.051704][ T4167] loop3: detected capacity change from 0 to 512 [ 63.058735][ T4167] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.069808][ T4167] EXT4-fs (loop3): 1 truncate cleaned up [ 63.075792][ T4167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.101820][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.265231][ T4171] blktrace: Concurrent blktraces are not allowed on loop7 [ 63.314386][ T4171] loop3: detected capacity change from 0 to 512 [ 63.321762][ T4171] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.333069][ T4171] EXT4-fs (loop3): 1 truncate cleaned up [ 63.339225][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.364403][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.679271][ T4185] loop4: detected capacity change from 0 to 512 [ 63.686706][ T4185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.700367][ T4185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.712996][ T4185] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.204078][ T4200] loop2: detected capacity change from 0 to 1024 [ 64.229322][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.267059][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.267458][ T4204] loop3: detected capacity change from 0 to 512 [ 64.285471][ T4204] EXT4-fs error (device loop3): ext4_iget_extra_inode:4704: inode #15: comm syz.3.222: corrupted in-inode xattr: invalid ea_ino [ 64.300820][ T4204] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.222: couldn't read orphan inode 15 (err -117) [ 64.313565][ T4204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.483079][ T4211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.222'. [ 64.494567][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 64.494580][ T29] audit: type=1400 audit(1743255959.549:1605): avc: denied { connect } for pid=4209 comm="syz.0.224" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.770763][ T4216] blktrace: Concurrent blktraces are not allowed on loop1 [ 64.934397][ T4214] loop0: detected capacity change from 0 to 512 [ 64.940953][ T4219] loop1: detected capacity change from 0 to 2048 [ 64.941761][ T4219] /dev/loop1: Can't open blockdev [ 64.977885][ T4214] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.991929][ T4214] EXT4-fs (loop0): 1 truncate cleaned up [ 65.000140][ T4214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.064453][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.124374][ T4232] FAULT_INJECTION: forcing a failure. [ 66.124374][ T4232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.137624][ T4232] CPU: 1 UID: 0 PID: 4232 Comm: syz.0.231 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 66.137658][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.137673][ T4232] Call Trace: [ 66.137681][ T4232] [ 66.137690][ T4232] dump_stack_lvl+0xf6/0x150 [ 66.137763][ T4232] dump_stack+0x15/0x1a [ 66.137785][ T4232] should_fail_ex+0x261/0x270 [ 66.137817][ T4232] should_fail+0xb/0x10 [ 66.137841][ T4232] should_fail_usercopy+0x1a/0x20 [ 66.137870][ T4232] _copy_to_user+0x20/0xa0 [ 66.137940][ T4232] simple_read_from_buffer+0xb2/0x130 [ 66.137963][ T4232] proc_fail_nth_read+0x103/0x140 [ 66.137987][ T4232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.138010][ T4232] vfs_read+0x1b2/0x710 [ 66.138072][ T4232] ? __rcu_read_unlock+0x4e/0x70 [ 66.138145][ T4232] ? __fget_files+0x186/0x1c0 [ 66.138170][ T4232] ksys_read+0xeb/0x1b0 [ 66.138210][ T4232] __x64_sys_read+0x42/0x50 [ 66.138249][ T4232] x64_sys_call+0x2a3b/0x2e10 [ 66.138290][ T4232] do_syscall_64+0xc9/0x1c0 [ 66.138379][ T4232] ? clear_bhb_loop+0x25/0x80 [ 66.138405][ T4232] ? clear_bhb_loop+0x25/0x80 [ 66.138426][ T4232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.138446][ T4232] RIP: 0033:0x7fc08560bb7c [ 66.138465][ T4232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.138553][ T4232] RSP: 002b:00007fc083c77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.138578][ T4232] RAX: ffffffffffffffda RBX: 00007fc085825fa0 RCX: 00007fc08560bb7c [ 66.138593][ T4232] RDX: 000000000000000f RSI: 00007fc083c770a0 RDI: 0000000000000006 [ 66.138607][ T4232] RBP: 00007fc083c77090 R08: 0000000000000000 R09: 0000000000000000 [ 66.138621][ T4232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.138679][ T4232] R13: 0000000000000000 R14: 00007fc085825fa0 R15: 00007ffc048f2d48 [ 66.138697][ T4232] [ 66.970786][ T4259] loop1: detected capacity change from 0 to 512 [ 66.979295][ T4259] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.987966][ T4259] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.239: bg 0: block 248: padding at end of block bitmap is not set [ 67.002468][ T4259] Quota error (device loop1): write_blk: dquota write failed [ 67.010067][ T4259] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 67.020211][ T4259] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.239: Failed to acquire dquot type 1 [ 67.053643][ T4259] EXT4-fs (loop1): 1 truncate cleaned up [ 67.066153][ T29] audit: type=1400 audit(1743255962.119:1606): avc: denied { setopt } for pid=4258 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.089395][ T4257] blktrace: Concurrent blktraces are not allowed on loop7 [ 67.117606][ T4259] syz.1.239 (4259) used greatest stack depth: 9216 bytes left [ 67.132872][ T4257] loop3: detected capacity change from 0 to 512 [ 67.140302][ T4257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 67.151383][ T4257] EXT4-fs (loop3): 1 truncate cleaned up [ 67.218270][ T29] audit: type=1326 audit(1743255962.279:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 67.241694][ T29] audit: type=1326 audit(1743255962.279:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 67.266733][ T29] audit: type=1326 audit(1743255962.299:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 67.290239][ T29] audit: type=1326 audit(1743255962.299:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 67.313662][ T29] audit: type=1326 audit(1743255962.299:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 67.337045][ T29] audit: type=1326 audit(1743255962.299:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 67.369992][ T4283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 67.402918][ T4283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4283 comm=syz.3.245 [ 67.415515][ T4283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4283 comm=syz.3.245 [ 67.735427][ T4302] blktrace: Concurrent blktraces are not allowed on loop5 [ 67.796516][ T4303] loop2: detected capacity change from 0 to 512 [ 67.804403][ T4303] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.816589][ T4303] EXT4-fs (loop2): 1 truncate cleaned up [ 67.825077][ T4302] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.252: bg 0: block 254: padding at end of block bitmap is not set [ 67.909519][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 67.917197][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 67.924830][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 67.932487][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 67.939904][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 68.315118][ T4320] loop4: detected capacity change from 0 to 512 [ 68.324314][ T4320] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #15: comm syz.4.256: casefold flag without casefold feature [ 68.337131][ T4320] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.256: couldn't read orphan inode 15 (err -117) [ 68.487859][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.495207][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.503176][ T4340] bridge0: entered allmulticast mode [ 68.519217][ T4340] bridge_slave_1: left allmulticast mode [ 68.525045][ T4340] bridge_slave_1: left promiscuous mode [ 68.530692][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.554717][ T4340] bridge_slave_0: left allmulticast mode [ 68.560435][ T4340] bridge_slave_0: left promiscuous mode [ 68.566080][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.574673][ T4352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 68.593435][ T4350] blktrace: Concurrent blktraces are not allowed on loop1 [ 68.640254][ T4338] loop0: detected capacity change from 0 to 512 [ 68.643441][ T4319] netlink: 88 bytes leftover after parsing attributes in process `syz.4.256'. [ 68.647661][ T4338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.666787][ T4338] EXT4-fs (loop0): 1 truncate cleaned up [ 68.680110][ T4338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.264: bg 0: block 254: padding at end of block bitmap is not set [ 68.704204][ T4360] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 68.747034][ T4366] loop0: detected capacity change from 0 to 512 [ 68.802763][ T4366] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.828355][ T4374] cgroup: name respecified [ 68.858257][ T4376] loop2: detected capacity change from 0 to 2048 [ 68.883925][ T4376] EXT4-fs mount: 13 callbacks suppressed [ 68.883938][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.911791][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.933206][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.983470][ T4384] loop0: detected capacity change from 0 to 512 [ 68.998281][ T4384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.011100][ T4384] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.038163][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.152785][ T4400] blktrace: Concurrent blktraces are not allowed on loop1 [ 69.190076][ T4400] loop0: detected capacity change from 0 to 512 [ 69.197063][ T4400] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.208226][ T4400] EXT4-fs (loop0): 1 truncate cleaned up [ 69.214395][ T4400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.227968][ T4400] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.279: bg 0: block 254: padding at end of block bitmap is not set [ 69.252777][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.279147][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.283766][ T4405] 9pnet_fd: Insufficient options for proto=fd [ 69.286352][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.308376][ T4403] bridge_slave_1: left allmulticast mode [ 69.314059][ T4403] bridge_slave_1: left promiscuous mode [ 69.319950][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.329163][ T4403] bridge_slave_0: left allmulticast mode [ 69.334853][ T4403] bridge_slave_0: left promiscuous mode [ 69.340594][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.350641][ T4403] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 69.357655][ T4409] loop3: detected capacity change from 0 to 2048 [ 69.366562][ T4403] batman_adv: batadv0: Removing interface: ipvlan2 [ 69.370490][ T4409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.395897][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.477990][ T4422] loop3: detected capacity change from 0 to 4096 [ 69.497411][ T4422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.512036][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 69.512052][ T29] audit: type=1400 audit(1743255964.569:1834): avc: denied { append } for pid=4421 comm="syz.3.285" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.541361][ T29] audit: type=1400 audit(1743255964.569:1835): avc: denied { open } for pid=4421 comm="syz.3.285" path="/62/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.565475][ T29] audit: type=1400 audit(1743255964.619:1836): avc: denied { read write } for pid=4421 comm="syz.3.285" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.609913][ T4430] loop4: detected capacity change from 0 to 512 [ 69.634288][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.646560][ T4430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.660627][ T4430] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.673995][ T29] audit: type=1326 audit(1743255964.729:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.697409][ T29] audit: type=1326 audit(1743255964.729:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.720992][ T29] audit: type=1326 audit(1743255964.729:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.744392][ T29] audit: type=1326 audit(1743255964.729:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.767859][ T29] audit: type=1326 audit(1743255964.729:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.792664][ T29] audit: type=1326 audit(1743255964.759:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.816083][ T29] audit: type=1326 audit(1743255964.759:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 69.842690][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.964321][ T4448] FAULT_INJECTION: forcing a failure. [ 69.964321][ T4448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.977542][ T4448] CPU: 0 UID: 0 PID: 4448 Comm: syz.2.293 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 69.977572][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.977627][ T4448] Call Trace: [ 69.977634][ T4448] [ 69.977642][ T4448] dump_stack_lvl+0xf6/0x150 [ 69.977670][ T4448] dump_stack+0x15/0x1a [ 69.977700][ T4448] should_fail_ex+0x261/0x270 [ 69.977736][ T4448] should_fail+0xb/0x10 [ 69.977767][ T4448] should_fail_usercopy+0x1a/0x20 [ 69.977858][ T4448] copy_to_user_nofault+0x7d/0x120 [ 69.977927][ T4448] bpf_probe_write_user+0x80/0xc0 [ 69.977950][ T4448] bpf_prog_19072b5a3fcf5d64+0x41/0x45 [ 69.977990][ T4448] bpf_trace_run2+0x106/0x1d0 [ 69.978021][ T4448] __bpf_trace_sys_enter+0x10/0x30 [ 69.978050][ T4448] trace_sys_enter+0x85/0x110 [ 69.978145][ T4448] syscall_trace_enter+0x13d/0x1f0 [ 69.978257][ T4448] ? fpregs_assert_state_consistent+0x83/0xa0 [ 69.978300][ T4448] do_syscall_64+0xaa/0x1c0 [ 69.978329][ T4448] ? clear_bhb_loop+0x25/0x80 [ 69.978429][ T4448] ? clear_bhb_loop+0x25/0x80 [ 69.978446][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.978461][ T4448] RIP: 0033:0x7fbc955bd169 [ 69.978473][ T4448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.978488][ T4448] RSP: 002b:00007fbc93c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 69.978565][ T4448] RAX: ffffffffffffffda RBX: 00007fbc957d5fa0 RCX: 00007fbc955bd169 [ 69.978651][ T4448] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000000 [ 69.978660][ T4448] RBP: 00007fbc93c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.978668][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.978677][ T4448] R13: 0000000000000000 R14: 00007fbc957d5fa0 R15: 00007ffd2a9de928 [ 69.978702][ T4448] [ 70.239206][ T4456] loop4: detected capacity change from 0 to 512 [ 70.253868][ T4453] loop3: detected capacity change from 0 to 2048 [ 70.271045][ T4456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.300750][ T4453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.326032][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.343514][ T4456] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.357081][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.393728][ T4459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'. [ 70.468735][ T4459] bond0: (slave bond_slave_1): Releasing backup interface [ 70.530253][ T4476] loop2: detected capacity change from 0 to 512 [ 70.548014][ T4474] IPVS: stopping master sync thread 3903 ... [ 70.572621][ T4476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.595487][ T4476] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.644222][ T4481] FAULT_INJECTION: forcing a failure. [ 70.644222][ T4481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.657343][ T4481] CPU: 1 UID: 0 PID: 4481 Comm: syz.0.302 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 70.657397][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.657412][ T4481] Call Trace: [ 70.657420][ T4481] [ 70.657429][ T4481] dump_stack_lvl+0xf6/0x150 [ 70.657457][ T4481] dump_stack+0x15/0x1a [ 70.657476][ T4481] should_fail_ex+0x261/0x270 [ 70.657530][ T4481] should_fail+0xb/0x10 [ 70.657632][ T4481] should_fail_usercopy+0x1a/0x20 [ 70.657670][ T4481] copy_to_user_nofault+0x7d/0x120 [ 70.657704][ T4481] bpf_probe_write_user+0x80/0xc0 [ 70.657729][ T4481] bpf_prog_19072b5a3fcf5d64+0x41/0x45 [ 70.657748][ T4481] bpf_trace_run2+0x106/0x1d0 [ 70.657795][ T4481] __bpf_trace_sys_enter+0x10/0x30 [ 70.657827][ T4481] trace_sys_enter+0x85/0x110 [ 70.657918][ T4481] syscall_trace_enter+0x13d/0x1f0 [ 70.658026][ T4481] ? fpregs_assert_state_consistent+0x83/0xa0 [ 70.658124][ T4481] do_syscall_64+0xaa/0x1c0 [ 70.658159][ T4481] ? clear_bhb_loop+0x25/0x80 [ 70.658283][ T4481] ? clear_bhb_loop+0x25/0x80 [ 70.658315][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.658340][ T4481] RIP: 0033:0x7fc08560d169 [ 70.658357][ T4481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.658397][ T4481] RSP: 002b:00007fc083c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 70.658416][ T4481] RAX: ffffffffffffffda RBX: 00007fc085825fa0 RCX: 00007fc08560d169 [ 70.658431][ T4481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 70.658445][ T4481] RBP: 00007fc083c77090 R08: 0000000000000000 R09: 0000000000000000 [ 70.658459][ T4481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.658473][ T4481] R13: 0000000000000000 R14: 00007fc085825fa0 R15: 00007ffc048f2d48 [ 70.658494][ T4481] [ 70.661884][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.068564][ T4501] loop0: detected capacity change from 0 to 2048 [ 71.104999][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.126065][ T4505] blktrace: Concurrent blktraces are not allowed on loop5 [ 71.167718][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.216966][ T4505] loop2: detected capacity change from 0 to 512 [ 71.224090][ T4505] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.238156][ T4505] EXT4-fs (loop2): 1 truncate cleaned up [ 71.244918][ T4505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.261237][ T4497] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.307: bg 0: block 254: padding at end of block bitmap is not set [ 71.296259][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.305634][ T4515] loop1: detected capacity change from 0 to 2048 [ 71.333379][ T4515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.428329][ T3336] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 71.462626][ T3336] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.474924][ T3336] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.474924][ T3336] [ 71.484652][ T3336] EXT4-fs (loop1): Total free blocks count 0 [ 71.490729][ T3336] EXT4-fs (loop1): Free/Dirty block details [ 71.496667][ T3336] EXT4-fs (loop1): free_blocks=4096 [ 71.501884][ T3336] EXT4-fs (loop1): dirty_blocks=512 [ 71.507152][ T3336] EXT4-fs (loop1): Block reservation details [ 71.513156][ T3336] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 71.538442][ T3336] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 71.588467][ T4533] loop2: detected capacity change from 0 to 512 [ 71.606703][ T4533] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 71.614731][ T4533] EXT4-fs (loop2): orphan cleanup on readonly fs [ 71.622490][ T4533] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.313: invalid indirect mapped block 256 (level 2) [ 71.640051][ T4533] EXT4-fs (loop2): 2 truncates cleaned up [ 71.651166][ T4533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.771763][ T4525] EXT4-fs error (device loop2): ext4_map_blocks:672: inode #2: block 13: comm syz.2.313: lblock 0 mapped to illegal pblock 13 (length 1) [ 71.804110][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.831732][ T4544] FAULT_INJECTION: forcing a failure. [ 71.831732][ T4544] name failslab, interval 1, probability 0, space 0, times 0 [ 71.844433][ T4544] CPU: 1 UID: 0 PID: 4544 Comm: syz.2.318 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 71.844462][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.844475][ T4544] Call Trace: [ 71.844481][ T4544] [ 71.844489][ T4544] dump_stack_lvl+0xf6/0x150 [ 71.844536][ T4544] dump_stack+0x15/0x1a [ 71.844553][ T4544] should_fail_ex+0x261/0x270 [ 71.844669][ T4544] should_failslab+0x8f/0xb0 [ 71.844691][ T4544] kmem_cache_alloc_noprof+0x59/0x340 [ 71.844800][ T4544] ? __send_signal_locked+0x15d/0x7a0 [ 71.844829][ T4544] __send_signal_locked+0x15d/0x7a0 [ 71.844937][ T4544] send_signal_locked+0x28f/0x3a0 [ 71.844968][ T4544] ? avc_has_perm_noaudit+0x1cc/0x210 [ 71.845004][ T4544] ? _raw_spin_lock_irqsave+0x40/0xb0 [ 71.845028][ T4544] do_send_sig_info+0x9f/0xf0 [ 71.845072][ T4544] send_sig+0x53/0x60 [ 71.845102][ T4544] inode_newsize_ok+0x96/0x130 [ 71.845140][ T4544] shmem_fallocate+0xc8/0x890 [ 71.845220][ T4544] ? selinux_file_permission+0x32a/0x360 [ 71.845279][ T4544] vfs_fallocate+0x368/0x3b0 [ 71.845303][ T4544] __x64_sys_fallocate+0x78/0xc0 [ 71.845365][ T4544] x64_sys_call+0x295f/0x2e10 [ 71.845441][ T4544] do_syscall_64+0xc9/0x1c0 [ 71.845474][ T4544] ? clear_bhb_loop+0x25/0x80 [ 71.845505][ T4544] ? clear_bhb_loop+0x25/0x80 [ 71.845530][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.845553][ T4544] RIP: 0033:0x7fbc955bd169 [ 71.845569][ T4544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.845656][ T4544] RSP: 002b:00007fbc93c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 71.845677][ T4544] RAX: ffffffffffffffda RBX: 00007fbc957d5fa0 RCX: 00007fbc955bd169 [ 71.845691][ T4544] RDX: 