last executing test programs: 46.621091126s ago: executing program 4 (id=2534): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x4081) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 45.650333389s ago: executing program 4 (id=2554): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000680)={0x42040000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1}, 0x58) r1 = inotify_init1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0xfff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r2, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000071f000/0x4000)=nil) dup(r1) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 45.57981797s ago: executing program 4 (id=2558): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r2, 0x209, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000040}, 0x20008800) 45.538696641s ago: executing program 4 (id=2559): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2bd, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mq_open(&(0x7f00000001c0)='}\'@)(\x00', 0x40, 0x0, &(0x7f0000000200)={0x2, 0xfaf, 0x1ff, 0x2a28}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x3e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000a00000000000000a500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7f20000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_clone(0x600, 0x0, 0x27, 0x0, 0x0, 0x0) setpriority(0x1, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030005000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 45.434345292s ago: executing program 4 (id=2561): set_mempolicy(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa5}, 0x18) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) r4 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) 44.962343999s ago: executing program 4 (id=2569): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r2, 0x209, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000040}, 0x20008800) 44.962034499s ago: executing program 32 (id=2569): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r2, 0x209, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000040}, 0x20008800) 1.881761885s ago: executing program 1 (id=3375): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a0000000000000008000100020000000400"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = socket(0x1d, 0x2, 0x6) r7 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x10000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340), 0x0, 0xffffffffffffffff) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r10, 0x8943, &(0x7f0000000000)) 1.754328826s ago: executing program 1 (id=3379): bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6e0e36a90fb26a9e, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.517900079s ago: executing program 2 (id=3390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r8, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0}]) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) 1.311918132s ago: executing program 2 (id=3397): ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) r0 = socket$inet6(0xa, 0x6, 0x1) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0xfffffffe, {{0x2, 0x4e24, @remote}}, 0x8c8d5b2b98b4b1c, 0x1, [{{0x2, 0x4e24, @multicast1}}]}, 0x110) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x3, 0x3, 0x8, 0x1, 0x8}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x34000014}, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setuid(r6) sendmsg$NFT_BATCH(r5, &(0x7f0000001e00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x21c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x208, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "c5ee414f0fa4250e5ff82dbc450ef6ccfbd61ef1dc7b77c6e810ea1d97f8d9568f3f1fd9c2a7285fe2fe10ca1a699b8eb27a51d39fd7f8b35f644bfc5fbf86d0f68a71ccf0c37ce68fc26798bf6f1ef7aafebbcdd905cff5e0c385b5f0d66ad11a979c766e92579551aa1b1df735be06f3ddadfbeb1c2be8512665c94561b9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x26, 0x1, "5d856be6a7b012133ff93a885ad96e747d044c9337f643f48bf225f958e8f263dd06"}, @NFTA_DATA_VALUE={0x16, 0x1, "cbdf7a4cd146af309579097371730ac96057"}]}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, {0x4}]}]}, @NFT_MSG_DELTABLE={0x144, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xec, 0x6, "ca5722b12e104c35744ec85f923a912f5a3a6b4b31dd31749c4607c7ea1e3b2a6e8e585547ff39064206dd6740d09afd6facc7b1fe3c2801f49a0232595a64606b22e35584b9fa74c4968016c045651cad33eb64a15e0a40ef90c57497d47dbea9b302cfe401e7eba7884f74fe4c680e6f81f2cb3e6cb50ced894ec0d48c96168f2dad2f4aa96369e376ac8626ed75d1bb79037214d4fdcfa4c890b47a46a615bb01452fb9f20b3c64218f40b8c5257427d2681b40a3a8b6b6e13f6337d4da7a25e4f0d8af4ac11dbfe146680b7691cfc7a9cdd4835e9dbe6e616439ad7b71624ee039bb82807018"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c0}, 