last executing test programs: 21.911384822s ago: executing program 1 (id=792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x2, 0x84) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000000000)='./file1\x00', 0x204419, &(0x7f00000004c0)=ANY=[], 0x1, 0x5b2, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0x7c8) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0xfffffffd, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@grpquota}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x452, &(0x7f0000000480)="$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") socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 21.822325393s ago: executing program 1 (id=794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a32000000000500010007"], 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xcf, 0xd9, &(0x7f0000000280)="89c2b7db4344566af29c72bddc6e21d9af7fcfb49c72b34ae8c14418bb30a797bc47dd1a2014d21a22a34781d4be7f579e4c54c4265d44f7de1004cc5c5c6d0bb51791733cd91f8f1e5dc4399339202f97aa13952b158b602f864502499fecb68909c83cf33fa67ea7de550013fcfc5f73e3a41ab93654aaa1840291023c8314720464dee44b734a1074f26df01f3ef40e0cb339647909a9732d6cfe39a244f4868862347fdd662ec3f4701d6d2d79b71b4388aa84d6be398a4e1a5a3700928ce9449c7e99634fa1e3c834e852e328", &(0x7f00000004c0)=""/217, 0xffffff85, 0x0, 0x0, 0x60, &(0x7f0000000080), &(0x7f00000001c0)="69f8b34a1ebee323071b69744f45ec542abbdb74f5eb85bb098590c4071718aa74e7130019d9d7aeb7dde2c06534216eae1ed036fdb42c578c15e6710efdb032c8c0d8d5f98f9467a2af45183ef94cf8ac3afafca554c13aab7e5198bb3dbd3b", 0x6, 0x0, 0x3ff}, 0x50) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rds(0x15, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21.760717083s ago: executing program 1 (id=796): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 21.652372944s ago: executing program 1 (id=800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000356800000900000015000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000010ef7ce688400e73daaf34579efecfdc732de791c7f37b5fcc083322b2eecab93bbe66a4b7507fc913a484fda946b9394e1d15e30b9aff797a4856aa3cd14141b3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x54c77c5b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sched_setscheduler(0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000bc0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x5, 0x3, 0x80}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x74}], &(0x7f0000000c80)='syzkaller\x00', 0x4, 0xdb, &(0x7f0000000cc0)=""/219, 0x40f00, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0x7, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000e40)=[0xffffffffffffffff], &(0x7f0000000e80)=[{0x1, 0x1, 0x10}], 0x10, 0x5, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r9, 0xc6c3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xe, 0x28, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x22, &(0x7f0000000340)=""/34, 0x41000, 0x40, '\x00', r1, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r2, r7, 0x0, &(0x7f0000000fc0)=[r8, r9], 0x0, 0x10, 0x1, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r10}, 0x10) unshare(0x40000000) 20.796043839s ago: executing program 1 (id=811): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 20.695785689s ago: executing program 1 (id=817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xe}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) 5.402510788s ago: executing program 32 (id=817): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0xffffffffffffffff}], 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r0, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xe}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r6, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) 3.200168661s ago: executing program 4 (id=1020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000356800000900000015000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000010ef7ce688400e73daaf34579efecfdc732de791c7f37b5fcc083322b2eecab93bbe66a4b7507fc913a484fda946b9394e1d15e30b9aff797a4856aa3cd14141b3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x54c77c5b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sched_setscheduler(0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000bc0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x5, 0x3, 0x80}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x74}], &(0x7f0000000c80)='syzkaller\x00', 0x4, 0xdb, &(0x7f0000000cc0)=""/219, 0x40f00, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0x7, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000e40)=[0xffffffffffffffff], &(0x7f0000000e80)=[{0x1, 0x1, 0x10}], 0x10, 0x5, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000f80)={{0x1, 0x1, 0x18}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) lseek(0xffffffffffffffff, 0xc6c3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 2.471601726s ago: executing program 5 (id=988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000040180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640000000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a32000000000500010007"], 0x4c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xdc, 0xd9, &(0x7f0000000280)="89c2b7db4344566af29c72bddc6e21d9af7fcfb49c72b34ae8c14418bb30a797bc47dd1a2014d21a22a34781d4be7f579e4c54c4265d44f7de1004cc5c5c6d0bb51791733cd91f8f1e5dc4399339202f97aa13952b158b602f864502499fecb68909c83cf33fa67ea7de550013fcfc5f73e3a41ab93654aaa1840291023c8314720464dee44b734a1074f26df01f3ef40e0cb339647909a9732d6cfe39a244f4868862347fdd662ec3f4701d6d2d79b71b4388aa84d6be398a4e1a5a3700928ce9449c7e99634fa1e3c834e852e328e4cd539406c28e9aa119aff453", &(0x7f00000004c0)=""/217, 0xffffff85, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0x6, 0x0, 0x3ff}, 0x50) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$rds(0x15, 0x5, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.234259947s ago: executing program 4 (id=1027): r0 = socket$inet_dccp(0x2, 0x6, 0x0) socketpair(0x27, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) getsockopt$inet_int(r0, 0x10d, 0xd5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ed2de44f14c63d468d0218000000000000000000268186", @ANYRES32=r2, @ANYBLOB="00000000000000003702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf9100000085000000b700"/89], &(0x7f0000001dc0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0x2d, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, 0x80, 0x0}, 0x20040010) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x29c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) add_key$fscrypt_provisioning(&(0x7f0000000500), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000340)={0x2, 0x0, @auto=[0xc, 0x21, 0x3c, 0x31]}, 0xc, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r7, &(0x7f0000000440), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='z,', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000007000000006574683a73797a6b616c6c6572300000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="1400000aee3e9bee4d9dddc6e4375a806f8c6394", 0x14}], 0x1}, 0x0) recvmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000004980)=""/4131, 0x1023}], 0x2}, 0x42) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) 1.83262447s ago: executing program 4 (id=1033): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x58}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0xffff, 0x0, 0x0, 0x5, 0x0, 0x400], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1.77746208s ago: executing program 4 (id=1034): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x0, 0x80, 0x200, 0x10}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 1.73200756s ago: executing program 4 (id=1036): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8010, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1cc25a00", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$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") 1.145162973s ago: executing program 2 (id=1046): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00', @ANYRES16=r9, @ANYBLOB="a903000000000000000032000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r9, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a00)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0x85, 0x10000000, 0x101, 0x80000001}, 0x2, 0xcf}, [{0x100, 0x401, 0x3, 0x3ff, 0x0, 0x9}, {0x0, 0x5, 0x7, 0x3, 0xffff3bf3, 0x6}, {0xfffffff9, 0x0, 0xc, 0x95, 0x1, 0x53}, {0x7fff, 0x4, 0x2, 0x43d6, 0x5, 0x4}, {0xfffffffb, 0xaf4, 0xff, 0x0, 0x4, 0xfffffff9}, {0x6, 0x8, 0x5, 0x7, 0xfffeffff, 0xcb66}, {0x5, 0x7, 0x6, 0x2, 0xb, 0x17e}, {0x6, 0xe, 0x0, 0x5, 0x1, 0x2}, {0x2, 0x4, 0x6, 0xff, 0xe7}, {0x8, 0x3, 0x630, 0x8000, 0x4, 0xa6a5}, {0x5, 0x9, 0x1ff, 0x10000, 0xfffffffd, 0x94000000}, {0x7, 0x3, 0x2, 0xf28, 0x7, 0x8}, {0x7, 0xe6, 0x2, 0x0, 0x8001, 0x4}, {0x6, 0x2, 0xf, 0x6, 0x0, 0xe51f}, {0xffff8000, 0x10, 0x5, 0x0, 0x6, 0x3}, {0x9, 0xc, 0x10, 0x0, 0x6, 0x1}, {0x0, 0x140000, 0x4, 0x200, 0x1, 0xfffffff6}, {0x9, 0x10001, 0x0, 0x4, 0x2}, {0x80000000, 0x2, 0x3, 0x1, 0x772, 0x5}, {0x0, 0x9, 0x1, 0x80, 0x0, 0x8}, {0x5, 0x72b, 0x4, 0x3e1, 0x1000, 0x68f087b1}, {0x7, 0xc, 0xa0, 0x3, 0x4, 0x2}, {0x8, 0xb2, 0xe, 0xd91, 0x7, 0x8}, {0x24, 0xfffffffc, 0x9, 0x100, 0x1000, 0x8}, {0x40, 0x3, 0x7e, 0xb, 0x401, 0x8001}, {0x7, 0x5, 0x9, 0xadb, 0xf, 0x3}, {0x0, 0xfffffffe, 0x7, 0x3, 0xfa5f, 0x7}, {0x5, 0xf186, 0x1, 0x2, 0x2, 0x2}, {0x25ea92ec, 0x2, 0x5, 0x5, 0x10, 0x6}, {0x3, 0x2, 0x4, 0xde08, 0x4, 0x4}, {0x8, 0x6, 0x4, 0x3, 0x96c4}, {0x11, 0x7f, 0x6fe4, 0x1, 0x8, 0xffff}, {0x9, 0x10001, 0x800, 0x0, 0x10001, 0x3}, {0x2, 0x80, 0x4, 0x8, 0x4, 0x10001}, {0x8, 0x8000, 0xffffff7f, 0x7fffffff, 0x400, 0xb88}, {0xff2, 0x2, 0x1, 0x80000000, 0x48f4, 0x5}, {0x9, 0x8, 0x5, 0x1, 0x8000, 0x6}, {0x200, 0x8001, 0x0, 0xfffeffff, 0x7fff, 0xf}, {0x11, 0xfffffff4, 0xa48, 0x20, 0xd, 0x4}, {0x0, 0x0, 0x4, 0x7, 0xa32, 0x7fffffff}, {0x5, 0x0, 0x5, 0x81, 0x36b31344, 0x7}, {0x34, 0xc196, 0x7, 0x9, 0x6, 0xfffffffe}, {0x2, 0x0, 0xfffffe01, 0xffff0000, 0xf, 0xadc1}, {0x7, 0x1, 0x5, 0xde59, 0x6, 0xaa7c}, {0x80000001, 0x9, 0x7, 0x3, 0x9, 0x9}, {0x200, 0x4, 0x7fff, 0xff800000, 0x6, 0x800}, {0x9, 0x8, 0xfc6, 0x3, 0x7fffffff, 0x32}, {0x2, 0x6, 0x4ce0, 0x10, 0x5, 0x3}, {0x7, 0x6, 0x1, 0x4, 0x6}, {0xffffffff, 0x3, 0xfffff800, 0x10, 0x7fffffff, 0xffffffff}, {0x7, 0x6, 0xfffffffa, 0x1, 0x80000001, 0x8}, {0xfffffff9, 0x8, 0x9, 0x8, 0x0, 0x2}, {0x5, 0x1ff, 0x7, 0xe, 0x8, 0x6}, {0x2, 0x2, 0xea, 0x1, 0x4, 0x8}, {0x5, 0x99, 0x1, 0x3, 0xc, 0xec}, {0x2, 0x7f, 0x4, 0x6, 0xec36, 0x9}, {0x8, 0x3, 0x24000000, 0x5, 0x4, 0xff}, {0x7ff, 0xcf1, 0x7f, 0xd3, 0x3ff}, {0xfffffffb, 0x8, 0x9, 0x2, 0xc, 0x5}, {0x9, 0x8, 0x8001, 0x9, 0x6, 0x6}, {0x1ff, 0x7, 0xac, 0x254, 0x7, 0x80000000}, {0x0, 0x5, 0x0, 0x1, 0x6, 0x5}, {0x7, 0x1, 0x400, 0x7}, {0x1b7, 0x4, 0x6, 0xe6, 0x6, 0x6}, {0x5, 0xfffffff7, 0x7, 0xca1, 0x5, 0xfffffffc}, {0x7, 0x5, 0x4, 0x9, 0x8, 0x10}, {0xb, 0x3, 0x5, 0x7, 0x0, 0x2}, {0x7, 0x10, 0x4, 0x4, 0x2, 0x3}, {0xf, 0x9, 0x3, 0xc, 0xa, 0x8}, {0xfff, 0x26, 0x1ff, 0x8, 0x9, 0x2}, {0x7, 0x0, 0xa013c2a, 0xb, 0x3, 0x80}, {0x2, 0x8, 0x81, 0xa4, 0xc8, 0x80e7}, {0x2, 0xfffffb5e, 0x80, 0x8001, 0xc}, {0xffffffff, 0x3, 0x9, 0x0, 0x3, 0x7be}, {0x8001, 0xfffffff9, 0x2, 0xfffffff5, 0x1, 0xffff}, {0x88, 0xb, 0x7, 0x6, 0x1, 0xbdda}, {0x4, 0x7, 0x4, 0x9, 0x8, 0x86}, {0x7f, 0xffffffad, 0x7, 0x7, 0x601, 0x2}, {0x69c6, 0x8, 0x2, 0x1ff, 0xd, 0x1ff}, {0xff, 0x2, 0x9, 0x81, 0x1ff, 0x1ff}, {0x8000, 0x4, 0xfa95, 0x4, 0x3}, {0x6, 0xe19, 0x47d1a8c0, 0x638e, 0xffc00000, 0x7f}, {0x800, 0x92ad, 0x6, 0x0, 0x1, 0x8}, {0x7, 0x9, 0x0, 0x1, 0x6553}, {0x606, 0x100, 0x7, 0x7fffffff, 0xc5d, 0x9}, {0x2, 0xff, 0x2, 0xfffffffd, 0x3, 0x7}, {0x5, 0x642, 0xf, 0x81, 0x2, 0x7fff}, {0x10001, 0x79, 0x0, 0x7, 0xecf, 0x10}, {0x1, 0x8, 0x7, 0x30b96ad4, 0x2, 0x55f}, {0x0, 0x3, 0x7, 0x3, 0x6, 0xfffffffc}, {0xb, 0x1, 0x0, 0x5, 0x2, 0x5}, {0x3a6, 0x4, 0x3, 0x1, 0x4, 0x40}, {0x6, 0x4, 0x401, 0x0, 0x4, 0x5}, {0x7, 0x9ff, 0x9, 0x85, 0xec, 0x5}, {0x2, 0x6, 0x0, 0x1000, 0x1, 0x1}, {0x7, 0x7, 0x101, 0x800, 0x8, 0x5150792f}, {0x38, 0x1, 0x29, 0x81, 0x364c, 0x7}, {0x0, 0x69, 0x8001, 0x2, 0x2800, 0x10}, {0x1, 0x4, 0x7f, 0x9}, {0x9314, 0x6dc, 0x80000000, 0x10000, 0x1, 0x6}, {0x3, 0x0, 0x1, 0x0, 0xe32, 0x1}, {0x275, 0x7ff, 0x714, 0xff, 0x800, 0x3f}, {0x6, 0x0, 0x0, 0x63, 0xd7, 0x7}, {0xffffff81, 0x2, 0x1ff, 0xd, 0x8001, 0x1}, {0x9, 0x6, 0x8, 0x6, 0x8, 0x200}, {0x2, 0x3, 0x3, 0x7, 0xfff, 0x8ec}, {0x8f, 0x400, 0x2, 0x1410, 0x80000001, 0x101}, {0x400, 0x5, 0x3, 0x59c, 0x3, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x101, 0x81}, {0x4, 0x5, 0x4, 0xff000000, 0x2, 0x9}, {0x0, 0x10000, 0x8, 0x400, 0x3}, {0xe, 0x7, 0x968, 0x9, 0xfffffff8, 0x8}, {0xfff, 0x100, 0xffffffff, 0x0, 0x3, 0x7fffffff}, {0x38000, 0xfffffffc, 0xa55, 0x2, 0x1, 0x3}, {0x8, 0x1, 0x4, 0xb, 0x7fff, 0x3}, {0x9, 0x6, 0x8, 0xb, 0x2, 0x5}, {0x7, 0x0, 0xfffffff4, 0xc8c2, 0x9, 0x9}, {0xfffffffe, 0x0, 0x400, 0x9, 0x8, 0x3}, {0x65da, 0x7, 0xc, 0x10, 0xaf5, 0x2}, {0x2, 0x101, 0x40000, 0x0, 0x81, 0x5ee}, {0x0, 0x80, 0x7d, 0x6, 0x5, 0x7}, {0x1, 0x6, 0x6, 0x1, 0x0, 0x7}, {0x0, 0xffffff80, 0x5, 0x10000}, {0x1000, 0x57a, 0x1, 0x150, 0x48, 0xfffffff7}, {0xff, 0x2, 0xfffff062, 0x4, 0x6, 0x839}, {0x803, 0x4, 0x4, 0x800, 0x3, 0x5}, {0x6, 0x20000, 0x1, 0x4, 0x7d37e82b, 0x1}, {0x5, 0x2, 0x1, 0x5, 0x7f, 0xf}], [{0x3, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x7}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2701bacba0e67511, 0xb2e20321f287c22d}, {0x2, 0x89d99ddbf36fb21a}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 986.703364ms ago: executing program 3 (id=1049): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (fail_nth: 1) 986.233544ms ago: executing program 2 (id=1050): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) 741.238946ms ago: executing program 2 (id=1051): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) 681.674346ms ago: executing program 3 (id=1052): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400000000fddbdf25efff0400", @ANYRES32=0x0, @ANYBLOB="0003000001000100140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) 681.058276ms ago: executing program 2 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000000000000ff07000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 601.545486ms ago: executing program 0 (id=1055): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000f1ffffff000000fbfffffd00edffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 582.268966ms ago: executing program 3 (id=1056): bpf$MAP_CREATE(0x0, 0x0, 0x0) 581.587496ms ago: executing program 2 (id=1057): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000600)={0x2, 0x0, 0xfffffffe}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) flistxattr(r2, 0x0, 0x0) 577.360637ms ago: executing program 0 (id=1058): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcc2) mount(0x0, 0x0, &(0x7f0000002000)='devtmpfs\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = getpgrp(0xffffffffffffffff) r2 = getpid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x4, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x0, @in=@private, 0x0, 0x4}, {{@in=@dev}, 0xa, @in6=@private1, 0x0, 0x1}]}]}, 