0400000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 71.845704][ T4544] RBP: 00007fbc93c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 71.845717][ T4544] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 71.845730][ T4544] R13: 0000000000000000 R14: 00007fbc957d5fa0 R15: 00007ffd2a9de928 [ 71.845750][ T4544] [ 72.073183][ T4544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'. [ 72.094324][ T4544] : (slave bond_slave_1): Releasing backup interface [ 72.163583][ T4553] 9pnet_fd: Insufficient options for proto=fd [ 72.255499][ T4558] blktrace: Concurrent blktraces are not allowed on loop5 [ 72.303647][ T4558] loop2: detected capacity change from 0 to 512 [ 72.310391][ T4558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.322122][ T4558] EXT4-fs (loop2): 1 truncate cleaned up [ 72.328342][ T4558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.342193][ T4558] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.323: bg 0: block 254: padding at end of block bitmap is not set [ 72.366005][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.619904][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 72.629872][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.639773][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 72.649657][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.659542][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan3 [ 72.669543][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.679527][ T4577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan4 [ 72.689353][ T4577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.699915][ T4577] ipvlan3: entered promiscuous mode [ 72.705134][ T4577] ipvlan3: entered allmulticast mode [ 72.711272][ T4577] batman_adv: batadv0: Adding interface: ipvlan3 [ 72.717660][ T4577] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.742985][ T4577] batman_adv: batadv0: Interface activated: ipvlan3 [ 72.830001][ T4579] loop3: detected capacity change from 0 to 8192 [ 72.843096][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'. [ 72.852001][ T4579] bridge_slave_0: left allmulticast mode [ 72.857742][ T4579] bridge_slave_0: left promiscuous mode [ 72.863550][ T4579] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.875666][ T4579] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 72.883778][ T4579] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 72.893982][ T4579] batman_adv: batadv0: Removing interface: ipvlan2 [ 72.903306][ T4579] batman_adv: batadv0: Removing interface: ipvlan3 [ 72.923817][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.943019][ T4581] 9pnet_fd: Insufficient options for proto=fd [ 73.053996][ T4591] loop4: detected capacity change from 0 to 2048 [ 73.104821][ T4595] loop4: detected capacity change from 0 to 2048 [ 73.116281][ T4595] syz.4.338 uses obsolete (PF_INET,SOCK_PACKET) [ 73.507890][ T4606] loop1: detected capacity change from 0 to 512 [ 73.518785][ T4606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.532538][ T4606] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.579854][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.761555][ T4617] futex_wake_op: syz.2.346 tries to shift op by -1; fix this program [ 73.783113][ T4615] loop4: detected capacity change from 0 to 1024 [ 73.803342][ T4615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.833813][ T4615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.891976][ T4620] loop2: detected capacity change from 0 to 512 [ 73.917135][ T4620] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.941749][ T4623] loop0: detected capacity change from 0 to 1024 [ 73.944002][ T4620] EXT4-fs (loop2): 1 truncate cleaned up [ 73.951992][ T4623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.969147][ T4620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.978581][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 74.049709][ T4623] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.054855][ T4620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.346: bg 0: block 254: padding at end of block bitmap is not set [ 74.077296][ T4641] loop1: detected capacity change from 0 to 512 [ 74.091002][ T4641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.135988][ T4641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.150269][ T4641] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.160897][ T4644] loop0: detected capacity change from 0 to 2048 [ 74.189920][ T4644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.291557][ T4644] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.818718][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.003319][ T4664] loop3: detected capacity change from 0 to 164 [ 75.022534][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 75.022549][ T29] audit: type=1400 audit(1743255970.079:2163): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.152406][ T29] audit: type=1326 audit(1743255970.149:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.175869][ T29] audit: type=1326 audit(1743255970.149:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.199272][ T29] audit: type=1326 audit(1743255970.149:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.222496][ T29] audit: type=1326 audit(1743255970.149:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.245945][ T29] audit: type=1326 audit(1743255970.149:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.246760][ T4664] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.269403][ T29] audit: type=1400 audit(1743255970.169:2169): avc: denied { mount } for pid=4663 comm="syz.3.359" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 75.305883][ T29] audit: type=1326 audit(1743255970.359:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.329284][ T29] audit: type=1326 audit(1743255970.359:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.352629][ T29] audit: type=1326 audit(1743255970.359:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 75.496008][ T4664] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 75.787693][ T4710] loop0: detected capacity change from 0 to 2048 [ 75.808960][ T4710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.822818][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.572346][ T4727] blktrace: Concurrent blktraces are not allowed on loop5 [ 76.624305][ T4724] loop2: detected capacity change from 0 to 512 [ 76.631527][ T4724] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.644499][ T4724] EXT4-fs (loop2): 1 truncate cleaned up [ 76.653353][ T4724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.666892][ T4731] xt_connbytes: Forcing CT accounting to be enabled [ 76.675484][ T4731] Cannot find add_set index 0 as target [ 76.685216][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 76.698798][ T4724] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.375: bg 0: block 254: padding at end of block bitmap is not set [ 76.732424][ T4726] blktrace: Concurrent blktraces are not allowed on loop9 [ 76.760291][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.776749][ T4726] loop4: detected capacity change from 0 to 512 [ 76.783763][ T4726] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.811385][ T4726] EXT4-fs (loop4): 1 truncate cleaned up [ 76.818798][ T4726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.833344][ T4726] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.376: bg 0: block 254: padding at end of block bitmap is not set [ 76.850549][ T4740] loop2: detected capacity change from 0 to 2048 [ 76.858828][ T4733] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 76.859345][ T4742] FAULT_INJECTION: forcing a failure. [ 76.859345][ T4742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.880584][ T4742] CPU: 0 UID: 0 PID: 4742 Comm: syz.3.381 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 76.880612][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.880627][ T4742] Call Trace: [ 76.880633][ T4742] [ 76.880640][ T4742] dump_stack_lvl+0xf6/0x150 [ 76.880708][ T4742] dump_stack+0x15/0x1a [ 76.880727][ T4742] should_fail_ex+0x261/0x270 [ 76.880758][ T4742] should_fail+0xb/0x10 [ 76.880783][ T4742] should_fail_usercopy+0x1a/0x20 [ 76.880856][ T4742] _copy_from_user+0x1c/0xa0 [ 76.880880][ T4742] do_ipt_set_ctl+0x444/0x8a0 [ 76.880902][ T4742] ? _raw_spin_unlock_bh+0x36/0x40 [ 76.880962][ T4742] ? tcp_release_cb+0x108/0x390 [ 76.880993][ T4742] nf_setsockopt+0x195/0x1b0 [ 76.881024][ T4742] ip_setsockopt+0xea/0x100 [ 76.881046][ T4742] tcp_setsockopt+0x93/0xb0 [ 76.881073][ T4742] sock_common_setsockopt+0x64/0x80 [ 76.881133][ T4742] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.881156][ T4742] __sys_setsockopt+0x187/0x200 [ 76.881184][ T4742] __x64_sys_setsockopt+0x66/0x80 [ 76.881211][ T4742] x64_sys_call+0x2a09/0x2e10 [ 76.881232][ T4742] do_syscall_64+0xc9/0x1c0 [ 76.881263][ T4742] ? clear_bhb_loop+0x25/0x80 [ 76.881316][ T4742] ? clear_bhb_loop+0x25/0x80 [ 76.881346][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.881412][ T4742] RIP: 0033:0x7f4ad356d169 [ 76.881426][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.881443][ T4742] RSP: 002b:00007f4ad1bcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.881461][ T4742] RAX: ffffffffffffffda RBX: 00007f4ad3785fa0 RCX: 00007f4ad356d169 [ 76.881473][ T4742] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 76.881484][ T4742] RBP: 00007f4ad1bcf090 R08: 00000000000003c8 R09: 0000000000000000 [ 76.881495][ T4742] R10: 0000200000000cc0 R11: 0000000000000246 R12: 0000000000000001 [ 76.881507][ T4742] R13: 0000000000000000 R14: 00007f4ad3785fa0 R15: 00007ffe5a15c978 [ 76.881569][ T4742] [ 77.092852][ T4740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.134962][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.136303][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.263217][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.337981][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.355406][ T4761] loop2: detected capacity change from 0 to 2048 [ 77.365494][ T4766] bridge_slave_0: left allmulticast mode [ 77.371239][ T4766] bridge_slave_0: left promiscuous mode [ 77.377036][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.391785][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.406110][ T4766] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 77.410931][ T4761] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.413692][ T4766] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 77.446634][ T4766] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 77.470480][ T4766] batman_adv: batadv0: Removing interface: ipvlan2 [ 77.479851][ T4766] batman_adv: batadv0: Removing interface: ipvlan3 [ 77.493533][ T4766] batman_adv: batadv0: Removing interface: ipvlan4 [ 77.848507][ T4781] loop1: detected capacity change from 0 to 512 [ 77.858155][ T4781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.219237][ T4781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.253468][ T4781] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.427776][ T4802] loop3: detected capacity change from 0 to 2048 [ 78.478238][ T4802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.572421][ T4785] blktrace: Concurrent blktraces are not allowed on loop5 [ 78.597842][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.668039][ T4785] loop2: detected capacity change from 0 to 512 [ 78.683406][ T4785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.702742][ T4820] loop3: detected capacity change from 0 to 512 [ 78.729040][ T4820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.756059][ T4820] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.774839][ T4785] EXT4-fs (loop2): 1 truncate cleaned up [ 78.781169][ T4785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.817440][ T4785] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.395: bg 0: block 254: padding at end of block bitmap is not set [ 78.834773][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.910656][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.925527][ T4825] netlink: 11 bytes leftover after parsing attributes in process `syz.3.406'. [ 78.959286][ T4825] loop3: detected capacity change from 0 to 4096 [ 78.986080][ T4825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.024733][ T4828] syz.2.407 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 79.187506][ T3303] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /89/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.287884][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.379712][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 79.573219][ T3303] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /89/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.783139][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.853160][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 79.871544][ T4840] : renamed from bond0 (while UP) [ 79.899547][ T3303] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /89/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.921168][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 79.941756][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 79.953651][ T3303] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /89/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 80.026414][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 80.064051][ T29] kauditd_printk_skb: 12659 callbacks suppressed [ 80.064064][ T29] audit: type=1326 audit(1743255975.119:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.095295][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.114066][ T29] audit: type=1326 audit(1743255975.149:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.137705][ T29] audit: type=1326 audit(1743255975.149:14834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.141050][ T3303] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /89/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 80.161433][ T29] audit: type=1326 audit(1743255975.149:14835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.161464][ T29] audit: type=1326 audit(1743255975.149:14836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.186220][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3095: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 80.206129][ T29] audit: type=1326 audit(1743255975.149:14837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.231696][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.248810][ T29] audit: type=1326 audit(1743255975.149:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.274149][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.283864][ T29] audit: type=1326 audit(1743255975.149:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.283893][ T29] audit: type=1326 audit(1743255975.149:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.363165][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.365688][ T29] audit: type=1326 audit(1743255975.149:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.4.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ff00000 [ 80.377982][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.414196][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.433148][ T3303] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 80.490800][ T4856] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 80.592679][ T4270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.661499][ T4866] loop4: detected capacity change from 0 to 512 [ 80.669605][ T4866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.689477][ T4866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.702164][ T4866] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.904903][ T4874] loop0: detected capacity change from 0 to 512 [ 80.924318][ T4874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.973176][ T4874] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.138211][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.140857][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.266563][ T4887] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 81.372661][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.419767][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.491718][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.525421][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.536681][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 81.543042][ T4888] chnl_net:caif_netlink_parms(): no params data found [ 81.553330][ T4904] loop0: detected capacity change from 0 to 1024 [ 81.567169][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.578909][ T4916] FAULT_INJECTION: forcing a failure. [ 81.578909][ T4916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.592093][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.2.437 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 81.592125][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.592139][ T4916] Call Trace: [ 81.592187][ T4916] [ 81.592196][ T4916] dump_stack_lvl+0xf6/0x150 [ 81.592223][ T4916] dump_stack+0x15/0x1a [ 81.592241][ T4916] should_fail_ex+0x261/0x270 [ 81.592271][ T4916] should_fail+0xb/0x10 [ 81.592330][ T4916] should_fail_usercopy+0x1a/0x20 [ 81.592385][ T4916] _copy_from_user+0x1c/0xa0 [ 81.592405][ T4916] __sys_bpf+0x156/0x7c0 [ 81.592428][ T4916] __x64_sys_bpf+0x43/0x50 [ 81.592455][ T4916] x64_sys_call+0x23da/0x2e10 [ 81.592478][ T4916] do_syscall_64+0xc9/0x1c0 [ 81.592523][ T4916] ? clear_bhb_loop+0x25/0x80 [ 81.592622][ T4916] ? clear_bhb_loop+0x25/0x80 [ 81.592647][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.592743][ T4916] RIP: 0033:0x7fbc955bd169 [ 81.592760][ T4916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.592781][ T4916] RSP: 002b:00007fbc93c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.592798][ T4916] RAX: ffffffffffffffda RBX: 00007fbc957d5fa0 RCX: 00007fbc955bd169 [ 81.592809][ T4916] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 81.592882][ T4916] RBP: 00007fbc93c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.592896][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.592909][ T4916] R13: 0000000000000000 R14: 00007fbc957d5fa0 R15: 00007ffd2a9de928 [ 81.592929][ T4916] [ 81.783885][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.791166][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.799464][ T4888] bridge_slave_0: entered allmulticast mode [ 81.805883][ T4888] bridge_slave_0: entered promiscuous mode [ 81.813022][ T4923] tipc: Started in network mode [ 81.817971][ T4923] tipc: Node identity ac14140f, cluster identity 4711 [ 81.824971][ T4923] tipc: New replicast peer: 255.0.0.255 [ 81.830657][ T4923] tipc: Enabled bearer , priority 10 [ 81.837203][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.844287][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.851572][ T4888] bridge_slave_1: entered allmulticast mode [ 81.858114][ T4888] bridge_slave_1: entered promiscuous mode [ 81.881928][ T4888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.894750][ T4888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.923094][ T4888] team0: Port device team_slave_0 added [ 81.932250][ T4888] team0: Port device team_slave_1 added [ 81.974668][ T12] team0: Port device geneve1 removed [ 81.979319][ T4927] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 81.990003][ T12]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.001356][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.012776][ T12]  (unregistering): Released all slaves [ 82.034738][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.041777][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.067755][ T4888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.083960][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.091027][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.117166][ T4888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.155802][ T12] hsr_slave_0: left promiscuous mode [ 82.166774][ T12] hsr_slave_1: left promiscuous mode [ 82.187387][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.194887][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.202884][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.210412][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.240585][ T12] veth1_macvtap: left promiscuous mode [ 82.246184][ T12] veth0_macvtap: left promiscuous mode [ 82.255571][ T12] veth1_vlan: left promiscuous mode [ 82.268325][ T12] veth0_vlan: left promiscuous mode [ 82.401985][ T12] team0 (unregistering): Port device team_slave_1 removed [ 82.412449][ T12] team0 (unregistering): Port device team_slave_0 removed [ 82.474183][ T4888] hsr_slave_0: entered promiscuous mode [ 82.480314][ T4888] hsr_slave_1: entered promiscuous mode [ 82.564062][ T4953] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 82.581494][ T4888] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 82.591420][ T4888] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 82.602347][ T4888] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 82.618880][ T4888] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 82.671634][ T4956] loop2: detected capacity change from 0 to 164 [ 82.725671][ T4888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.726666][ T4956] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 