0x1, 0x0, 0x0, 0x8080}, 0x4040000) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001e40), 0x4) fgetxattr(r1, &(0x7f0000001e80)=@known='com.apple.FinderInfo\x00', &(0x7f0000001ec0)=""/186, 0xba) 1.250808533s ago: executing program 2 (id=3399): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000001180)=""/207, 0xcf, 0x0, &(0x7f0000001280)=""/190, 0xbe}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='rxrpc_client\x00', r1, 0x0, 0x9}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x18, r5, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x8, r5, 0x1, 0x2, 0x6, @random="0700ffffa1f6"}, 0x14) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 1.220413913s ago: executing program 3 (id=3402): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.030261606s ago: executing program 3 (id=3408): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r6 = syz_open_pts(r5, 0x0) read(r6, 0x0, 0x2006) close_range(r4, 0xffffffffffffffff, 0x0) 940.151947ms ago: executing program 3 (id=3411): creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 923.326967ms ago: executing program 3 (id=3412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r2) 900.349788ms ago: executing program 5 (id=3413): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000b40)='./control\x00', 0x88, &(0x7f0000000b80)={[{@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@errors_remount}, {@quota}]}, 0x3, 0x438, &(0x7f0000000d80)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) rename(&(0x7f0000000000)='./file2\x00', 0x0) 884.036488ms ago: executing program 3 (id=3414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") rename(0x0, &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 832.497138ms ago: executing program 5 (id=3415): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='kfree\x00', r3, 0x0, 0x9}, 0x18) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r4}, 0x18) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000540), 0x84) r7 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x3, &(0x7f0000000240)=[{0x0, 0x8, 0x9f, 0x6b71}, {0x0, 0x5, 0x1, 0x1}, {0x65bc, 0x8, 0x3, 0x4}]}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_vlan\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc}, {0xfffc, 0x8}, {0x6}}}, 0x24}}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000100)={'tunl0\x00', r8, 0x8000, 0x7800, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x26, 0x4c, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@generic={0x94, 0x4, "3efe"}, @timestamp_addr={0x44, 0x2c, 0xd1, 0x1, 0x8, [{@multicast1, 0x7f}, {@broadcast, 0x10001}, {@rand_addr=0x64010101}, {@broadcast, 0x9}, {@rand_addr=0x64010100, 0x407fff}]}, @ssrr={0x89, 0x7, 0xe5, [@remote]}]}}}}}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x1200) 760.18377ms ago: executing program 3 (id=3418): unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x1000000, 0x100010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000440)=""/257, 0x101}], 0x1, 0x20001, 0xc) 709.7343ms ago: executing program 1 (id=3420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x4e23, 0x100, @remote, 0x16}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000b80)='./file2\x00', 0x0, &(0x7f0000000180)={[{@noauto_da_alloc}, {@errors_continue}, {@acl}, {@mblk_io_submit}, {@sysvgroups}]}, 0x41, 0x4c1, &(0x7f0000000bc0)="$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") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 606.044522ms ago: executing program 5 (id=3422): close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1, 0x0, 0x0, 0xfffffffe}, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r6 = syz_open_pts(r5, 0x0) read(r6, 0x0, 0x2006) close_range(r4, 0xffffffffffffffff, 0x0) 512.158163ms ago: executing program 5 (id=3424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r2) 477.502274ms ago: executing program 5 (id=3425): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 439.317694ms ago: executing program 1 (id=3426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r8, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r8, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0}]) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) 403.127144ms ago: executing program 0 (id=3427): set_mempolicy(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa5}, 0x18) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) r4 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) 383.035575ms ago: executing program 2 (id=3428): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x100000002) 376.690584ms ago: executing program 5 (id=3429): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1200000, &(0x7f0000000300)={[{@minixdf}, {@barrier}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2f}}, {@i_version}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000500), 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000007740)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x832b, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 353.363815ms ago: executing program 2 (id=3430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 294.443676ms ago: executing program 2 (id=3431): bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6e0e36a90fb26a9e, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, 0x0, 0x0, 0x9000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 239.488907ms ago: executing program 0 (id=3432): ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) r0 = socket$inet6(0xa, 0x6, 0x1) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x7) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0xfffffffe, {{0x2, 0x4e24, @remote}}, 0x8c8d5b2b98b4b1c, 0x1, [{{0x2, 0x4e21, @loopback}}]}, 0x110) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x3, 0x3, 0x8, 0x1, 0x8}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x34000014}, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setuid(r6) sendmsg$NFT_BATCH(r5, &(0x7f0000001e00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x21c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x208, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "c5ee414f0fa4250e5ff82dbc450ef6ccfbd61ef1dc7b77c6e810ea1d97f8d9568f3f1fd9c2a7285fe2fe10ca1a699b8eb27a51d39fd7f8b35f644bfc5fbf86d0f68a71ccf0c37ce68fc26798bf6f1ef7aafebbcdd905cff5e0c385b5f0d66ad11a979c766e92579551aa1b1df735be06f3ddadfbeb1c2be8512665c94561b9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x26, 0x1, "5d856be6a7b012133ff93a885ad96e747d044c9337f643f48bf225f958e8f263dd06"}, @NFTA_DATA_VALUE={0x16, 0x1, "cbdf7a4cd146af309579097371730ac96057"}]}, @NFTA_SET_ELEM_KEY={0x98, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, {0x4}]}]}, @NFT_MSG_DELTABLE={0x144, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xec, 0x6, "ca5722b12e104c35744ec85f923a912f5a3a6b4b31dd31749c4607c7ea1e3b2a6e8e585547ff39064206dd6740d09afd6facc7b1fe3c2801f49a0232595a64606b22e35584b9fa74c4968016c045651cad33eb64a15e0a40ef90c57497d47dbea9b302cfe401e7eba7884f74fe4c680e6f81f2cb3e6cb50ced894ec0d48c96168f2dad2f4aa96369e376ac8626ed75d1bb79037214d4fdcfa4c890b47a46a615bb01452fb9f20b3c64218f40b8c5257427d2681b40a3a8b6b6e13f6337d4da7a25e4f0d8af4ac11dbfe146680b7691cfc7a9cdd4835e9dbe6e616439ad7b71624ee039bb82807018"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c0}, 0x1, 0x0, 0x0, 0x8080}, 0x4040000) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000001e40), 0x4) fgetxattr(r1, &(0x7f0000001e80)=@known='com.apple.FinderInfo\x00', &(0x7f0000001ec0)=""/186, 0xba) 217.342597ms ago: executing program 1 (id=3433): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='kfree\x00', r3, 0x0, 0x9}, 0x18) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r4}, 0x18) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000540), 0x84) r7 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x2, &(0x7f0000000240)=[{0x0, 0x8, 0x9f, 0x6b71}, {0x65bc, 0x8, 0x3, 0x4}]}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_vlan\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc}, {0xfffc, 0x8}, {0x6}}}, 0x24}}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000100)={'tunl0\x00', r8, 0x8000, 0x7800, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x26, 0x4c, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@generic={0x94, 0x4, "3efe"}, @timestamp_addr={0x44, 0x2c, 0xd1, 0x1, 0x8, [{@multicast1, 0x7f}, {@broadcast, 0x10001}, {@rand_addr=0x64010101}, {@broadcast, 0x9}, {@rand_addr=0x64010100, 0x407fff}]}, @ssrr={0x89, 0x7, 0xe5, [@remote]}]}}}}}) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x1200) 186.295977ms ago: executing program 0 (id=3434): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r2, 0x0, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {0x0}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe47dc3e798cf47cfdbf169e77257f308b400000000227094d569a4456954e58ea1850000000000000000355c5f42d9f2aa5f1ba0a5c6553eff16", 0x4a}, {&(0x7f0000000b80)="b97edc68d716252c8449bee174f6e06d864889b733fe11", 0x17}], 0x5}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000740)="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", 0x1fa}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5", 