0x1fc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x14) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x25dfdbfc, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000340)=0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x9c, r9, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000580)="f053e5ae8743d2e0cf43dcd7e9f45c0c37b68efa613a6dbe21aa736d57e9eb6f1b394542a05c1ed125834ac0075c1879f2dd99ce8c1005b7fa7d042296d972b56e79ec5bf9b7f51340f3117c098724c50934c3871691e433c39898a016eb8280759f9722e1e4aa398cccb65786cabfcf176173bf49666ce9af6cc43ae0cc0c3d62c52932e1cd7ea60001740f7977c66c339e48219097d0dc0a766f9941c14cacaa97e37b447c63be263417cddf730da01dd26fe3899ac72c3e97b91244bcd1fb8be3b904", 0xc4) 474.154207ms ago: executing program 3 (id=1059): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000f1ffffff000000fbfffffd00edffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00'}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 445.166777ms ago: executing program 3 (id=1060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020600) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x102000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 277.872028ms ago: executing program 2 (id=1061): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = dup(r5) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r1, r0, 0x0, 0x3ffff) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r9, 0x0, 0x25, 0x0, @val=@perf_event}, 0x40) sendfile(r1, r0, 0x0, 0x7ffff000) 262.674999ms ago: executing program 3 (id=1062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000356800000900000015000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000010ef7ce688400e73daaf34579efecfdc732de791c7f37b5fcc083322b2eecab93bbe66a4b7507fc913a484fda946b9394e1d15e30b9aff797a4856aa3cd14141b3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x54c77c5b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000980)=[{}], 0x8, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sched_setscheduler(0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x8}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000bc0)=@raw=[@jmp={0x5, 0x0, 0xa, 0x5, 0x3, 0x80}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x74}], &(0x7f0000000c80)='syzkaller\x00', 0x4, 0xdb, &(0x7f0000000cc0)=""/219, 0x40f00, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0x7, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000e40)=[0xffffffffffffffff], &(0x7f0000000e80)=[{0x1, 0x1, 0x10}], 0x10, 0x5, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0xc6c3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 260.743518ms ago: executing program 0 (id=1063): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000002afd0f05b470553d8ef9ca0a", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008000"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c2c6d706f6c3d6c6f63616c3d7306617469633a2c00da7fb69b44f2cc426871f6aa92b0fd3bf8df5e8348199c37dc8746fd2b749112255fda87a45c463fadebea7523f62b435bf21b"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e005c0004000000080000000f00000000000000b02d53503476a3425bcd8a9670d0c7f3f8837c133b2a9111f474d0a65b4321b03f424e6dfcd0a8f24481d884ae8b09123cb5530994a5f79ca460632bb492f32894bafa364ced85e7a23e7133a09c655a66ae7fa15e38c0ff0eafab78d51b51dc370d14b1bf3b5c0cd01242b5c4862a1671f96773188c5f5080d86c2d2411e3ba27fa77d9c0450ea98cd002d83f48a5e0b0cc3017aa4c8c4fe7c1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000140)='\x00', 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x198) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='svcrdma_small_wrch_err\x00', r10, 0x0, 0x3}, 0x18) 213.149209ms ago: executing program 0 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000002000a00000a98000000060a02000000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080006400000000f0800014000000000340005800c0001007061796c6f6164002400028008000440000000b5080001400000000a08000240e2a69900000073797a30000000000900020073797a3200000001000000000000000000030000000000000005a82f00"/195], 0xc0}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x14b2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') chroot(&(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000900)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x4000854) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000540)=@random={'btrfs.', 'trusted.overlay.upper\x00'}, &(0x7f00000008c0)='\x00', 0x1, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0xfffffffffffffd05, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x18a}, 0x401a, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) 111.617939ms ago: executing program 0 (id=1065): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x4008090) 110.579359ms ago: executing program 0 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r5, 0x0, 0x200}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "000000b72000", "0d07080d004fcfabd5e8ffff1a8600", "aba200fe", "865703b7e43b34e4"}, 0x28) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) 67.64509ms ago: executing program 4 (id=1067): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000017008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394fbe586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50783bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300030000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054dedbb92f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcbe821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8be953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77f0100000000000000216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd1000080000c4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c181e00000000000000e2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3589089ac793fb54ed922f25090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000e96eb315fd324df2618c0b36d6dddbc70c12522ffa75582869dc76d46f87e43824394c5cdacc799bc0354a1cee908124b6ac5d9319c735e9996fee816a990000000000000000000000000000004ef399fd0747f6cadb3ec0b30c8ce5b846987ab5636c68fbb000905aa97e154f07acf63265c709736747a7a8946e4ad14b5d5e01d452fd2576894553fcfc38fafd38d5677b8ccab066ec"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x50) 52.053169ms ago: executing program 5 (id=1068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="160000000000000000000000ff07000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 0s ago: executing program 5 (id=1069): io_uring_enter(0xffffffffffffffff, 0x4, 0x100, 0x12, 0x0, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x19, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @alu={0x0, 0x0, 0x8, 0x9, 0x1, 0x8, 0xfffffffffffffff8}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x8, 0x5, 0x8, 0x100, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10b}}}, &(0x7f0000000040)='syzkaller\x00', 0xfa, 0xe4, &(0x7f00000001c0)=""/228, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x1, 0x2, 0x0, 0xb}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='unmap\x00', r1, 0x0, 0x9d17}, 0x18) write$selinux_access(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="73797374656d5f753a6f626af7db745f723a6c6f67696e5f657865635f743a7330202f7573728b944cefe3332f6c69622f74656c6570617468792f6d697373696f6e2d636f6e74726f6c2d352030"], 0x5c) lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x1) kernel console output (not intermixed with test programs): tes in process `syz.4.401'. [ 54.885339][ T4706] smc: net device wg0 applied user defined pnetid SYZ0 [ 54.907658][ T4706] netlink: 'syz.4.403': attribute type 39 has an invalid length. [ 54.926755][ T4706] smc: removing net device wg0 with user defined pnetid SYZ0 [ 54.981222][ T4720] loop1: detected capacity change from 0 to 2048 [ 55.031405][ T50] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.046455][ T50] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.058743][ T50] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.058743][ T50] [ 55.068501][ T50] EXT4-fs (loop1): Total free blocks count 0 [ 55.074488][ T50] EXT4-fs (loop1): Free/Dirty block details [ 55.080413][ T50] EXT4-fs (loop1): free_blocks=2415919104 [ 55.086179][ T50] EXT4-fs (loop1): dirty_blocks=16 [ 55.091294][ T50] EXT4-fs (loop1): Block reservation details [ 55.097460][ T50] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 55.129551][ T4736] nfs4: Bad value for 'source' [ 55.192465][ T4740] loop4: detected capacity change from 0 to 512 [ 55.218791][ T4740] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.247413][ T4740] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.411: corrupted xattr block 32: e_value out of bounds [ 55.286337][ T4740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.306175][ T4740] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.411: corrupted xattr block 32: e_value out of bounds [ 55.324613][ T4760] SELinux: Context Ü is not valid (left unmapped). [ 55.331593][ T4740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.344563][ T4740] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.411: corrupted xattr block 32: e_value out of bounds [ 55.364770][ T4740] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.411: corrupted xattr block 32: e_value out of bounds [ 55.390054][ T4740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 55.519428][ T4790] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 55.549811][ T4792] loop4: detected capacity change from 0 to 128 [ 55.571402][ T4792] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.583515][ T4792] C: renamed from team_slave_0 (while UP) [ 55.590774][ T4792] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 55.599490][ T4792] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 55.664030][ T4797] nfs4: Bad value for 'source' [ 56.156199][ T4815] loop2: detected capacity change from 0 to 1024 [ 56.168802][ T4815] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.195983][ T4815] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.2.430: corrupted in-inode xattr: bad magic number in in-inode xattr [ 56.239057][ T4824] loop2: detected capacity change from 0 to 128 [ 56.247576][ T4824] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.259888][ T4824] C: renamed from team_slave_0 (while UP) [ 56.267198][ T4824] netlink: 'syz.2.433': attribute type 1 has an invalid length. [ 56.275850][ T4824] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 56.534581][ T4838] nfs4: Bad value for 'source' [ 56.609588][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 56.802822][ T4849] loop4: detected capacity change from 0 to 1024 [ 56.854416][ T4849] EXT4-fs: Mount option(s) incompatible with ext2 [ 56.881468][ T4851] nfs4: Bad value for 'source' [ 57.044112][ T4859] netlink: 96 bytes leftover after parsing attributes in process `syz.0.448'. [ 57.148887][ T4871] nfs4: Bad value for 'source' [ 57.168407][ T4865] loop2: detected capacity change from 0 to 512 [ 57.190041][ T4865] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.210793][ T4865] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.449: corrupted xattr block 32: e_value out of bounds [ 57.228228][ T4865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 57.237567][ T4865] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.449: corrupted xattr block 32: e_value out of bounds [ 57.253270][ T4865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 57.262674][ T4865] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.449: corrupted xattr block 32: e_value out of bounds [ 57.278114][ T4865] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.449: corrupted xattr block 32: e_value out of bounds [ 57.293679][ T4865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 57.293887][ T4889] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 57.527282][ T4921] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 57.589213][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 57.903396][ T4954] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 58.045206][ T4962] netlink: 'syz.1.474': attribute type 4 has an invalid length. [ 58.064613][ T4964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.477'. [ 58.101659][ T4965] loop2: detected capacity change from 0 to 512 [ 58.140228][ T4965] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.171682][ T4976] FAULT_INJECTION: forcing a failure. [ 58.171682][ T4976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.184793][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: syz.0.481 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 58.195100][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.205243][ T4976] Call Trace: [ 58.208555][ T4976] [ 58.211505][ T4976] dump_stack_lvl+0xf2/0x150 [ 58.216151][ T4976] dump_stack+0x15/0x20 [ 58.220393][ T4976] should_fail_ex+0x223/0x230 [ 58.225145][ T4976] should_fail+0xb/0x10 [ 58.229420][ T4976] should_fail_usercopy+0x1a/0x20 [ 58.234571][ T4976] _copy_to_user+0x20/0xa0 [ 58.239039][ T4976] simple_read_from_buffer+0xa0/0x110 [ 58.244535][ T4976] proc_fail_nth_read+0xf9/0x140 [ 58.249512][ T4976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.255161][ T4976] vfs_read+0x1a2/0x700 [ 58.259345][ T4976] ? __rcu_read_unlock+0x4e/0x70 [ 58.264308][ T4976] ? __fget_files+0x17c/0x1c0 [ 58.269023][ T4976] ksys_read+0xe8/0x1b0 [ 58.273239][ T4976] __x64_sys_read+0x42/0x50 [ 58.277774][ T4976] x64_sys_call+0x2874/0x2dc0 [ 58.282515][ T4976] do_syscall_64+0xc9/0x1c0 [ 58.287064][ T4976] ? clear_bhb_loop+0x55/0xb0 [ 58.291789][ T4976] ? clear_bhb_loop+0x55/0xb0 [ 58.296497][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.302433][ T4976] RIP: 0033:0x7fcd15d1f21c [ 58.306863][ T4976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 58.326663][ T4976] RSP: 002b:00007fcd14397050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.335230][ T4976] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d1f21c [ 58.343314][ T4976] RDX: 000000000000000f RSI: 00007fcd143970b0 RDI: 0000000000000007 [ 58.351307][ T4976] RBP: 00007fcd143970a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.359306][ T4976] R10: 000000000000fed7 R11: 0000000000000246 R12: 0000000000000002 [ 58.367364][ T4976] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 58.375378][ T4976] [ 58.415545][ T4979] FAULT_INJECTION: forcing a failure. [ 58.415545][ T4979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 58.428828][ T4979] CPU: 0 UID: 0 PID: 4979 Comm: syz.1.482 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 58.439159][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.449236][ T4979] Call Trace: [ 58.452631][ T4979] [ 58.455567][ T4979] dump_stack_lvl+0xf2/0x150 [ 58.460252][ T4979] dump_stack+0x15/0x20 [ 58.464457][ T4979] should_fail_ex+0x223/0x230 [ 58.469169][ T4979] should_fail_alloc_page+0xfd/0x110 [ 58.474644][ T4979] __alloc_pages_noprof+0x109/0x340 [ 58.479867][ T4979] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 58.485274][ T4979] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 58.490750][ T4979] do_wp_page+0x64b/0x2340 [ 58.495191][ T4979] ? __rcu_read_lock+0x36/0x50 [ 58.499960][ T4979] handle_mm_fault+0xc63/0x2ac0 [ 58.504819][ T4979] exc_page_fault+0x3b9/0x650 [ 58.509661][ T4979] asm_exc_page_fault+0x26/0x30 [ 58.514527][ T4979] RIP: 0033:0x7f82065c1970 [ 58.518939][ T4979] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 58.538697][ T4979] RSP: 002b:00007f8204d764c0 EFLAGS: 00010202 [ 58.544850][ T4979] RAX: 0000000000004005 RBX: 00007f8204d76560 RCX: 0000000000000101 [ 58.552817][ T4979] RDX: 00000000000109af RSI: 00000000000039b0 RDI: 00007f8204d76600 [ 