82.739289][ T4888] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.754548][ T3412] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.761743][ T3412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.792321][ T4888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.802754][ T4888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.885779][ T4888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.897766][ T4956] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 82.947417][ T9] tipc: Node number set to 2886997007 [ 82.978852][ T3412] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.985948][ T3412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.255655][ T4888] veth0_vlan: entered promiscuous mode [ 83.274329][ T4888] veth1_vlan: entered promiscuous mode [ 83.298944][ T4888] veth0_macvtap: entered promiscuous mode [ 83.312966][ T4888] veth1_macvtap: entered promiscuous mode [ 83.353856][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.364450][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.374297][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.384924][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.394778][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.405202][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.415148][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.425610][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.436894][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.491262][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.501777][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.511722][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.522205][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.532085][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.542599][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.552449][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.562901][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.575601][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.597401][ T4888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.606143][ T4888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.614891][ T4888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623644][ T4888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637578][ T4987] IPVS: stopping master sync thread 4989 ... [ 83.842781][ T5012] loop5: detected capacity change from 0 to 164 [ 83.895222][ T5012] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 83.956619][ T5015] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 85.483955][ T5033] FAULT_INJECTION: forcing a failure. [ 85.483955][ T5033] name failslab, interval 1, probability 0, space 0, times 0 [ 85.496792][ T5033] CPU: 1 UID: 0 PID: 5033 Comm: +}[@ Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 85.496825][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.496839][ T5033] Call Trace: [ 85.496846][ T5033] [ 85.496855][ T5033] dump_stack_lvl+0xf6/0x150 [ 85.496967][ T5033] dump_stack+0x15/0x1a [ 85.496984][ T5033] should_fail_ex+0x261/0x270 [ 85.497071][ T5033] should_failslab+0x8f/0xb0 [ 85.497121][ T5033] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 85.497146][ T5033] ? __alloc_skb+0x10d/0x320 [ 85.497177][ T5033] __alloc_skb+0x10d/0x320 [ 85.497208][ T5033] netlink_alloc_large_skb+0xad/0xe0 [ 85.497266][ T5033] netlink_sendmsg+0x3da/0x720 [ 85.497294][ T5033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.497367][ T5033] __sock_sendmsg+0x140/0x180 [ 85.497431][ T5033] ____sys_sendmsg+0x350/0x4e0 [ 85.497471][ T5033] __sys_sendmsg+0x1a0/0x240 [ 85.497519][ T5033] __x64_sys_sendmsg+0x46/0x50 [ 85.497568][ T5033] x64_sys_call+0x26f3/0x2e10 [ 85.497593][ T5033] do_syscall_64+0xc9/0x1c0 [ 85.497629][ T5033] ? clear_bhb_loop+0x25/0x80 [ 85.497655][ T5033] ? clear_bhb_loop+0x25/0x80 [ 85.497676][ T5033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.497813][ T5033] RIP: 0033:0x7fbc955bd169 [ 85.497831][ T5033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.497850][ T5033] RSP: 002b:00007fbc93c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.497934][ T5033] RAX: ffffffffffffffda RBX: 00007fbc957d5fa0 RCX: 00007fbc955bd169 [ 85.497948][ T5033] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000005 [ 85.497959][ T5033] RBP: 00007fbc93c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 85.497995][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.498007][ T5033] R13: 0000000000000000 R14: 00007fbc957d5fa0 R15: 00007ffd2a9de928 [ 85.498024][ T5033] [ 85.943871][ T5032] loop4: detected capacity change from 0 to 2048 [ 86.758814][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 86.758901][ T29] audit: type=1400 audit(1743255981.819:14954): avc: denied { map } for pid=5038 comm="syz.0.474" path="socket:[10182]" dev="sockfs" ino=10182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 86.919532][ T5046] loop4: detected capacity change from 0 to 1024 [ 86.926740][ T5046] EXT4-fs: Ignoring removed orlov option [ 86.927195][ T5057] : renamed from bond0 (while UP) [ 86.963780][ T29] audit: type=1326 audit(1743255982.019:14955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 86.987311][ T29] audit: type=1326 audit(1743255982.019:14956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.010820][ T29] audit: type=1326 audit(1743255982.019:14957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.034396][ T29] audit: type=1326 audit(1743255982.019:14958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.057802][ T29] audit: type=1326 audit(1743255982.019:14959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.081318][ T29] audit: type=1326 audit(1743255982.049:14960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.094735][ T5064] loop1: detected capacity change from 0 to 164 [ 87.104745][ T29] audit: type=1326 audit(1743255982.049:14961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.134641][ T29] audit: type=1326 audit(1743255982.049:14962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.136961][ T5064] Unable to read rock-ridge attributes [ 87.157942][ T29] audit: type=1326 audit(1743255982.049:14963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5063 comm="syz.1.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 87.195449][ T5064] Unable to read rock-ridge attributes [ 87.358106][ T5071] tun0: tun_chr_ioctl cmd 1074025675 [ 87.363458][ T5071] tun0: persist enabled [ 87.368120][ T5071] tun0: tun_chr_ioctl cmd 1074025675 [ 87.373429][ T5071] tun0: persist disabled [ 87.791287][ T5087] futex_wake_op: syz.0.488 tries to shift op by -1; fix this program [ 87.824312][ T5087] delete_channel: no stack [ 87.828893][ T5087] delete_channel: no stack [ 87.938685][ T5103] rdma_op ffff888118534180 conn xmit_rdma 0000000000000000 [ 88.911268][ T5132] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 89.019230][ T5136] loop4: detected capacity change from 0 to 512 [ 89.470950][ T5137] loop2: detected capacity change from 0 to 512 [ 89.917323][ T5136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.925961][ T5137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.942268][ T5136] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.953373][ T5137] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.074900][ T5149] loop0: detected capacity change from 0 to 2048 [ 90.144197][ T5159] netlink: 24576 bytes leftover after parsing attributes in process `syz.1.511'. [ 91.113706][ T5174] blktrace: Concurrent blktraces are not allowed on loop11 [ 91.160039][ T5174] loop5: detected capacity change from 0 to 512 [ 91.167833][ T5174] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 91.193295][ T5174] EXT4-fs (loop5): 1 truncate cleaned up [ 91.243119][ T5183] serio: Serial port ttyS3 [ 91.548351][ T5199] loop5: detected capacity change from 0 to 2048 [ 91.772212][ T5207] loop0: detected capacity change from 0 to 512 [ 91.788572][ T5207] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.116542][ T5220] blktrace: Concurrent blktraces are not allowed on loop9 [ 92.173568][ T5220] loop4: detected capacity change from 0 to 512 [ 92.180494][ T5220] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.193762][ T5220] EXT4-fs (loop4): 1 truncate cleaned up [ 92.239481][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 92.239499][ T29] audit: type=1326 audit(1743255987.299:15172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.284609][ T29] audit: type=1326 audit(1743255987.299:15173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.308228][ T29] audit: type=1326 audit(1743255987.299:15174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.331821][ T29] audit: type=1326 audit(1743255987.299:15175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.355244][ T29] audit: type=1326 audit(1743255987.329:15176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.378896][ T29] audit: type=1326 audit(1743255987.339:15177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.402329][ T29] audit: type=1326 audit(1743255987.339:15178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.425694][ T29] audit: type=1326 audit(1743255987.339:15179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.449136][ T29] audit: type=1326 audit(1743255987.339:15180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.472813][ T29] audit: type=1326 audit(1743255987.339:15181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.4.