0x4f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="b5", 0x1}], 0x1}}], 0x3, 0xc0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 185.601918ms ago: executing program 0 (id=3435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchdir(r2) 147.190158ms ago: executing program 0 (id=3436): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x4e23, 0x100, @remote, 0x16}, 0x1c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000b80)='./file2\x00', 0x0, &(0x7f0000000180)={[{@noauto_da_alloc}, {@errors_continue}, {@acl}, {@mblk_io_submit}, {@sysvgroups}]}, 0x41, 0x4c1, &(0x7f0000000bc0)="$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") r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 108.362529ms ago: executing program 0 (id=3437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa4ebbe25218875b3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 0s ago: executing program 1 (id=3438): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x20, &(0x7f0000001340)={&(0x7f0000001180)=""/207, 0xcf, 0x0, &(0x7f0000001280)=""/190, 0xbe}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000840)='rxrpc_client\x00', r1, 0x0, 0x9}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x18, r5, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x8, r5, 0x1, 0x2, 0x6, @random="0700ffffa1f6"}, 0x14) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r6 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r7, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) kernel console output (not intermixed with test programs): fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.843745][T11490] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 159.929562][T11506] lo speed is unknown, defaulting to 1000 [ 159.945970][T11501] loop2: detected capacity change from 0 to 512 [ 159.953136][T11501] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.960269][T11501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.974227][T11501] EXT4-fs (loop2): 1 truncate cleaned up [ 160.008521][T11516] audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 [ 160.016410][T11516] audit: out of memory in audit_log_start [ 160.023128][ T29] audit: type=1400 audit(1746069235.527:6336): avc: denied { name_connect } for pid=11515 comm="syz.5.2785" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 160.122841][ T29] audit: type=1326 audit(1746069235.627:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aa04e969 code=0x7ffc0000 [ 160.146721][ T29] audit: type=1326 audit(1746069235.627:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aa04e969 code=0x7ffc0000 [ 160.170469][ T29] audit: type=1326 audit(1746069235.627:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24aa04e969 code=0x7ffc0000 [ 160.194392][ T29] audit: type=1326 audit(1746069235.627:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aa04e969 code=0x7ffc0000 [ 160.218036][ T29] audit: type=1326 audit(1746069235.627:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24aa04e969 code=0x7ffc0000 [ 160.241769][ T29] audit: type=1326 audit(1746069235.627:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.0.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f24aa04e969 code=0x7ffc0000 [ 160.266085][T11533] FAULT_INJECTION: forcing a failure. [ 160.266085][T11533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.279248][T11533] CPU: 1 UID: 0 PID: 11533 Comm: syz.5.2793 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 160.279283][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 160.279299][T11533] Call Trace: [ 160.279317][T11533] [ 160.279325][T11533] __dump_stack+0x1d/0x30 [ 160.279346][T11533] dump_stack_lvl+0xe8/0x140 [ 160.279463][T11533] dump_stack+0x15/0x1b [ 160.279484][T11533] should_fail_ex+0x265/0x280 [ 160.279539][T11533] should_fail+0xb/0x20 [ 160.279566][T11533] should_fail_usercopy+0x1a/0x20 [ 160.279613][T11533] _copy_to_user+0x20/0xa0 [ 160.279673][T11533] simple_read_from_buffer+0xb5/0x130 [ 160.279700][T11533] proc_fail_nth_read+0x100/0x140 [ 160.279725][T11533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.279750][T11533] vfs_read+0x19d/0x6f0 [ 160.279791][T11533] ? __rcu_read_unlock+0x4f/0x70 [ 160.279816][T11533] ? __rcu_read_unlock+0x4f/0x70 [ 160.279841][T11533] ? __fget_files+0x184/0x1c0 [ 160.279955][T11533] ksys_read+0xda/0x1a0 [ 160.279986][T11533] __x64_sys_read+0x40/0x50 [ 160.280015][T11533] x64_sys_call+0x2d77/0x2fb0 [ 160.280038][T11533] do_syscall_64+0xd0/0x1a0 [ 160.280068][T11533] ? clear_bhb_loop+0x25/0x80 [ 160.280088][T11533] ? clear_bhb_loop+0x25/0x80 [ 160.280109][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.280144][T11533] RIP: 0033:0x7f9a3004d37c [ 160.280163][T11533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.280185][T11533] RSP: 002b:00007f9a2e6b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.280208][T11533] RAX: ffffffffffffffda RBX: 00007f9a30275fa0 RCX: 00007f9a3004d37c [ 160.280224][T11533] RDX: 000000000000000f RSI: 00007f9a2e6b70a0 RDI: 0000000000000005 [ 160.280239][T11533] RBP: 00007f9a2e6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.280260][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.280274][T11533] R13: 0000000000000000 R14: 00007f9a30275fa0 R15: 00007ffe365ed0e8 [ 160.280298][T11533] [ 160.506277][T11537] loop1: detected capacity change from 0 to 1024 [ 160.513613][T11537] EXT4-fs: Ignoring removed orlov option [ 160.519344][T11537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.550854][T11541] loop5: detected capacity change from 0 to 512 [ 160.559409][T11537] EXT4-fs (loop1): shut down requested (2) [ 160.566182][T11537] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2795'. [ 160.576442][T11541] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.602789][T11541] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.617097][T11541] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2796: corrupted xattr block 32: bad e_name length [ 160.633263][T11541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 160.643042][T11541] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2796: corrupted xattr block 32: bad e_name length [ 160.657881][T11541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 160.668341][T11541] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.2796: failed to insert inode 16: doubly allocated? [ 160.745870][T11557] SELinux: syz.5.2803 (11557) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 160.873212][T11572] loop5: detected capacity change from 0 to 8192 [ 160.908259][T11579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2812'. [ 160.941985][T11582] loop5: detected capacity change from 0 to 128 [ 160.956846][T11582] syz.5.2813: attempt to access beyond end of device [ 160.956846][T11582] loop5: rw=1, sector=145, nr_sectors = 77 limit=128 [ 161.000582][T11588] loop5: detected capacity change from 0 to 512 [ 161.007649][T11588] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.015756][T11586] loop3: detected capacity change from 0 to 512 [ 161.023107][T11586] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.030405][T11586] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.042439][T11588] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.053845][T11586] EXT4-fs (loop3): 1 truncate cleaned up [ 161.059501][T11588] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2815: corrupted xattr block 32: bad e_name length [ 161.059841][T11588] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 161.082537][T11588] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2815: corrupted xattr block 32: bad e_name length [ 161.086509][T11598] loop2: detected capacity change from 0 to 128 [ 161.096781][T11588] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 161.112754][T11588] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.2815: failed to insert inode 16: doubly allocated? [ 161.154090][T11600] lo speed is unknown, defaulting to 1000 [ 161.229800][T11598] Falling back ldisc for ttyS3. [ 161.237390][T11598] syz.2.2818: attempt to access beyond end of device [ 161.237390][T11598] loop2: rw=1, sector=145, nr_sectors = 85 limit=128 [ 161.317226][T11606] lo speed is unknown, defaulting to 1000 [ 161.555044][T11610] loop2: detected capacity change from 0 to 128 [ 161.567148][T11610] tun0: tun_chr_ioctl cmd 1074025677 [ 161.579914][T11610] tun0: linktype set to 270 [ 161.650336][T11622] netlink: 'syz.2.2830': attribute type 58 has an invalid length. [ 161.658220][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2830'. [ 161.689605][T11625] loop2: detected capacity change from 0 to 2048 [ 161.701359][T11625] EXT4-fs mount: 88 callbacks suppressed [ 161.701381][T11625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.719734][T11625] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.787853][T11634] lo speed is unknown, defaulting to 1000 [ 161.827860][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.891366][ T31] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 161.907889][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 49 with error 117 [ 161.920632][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.920632][ T31] [ 161.957000][T11638] loop3: detected capacity change from 0 to 1024 [ 162.017229][T11638] EXT4-fs: Ignoring removed i_version option [ 