58.560786][ T4979] RBP: 0000000000000102 R08: 00007f81fc957000 R09: 0000000000000004 [ 58.568766][ T4979] R10: 0000000020000f02 R11: 0000000000000473 R12: 0000000000003001 [ 58.576736][ T4979] R13: 00007f82067882a0 R14: 000000000000001b R15: 00007f8204d76600 [ 58.584711][ T4979] [ 58.587930][ T4979] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 58.597948][ T4979] loop1: detected capacity change from 0 to 512 [ 58.602151][ T4981] pimreg: entered allmulticast mode [ 58.604609][ T4979] journal_path: Non-blockdev passed as './file0' [ 58.615809][ T4979] EXT4-fs: error: could not find journal device path [ 58.618131][ T4981] pimreg: left allmulticast mode [ 58.646773][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 58.646789][ T29] audit: type=1326 audit(1732887679.279:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.676660][ T29] audit: type=1326 audit(1732887679.279:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.700269][ T29] audit: type=1326 audit(1732887679.279:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.723632][ T29] audit: type=1326 audit(1732887679.279:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.747157][ T29] audit: type=1326 audit(1732887679.279:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.770733][ T29] audit: type=1326 audit(1732887679.279:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.794091][ T29] audit: type=1326 audit(1732887679.279:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.817661][ T29] audit: type=1326 audit(1732887679.279:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.841073][ T29] audit: type=1326 audit(1732887679.279:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.864486][ T29] audit: type=1326 audit(1732887679.279:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4983 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 58.975166][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 59.031076][ T4999] loop3: detected capacity change from 0 to 128 [ 59.058476][ T4999] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.254465][ T5019] nfs4: Bad value for 'source' [ 59.394169][ T5027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.501'. [ 59.402962][ T5023] loop3: detected capacity change from 0 to 512 [ 59.437093][ T5023] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.466416][ T5023] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.500: corrupted xattr block 32: e_value out of bounds [ 59.501474][ T5023] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 59.530546][ T5023] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.500: corrupted xattr block 32: e_value out of bounds [ 59.566152][ T5023] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 59.583230][ T5023] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.500: corrupted xattr block 32: e_value out of bounds [ 59.617101][ T5023] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.500: corrupted xattr block 32: e_value out of bounds [ 59.642514][ T5023] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 59.863016][ T5065] loop1: detected capacity change from 0 to 1024 [ 59.890285][ T5065] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 59.935454][ T5075] loop4: detected capacity change from 0 to 128 [ 59.971557][ T5075] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.977397][ T5072] loop3: detected capacity change from 0 to 1024 [ 60.003519][ T5073] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 60.026745][ T5065] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.1.508: corrupted in-inode xattr: bad magic number in in-inode xattr [ 60.043877][ T5075] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 60.089475][ T5075] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 60.140289][ T5072] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 60.163508][ T5092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 60.225558][ T5072] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.509: corrupted in-inode xattr: bad magic number in in-inode xattr [ 60.360091][ T5106] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 60.434726][ T5110] loop4: detected capacity change from 0 to 128 [ 60.461195][ T5112] loop3: detected capacity change from 0 to 512 [ 60.482078][ T5110] FAT-fs (loop4): Directory bread(block 162) failed [ 60.500072][ T5112] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.511605][ T5110] FAT-fs (loop4): Directory bread(block 163) failed [ 60.519922][ T5110] FAT-fs (loop4): Directory bread(block 164) failed [ 60.526727][ T5110] FAT-fs (loop4): Directory bread(block 165) failed [ 60.543752][ T5110] FAT-fs (loop4): Directory bread(block 166) failed [ 60.555882][ T5110] FAT-fs (loop4): Directory bread(block 167) failed [ 60.571417][ T5110] FAT-fs (loop4): Directory bread(block 168) failed [ 60.586250][ T5110] FAT-fs (loop4): Directory bread(block 169) failed [ 60.611182][ T5110] FAULT_INJECTION: forcing a failure. [ 60.611182][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 60.623903][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.4.520 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 60.634165][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.644374][ T5110] Call Trace: [ 60.647660][ T5110] [ 60.650655][ T5110] dump_stack_lvl+0xf2/0x150 [ 60.655267][ T5110] dump_stack+0x15/0x20 [ 60.659458][ T5110] should_fail_ex+0x223/0x230 [ 60.664220][ T5110] should_failslab+0x8f/0xb0 [ 60.668847][ T5110] __kmalloc_noprof+0xab/0x3f0 [ 60.673637][ T5110] ? __d_alloc+0x8f/0x340 [ 60.678022][ T5110] __d_alloc+0x8f/0x340 [ 60.682328][ T5110] d_alloc+0x2e/0x100 [ 60.686337][ T5110] lookup_one_qstr_excl+0x97/0x1a0 [ 60.691489][ T5110] filename_create+0x14d/0x2b0 [ 60.696301][ T5110] do_mknodat+0x126/0x420 [ 60.700680][ T5110] __x64_sys_mknod+0x51/0x60 [ 60.705340][ T5110] x64_sys_call+0x16be/0x2dc0 [ 60.710065][ T5110] do_syscall_64+0xc9/0x1c0 [ 60.714576][ T5110] ? clear_bhb_loop+0x55/0xb0 [ 60.719289][ T5110] ? clear_bhb_loop+0x55/0xb0 [ 60.724129][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.730218][ T5110] RIP: 0033:0x7f7777240809 [ 60.734734][ T5110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.754371][ T5110] RSP: 002b:00007f77758b7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 60.762810][ T5110] RAX: ffffffffffffffda RBX: 00007f7777405fa0 RCX: 00007f7777240809 [ 60.770783][ T5110] RDX: 0000000000000708 RSI: 0000000000000000 RDI: 0000000020000000 [ 60.778755][ T5110] RBP: 00007f77758b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 60.786743][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.794724][ T5110] R13: 0000000000000000 R14: 00007f7777405fa0 R15: 00007ffdbda799a8 [ 60.802717][ T5110] [ 60.827550][ T5119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.839600][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.848539][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.857580][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.888926][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.897876][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.906771][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 60.921347][ T5122] loop4: detected capacity change from 0 to 512 [ 60.929647][ T5125] FAULT_INJECTION: forcing a failure. [ 60.929647][ T5125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.942860][ T5125] CPU: 0 UID: 0 PID: 5125 Comm: syz.3.524 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 60.953128][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.963248][ T5125] Call Trace: [ 60.966542][ T5125] [ 60.969503][ T5125] dump_stack_lvl+0xf2/0x150 [ 60.974123][ T5125] dump_stack+0x15/0x20 [ 60.978374][ T5125] should_fail_ex+0x223/0x230 [ 60.983227][ T5125] should_fail+0xb/0x10 [ 60.987464][ T5125] should_fail_usercopy+0x1a/0x20 [ 60.992532][ T5125] _copy_from_user+0x1e/0xb0 [ 60.997224][ T5125] kstrtouint_from_user+0x76/0xe0 [ 61.002323][ T5125] ? 0xffffffff81000000 [ 61.006559][ T5125] ? selinux_file_permission+0x22a/0x360 [ 61.012284][ T5125] proc_fail_nth_write+0x4f/0x150 [ 61.017344][ T5125] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.023109][ T5125] vfs_write+0x281/0x920 [ 61.027393][ T5125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 61.033057][ T5125] ? __fget_files+0x17c/0x1c0 [ 61.037812][ T5125] ksys_write+0xe8/0x1b0 [ 61.042115][ T5125] __x64_sys_write+0x42/0x50 [ 61.046787][ T5125] x64_sys_call+0x287e/0x2dc0 [ 61.051537][ T5125] do_syscall_64+0xc9/0x1c0 [ 61.056073][ T5125] ? clear_bhb_loop+0x55/0xb0 [ 61.060776][ T5125] ? clear_bhb_loop+0x55/0xb0 [ 61.065504][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.071456][ T5125] RIP: 0033:0x7f6bcfbff2bf [ 61.075891][ T5125] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 61.095542][ T5125] RSP: 002b:00007f6bce277050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 61.103984][ T5125] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6bcfbff2bf [ 61.111986][ T5125] RDX: 0000000000000001 RSI: 00007f6bce2770b0 RDI: 0000000000000006 [ 61.119982][ T5125] RBP: 00007f6bce2770a0 R08: 0000000000000000 R09: 0000000000000000 [ 61.128041][ T5125] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 61.136090][ T5125] R13: 0000000000000000 R14: 00007f6bcfdc5fa0 R15: 00007ffcdbab4788 [ 61.144139][ T5125] [ 61.159775][ T5122] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.206012][ T5122] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: e_value out of bounds [ 61.225393][ T5119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 61.225603][ T5122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 61.245735][ T5122] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: e_value out of bounds [ 61.260223][ T5122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 61.278848][ T5122] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: e_value out of bounds [ 61.292836][ T5122] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.523: corrupted xattr block 32: e_value out of bounds [ 61.308808][ T5122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 61.386865][ T5169] loop1: detected capacity change from 0 to 1024 [ 61.394273][ T5169] EXT4-fs: Ignoring removed orlov option [ 61.400125][ T5169] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.516695][ T5193] loop1: detected capacity change from 0 to 512 [ 61.524410][ T5193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.550913][ T5196] netlink: 'syz.4.532': attribute type 4 has an invalid length. [ 61.561005][ T5193] EXT4-fs (loop1): 1 truncate cleaned up [ 61.777060][ T5220] loop1: detected capacity change from 0 to 164 [ 61.792756][ T5220] Unable to read rock-ridge attributes [ 61.810393][ T5224] netlink: 'syz.0.542': attribute type 1 has an invalid length. [ 61.818127][ T5224] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 61.862175][ T5229] loop4: detected capacity change from 0 to 512 [ 61.903600][ T5237] loop2: detected capacity change from 0 to 1024 [ 61.917449][ T5229] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.543: corrupted xattr block 255: invalid header [ 61.931036][ T5237] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 61.939290][ T5237] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.947370][ T5229] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 61.953497][ T5237] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.545: Failed to acquire dquot type 0 [ 61.956083][ T5229] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.543: corrupted xattr block 255: invalid header [ 61.981740][ T5237] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 61.996353][ T5237] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.545: corrupted inode contents [ 62.009619][ T5229] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 62.016854][ T5237] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #13: comm syz.2.545: mark_inode_dirty error [ 62.029903][ T5237] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.545: corrupted inode contents [ 62.042661][ T5237] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.545: mark_inode_dirty error [ 62.054416][ T5237] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.545: corrupted inode contents [ 62.067044][ T5237] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 62.070210][ T5246] block device autoloading is deprecated and will be removed. [ 62.076923][ T5237] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #13: comm syz.2.545: corrupted inode contents [ 62.083221][ T5246] syz.1.548: attempt to access beyond end of device [ 62.083221][ T5246] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.097043][ T5237] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.545: mark_inode_dirty error [ 62.121232][ T5237] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 62.144167][ T5237] EXT4-fs (loop2): 1 truncate cleaned up [ 62.185961][ T5255] syz.2.550[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.186046][ T5255] syz.2.550[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.197920][ T5255] syz.2.550[5255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.238475][ T5255] loop2: detected capacity change from 0 to 1024 [ 62.262523][ T5252] syz.1.548[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.262591][ T5252] syz.1.548[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.279517][ T5252] syz.1.548[5252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.387410][ T5267] netlink: 'syz.4.553': attribute type 4 has an invalid length. [ 62.392743][ T5269] loop1: detected capacity change from 0 to 512 [ 62.405979][ T5270] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 62.468487][ T5269] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 62.506346][ T5269] EXT4-fs (loop1): mount failed [ 62.605602][ T5276] loop3: detected capacity change from 0 to 164 [ 62.622096][ T5276] Unable to read rock-ridge attributes [ 62.657397][ T5280] loop1: detected capacity change from 0 to 512 [ 62.692521][ T5280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.716910][ T5280] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (63071!