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb3276d169 code=0x7ffc0000 [ 92.540176][ T5245] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 92.577083][ T5248] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 92.718178][ T5251] loop5: detected capacity change from 0 to 512 [ 92.877461][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 93.066785][ T5251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.086127][ T5251] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.638667][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 93.648203][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 93.657463][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 93.702284][ T5279] loop2: detected capacity change from 0 to 512 [ 93.710111][ T5279] journal_path: Non-blockdev passed as './bus' [ 93.716335][ T5279] EXT4-fs: error: could not find journal device path [ 93.821622][ T5285] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 93.991524][ T5289] loop2: detected capacity change from 0 to 1024 [ 94.009682][ T5289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 94.026737][ T5289] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.554: bad orphan inode 8 [ 94.048420][ T5289] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 94.081204][ T5289] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 94.096256][ T5289] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 94.317550][ T5316] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 94.488404][ T5328] loop4: detected capacity change from 0 to 2048 [ 94.791193][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 94.856058][ T5349] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 94.885928][ T5351] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 94.924566][ T5353] loop4: detected capacity change from 0 to 2048 [ 95.597770][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 96.020692][ T5383] loop4: detected capacity change from 0 to 2048 [ 96.032349][ T5385] loop0: detected capacity change from 0 to 2048 [ 96.057651][ T5385] netlink: 4 bytes leftover after parsing attributes in process `wg1'. [ 96.244859][ T5412] loop1: detected capacity change from 0 to 512 [ 96.277532][ T5412] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.328350][ T5416] loop5: detected capacity change from 0 to 164 [ 96.343048][ T5416] /dev/loop5: Can't open blockdev [ 96.383024][ T5421] blktrace: Concurrent blktraces are not allowed on loop5 [ 96.413720][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 96.427499][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 96.441282][ T5411] loop2: detected capacity change from 0 to 512 [ 96.449656][ T5411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.461900][ T5411] EXT4-fs (loop2): 1 truncate cleaned up [ 96.470871][ T5411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.598: bg 0: block 254: padding at end of block bitmap is not set [ 96.851249][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 96.918378][ T5451] loop5: detected capacity change from 0 to 512 [ 96.928106][ T5451] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.973849][ T5455] loop5: detected capacity change from 0 to 164 [ 96.998368][ T5455] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.008027][ T5455] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.220597][ T5474] blktrace: Concurrent blktraces are not allowed on loop11 [ 97.244785][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 97.278854][ T5470] loop5: detected capacity change from 0 to 512 [ 97.285713][ T5470] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.406235][ T5470] EXT4-fs (loop5): 1 truncate cleaned up [ 97.418301][ T5462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.614: bg 0: block 254: padding at end of block bitmap is not set [ 97.459376][ T29] kauditd_printk_skb: 1225 callbacks suppressed [ 97.459392][ T29] audit: type=1400 audit(1743255992.519:16407): avc: denied { write } for pid=5490 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 97.561080][ T29] audit: type=1326 audit(1743255992.619:16408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.585296][ T29] audit: type=1326 audit(1743255992.619:16409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.661828][ T29] audit: type=1326 audit(1743255992.639:16410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.685234][ T29] audit: type=1326 audit(1743255992.639:16411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.708692][ T29] audit: type=1326 audit(1743255992.639:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.732216][ T29] audit: type=1326 audit(1743255992.639:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.755979][ T29] audit: type=1326 audit(1743255992.639:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.779563][ T29] audit: type=1326 audit(1743255992.639:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.803285][ T29] audit: type=1326 audit(1743255992.639:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5499 comm="syz.0.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 97.874026][ T5504] blktrace: Concurrent blktraces are not allowed on loop11 [ 97.944483][ T5497] loop5: detected capacity change from 0 to 512 [ 97.951518][ T5497] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.962698][ T5497] EXT4-fs (loop5): 1 truncate cleaned up [ 98.170586][ T5527] blktrace: Concurrent blktraces are not allowed on loop11 [ 98.224021][ T5536] FAULT_INJECTION: forcing a failure. [ 98.224021][ T5536] name failslab, interval 1, probability 0, space 0, times 0 [ 98.237050][ T5536] CPU: 1 UID: 0 PID: 5536 Comm: +}[@ Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 98.237111][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.237124][ T5536] Call Trace: [ 98.237131][ T5536] [ 98.237139][ T5536] dump_stack_lvl+0xf6/0x150 [ 98.237166][ T5536] dump_stack+0x15/0x1a [ 98.237182][ T5536] should_fail_ex+0x261/0x270 [ 98.237211][ T5536] should_failslab+0x8f/0xb0 [ 98.237307][ T5536] __kmalloc_noprof+0xad/0x410 [ 98.237330][ T5536] ? bpf_test_init+0xa9/0x160 [ 98.237386][ T5536] ? _parse_integer+0x27/0x30 [ 98.237413][ T5536] bpf_test_init+0xa9/0x160 [ 98.237443][ T5536] bpf_prog_test_run_nf+0x17f/0x5d0 [ 98.237488][ T5536] ? __rcu_read_unlock+0x4e/0x70 [ 98.237579][ T5536] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 98.237647][ T5536] bpf_prog_test_run+0x20e/0x3a0 [ 98.237691][ T5536] __sys_bpf+0x40d/0x7c0 [ 98.237717][ T5536] __x64_sys_bpf+0x43/0x50 [ 98.237801][ T5536] x64_sys_call+0x23da/0x2e10 [ 98.237826][ T5536] do_syscall_64+0xc9/0x1c0 [ 98.237907][ T5536] ? clear_bhb_loop+0x25/0x80 [ 98.237926][ T5536] ? clear_bhb_loop+0x25/0x80 [ 98.237967][ T5536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.238038][ T5536] RIP: 0033:0x7fbc955bd169 [ 98.238055][ T5536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.238133][ T5536] RSP: 002b:00007fbc93c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.238155][ T5536] RAX: ffffffffffffffda RBX: 00007fbc957d5fa0 RCX: 00007fbc955bd169 [ 98.238170][ T5536] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 98.238182][ T5536] RBP: 00007fbc93c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.238193][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.238203][ T5536] R13: 0000000000000000 R14: 00007fbc957d5fa0 R15: 00007ffd2a9de928 [ 98.238284][ T5536] [ 98.240954][ T5530] loop5: detected capacity change from 0 to 512 [ 98.487491][ T5530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.499765][ T5530] EXT4-fs (loop5): 1 truncate cleaned up [ 98.514924][ T5527] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.636: bg 0: block 254: padding at end of block bitmap is not set [ 98.634115][ T5550] ipvlan2: entered promiscuous mode [ 98.639516][ T5550] ipvlan2: entered allmulticast mode [ 98.644868][ T5550] bridge0: entered allmulticast mode [ 98.650471][ T5552] loop0: detected capacity change from 0 to 512 [ 98.657036][ T5552] EXT4-fs: Ignoring removed bh option [ 98.662622][ T5552] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.669112][ T5552] EXT4-fs: Ignoring removed nobh option [ 98.729625][ T5550] batman_adv: batadv0: Adding interface: ipvlan2 [ 98.736101][ T5550] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.771329][ T5552] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 98.800501][ T5550] batman_adv: batadv0: Interface activated: ipvlan2 [ 98.807517][ T5552] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 98.816218][ T5552] EXT4-fs (loop0): orphan cleanup on readonly fs [ 98.839052][ T5552] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.646: Failed to acquire dquot type 1 [ 98.942612][ T5552] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.646: Invalid block bitmap block 0 in block_group 0 [ 98.958894][ T5552] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.646: Invalid block bitmap block 0 in block_group 0 [ 98.972891][ T5552] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.646: Invalid block bitmap block 0 in block_group 0 [ 98.989382][ T5552] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.646: Failed to acquire dquot type 1 [ 99.000992][ T5552] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.646: Failed to acquire dquot type 1 [ 99.014011][ T5552] EXT4-fs (loop0): 1 orphan inode deleted [ 99.238856][ T5552] EXT4-fs mount: 35 callbacks suppressed [ 99.238879][ T5552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.364717][ T5552] syz.0.646 (5552) used greatest stack depth: 8904 bytes left [ 99.433459][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.487606][ T5571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.652'. [ 99.496821][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 99.550236][ T5584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=5584 comm=syz.2.656 [ 99.586322][ T5580] blktrace: Concurrent blktraces are not allowed on loop1 [ 99.632043][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 99.646203][ T5578] loop0: detected capacity change from 0 to 512 [ 99.653131][ T5578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.664261][ T5578] EXT4-fs (loop0): 1 truncate cleaned up [ 99.670678][ T5578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.708209][ T5578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.654: bg 0: block 254: padding at end of block bitmap is not set [ 99.736585][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.824996][ T5602] loop1: detected capacity change from 0 to 2048 [ 99.918787][ T5602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.964641][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.071158][ T5614] loop2: detected capacity change from 0 to 512 [ 100.083230][ T5612] loop1: detected capacity change from 0 to 512 [ 100.142794][ T5616] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 100.153171][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.161676][ T5616] : (slave team0): Enslaving as an active interface with an up link [ 100.260735][ T5614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 100.299070][ T5612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.410089][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.449894][ T5612] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.485911][ T5614] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.497662][ T5612] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 100.570177][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.912664][ T5633] loop1: detected capacity change from 0 to 512 [ 100.921488][ T5633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.000485][ T5633] EXT4-fs (loop1): 1 truncate cleaned up [ 101.041603][ T5635] loop0: detected capacity change from 0 to 2048 [ 101.063725][ T5633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.079643][ T5631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.669: bg 0: block 254: padding at end of block bitmap is not set [ 101.118337][ T5635] loop0: p1 < > p4 [ 101.127430][ T5639] loop5: detected capacity change from 0 to 2048 [ 101.138950][ T5635] loop0: p4 size 8388608 extends beyond EOD, truncated [ 101.164250][ T5639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.202405][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.338741][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.672'. [ 101.409764][ T5651] loop1: detected capacity change from 0 to 512 [ 101.506605][ T5654] loop4: detected capacity change from 0 to 512 [ 101.530186][ T5651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.547356][ T5651] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.583992][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.617830][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.637357][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.647827][ T5654] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.848777][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.916861][ T5671] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 102.744194][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 102.744211][ T29] audit: type=1400 audit(1743255997.799:16641): avc: denied { ioctl } for pid=5668 comm="syz.0.681" path="socket:[12145]" dev="sockfs" ino=12145 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.776538][ T29] audit: type=1400 audit(1743255997.799:16642): avc: denied { module_request } for pid=5668 comm="syz.0.681" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.806601][ T29] audit: type=1400 audit(1743255997.859:16643): avc: denied { read } for pid=5674 comm="syz.4.682" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.829539][ T29] audit: type=1400 audit(1743255997.859:16644): avc: denied { open } for pid=5674 comm="syz.4.682" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.829568][ T29] audit: type=1400 audit(1743255997.859:16645): avc: denied { ioctl } for pid=5674 comm="syz.4.682" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.829619][ T29] audit: type=1400 audit(1743255997.859:16646): avc: denied { allowed } for pid=5674 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.896663][ T29] audit: type=1400 audit(1743255997.859:16647): avc: denied { create } for pid=5674 comm="syz.4.682" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.917933][ T29] audit: type=1400 audit(1743255997.859:16648): avc: denied { map } for pid=5674 comm="syz.4.682" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.942147][ T29] audit: type=1400 audit(1743255997.859:16649): avc: denied { read write } for pid=5674 comm="syz.4.682" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.974280][ T29] audit: type=1400 audit(1743255997.869:16650): avc: denied { mount } for pid=5674 comm="syz.4.682" name="/" dev="ramfs" ino=12149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.033074][ T5679] blktrace: Concurrent blktraces are not allowed on loop3 [ 103.042057][ T5679] blktrace: Concurrent blktraces are not allowed on loop3 [ 103.042554][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.111509][ T5679] loop1: detected capacity change from 0 to 512 [ 103.122666][ T5679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.141972][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.686'. [ 103.166998][ T5679] EXT4-fs (loop1): 1 truncate cleaned up [ 103.173255][ T5679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.223169][ T5701] capability: warning: `syz.0.689' uses 32-bit capabilities (legacy support in use) [ 103.245099][ T5679] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.683: bg 0: block 254: padding at end of block bitmap is not set [ 103.265101][ T5705] loop4: detected capacity change from 0 to 512 [ 103.334881][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.885284][ T5729] serio: Serial port ptm0 [ 104.176462][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.701'. [ 104.188284][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.207297][ T5742] bridge_slave_1 (unregistering): left allmulticast mode [ 104.214401][ T5742] bridge_slave_1 (unregistering): left promiscuous mode [ 104.221570][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.445374][ T5758] loop0: detected capacity change from 0 to 512 [ 104.468594][ T5758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.524343][ T5758] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.569256][ T5767] loop1: detected capacity change from 0 to 1024 [ 104.583703][ T5767] EXT4-fs: Ignoring removed orlov option [ 104.589586][ T5767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.626941][ T5767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.639340][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.373156][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.743289][ T5813] loop1: detected capacity change from 0 to 512 [ 105.756200][ T5815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.724'. [ 106.632795][ T5811] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 106.645711][ T5813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.668797][ T5813] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.729545][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.760074][ T5828] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 107.927349][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 107.927364][ T29] audit: type=1400 audit(1743256002.989:17305): avc: denied { read } for pid=5848 comm="syz.2.736" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.956423][ T29] audit: type=1400 audit(1743256002.989:17306): avc: denied { open } for pid=5848 comm="syz.2.736" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.153838][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 108.257756][ T5866] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 108.613354][ T29] audit: type=1400 audit(1743256003.039:17307): avc: denied { bind } for pid=5847 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 108.632936][ T29] audit: type=1400 audit(1743256003.039:17308): avc: denied { ioctl } for pid=5847 comm="syz.1.735" path="socket:[13438]" dev="sockfs" ino=13438 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.657742][ T29] audit: type=1326 audit(1743256003.059:17309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 108.681198][ T29] audit: type=1326 audit(1743256003.059:17310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 108.704792][ T29] audit: type=1326 audit(1743256003.059:17311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 108.728275][ T29] audit: type=1326 audit(1743256003.059:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 108.751684][ T29] audit: type=1326 audit(1743256003.059:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5854 comm="syz.0.737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 108.775127][ T29] audit: type=1400 audit(1743256003.099:17314): avc: denied { create } for pid=5847 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.884718][ T5872] loop2: detected capacity change from 0 to 512 [ 108.982890][ T5872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.996381][ T5872] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.031987][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 110.007212][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.368975][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 111.478497][ T5928] loop1: detected capacity change from 0 to 2048 [ 111.578346][ T5932] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 111.588892][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.597490][ T5932] : (slave team0): Enslaving as an active interface with an up link [ 111.613818][ T5271] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 112.321069][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.761'. [ 113.282827][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 113.282859][ T29] audit: type=1326 audit(1743256007.399:18320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37ca94127 code=0x7ffc0000 [ 113.312655][ T29] audit: type=1326 audit(1743256007.399:18321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc37ca39359 code=0x7ffc0000 [ 113.336120][ T29] audit: type=1326 audit(1743256007.399:18322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 113.359728][ T29] audit: type=1326 audit(1743256007.399:18323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37ca94127 code=0x7ffc0000 [ 113.383162][ T29] audit: type=1326 audit(1743256007.399:18324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc37ca39359 code=0x7ffc0000 [ 113.406596][ T29] audit: type=1326 audit(1743256007.399:18325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 113.430074][ T29] audit: type=1326 audit(1743256007.399:18326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37ca94127 code=0x7ffc0000 [ 113.453437][ T29] audit: type=1326 audit(1743256007.399:18327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc37ca39359 code=0x7ffc0000 [ 113.476800][ T29] audit: type=1326 audit(1743256007.399:18328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc37ca9d169 code=0x7ffc0000 [ 113.500323][ T29] audit: type=1326 audit(1743256007.399:18329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.1.