=33349) [ 62.726546][ T5280] EXT4-fs (loop1): group descriptors corrupted! [ 62.759974][ T5287] syz.0.561[5287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.760038][ T5287] syz.0.561[5287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.774646][ T5288] bridge_slave_0: left allmulticast mode [ 62.791737][ T5288] bridge_slave_0: left promiscuous mode [ 62.797649][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.811036][ T5287] syz.0.561[5287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.814122][ T5288] bridge_slave_1: left allmulticast mode [ 62.831132][ T5288] bridge_slave_1: left promiscuous mode [ 62.837144][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.862055][ T5288] bond0: (slave bond_slave_0): Releasing backup interface [ 62.877513][ T5288] bond0: (slave bond_slave_1): Releasing backup interface [ 62.894604][ T5288] team0: Failed to send options change via netlink (err -105) [ 62.909150][ T5288] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 62.923164][ T5288] team0: Port device team_slave_0 removed [ 62.929615][ T5288] team0: Failed to send options change via netlink (err -105) [ 62.940874][ T5288] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 62.957158][ T5288] team0: Port device team_slave_1 removed [ 62.967847][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.976465][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.988829][ T5300] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.997660][ T5300] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.006393][ T5300] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.015230][ T5300] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.025271][ T5300] vxlan0: entered promiscuous mode [ 63.107192][ T5303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5303 comm=syz.2.567 [ 63.554651][ T5320] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 63.621428][ T5326] nfs4: Bad value for 'source' [ 63.744280][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 63.744294][ T29] audit: type=1326 audit(1732887684.369:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.774064][ T5335] nfs4: Bad value for 'source' [ 63.807462][ T29] audit: type=1326 audit(1732887684.409:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.830940][ T29] audit: type=1326 audit(1732887684.419:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.854498][ T29] audit: type=1326 audit(1732887684.419:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.878216][ T29] audit: type=1326 audit(1732887684.419:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.901672][ T29] audit: type=1326 audit(1732887684.419:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.925191][ T29] audit: type=1326 audit(1732887684.419:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.948469][ T29] audit: type=1326 audit(1732887684.419:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.971859][ T29] audit: type=1326 audit(1732887684.419:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 63.995186][ T29] audit: type=1326 audit(1732887684.419:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5332 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 64.033164][ T5349] loop4: detected capacity change from 0 to 1024 [ 64.049324][ T5349] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 64.077984][ T5354] nfs4: Bad value for 'source' [ 64.089305][ T5349] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.4.587: corrupted in-inode xattr: bad magic number in in-inode xattr [ 64.674000][ T5376] FAULT_INJECTION: forcing a failure. [ 64.674000][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 64.686847][ T5376] CPU: 1 UID: 0 PID: 5376 Comm: syz.0.597 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 64.697117][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.707189][ T5376] Call Trace: [ 64.710534][ T5376] [ 64.713459][ T5376] dump_stack_lvl+0xf2/0x150 [ 64.718074][ T5376] dump_stack+0x15/0x20 [ 64.722289][ T5376] should_fail_ex+0x223/0x230 [ 64.726999][ T5376] should_failslab+0x8f/0xb0 [ 64.731591][ T5376] __kmalloc_noprof+0xab/0x3f0 [ 64.736370][ T5376] ? bm_init+0x49/0x6d0 [ 64.740549][ T5376] bm_init+0x49/0x6d0 [ 64.744584][ T5376] ? pcpu_chunk_relocate+0x183/0x280 [ 64.749927][ T5376] ? pcpu_alloc_area+0x494/0x4b0 [ 64.754952][ T5376] textsearch_prepare+0x196/0x200 [ 64.760132][ T5376] string_mt_check+0x111/0x160 [ 64.765024][ T5376] xt_check_match+0x259/0x4b0 [ 64.769745][ T5376] ? xt_find_match+0x1c1/0x1e0 [ 64.774562][ T5376] ? xt_find_match+0x1a2/0x1e0 [ 64.779427][ T5376] translate_table+0xa99/0xf70 [ 64.784207][ T5376] ? _copy_from_user+0x8d/0xb0 [ 64.788993][ T5376] do_ipt_set_ctl+0x7bd/0x8b0 [ 64.793697][ T5376] ? tcp_release_cb+0xfe/0x380 [ 64.798634][ T5376] nf_setsockopt+0x195/0x1b0 [ 64.803233][ T5376] ip_setsockopt+0xea/0x100 [ 64.807877][ T5376] ipv6_setsockopt+0xef/0x130 [ 64.812643][ T5376] tcp_setsockopt+0x93/0xb0 [ 64.817222][ T5376] sock_common_setsockopt+0x64/0x80 [ 64.822499][ T5376] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 64.828563][ T5376] __sys_setsockopt+0x187/0x200 [ 64.833518][ T5376] __x64_sys_setsockopt+0x66/0x80 [ 64.838546][ T5376] x64_sys_call+0x282e/0x2dc0 [ 64.843228][ T5376] do_syscall_64+0xc9/0x1c0 [ 64.847757][ T5376] ? clear_bhb_loop+0x55/0xb0 [ 64.852449][ T5376] ? clear_bhb_loop+0x55/0xb0 [ 64.857218][ T5376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.863280][ T5376] RIP: 0033:0x7fcd15d20809 [ 64.867689][ T5376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.887295][ T5376] RSP: 002b:00007fcd14397058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 64.895753][ T5376] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d20809 [ 64.903737][ T5376] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 64.911703][ T5376] RBP: 00007fcd143970a0 R08: 0000000000000350 R09: 0000000000000000 [ 64.919730][ T5376] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000001 [ 64.927700][ T5376] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 64.935748][ T5376] [ 64.949162][ T5378] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 64.980697][ T5382] nfs4: Bad value for 'source' [ 65.040200][ T5385] loop3: detected capacity change from 0 to 1024 [ 65.049684][ T5385] EXT4-fs: Ignoring removed orlov option [ 65.055484][ T5385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.182248][ T5404] __nla_validate_parse: 15 callbacks suppressed [ 65.182263][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 65.494392][ T5438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'. [ 65.503379][ T5438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.617'. [ 65.534289][ T5438] loop4: detected capacity change from 0 to 1024 [ 65.541557][ T5438] EXT4-fs: Ignoring removed orlov option [ 65.547428][ T5438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.567467][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 66.014577][ T5477] lo speed is unknown, defaulting to 1000 [ 66.034956][ T5477] lo speed is unknown, defaulting to 1000 [ 66.053585][ T5482] netlink: 'syz.3.623': attribute type 4 has an invalid length. [ 66.065137][ T5477] lo speed is unknown, defaulting to 1000 [ 66.079739][ T5477] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.097467][ T5477] infiniband syzD: RDMA CMA: cma_listen_on_dev, error -98 [ 66.116600][ T5477] lo speed is unknown, defaulting to 1000 [ 66.132823][ T5477] lo speed is unknown, defaulting to 1000 [ 66.145583][ T5477] lo speed is unknown, defaulting to 1000 [ 66.162675][ T5477] lo speed is unknown, defaulting to 1000 [ 66.172781][ T5477] lo speed is unknown, defaulting to 1000 [ 66.278796][ T5489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'. [ 66.329446][ T5491] lo speed is unknown, defaulting to 1000 [ 66.573762][ T5515] loop4: detected capacity change from 0 to 164 [ 66.604249][ T5515] Unable to read rock-ridge attributes [ 66.644285][ T5522] loop3: detected capacity change from 0 to 128 [ 66.708239][ T5522] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.735422][ T5529] nfs4: Bad value for 'source' [ 66.738655][ T5530] loop1: detected capacity change from 0 to 1024 [ 66.755603][ T5522] C: renamed from team_slave_0 [ 66.770239][ T5530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.781851][ T5522] netlink: 'syz.3.637': attribute type 1 has an invalid length. [ 66.789551][ T5522] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 66.857753][ T5543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.641'. [ 66.999904][ T5550] tipc: Enabling of bearer rejected, failed to enable media [ 67.003535][ T5551] loop1: detected capacity change from 0 to 128 [ 67.035214][ T5551] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.072111][ T5551] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.114362][ T5534] lo speed is unknown, defaulting to 1000 [ 67.259033][ T5564] 9pnet_fd: Insufficient options for proto=fd [ 67.304152][ T5565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'. [ 67.536537][ T5581] nfs4: Bad value for 'source' [ 67.595367][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 67.604634][ T5589] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 67.744705][ T5602] lo speed is unknown, defaulting to 1000 [ 67.896655][ T5623] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 67.906340][ T5626] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 67.949348][ T5636] nfs4: Bad value for 'source' [ 68.026248][ T5649] loop1: detected capacity change from 0 to 128 [ 68.064093][ T5649] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.098143][ T5649] C: renamed from team_slave_0 [ 68.121892][ T5662] loop4: detected capacity change from 0 to 128 [ 68.146301][ T5649] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 68.153987][ T5649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 68.187842][ T5664] lo speed is unknown, defaulting to 1000 [ 68.260059][ T5662] syz.4.674: attempt to access beyond end of device [ 68.260059][ T5662] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 68.273559][ T5662] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 68.325284][ T5672] SELinux: syz.4.677 (5672) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.349767][ T5674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 68.381862][ T5674] erspan0: entered promiscuous mode [ 68.388233][ T5674] erspan0: left promiscuous mode [ 68.403043][ T5679] nfs4: Bad value for 'source' [ 68.538670][ T5694] loop2: detected capacity change from 0 to 2048 [ 68.578319][ T5694] EXT4-fs mount: 64 callbacks suppressed [ 68.578337][ T5694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.599477][ T5704] lo speed is unknown, defaulting to 1000 [ 68.634988][ T28] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.671356][ T28] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.683796][ T28] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.683796][ T28] [ 68.693528][ T28] EXT4-fs (loop2): Total free blocks count 0 [ 68.699580][ T28] EXT4-fs (loop2): Free/Dirty block details [ 68.705572][ T28] EXT4-fs (loop2): free_blocks=2415919104 [ 68.711308][ T28] EXT4-fs (loop2): dirty_blocks=16 [ 68.716531][ T28] EXT4-fs (loop2): Block reservation details [ 68.722519][ T28] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 68.770597][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.772544][ T5723] loop4: detected capacity change from 0 to 128 [ 68.915246][ T5736] nfs4: Bad value for 'source' [ 68.978525][ T5743] loop4: detected capacity change from 0 to 1024 [ 68.994525][ T5743] EXT4-fs: Ignoring removed orlov option [ 69.000274][ T5743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.013310][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 69.013325][ T29] audit: type=1326 audit(1732887689.639:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.071630][ T29] audit: type=1326 audit(1732887689.679:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.095099][ T29] audit: type=1326 audit(1732887689.679:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.118466][ T29] audit: type=1326 audit(1732887689.679:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.141965][ T29] audit: type=1326 audit(1732887689.679:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.165397][ T29] audit: type=1326 audit(1732887689.679:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.189032][ T29] audit: type=1326 audit(1732887689.679:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.212372][ T29] audit: type=1326 audit(1732887689.679:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.222690][ T5756] lo speed is unknown, defaulting to 1000 [ 69.235843][ T29] audit: type=1326 audit(1732887689.679:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.248198][ T5759] FAULT_INJECTION: forcing a failure. [ 69.248198][ T5759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 69.264835][ T29] audit: type=1326 audit(1732887689.679:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.3.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 69.278078][ T5759] CPU: 1 UID: 0 PID: 5759 Comm: syz.0.698 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 69.311651][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.321716][ T5759] Call Trace: [ 69.325000][ T5759] [ 69.327933][ T5759] dump_stack_lvl+0xf2/0x150 [ 69.332602][ T5759] dump_stack+0x15/0x20 [ 69.336818][ T5759] should_fail_ex+0x223/0x230 [ 69.341543][ T5759] should_fail_alloc_page+0xfd/0x110 [ 69.346933][ T5759] __alloc_pages_noprof+0x109/0x340 [ 69.352144][ T5759] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 69.357548][ T5759] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 69.363067][ T5759] handle_mm_fault+0xdd7/0x2ac0 [ 69.367952][ T5759] ? __rcu_read_unlock+0x4e/0x70 [ 69.372899][ T5759] ? mt_find+0x72a/0x890 [ 69.377214][ T5759] __get_user_pages+0xf2c/0x2670 [ 69.382614][ T5759] __mm_populate+0x25b/0x3b0 [ 69.387363][ T5759] do_mlock+0x415/0x510 [ 69.391608][ T5759] ? __secure_computing+0x9f/0x1c0 [ 69.396728][ T5759] __x64_sys_mlock+0x36/0x40 [ 69.401368][ T5759] x64_sys_call+0x26b2/0x2dc0 [ 69.406058][ T5759] do_syscall_64+0xc9/0x1c0 [ 69.410566][ T5759] ? clear_bhb_loop+0x55/0xb0 [ 69.415295][ T5759] ? clear_bhb_loop+0x55/0xb0 [ 69.420017][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.425982][ T5759] RIP: 0033:0x7fcd15d20809 [ 69.430410][ T5759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.450085][ T5759] RSP: 002b:00007fcd14397058 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 69.458537][ T5759] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d20809 [ 69.466521][ T5759] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffe000 [ 69.474504][ T5759] RBP: 00007fcd143970a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.482545][ T5759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.490530][ T5759] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 69.498529][ T5759] [ 69.514065][ T5743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.566695][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.599274][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.624784][ T5752] lo speed is unknown, defaulting to 1000 [ 69.631508][ T5767] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.684692][ T5773] nfs4: Bad value for 'source' [ 69.703401][ T5767] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.710695][ T5776] syz.3.706[5776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.724040][ T5776] syz.3.706[5776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.745137][ T5776] syz.3.706[5776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.804880][ T5767] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.850871][ T5780] netlink: 'syz.0.707': attribute type 4 has an invalid length. [ 69.906261][ T5767] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.973625][ T5767] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.988402][ T5767] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.000760][ T5767] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.031808][ T5767] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.127675][ T5794] loop3: detected capacity change from 0 to 164 [ 70.140696][ T5794] Unable to read rock-ridge attributes [ 70.209792][ T5798] lo speed is unknown, defaulting to 1000 [ 70.301644][ T5801] lo speed is unknown, defaulting to 1000 [ 70.371778][ T5813] loop3: detected capacity change from 0 to 1024 [ 70.391212][ T5813] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.421530][ T5813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.452422][ T5813] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.718: corrupted in-inode xattr: bad magic number in in-inode xattr [ 70.531643][ T5831] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 70.539416][ T5831] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 70.576283][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.668654][ T5845] __nla_validate_parse: 6 callbacks suppressed [ 70.668673][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 70.683820][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.725'. [ 70.701671][ T5847] lo speed is unknown, defaulting to 1000 [ 70.712755][ T5853] nfs4: Bad value for 'source' [ 70.729004][ T5845] loop4: detected capacity change from 0 to 1024 [ 70.742685][ T5845] EXT4-fs: Ignoring removed orlov option [ 70.748451][ T5845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.793284][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'. [ 70.802305][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'. [ 70.828345][ T5845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.959291][ T5886] FAULT_INJECTION: forcing a failure. [ 70.959291][ T5886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.972646][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.0.739 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 70.983024][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 70.993111][ T5886] Call Trace: [ 70.996395][ T5886] [ 70.999345][ T5886] dump_stack_lvl+0xf2/0x150 [ 71.003953][ T5886] dump_stack+0x15/0x20 [ 71.008188][ T5886] should_fail_ex+0x223/0x230 [ 71.012895][ T5886] should_fail_alloc_page+0xfd/0x110 [ 71.018262][ T5886] __alloc_pages_noprof+0x109/0x340 [ 71.023529][ T5886] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 71.028924][ T5886] folio_alloc_mpol_noprof+0x36/0x70 [ 71.034228][ T5886] shmem_get_folio_gfp+0x3d1/0xd90 [ 71.039374][ T5886] shmem_write_begin+0xa2/0x180 [ 71.044302][ T5886] generic_perform_write+0x1a8/0x4a0 [ 71.049626][ T5886] shmem_file_write_iter+0xc2/0xe0 [ 71.054840][ T5886] vfs_write+0x77f/0x920 [ 71.059247][ T5886] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 71.065093][ T5886] ksys_write+0xe8/0x1b0 [ 71.069419][ T5886] __x64_sys_write+0x42/0x50 [ 71.074085][ T5886] x64_sys_call+0x287e/0x2dc0 [ 71.078775][ T5886] do_syscall_64+0xc9/0x1c0 [ 71.083286][ T5886] ? clear_bhb_loop+0x55/0xb0 [ 71.087967][ T5886] ? clear_bhb_loop+0x55/0xb0 [ 71.092648][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.098587][ T5886] RIP: 0033:0x7fcd15d1f2bf [ 71.103008][ T5886] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 71.122703][ T5886] RSP: 002b:00007fcd14396e10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 71.131156][ T5886] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007fcd15d1f2bf [ 71.139164][ T5886] RDX: 0000000000010000 RSI: 00007fcd0bf77000 RDI: 0000000000000004 [ 71.147144][ T5886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000274 [ 71.155132][ T5886] R10: 0000000020000542 R11: 0000000000000293 R12: 0000000000000004 [ 71.163144][ T5886] R13: 00007fcd14396f10 R14: 00007fcd14396ed0 R15: 00007fcd0bf77000 [ 71.171133][ T5886] [ 71.213674][ T5889] nfs4: Bad value for 'source' [ 71.276261][ T5894] loop2: detected capacity change from 0 to 1024 [ 71.293124][ T5894] EXT4-fs: Ignoring removed orlov option [ 71.298965][ T5894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.306778][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.380024][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.404058][ T5907] loop1: detected capacity change from 0 to 1024 [ 71.410049][ T5909] loop4: detected capacity change from 0 to 2048 [ 71.418236][ T5907] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 71.445978][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.455976][ T5909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.478374][ T5907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.496292][ T5907] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.1.747: corrupted in-inode xattr: bad magic number in in-inode xattr [ 71.532399][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.543195][ T11] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.546558][ T5918] lo speed is unknown, defaulting to 1000 [ 71.566131][ T11] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 71.578383][ T11] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.578383][ T11] [ 71.588069][ T11] EXT4-fs (loop4): Total free blocks count 0 [ 71.594172][ T11] EXT4-fs (loop4): Free/Dirty block details [ 71.600236][ T11] EXT4-fs (loop4): free_blocks=2415919104 [ 71.606018][ T11] EXT4-fs (loop4): dirty_blocks=16 [ 71.611155][ T11] EXT4-fs (loop4): Block reservation details [ 71.617280][ T11] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 71.635095][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.659744][ T5923] IPVS: Error connecting to the multicast addr [ 71.690534][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'. [ 71.699499][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.754'. [ 71.728672][ T5928] loop1: detected capacity change from 0 to 1024 [ 71.736298][ T5928] EXT4-fs: Ignoring removed orlov option [ 71.742052][ T5928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.757007][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 71.766028][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.755'. [ 71.778824][ T5928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.816303][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.878457][ T5937] syz.0.759[5937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.878528][ T5937] syz.0.759[5937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.892104][ T5937] syz.0.759[5937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.930663][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.2.756'. [ 71.952451][ T5934] netlink: 60 bytes leftover after parsing attributes in process `syz.2.756'. [ 71.980267][ T5941] smc: net device bond0 applied user defined pnetid SYZ0 [ 71.987898][ T5941] smc: net device bond0 erased user defined pnetid SYZ0 [ 72.017974][ T5944] loop4: detected capacity change from 0 to 128 [ 72.062791][ T5944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.065801][ T5950] FAULT_INJECTION: forcing a failure. [ 72.065801][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 72.087640][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.1.757 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 72.092572][ T5944] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.097968][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.097985][ T5950] Call Trace: [ 72.097993][ T5950] [ 72.098002][ T5950] dump_stack_lvl+0xf2/0x150 [ 72.129298][ T5950] dump_stack+0x15/0x20 [ 72.133559][ T5950] should_fail_ex+0x223/0x230 [ 72.138276][ T5950] should_failslab+0x8f/0xb0 [ 72.142892][ T5950] __kmalloc_noprof+0xab/0x3f0 [ 72.147679][ T5950] ? nla_strdup+0x7a/0xc0 [ 72.152046][ T5950] ? __kvmalloc_node_noprof+0x72/0x170 [ 72.157540][ T5950] nla_strdup+0x7a/0xc0 [ 72.161821][ T5950] nf_tables_newset+0xd71/0x1390 [ 72.166798][ T5950] nfnetlink_rcv+0xb3e/0x15d0 [ 72.171620][ T5950] netlink_unicast+0x599/0x670 [ 72.176409][ T5950] netlink_sendmsg+0x5cc/0x6e0 [ 72.181303][ T5950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.186638][ T5950] __sock_sendmsg+0x140/0x180 [ 72.191427][ T5950] ____sys_sendmsg+0x312/0x410 [ 72.192742][ T5944] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 72.196207][ T5950] __sys_sendmsg+0x19d/0x230 [ 72.196297][ T5950] __x64_sys_sendmsg+0x46/0x50 [ 72.209131][ T5944] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 72.213323][ T5950] x64_sys_call+0x2734/0x2dc0 [ 72.233065][ T5950] do_syscall_64+0xc9/0x1c0 [ 72.237675][ T5950] ? clear_bhb_loop+0x55/0xb0 [ 72.242422][ T5950] ? clear_bhb_loop+0x55/0xb0 [ 72.247166][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.253122][ T5950] RIP: 0033:0x7f8206700809 [ 72.257556][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.277254][ T5950] RSP: 002b:00007f8204d77058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.285700][ T5950] RAX: ffffffffffffffda RBX: 00007f82068c5fa0 RCX: 00007f8206700809 [ 72.293697][ T5950] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 72.301722][ T5950] RBP: 00007f8204d770a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.309919][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.317889][ T5950] R13: 0000000000000000 R14: 00007f82068c5fa0 R15: 00007ffd1b7ccbe8 [ 72.325894][ T5950] [ 72.372414][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.404297][ T5972] loop4: detected capacity change from 0 to 128 [ 72.414547][ T5957] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 72.432551][ T5969] loop2: detected capacity change from 0 to 1024 [ 72.440417][ T5972] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.445425][ T5969] EXT4-fs: Ignoring removed orlov option [ 72.458222][ T5969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.505185][ T5972] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.532570][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.547114][ T5972] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 72.569202][ T5972] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 72.705273][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.716226][ T6005] netlink: 'syz.0.772': attribute type 4 has an invalid length. [ 72.774136][ T6012] loop4: detected capacity change from 0 to 1024 [ 72.781268][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.810390][ T6012] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.830787][ T6019] FAULT_INJECTION: forcing a failure. [ 72.830787][ T6019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.844126][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.2.776 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 72.854395][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.864505][ T6019] Call Trace: [ 72.867810][ T6019] [ 72.870848][ T6019] dump_stack_lvl+0xf2/0x150 [ 72.875463][ T6019] dump_stack+0x15/0x20 [ 72.879690][ T6019] should_fail_ex+0x223/0x230 [ 72.884424][ T6019] should_fail_alloc_page+0xfd/0x110 [ 72.889750][ T6019] __alloc_pages_noprof+0x109/0x340 [ 72.895051][ T6019] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 72.900482][ T6019] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 72.905901][ T6019] handle_mm_fault+0xdd7/0x2ac0 [ 72.910767][ T6019] ? __rcu_read_lock+0x36/0x50 [ 72.915560][ T6019] __get_user_pages+0xf2c/0x2670 [ 72.920630][ T6019] __gup_longterm_locked+0x932/0xf90 [ 72.926065][ T6019] pin_user_pages_remote+0x7f/0xb0 [ 72.931242][ T6019] process_vm_rw+0x4bc/0x890 [ 72.935926][ T6019] ? ksys_write+0x176/0x1b0 [ 72.940477][ T6019] __x64_sys_process_vm_writev+0x7a/0x90 [ 72.946293][ T6019] x64_sys_call+0x2c48/0x2dc0 [ 72.951056][ T6019] do_syscall_64+0xc9/0x1c0 [ 72.955583][ T6019] ? clear_bhb_loop+0x55/0xb0 [ 72.960282][ T6019] ? clear_bhb_loop+0x55/0xb0 [ 72.965024][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.971017][ T6019] RIP: 0033:0x7f4cc8c30809 [ 72.975450][ T6019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.995071][ T6019] RSP: 002b:00007f4cc72a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 73.003497][ T6019] RAX: ffffffffffffffda RBX: 00007f4cc8df5fa0 RCX: 00007f4cc8c30809 [ 73.011504][ T6019] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000141 [ 73.019485][ T6019] RBP: 00007f4cc72a70a0 R08: 000000000000023a R09: 0000000000000000 [ 73.027531][ T6019] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000002 [ 73.035582][ T6019] R13: 0000000000000000 R14: 00007f4cc8df5fa0 R15: 00007ffd76ce8ce8 [ 73.043562][ T6019] [ 73.076802][ T6012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.106232][ T6012] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.4.775: corrupted in-inode xattr: bad magic number in in-inode xattr [ 73.187329][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.277319][ T6032] nfs4: Bad value for 'source' [ 73.318323][ T6034] 9pnet_fd: Insufficient options for proto=fd [ 73.551402][ T6039] lo speed is unknown, defaulting to 1000 [ 73.732048][ T6057] loop1: detected capacity change from 0 to 1024 [ 73.739225][ T6057] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.766275][ T6057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.780887][ T6057] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.1.787: corrupted in-inode xattr: bad magic number in in-inode xattr [ 73.807565][ T6050] loop3: detected capacity change from 0 to 512 [ 73.820738][ T6050] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 73.830021][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.851415][ T6050] loop3: detected capacity change from 0 to 1024 [ 73.860516][ T6050] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.871442][ T6050] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.884421][ T6050] JBD2: no valid journal superblock found [ 73.890257][ T6050] EXT4-fs (loop3): Could not load journal inode [ 73.973682][ T6067] 9pnet_fd: Insufficient options for proto=fd [ 74.041011][ T6071] loop1: detected capacity change from 0 to 164 [ 74.094758][ T6075] loop4: detected capacity change from 0 to 1024 [ 74.101579][ T6075] EXT4-fs: Ignoring removed orlov option [ 74.107377][ T6075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.127826][ T6075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.158616][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.213379][ T6083] loop1: detected capacity change from 0 to 2048 [ 74.227401][ T6083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.271769][ T6092] loop4: detected capacity change from 0 to 128 [ 74.283314][ T6092] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.296088][ T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.296357][ T6092] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.311575][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.326497][ T6092] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 74.333510][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 74.333510][ T11] [ 74.342541][ T6092] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 74.350835][ T11] EXT4-fs (loop1): Total free blocks count 0 [ 74.371914][ T11] EXT4-fs (loop1): Free/Dirty block details [ 74.377956][ T11] EXT4-fs (loop1): free_blocks=2415919104 [ 74.383665][ T11] EXT4-fs (loop1): dirty_blocks=16 [ 74.388874][ T11] EXT4-fs (loop1): Block reservation details [ 74.394915][ T11] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 74.402356][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.412806][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.506340][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 74.506358][ T29] audit: type=1326 audit(1732887695.129:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.536009][ T29] audit: type=1326 audit(1732887695.129:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.559383][ T29] audit: type=1326 audit(1732887695.129:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.582786][ T29] audit: type=1326 audit(1732887695.129:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.596235][ T6103] lo speed is unknown, defaulting to 1000 [ 74.606159][ T29] audit: type=1326 audit(1732887695.129:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.635302][ T29] audit: type=1326 audit(1732887695.129:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.658638][ T29] audit: type=1326 audit(1732887695.129:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.682350][ T29] audit: type=1326 audit(1732887695.129:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.705698][ T29] audit: type=1326 audit(1732887695.129:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.729041][ T29] audit: type=1326 audit(1732887695.129:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.0.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 74.804655][ T6108] loop4: detected capacity change from 0 to 1024 [ 74.830346][ T6108] EXT4-fs: Ignoring removed orlov option [ 74.836194][ T6108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.836301][ T6112] FAULT_INJECTION: forcing a failure. [ 74.836301][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 74.852014][ T6097] lo speed is unknown, defaulting to 1000 [ 74.855395][ T6112] CPU: 1 UID: 0 PID: 6112 Comm: syz.0.807 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 74.871370][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.881452][ T6112] Call Trace: [ 74.884742][ T6112] [ 74.887842][ T6112] dump_stack_lvl+0xf2/0x150 [ 74.892530][ T6112] dump_stack+0x15/0x20 [ 74.896707][ T6112] should_fail_ex+0x223/0x230 [ 74.901451][ T6112] should_failslab+0x8f/0xb0 [ 74.906111][ T6112] kmem_cache_alloc_noprof+0x52/0x320 [ 74.911540][ T6112] ? mm_alloc+0x2b/0xa0 [ 74.915785][ T6112] ? alloc_bprm+0x62/0x5d0 [ 74.917750][ T6108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.920192][ T6112] mm_alloc+0x2b/0xa0 [ 74.936166][ T6112] alloc_bprm+0x1c2/0x5d0 [ 74.940517][ T6112] do_execveat_common+0x134/0x800 [ 74.945683][ T6112] __x64_sys_execve+0x5a/0x70 [ 74.950470][ T6112] x64_sys_call+0x1333/0x2dc0 [ 74.955157][ T6112] do_syscall_64+0xc9/0x1c0 [ 74.959689][ T6112] ? clear_bhb_loop+0x55/0xb0 [ 74.964406][ T6112] ? clear_bhb_loop+0x55/0xb0 [ 74.969084][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.974985][ T6112] RIP: 0033:0x7fcd15d20809 [ 74.979438][ T6112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.999195][ T6112] RSP: 002b:00007fcd14397058 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 75.007608][ T6112] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d20809 [ 75.015601][ T6112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 75.023638][ T6112] RBP: 00007fcd143970a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.031685][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.039665][ T6112] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 75.047664][ T6112] [ 75.153770][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.293979][ T6137] loop4: detected capacity change from 0 to 1024 [ 75.308379][ T6137] EXT4-fs: Ignoring removed orlov option [ 75.314224][ T6137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.347857][ T6137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.410786][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.688245][ T6148] __nla_validate_parse: 17 callbacks suppressed [ 75.688266][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.822'. [ 75.938054][ T6163] FAULT_INJECTION: forcing a failure. [ 75.938054][ T6163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.951318][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.0.826 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 75.961601][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.971686][ T6163] Call Trace: [ 75.975054][ T6163] [ 75.978079][ T6163] dump_stack_lvl+0xf2/0x150 [ 75.982742][ T6163] dump_stack+0x15/0x20 [ 75.986923][ T6163] should_fail_ex+0x223/0x230 [ 75.991623][ T6163] should_fail+0xb/0x10 [ 75.995869][ T6163] should_fail_usercopy+0x1a/0x20 [ 76.000942][ T6163] copy_page_from_iter_atomic+0x228/0xf80 [ 76.006744][ T6163] ? shmem_write_begin+0xa2/0x180 [ 76.011797][ T6163] ? shmem_write_begin+0xda/0x180 [ 76.016860][ T6163] generic_perform_write+0x2f1/0x4a0 [ 76.022261][ T6163] shmem_file_write_iter+0xc2/0xe0 [ 76.027482][ T6163] vfs_write+0x77f/0x920 [ 76.031834][ T6163] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 76.037815][ T6163] ksys_write+0xe8/0x1b0 [ 76.042172][ T6163] __x64_sys_write+0x42/0x50 [ 76.046863][ T6163] x64_sys_call+0x287e/0x2dc0 [ 76.051607][ T6163] do_syscall_64+0xc9/0x1c0 [ 76.056127][ T6163] ? clear_bhb_loop+0x55/0xb0 [ 76.060871][ T6163] ? clear_bhb_loop+0x55/0xb0 [ 76.065566][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.071559][ T6163] RIP: 0033:0x7fcd15d1f2bf [ 76.076070][ T6163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 76.095731][ T6163] RSP: 002b:00007fcd14396e10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 76.104223][ T6163] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007fcd15d1f2bf [ 76.112251][ T6163] RDX: 0000000000010000 RSI: 00007fcd0bf77000 RDI: 0000000000000004 [ 76.120233][ T6163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000318 [ 76.128256][ T6163] R10: 0000000020000a82 R11: 0000000000000293 R12: 0000000000000004 [ 76.136305][ T6163] R13: 00007fcd14396f10 R14: 00007fcd14396ed0 R15: 00007fcd0bf77000 [ 76.144300][ T6163] [ 76.345420][ T6171] loop4: detected capacity change from 0 to 128 [ 76.365326][ T6171] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.396667][ T6171] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.409002][ T6171] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 76.419472][ T6171] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 76.493050][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.572776][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 76.694517][ T6181] loop3: detected capacity change from 0 to 128 [ 76.735543][ T6181] syz.3.834: attempt to access beyond end of device [ 76.735543][ T6181] loop3: rw=2049, sector=153, nr_sectors = 5 limit=128 [ 76.978657][ T6192] bridge0: entered promiscuous mode [ 76.991761][ T6192] bridge0: left promiscuous mode [ 77.177552][ T6199] loop3: detected capacity change from 0 to 128 [ 77.197185][ T6199] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.233816][ T6199] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.259892][ T6199] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 77.267637][ T6199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 77.366045][ T3329] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.882950][ T6204] lo speed is unknown, defaulting to 1000 [ 78.198046][ T6211] loop4: detected capacity change from 0 to 128 [ 78.220114][ T6213] loop3: detected capacity change from 0 to 512 [ 78.253827][ T6215] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 78.264307][ T6211] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.278909][ T6213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.328222][ T6215] syz_tun: entered promiscuous mode [ 78.337807][ T6215] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 78.480928][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 78.489966][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.848'. [ 78.501895][ T6211] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.513213][ T6213] EXT4-fs (loop3): 1 truncate cleaned up [ 78.523093][ T6213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.553366][ T6221] loop2: detected capacity change from 0 to 1024 [ 78.582418][ T6213] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.843: inode #1073372648: comm syz.3.843: iget: illegal inode # [ 78.596672][ T6221] EXT4-fs: Ignoring removed orlov option [ 78.602405][ T6221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.610659][ T6211] netlink: 'syz.4.832': attribute type 1 has an invalid length. [ 78.640344][ T6211] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 78.667476][ T6213] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.843: error while reading EA inode 1073372648 err=-117 [ 78.689834][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.703029][ T6213] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm syz.3.843: corrupted xattr block 33: invalid header [ 78.766228][ T6213] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 78.800053][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.812406][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.883363][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.958865][ T6229] lo speed is unknown, defaulting to 1000 [ 78.970379][ T9] IPVS: starting estimator thread 0... [ 79.003766][ T6231] loop3: detected capacity change from 0 to 1024 [ 79.067049][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.079213][ T6233] IPVS: using max 2736 ests per chain, 136800 per kthread [ 79.124956][ T6231] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.247039][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.383692][ T6242] loop3: detected capacity change from 0 to 1024 [ 79.424107][ T6242] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.480435][ T6242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.546519][ T6242] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.852: corrupted in-inode xattr: bad magic number in in-inode xattr [ 79.643147][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.700422][ T6254] loop2: detected capacity change from 0 to 2048 [ 79.728195][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 79.728211][ T29] audit: type=1326 audit(1732887700.359:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 79.757898][ T29] audit: type=1326 audit(1732887700.359:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 79.781240][ T29] audit: type=1326 audit(1732887700.359:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 79.804594][ T29] audit: type=1326 audit(1732887700.359:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 79.827984][ T29] audit: type=1326 audit(1732887700.359:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 79.851606][ T29] audit: type=1326 audit(1732887700.359:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 79.961377][ T6259] loop3: detected capacity change from 0 to 164 [ 79.979625][ T6254] loop2: p1 < > p4 [ 80.000225][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 80.031730][ T6259] Unable to read rock-ridge attributes [ 80.052020][ T6254] loop2: p4 size 8388608 extends beyond EOD, truncated [ 80.236198][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 80.360982][ T29] audit: type=1326 audit(1732887700.509:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 80.384392][ T29] audit: type=1326 audit(1732887700.509:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 80.407819][ T29] audit: type=1326 audit(1732887700.509:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 80.431128][ T29] audit: type=1326 audit(1732887700.509:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.3.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f6bcfc00809 code=0x7ffc0000 [ 80.476038][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 80.537555][ T6274] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 80.886702][ T6271] lo speed is unknown, defaulting to 1000 [ 80.893752][ T6279] loop3: detected capacity change from 0 to 164 [ 80.929749][ T6279] Unable to read rock-ridge attributes [ 81.330001][ T6296] sctp: [Deprecated]: syz.2.872 (pid 6296) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.330001][ T6296] Use struct sctp_sack_info instead [ 81.375749][ T6297] can: request_module (can-proto-0) failed. [ 81.419755][ T6304] nfs4: Bad value for 'source' [ 81.428520][ T6303] loop2: detected capacity change from 0 to 1024 [ 81.443237][ T6303] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 81.586433][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'. [ 81.597642][ T6316] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6316 comm=syz.3.881 [ 81.612016][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.628078][ T6303] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.2.876: corrupted in-inode xattr: bad magic number in in-inode xattr [ 81.658913][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.855130][ T6325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.885'. [ 81.864131][ T6325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.885'. [ 81.975890][ T6329] loop2: detected capacity change from 0 to 512 [ 81.995065][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 82.006097][ T6329] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.888: Invalid inode bitmap blk 4 in block_group 0 [ 82.045251][ T6333] syz.0.887[6333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.045366][ T6333] syz.0.887[6333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.065881][ T6333] syz.0.887[6333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.096827][ T6329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.210858][ T6329] lo speed is unknown, defaulting to 1000 [ 82.439453][ T6343] vlan2: entered allmulticast mode [ 82.502191][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.511650][ T6339] lo speed is unknown, defaulting to 1000 [ 82.600191][ T6354] loop2: detected capacity change from 0 to 1024 [ 82.646556][ T6354] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 82.692275][ T6354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.730265][ T6354] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.2.894: corrupted in-inode xattr: bad magic number in in-inode xattr [ 82.759976][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.899'. [ 82.768916][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.899'. [ 82.798819][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.827460][ T6359] loop4: detected capacity change from 0 to 1024 [ 82.837244][ T6359] EXT4-fs: Ignoring removed orlov option [ 82.842960][ T6359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.885389][ T6359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.985259][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.097015][ T6373] lo speed is unknown, defaulting to 1000 [ 83.289218][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 83.322788][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 83.331678][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 83.642524][ T6389] lo speed is unknown, defaulting to 1000 [ 83.648448][ T6389] lo speed is unknown, defaulting to 1000 [ 83.654524][ T6389] lo speed is unknown, defaulting to 1000 [ 83.666622][ T6389] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.695509][ T6389] lo speed is unknown, defaulting to 1000 [ 83.718775][ T6393] netlink: 44 bytes leftover after parsing attributes in process `syz.3.910'. [ 83.735536][ T6389] lo speed is unknown, defaulting to 1000 [ 83.755270][ T6389] lo speed is unknown, defaulting to 1000 [ 83.761488][ T6389] lo speed is unknown, defaulting to 1000 [ 83.785701][ T6389] lo speed is unknown, defaulting to 1000 [ 83.916104][ T6404] loop2: detected capacity change from 0 to 164 [ 83.932876][ T6406] nfs4: Bad value for 'source' [ 83.940601][ T6407] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 83.955878][ T6404] Unable to read rock-ridge attributes [ 84.036260][ T6397] futex_wake_op: syz.0.912 tries to shift op by -1; fix this program [ 84.051569][ T6412] loop2: detected capacity change from 0 to 164 [ 84.074058][ T6412] Unable to read rock-ridge attributes [ 84.189142][ T6414] netlink: 'syz.2.919': attribute type 4 has an invalid length. [ 84.196950][ T6414] netlink: 'syz.2.919': attribute type 2 has an invalid length. [ 84.214324][ T6410] serio: Serial