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc37ca94127 code=0x7ffc0000 [ 113.793823][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 113.828497][ T5977] netlink: 388 bytes leftover after parsing attributes in process `syz.0.767'. [ 113.855873][ T5978] loop5: detected capacity change from 0 to 2048 [ 113.884896][ T5982] loop4: detected capacity change from 0 to 164 [ 113.895040][ T5978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.936725][ T5982] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 113.945406][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.952253][ T5982] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 114.058407][ T6004] blktrace: Concurrent blktraces are not allowed on loop9 [ 114.120555][ T6002] blktrace: Concurrent blktraces are not allowed on loop11 [ 114.144844][ T5999] loop4: detected capacity change from 0 to 512 [ 114.151890][ T5999] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.167181][ T5999] EXT4-fs (loop4): 1 truncate cleaned up [ 114.167597][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 114.173450][ T5999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.198376][ T5999] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.773: bg 0: block 254: padding at end of block bitmap is not set [ 114.243356][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.458749][ T6032] loop1: detected capacity change from 0 to 2048 [ 114.478282][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.501694][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.750748][ T6042] blktrace: Concurrent blktraces are not allowed on loop1 [ 114.928073][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 115.314423][ T6088] loop2: detected capacity change from 0 to 512 [ 115.325974][ T6088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.450881][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.800'. [ 115.510224][ T6096] loop5: detected capacity change from 0 to 512 [ 115.595750][ T6088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.608497][ T6088] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.892982][ T6096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.963129][ T6096] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.550457][ T6109] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 116.573761][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.136572][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.233306][ T6157] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 118.859951][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 118.859968][ T29] audit: type=1326 audit(1743256013.919:18759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 118.873635][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 118.889495][ T29] audit: type=1326 audit(1743256013.919:18760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 118.975358][ T29] audit: type=1326 audit(1743256013.919:18761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 118.998841][ T29] audit: type=1326 audit(1743256013.919:18762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 119.022255][ T29] audit: type=1326 audit(1743256013.919:18763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 119.045651][ T29] audit: type=1326 audit(1743256013.919:18764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 119.069145][ T29] audit: type=1326 audit(1743256013.919:18765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 119.092686][ T29] audit: type=1326 audit(1743256013.919:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 119.116395][ T29] audit: type=1326 audit(1743256013.919:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 119.139834][ T29] audit: type=1326 audit(1743256013.919:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.0.824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fc08560d169 code=0x7ffc0000 [ 119.178842][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 119.190143][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 119.200976][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 119.232322][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'. [ 119.289048][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 119.455914][ T6204] loop5: detected capacity change from 0 to 164 [ 119.536660][ T6204] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.569060][ T6204] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 119.787621][ T6210] loop2: detected capacity change from 0 to 2048 [ 120.429905][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 120.489768][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 120.505255][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 120.531485][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 120.558540][ T6210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.693973][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.026709][ T6247] loop2: detected capacity change from 0 to 512 [ 121.115560][ T6247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.225639][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.344750][ T6247] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.946038][ T6270] loop5: detected capacity change from 0 to 512 [ 121.970128][ T6270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.985291][ T6270] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.068197][ T6273] blktrace: Concurrent blktraces are not allowed on loop1 [ 122.095820][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.466328][ T6292] loop4: detected capacity change from 0 to 512 [ 122.947035][ T6292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.087718][ T6292] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.338154][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.351183][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.487147][ T6319] loop2: detected capacity change from 0 to 2048 [ 123.538926][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.462832][ T6321] loop4: detected capacity change from 0 to 512 [ 124.474373][ T6321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.499462][ T29] kauditd_printk_skb: 2074 callbacks suppressed [ 124.499475][ T29] audit: type=1326 audit(1743256018.659:20843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 124.529189][ T29] audit: type=1326 audit(1743256018.659:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 124.552630][ T29] audit: type=1326 audit(1743256018.659:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 124.576002][ T29] audit: type=1326 audit(1743256018.659:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 124.599313][ T29] audit: type=1326 audit(1743256018.659:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 124.622635][ T29] audit: type=1326 audit(1743256018.659:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 124.645972][ T29] audit: type=1326 audit(1743256018.659:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 124.669418][ T29] audit: type=1326 audit(1743256018.659:20850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 124.737718][ T6321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.750328][ T6321] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.779240][ T29] audit: type=1326 audit(1743256019.759:20851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc085604127 code=0x7ffc0000 [ 124.792801][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.802657][ T29] audit: type=1326 audit(1743256019.759:20852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6329 comm="syz.0.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0855a9359 code=0x7ffc0000 [ 125.079684][ T6343] loop5: detected capacity change from 0 to 512 [ 125.102179][ T6343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.115136][ T6343] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.158284][ T6345] __nla_validate_parse: 11 callbacks suppressed [ 125.158300][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 125.175920][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.202177][ T6361] netlink: 388 bytes leftover after parsing attributes in process `syz.0.884'. [ 125.234370][ T6358] loop2: detected capacity change from 0 to 2048 [ 125.259779][ T6358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.467676][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.477863][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 125.518563][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 125.528158][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 125.537452][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 125.631348][ T6393] loop5: detected capacity change from 0 to 2048 [ 125.652753][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.702866][ T6402] loop5: detected capacity change from 0 to 2048 [ 125.721873][ T6401] loop2: detected capacity change from 0 to 164 [ 125.742440][ T6402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.742542][ T6401] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 125.777191][ T6401] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.297810][ T6402] ================================================================== [ 126.305928][ T6402] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 126.314214][ T6402] [ 126.316549][ T6402] write to 0xffff8881072ccff4 of 4 bytes by task 6411 on cpu 0: [ 126.324177][ T6402] xas_set_mark+0x13d/0x150 [ 126.328689][ T6402] __folio_start_writeback+0x1ea/0x440 [ 126.334159][ T6402] ext4_bio_write_folio+0x591/0x9d0 [ 126.339372][ T6402] mpage_process_page_bufs+0x488/0x5d0 [ 126.344852][ T6402] mpage_prepare_extent_to_map+0x791/0xb80 [ 126.350667][ T6402] ext4_do_writepages+0xa3b/0x21d0 [ 126.355787][ T6402] ext4_writepages+0x183/0x320 [ 126.360578][ T6402] do_writepages+0x1d8/0x480 [ 126.365178][ T6402] file_write_and_wait_range+0x16e/0x2f0 [ 126.370815][ T6402] generic_buffers_fsync_noflush+0x46/0x120 [ 126.376729][ T6402] ext4_sync_file+0x1c3/0x6c0 [ 126.381428][ T6402] vfs_fsync_range+0x116/0x130 [ 126.386190][ T6402] ext4_buffered_write_iter+0x358/0x3c0 [ 126.391739][ T6402] ext4_file_write_iter+0xe49/0xf80 [ 126.396982][ T6402] iter_file_splice_write+0x5f2/0x980 [ 126.402387][ T6402] direct_splice_actor+0x160/0x2c0 [ 126.407517][ T6402] splice_direct_to_actor+0x305/0x680 [ 126.412929][ T6402] do_splice_direct+0xd9/0x150 [ 126.417717][ T6402] do_sendfile+0x40a/0x690 [ 126.422164][ T6402] __x64_sys_sendfile64+0x113/0x160 [ 126.427414][ T6402] x64_sys_call+0xfc3/0x2e10 [ 126.432006][ T6402] do_syscall_64+0xc9/0x1c0 [ 126.436531][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.442434][ T6402] [ 126.444751][ T6402] read to 0xffff8881072ccff4 of 4 bytes by task 6402 on cpu 1: [ 126.452289][ T6402] filemap_write_and_wait_range+0x105/0x370 [ 126.458185][ T6402] filemap_invalidate_pages+0xa8/0x1a0 [ 126.463658][ T6402] kiocb_invalidate_pages+0x6c/0x80 [ 126.468864][ T6402] __iomap_dio_rw+0x5d4/0x12a0 [ 126.473655][ T6402] iomap_dio_rw+0x40/0x90 [ 126.477996][ T6402] ext4_file_write_iter+0xba9/0xf80 [ 126.483198][ T6402] iter_file_splice_write+0x5f2/0x980 [ 126.488580][ T6402] direct_splice_actor+0x160/0x2c0 [ 126.493727][ T6402] splice_direct_to_actor+0x305/0x680 [ 126.499128][ T6402] do_splice_direct+0xd9/0x150 [ 126.503922][ T6402] do_sendfile+0x40a/0x690 [ 126.508342][ T6402] __x64_sys_sendfile64+0x113/0x160 [ 126.513541][ T6402] x64_sys_call+0xfc3/0x2e10 [ 126.518131][ T6402] do_syscall_64+0xc9/0x1c0 [ 126.522645][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.528540][ T6402] [ 126.530869][ T6402] value changed: 0x0a000021 -> 0x04000021 [ 126.536582][ T6402] [ 126.538904][ T6402] Reported by Kernel Concurrency Sanitizer on: [ 126.545060][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.5.899 Not tainted 6.14.0-syzkaller-09584-g7d06015d936c #0 PREEMPT(voluntary) [ 126.557047][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.567138][ T6402] ================================================================== [ 126.758608][ T4888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.