port pts0 [ 84.309675][ T6425] loop2: detected capacity change from 0 to 2048 [ 84.345714][ T6425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.384465][ T3439] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 84.401351][ T3439] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 84.413590][ T3439] EXT4-fs (loop2): This should not happen!! Data will be lost [ 84.413590][ T3439] [ 84.423326][ T3439] EXT4-fs (loop2): Total free blocks count 0 [ 84.429368][ T3439] EXT4-fs (loop2): Free/Dirty block details [ 84.435297][ T3439] EXT4-fs (loop2): free_blocks=2415919104 [ 84.441024][ T3439] EXT4-fs (loop2): dirty_blocks=16 [ 84.446190][ T3439] EXT4-fs (loop2): Block reservation details [ 84.452248][ T3439] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 84.511024][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.528011][ T6433] loop4: detected capacity change from 0 to 512 [ 84.534479][ T6433] EXT4-fs: Ignoring removed orlov option [ 84.576001][ T6433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.662472][ T6444] loop3: detected capacity change from 0 to 512 [ 84.669901][ T6433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.684784][ T6444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.706270][ T6433] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.744385][ T6433] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.751889][ T6444] EXT4-fs (loop3): 1 truncate cleaned up [ 84.757944][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.790560][ T6444] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.927: corrupted in-inode xattr: overlapping e_value [ 84.810205][ T6444] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1772: inode #15: comm syz.3.927: unable to update i_inline_off [ 84.822812][ T6444] EXT4-fs error (device loop3): ext4_xattr_ibody_get:653: inode #15: comm syz.3.927: corrupted in-inode xattr: overlapping e_value [ 84.852959][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.916960][ T6462] loop2: detected capacity change from 0 to 164 [ 84.944478][ T6462] +¤n‘J: attempt to access beyond end of device [ 84.944478][ T6462] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 84.974898][ T6462] +¤n‘J: attempt to access beyond end of device [ 84.974898][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.004964][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.004964][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.018053][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 85.018067][ T29] audit: type=1400 audit(1732887705.639:3696): avc: granted { setsecparam } for pid=6464 comm="syz.0.934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 85.044977][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.044977][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.058039][ T29] audit: type=1400 audit(1732887705.689:3697): avc: denied { mounton } for pid=6461 comm="syz.2.933" path="/167/file2/file0" dev="loop2" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 85.064553][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.064553][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.081318][ T29] audit: type=1400 audit(1732887705.689:3698): avc: denied { remount } for pid=6461 comm="syz.2.933" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 85.113238][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.113238][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.147371][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.147371][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.179676][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.179676][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.195082][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.195082][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.224889][ T6462] +¤n‘J: attempt to access beyond end of device [ 85.224889][ T6462] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.361561][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.535404][ T29] audit: type=1326 audit(1732887706.169:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.558931][ T29] audit: type=1326 audit(1732887706.169:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.613013][ T29] audit: type=1326 audit(1732887706.199:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.636443][ T29] audit: type=1326 audit(1732887706.199:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.659976][ T29] audit: type=1326 audit(1732887706.199:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.683383][ T29] audit: type=1326 audit(1732887706.199:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.706728][ T29] audit: type=1326 audit(1732887706.199:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.4.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 85.922956][ T6482] loop2: detected capacity change from 0 to 512 [ 85.940285][ T6482] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.051604][ T6491] xfrm1: entered promiscuous mode [ 86.056742][ T6491] xfrm1: entered allmulticast mode [ 86.194414][ T6491] 9pnet_fd: Insufficient options for proto=fd [ 86.425801][ T6502] nfs4: Bad value for 'source' [ 86.529894][ T6506] loop4: detected capacity change from 0 to 128 [ 86.665816][ T6506] ext4 filesystem being mounted at /177/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.113705][ T6523] lo speed is unknown, defaulting to 1000 [ 87.125842][ T6523] lo speed is unknown, defaulting to 1000 [ 87.408608][ T6532] loop3: detected capacity change from 0 to 1024 [ 87.466063][ T6532] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 87.661656][ T6538] vhci_hcd: invalid port number 236 [ 87.682771][ T6544] loop4: detected capacity change from 0 to 164 [ 87.689163][ T6532] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.959: corrupted in-inode xattr: bad magic number in in-inode xattr [ 87.846606][ T6544] Unable to read rock-ridge attributes [ 89.076002][ T6572] loop3: detected capacity change from 0 to 512 [ 89.194904][ T6573] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 89.201545][ T6573] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.209197][ T6573] vhci_hcd vhci_hcd.0: Device attached [ 89.273295][ T6572] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.975: Parent and EA inode have the same ino 15 [ 89.289616][ T6584] loop2: detected capacity change from 0 to 128 [ 89.337470][ T6570] lo speed is unknown, defaulting to 1000 [ 89.343590][ T6570] lo speed is unknown, defaulting to 1000 [ 89.349559][ T6584] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.387244][ T6584] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 89.394981][ T35] vhci_hcd: vhci_device speed not set [ 89.406143][ T6572] EXT4-fs (loop3): 1 orphan inode deleted [ 89.416780][ T6584] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 89.470084][ T35] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 89.813900][ T6576] vhci_hcd: connection reset by peer [ 89.833021][ T50] vhci_hcd: stop threads [ 89.837354][ T50] vhci_hcd: release socket [ 89.841787][ T50] vhci_hcd: disconnect device [ 90.089192][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 90.089261][ T29] audit: type=1400 audit(1732887710.719:4092): avc: denied { create } for pid=6602 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.114950][ T29] audit: type=1400 audit(1732887710.719:4093): avc: denied { setopt } for pid=6602 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.179588][ T6606] FAULT_INJECTION: forcing a failure. [ 90.179588][ T6606] name failslab, interval 1, probability 0, space 0, times 0 [ 90.184003][ T29] audit: type=1400 audit(1732887710.799:4094): avc: denied { create } for pid=6604 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.192393][ T6606] CPU: 0 UID: 0 PID: 6606 Comm: syz.4.986 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 90.192418][ T6606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.211897][ T29] audit: type=1326 audit(1732887710.799:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.222067][ T6606] Call Trace: [ 90.222076][ T6606] [ 90.222085][ T6606] dump_stack_lvl+0xf2/0x150 [ 90.222112][ T6606] dump_stack+0x15/0x20 [ 90.232210][ T29] audit: type=1326 audit(1732887710.799:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.255430][ T6606] should_fail_ex+0x223/0x230 [ 90.255471][ T6606] should_failslab+0x8f/0xb0 [ 90.255531][ T6606] kmem_cache_alloc_noprof+0x52/0x320 [ 90.258801][ T29] audit: type=1326 audit(1732887710.799:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.261721][ T6606] ? __kernfs_new_node+0x6a/0x380 [ 90.266345][ T29] audit: type=1326 audit(1732887710.799:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.270454][ T6606] __kernfs_new_node+0x6a/0x380 [ 90.293844][ T29] audit: type=1326 audit(1732887710.799:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.298491][ T6606] ? kernfs_add_one+0x334/0x3a0 [ 90.298540][ T6606] kernfs_new_node+0xc8/0x140 [ 90.303196][ T29] audit: type=1326 audit(1732887710.799:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.308547][ T6606] kernfs_create_link+0x6c/0x120 [ 90.331885][ T29] audit: type=1326 audit(1732887710.809:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6604 comm="syz.4.986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7777240809 code=0x7ffc0000 [ 90.336865][ T6606] sysfs_do_create_link_sd+0x6b/0xf0 [ 90.336904][ T6606] sysfs_create_link+0x51/0x70 [ 90.336935][ T6606] device_add_class_symlinks+0x9a/0x1e0 [ 90.465488][ T6606] device_add+0x36c/0x790 [ 90.469941][ T6606] netdev_register_kobject+0x100/0x230 [ 90.475526][ T6606] register_netdevice+0x910/0xe30 [ 90.480652][ T6606] tun_set_iff+0x5d4/0x810 [ 90.485125][ T6606] __tun_chr_ioctl+0x64c/0x1860 [ 90.490049][ T6606] tun_chr_ioctl+0x27/0x30 [ 90.494570][ T6606] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 90.499737][ T6606] __se_sys_ioctl+0xc9/0x140 [ 90.504384][ T6606] __x64_sys_ioctl+0x43/0x50 [ 90.509031][ T6606] x64_sys_call+0x1690/0x2dc0 [ 90.513826][ T6606] do_syscall_64+0xc9/0x1c0 [ 90.518360][ T6606] ? clear_bhb_loop+0x55/0xb0 [ 90.523076][ T6606] ? clear_bhb_loop+0x55/0xb0 [ 90.527780][ T6606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.533839][ T6606] RIP: 0033:0x7f7777240809 [ 90.538408][ T6606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.558037][ T6606] RSP: 002b:00007f77758b7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.566543][ T6606] RAX: ffffffffffffffda RBX: 00007f7777405fa0 RCX: 00007f7777240809 [ 90.574568][ T6606] RDX: 0000000020000100 RSI: 00000000400454ca RDI: 000000000000000d [ 90.582572][ T6606] RBP: 00007f77758b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.590572][ T6606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.598624][ T6606] R13: 0000000000000000 R14: 00007f7777405fa0 R15: 00007ffdbda799a8 [ 90.606228][ T6612] netlink: 'syz.0.985': attribute type 4 has an invalid length. [ 90.606633][ T6606] [ 90.868214][ T6627] team0 (unregistering): Port device C removed [ 90.898208][ T6627] team0 (unregistering): Port device team_slave_1 removed [ 90.949720][ T6638] loop3: detected capacity change from 0 to 1024 [ 90.995274][ T6638] EXT4-fs: Ignoring removed orlov option [ 91.001097][ T6638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.011072][ T6622] lo speed is unknown, defaulting to 1000 [ 91.038770][ T6622] lo speed is unknown, defaulting to 1000 [ 91.055558][ T6645] 9pnet_fd: p9_fd_create_tcp (6645): problem connecting socket to 127.0.0.1 [ 91.075565][ T6647] FAULT_INJECTION: forcing a failure. [ 91.075565][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 91.088261][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.0.998 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 91.098527][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.100458][ T6645] loop4: detected capacity change from 0 to 164 [ 91.108704][ T6647] Call Trace: [ 91.108714][ T6647] [ 91.108723][ T6647] dump_stack_lvl+0xf2/0x150 [ 91.108781][ T6647] dump_stack+0x15/0x20 [ 91.108799][ T6647] should_fail_ex+0x223/0x230 [ 91.134715][ T6647] should_failslab+0x8f/0xb0 [ 91.139405][ T6647] kmem_cache_alloc_node_noprof+0x59/0x320 [ 91.145257][ T6647] ? __alloc_skb+0x10b/0x310 [ 91.149909][ T6647] __alloc_skb+0x10b/0x310 [ 91.154336][ T6647] ? audit_log_start+0x34c/0x6b0 [ 91.159293][ T6647] audit_log_start+0x368/0x6b0 [ 91.164075][ T6647] ? kmem_cache_free+0xdc/0x2d0 [ 91.169049][ T6647] audit_seccomp+0x4b/0x130 [ 91.173569][ T6647] __seccomp_filter+0x6fa/0x1180 [ 91.178609][ T6647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.184338][ T6647] ? vfs_write+0x596/0x920 [ 91.188917][ T6647] __secure_computing+0x9f/0x1c0 [ 91.193866][ T6647] syscall_trace_enter+0xd1/0x1f0 [ 91.198925][ T6647] ? fpregs_assert_state_consistent+0x83/0xa0 [ 91.205026][ T6647] do_syscall_64+0xaa/0x1c0 [ 91.209534][ T6647] ? clear_bhb_loop+0x55/0xb0 [ 91.214275][ T6647] ? clear_bhb_loop+0x55/0xb0 [ 91.218967][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.224886][ T6647] RIP: 0033:0x7fcd15d1f21c [ 91.229307][ T6647] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 91.248936][ T6647] RSP: 002b:00007fcd14397050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.257402][ T6647] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d1f21c [ 91.265465][ T6647] RDX: 000000000000000f RSI: 00007fcd143970b0 RDI: 0000000000000006 [ 91.273511][ T6647] RBP: 00007fcd143970a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.281490][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.289537][ T6647] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 91.297521][ T6647] [ 91.312092][ T6645] Unable to read rock-ridge attributes [ 91.427241][ T6648] lo speed is unknown, defaulting to 1000 [ 91.433443][ T6648] lo speed is unknown, defaulting to 1000 [ 91.435928][ T6622] chnl_net:caif_netlink_parms(): no params data found [ 91.512763][ T6674] FAULT_INJECTION: forcing a failure. [ 91.512763][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 91.525527][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.0.1006 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 91.535882][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.545955][ T6674] Call Trace: [ 91.549323][ T6674] [ 91.552281][ T6674] dump_stack_lvl+0xf2/0x150 [ 91.556906][ T6674] dump_stack+0x15/0x20 [ 91.561068][ T6674] should_fail_ex+0x223/0x230 [ 91.565802][ T6674] should_failslab+0x8f/0xb0 [ 91.570408][ T6674] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 91.576840][ T6674] ? sidtab_sid2str_get+0xb8/0x140 [ 91.581984][ T6674] kmemdup_noprof+0x2a/0x60 [ 91.586600][ T6674] sidtab_sid2str_get+0xb8/0x140 [ 91.591686][ T6674] security_sid_to_context_core+0x1eb/0x2f0 [ 91.597748][ T6674] security_sid_to_context+0x27/0x30 [ 91.603059][ T6674] selinux_lsmprop_to_secctx+0x2c/0x40 [ 91.608542][ T6674] security_lsmprop_to_secctx+0x4a/0x90 [ 91.614103][ T6674] audit_log_task_context+0x93/0x1c0 [ 91.619509][ T6674] audit_log_task+0xf9/0x1c0 [ 91.624266][ T6674] audit_seccomp+0x68/0x130 [ 91.628849][ T6674] __seccomp_filter+0x6fa/0x1180 [ 91.633860][ T6674] ? errseq_sample+0x2f/0x40 [ 91.638464][ T6674] ? file_init_path+0x267/0x290 [ 91.643445][ T6674] ? alloc_file_pseudo+0x106/0x140 [ 91.648614][ T6674] __secure_computing+0x9f/0x1c0 [ 91.653621][ T6674] syscall_trace_enter+0xd1/0x1f0 [ 91.658661][ T6674] do_syscall_64+0xaa/0x1c0 [ 91.663173][ T6674] ? clear_bhb_loop+0x55/0xb0 [ 91.667867][ T6674] ? clear_bhb_loop+0x55/0xb0 [ 91.672621][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.678613][ T6674] RIP: 0033:0x7fcd15d1f21c [ 91.683038][ T6674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 91.702666][ T6674] RSP: 002b:00007fcd14397050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.711091][ T6674] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d1f21c [ 91.719167][ T6674] RDX: 000000000000000f RSI: 00007fcd143970b0 RDI: 0000000000000006 [ 91.727145][ T6674] RBP: 00007fcd143970a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.735214][ T6674] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 91.743198][ T6674] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 91.751292][ T6674] [ 91.771528][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.778741][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.786274][ T6622] bridge_slave_0: entered allmulticast mode [ 91.794443][ T6622] bridge_slave_0: entered promiscuous mode [ 91.795931][ T6676] loop3: detected capacity change from 0 to 2048 [ 91.801394][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.813946][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.825093][ T6622] bridge_slave_1: entered allmulticast mode [ 91.831956][ T6622] bridge_slave_1: entered promiscuous mode [ 91.865914][ T6683] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 91.873683][ T6683] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 91.895515][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.917777][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.951632][ T320] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 91.968387][ T320] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 91.980694][ T320] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.980694][ T320] [ 91.990412][ T320] EXT4-fs (loop3): Total free blocks count 0 [ 91.996526][ T320] EXT4-fs (loop3): Free/Dirty block details [ 92.002597][ T320] EXT4-fs (loop3): free_blocks=2415919104 [ 92.008369][ T320] EXT4-fs (loop3): dirty_blocks=16 [ 92.013633][ T320] EXT4-fs (loop3): Block reservation details [ 92.019883][ T320] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 92.033983][ T6622] team0: Port device team_slave_0 added [ 92.043820][ T6622] team0: Port device team_slave_1 added [ 92.064719][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.071794][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.097819][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.109441][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.116455][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.142519][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.205942][ T6622] hsr_slave_0: entered promiscuous mode [ 92.212058][ T6622] hsr_slave_1: entered promiscuous mode [ 92.218145][ T6622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.227709][ T6622] Cannot create hsr debugfs directory [ 92.396989][ T6622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.419399][ T6622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.433455][ T6706] loop4: detected capacity change from 0 to 1024 [ 92.443096][ T6622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.456625][ T6622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.464051][ T6706] EXT4-fs: Ignoring removed orlov option [ 92.469914][ T6706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.491963][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.499140][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.579183][ T6622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.594078][ T6622] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.617684][ T6707] lo speed is unknown, defaulting to 1000 [ 92.636107][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.643284][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.668146][ T6707] lo speed is unknown, defaulting to 1000 [ 92.837741][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.876078][ T6721] __nla_validate_parse: 11 callbacks suppressed [ 92.876100][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'. [ 92.920052][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 92.957738][ T6721] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 93.116614][ T6622] veth0_vlan: entered promiscuous mode [ 93.142227][ T6622] veth1_vlan: entered promiscuous mode [ 93.194767][ T6622] veth0_macvtap: entered promiscuous mode [ 93.203268][ T6622] veth1_macvtap: entered promiscuous mode [ 93.220851][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.231483][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.241395][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.251869][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.283188][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.295482][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.306089][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.316010][ T6622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.326715][ T6622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.352198][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.373166][ T6739] lo speed is unknown, defaulting to 1000 [ 93.374726][ T6622] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.387823][ T6622] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.396561][ T6622] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.405416][ T6622] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.430754][ T6739] lo speed is unknown, defaulting to 1000 [ 93.499740][ T6748] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 93.692684][ T6745] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1026'. [ 93.932182][ T6752] loop4: detected capacity change from 0 to 512 [ 93.962999][ T6752] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1027'. [ 94.057789][ T6765] loop3: detected capacity change from 0 to 128 [ 94.087983][ T6765] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.136185][ T6763] lo speed is unknown, defaulting to 1000 [ 94.142731][ T6763] lo speed is unknown, defaulting to 1000 [ 94.313001][ T6783] SELinux: security policydb version 18 (MLS) not backwards compatible [ 94.321415][ T6783] SELinux: failed to load policy [ 94.383660][ T6787] loop4: detected capacity change from 0 to 512 [ 94.432205][ T6787] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.467977][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 94.512463][ T35] usb 7-1: enqueue for inactive port 0 [ 94.523302][ T35] usb 7-1: enqueue for inactive port 0 [ 94.532242][ T6794] FAULT_INJECTION: forcing a failure. [ 94.532242][ T6794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.545372][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.0.1042 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 94.555802][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.565920][ T6794] Call Trace: [ 94.569206][ T6794] [ 94.572153][ T6794] dump_stack_lvl+0xf2/0x150 [ 94.576759][ T6794] dump_stack+0x15/0x20 [ 94.580924][ T6794] should_fail_ex+0x223/0x230 [ 94.585639][ T6794] should_fail+0xb/0x10 [ 94.589885][ T6794] should_fail_usercopy+0x1a/0x20 [ 94.595013][ T6794] _copy_from_user+0x1e/0xb0 [ 94.599615][ T6794] copy_msghdr_from_user+0x54/0x2a0 [ 94.604894][ T6794] do_recvmmsg+0x256/0x6d0 [ 94.609362][ T6794] __x64_sys_recvmmsg+0xe2/0x170 [ 94.614339][ T6794] x64_sys_call+0x2a9a/0x2dc0 [ 94.619127][ T6794] do_syscall_64+0xc9/0x1c0 [ 94.623722][ T6794] ? clear_bhb_loop+0x55/0xb0 [ 94.628415][ T6794] ? clear_bhb_loop+0x55/0xb0 [ 94.633161][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.639160][ T6794] RIP: 0033:0x7fcd15d20809 [ 94.643590][ T6794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.663222][ T6794] RSP: 002b:00007fcd14397058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 94.671744][ T6794] RAX: ffffffffffffffda RBX: 00007fcd15ee5fa0 RCX: 00007fcd15d20809 [ 94.679718][ T6794] RDX: 0000000000000344 RSI: 0000000020005c80 RDI: 0000000000000003 [ 94.687714][ T6794] RBP: 00007fcd143970a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.695687][ T6794] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 94.703659][ T6794] R13: 0000000000000000 R14: 00007fcd15ee5fa0 R15: 00007fffef8fe728 [ 94.711641][ T6794] [ 94.719534][ T6797] syz.2.1043[6797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.719601][ T6797] syz.2.1043[6797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.731146][ T6797] syz.2.1043[6797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.794384][ T6800] loop3: detected capacity change from 0 to 128 [ 94.824884][ T35] vhci_hcd: vhci_device speed not set [ 94.825267][ T9] IPVS: starting estimator thread 0... [ 94.847736][ T6805] loop2: detected capacity change from 0 to 512 [ 94.881082][ T6805] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.924953][ T6808] IPVS: using max 2256 ests per chain, 112800 per kthread [ 94.975762][ T6815] FAULT_INJECTION: forcing a failure. [ 94.975762][ T6815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.989145][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.3.1049 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 94.999552][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.009657][ T6815] Call Trace: [ 95.012942][ T6815] [ 95.015878][ T6815] dump_stack_lvl+0xf2/0x150 [ 95.020531][ T6815] dump_stack+0x15/0x20 [ 95.024693][ T6815] should_fail_ex+0x223/0x230 [ 95.029390][ T6815] should_fail+0xb/0x10 [ 95.033560][ T6815] should_fail_usercopy+0x1a/0x20 [ 95.038627][ T6815] _copy_from_user+0x1e/0xb0 [ 95.043226][ T6815] copy_msghdr_from_user+0x54/0x2a0 [ 95.048519][ T6815] ? __fget_files+0x17c/0x1c0 [ 95.053273][ T6815] __sys_sendmsg+0x13e/0x230 [ 95.057949][ T6815] __x64_sys_sendmsg+0x46/0x50 [ 95.062747][ T6815] x64_sys_call+0x2734/0x2dc0 [ 95.067442][ T6815] do_syscall_64+0xc9/0x1c0 [ 95.071956][ T6815] ? clear_bhb_loop+0x55/0xb0 [ 95.076642][ T6815] ? clear_bhb_loop+0x55/0xb0 [ 95.081401][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.087331][ T6815] RIP: 0033:0x7f6bcfc00809 [ 95.091755][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.111412][ T6815] RSP: 002b:00007f6bce277058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.120000][ T6815] RAX: ffffffffffffffda RBX: 00007f6bcfdc5fa0 RCX: 00007f6bcfc00809 [ 95.128061][ T6815] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 95.136192][ T6815] RBP: 00007f6bce2770a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.144168][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.152161][ T6815] R13: 0000000000000000 R14: 00007f6bcfdc5fa0 R15: 00007ffcdbab4788 [ 95.160143][ T6815] [ 95.179555][ T6813] lo speed is unknown, defaulting to 1000 [ 95.186669][ T6813] lo speed is unknown, defaulting to 1000 [ 95.257841][ T6821] team0: Device ipvlan2 failed to register rx_handler [ 95.284686][ T6823] loop2: detected capacity change from 0 to 1024 [ 95.285006][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 95.301410][ T6823] EXT4-fs: Ignoring removed orlov option [ 95.303830][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1054'. [ 95.307200][ T6823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.324750][ T6825] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 95.395564][ T29] kauditd_printk_skb: 3768 callbacks suppressed [ 95.395580][ T29] audit: type=1326 audit(1732887716.019:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.425394][ T29] audit: type=1326 audit(1732887716.029:7868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.448936][ T29] audit: type=1326 audit(1732887716.029:7869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.502827][ T29] audit: type=1326 audit(1732887716.029:7870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.526405][ T29] audit: type=1326 audit(1732887716.029:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.549888][ T29] audit: type=1326 audit(1732887716.029:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.573354][ T29] audit: type=1326 audit(1732887716.029:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.596852][ T29] audit: type=1326 audit(1732887716.029:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.620360][ T29] audit: type=1326 audit(1732887716.029:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.643845][ T29] audit: type=1326 audit(1732887716.029:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.0.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd15d20809 code=0x7ffc0000 [ 95.689277][ T6846] loop2: detected capacity change from 0 to 1024 [ 95.702722][ T6848] tmpfs: Bad value for 'mpol' [ 95.704938][ T6846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.756686][ T6851] lo speed is unknown, defaulting to 1000 [ 95.763361][ T6851] lo speed is unknown, defaulting to 1000 [ 95.922017][ T6857] ================================================================== [ 95.930152][ T6857] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 95.938435][ T6857] [ 95.939345][ T6852] lo speed is unknown, defaulting to 1000 [ 95.940758][ T6857] write to 0xffff888106a301b8 of 4 bytes by task 6846 on cpu 1: [ 95.954121][ T6857] writeback_single_inode+0x14f/0x3f0 [ 95.954482][ T6852] lo speed is unknown, defaulting to 1000 [ 95.959507][ T6857] sync_inode_metadata+0x5c/0x90 [ 95.959544][ T6857] generic_buffers_fsync_noflush+0xd8/0x120 [ 95.976126][ T6857] ext4_sync_file+0x1ff/0x6c0 [ 95.980815][ T6857] vfs_fsync_range+0x116/0x130 [ 95.985597][ T6857] ext4_buffered_write_iter+0x326/0x370 [ 95.991161][ T6857] ext4_file_write_iter+0x383/0xf20 [ 95.996387][ T6857] iter_file_splice_write+0x5f1/0x980 [ 96.001928][ T6857] direct_splice_actor+0x160/0x2c0 [ 96.007084][ T6857] splice_direct_to_actor+0x302/0x670 [ 96.012502][ T6857] do_splice_direct+0xd7/0x150 [ 96.017306][ T6857] do_sendfile+0x398/0x660 [ 96.021750][ T6857] __x64_sys_sendfile64+0x110/0x150 [ 96.026963][ T6857] x64_sys_call+0xfbd/0x2dc0 [ 96.031567][ T6857] do_syscall_64+0xc9/0x1c0 [ 96.036075][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.041985][ T6857] [ 96.044306][ T6857] read to 0xffff888106a301b8 of 4 bytes by task 6857 on cpu 0: [ 96.051850][ T6857] __mark_inode_dirty+0x58/0x7e0 [ 96.056801][ T6857] ext4_write_inline_data_end+0x584/0x7b0 [ 96.062538][ T6857] ext4_write_end+0x3eb/0x770 [ 96.067226][ T6857] generic_perform_write+0x33c/0x4a0 [ 96.072559][ T6857] ext4_buffered_write_iter+0x1ea/0x370 [ 96.078130][ T6857] ext4_file_write_iter+0x383/0xf20 [ 96.083335][ T6857] iter_file_splice_write+0x5f1/0x980 [ 96.088724][ T6857] direct_splice_actor+0x160/0x2c0 [ 96.093851][ T6857] splice_direct_to_actor+0x302/0x670 [ 96.099238][ T6857] do_splice_direct+0xd7/0x150 [ 96.104062][ T6857] do_sendfile+0x398/0x660 [ 96.108489][ T6857] __x64_sys_sendfile64+0x110/0x150 [ 96.113701][ T6857] x64_sys_call+0xfbd/0x2dc0 [ 96.118305][ T6857] do_syscall_64+0xc9/0x1c0 [ 96.122809][ T6857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.128718][ T6857] [ 96.131050][ T6857] value changed: 0x00000038 -> 0x00000002 [ 96.136768][ T6857] [ 96.139088][ T6857] Reported by Kernel Concurrency Sanitizer on: [ 96.145245][ T6857] CPU: 0 UID: 0 PID: 6857 Comm: syz.2.1061 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 96.155722][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.165786][ T6857] ==================================================================