162.023458][T11638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.181266][T11638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.295495][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.337154][T11662] loop3: detected capacity change from 0 to 512 [ 162.372066][T11662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.385198][T11662] ext4 filesystem being mounted at /555/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.414096][T11660] loop5: detected capacity change from 0 to 512 [ 162.430200][T11662] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.2841: corrupted inode contents [ 162.447031][T11662] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.2841: mark_inode_dirty error [ 162.465536][T11660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.481446][T11625] syz.2.2831 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 162.495737][T11625] CPU: 1 UID: 0 PID: 11625 Comm: syz.2.2831 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 162.495850][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 162.495865][T11625] Call Trace: [ 162.495873][T11625] [ 162.495882][T11625] __dump_stack+0x1d/0x30 [ 162.495887][T11660] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.495909][T11625] dump_stack_lvl+0xe8/0x140 [ 162.495929][T11625] dump_stack+0x15/0x1b [ 162.495944][T11625] dump_header+0x81/0x220 [ 162.496056][T11625] oom_kill_process+0x334/0x3f0 [ 162.496093][T11625] out_of_memory+0x979/0xb80 [ 162.496124][T11625] ? css_next_descendant_pre+0x138/0x160 [ 162.496197][T11625] mem_cgroup_out_of_memory+0x13d/0x190 [ 162.496245][T11625] try_charge_memcg+0x5e2/0x870 [ 162.496288][T11625] obj_cgroup_charge_pages+0xb7/0x1a0 [ 162.496319][T11625] __memcg_kmem_charge_page+0x9f/0x170 [ 162.496377][T11625] __alloc_frozen_pages_noprof+0x188/0x360 [ 162.496437][T11625] alloc_pages_mpol+0xb3/0x250 [ 162.496469][T11625] alloc_pages_noprof+0x90/0x130 [ 162.496499][T11625] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 162.496596][T11625] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 162.496656][T11625] ? ip_set_alloc+0x1f/0x30 [ 162.496689][T11625] ? ip_set_alloc+0x1f/0x30 [ 162.496721][T11625] ? __kmalloc_cache_noprof+0x189/0x320 [ 162.496749][T11625] ip_set_alloc+0x1f/0x30 [ 162.496780][T11625] hash_netiface_create+0x282/0x740 [ 162.496823][T11625] ? __pfx_hash_netiface_create+0x10/0x10 [ 162.496861][T11625] ip_set_create+0x3c9/0x960 [ 162.496914][T11625] ? __nla_parse+0x40/0x60 [ 162.496953][T11625] nfnetlink_rcv_msg+0x4c3/0x590 [ 162.496982][T11625] ? put_dec+0xd3/0xe0 [ 162.497080][T11625] netlink_rcv_skb+0x120/0x220 [ 162.497121][T11625] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 162.497216][T11625] nfnetlink_rcv+0x16b/0x1690 [ 162.497246][T11625] ? __kfree_skb+0x109/0x150 [ 162.497353][T11625] ? nlmon_xmit+0x4f/0x60 [ 162.497370][T11625] ? consume_skb+0x49/0x150 [ 162.497486][T11625] ? nlmon_xmit+0x4f/0x60 [ 162.497511][T11625] ? dev_hard_start_xmit+0x39e/0x3d0 [ 162.497625][T11625] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 162.497668][T11625] ? __dev_queue_xmit+0x182/0x1fb0 [ 162.497716][T11625] ? ref_tracker_free+0x37d/0x3e0 [ 162.497787][T11625] ? __netlink_deliver_tap+0x4dc/0x500 [ 162.497836][T11625] netlink_unicast+0x59e/0x670 [ 162.497888][T11625] netlink_sendmsg+0x58b/0x6b0 [ 162.497935][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.497997][T11625] __sock_sendmsg+0x142/0x180 [ 162.498031][T11625] ____sys_sendmsg+0x31e/0x4e0 [ 162.498062][T11625] ___sys_sendmsg+0x17b/0x1d0 [ 162.498116][T11625] __x64_sys_sendmsg+0xd4/0x160 [ 162.498148][T11625] x64_sys_call+0x2999/0x2fb0 [ 162.498206][T11625] do_syscall_64+0xd0/0x1a0 [ 162.498235][T11625] ? clear_bhb_loop+0x25/0x80 [ 162.498321][T11625] ? clear_bhb_loop+0x25/0x80 [ 162.498351][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.498379][T11625] RIP: 0033:0x7f88e2e5e969 [ 162.498400][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.498426][T11625] RSP: 002b:00007f88e14c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.498491][T11625] RAX: ffffffffffffffda RBX: 00007f88e3085fa0 RCX: 00007f88e2e5e969 [ 162.498509][T11625] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 162.498525][T11625] RBP: 00007f88e2ee0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 162.498541][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.498585][T11625] R13: 0000000000000000 R14: 00007f88e3085fa0 R15: 00007fff50b05f18 [ 162.498611][T11625] [ 162.498620][T11625] memory: usage 307196kB, limit 307200kB, failcnt 846 [ 162.521852][T11662] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.2841: corrupted inode contents [ 162.521959][T11625] memory+swap: usage 308432kB, limit 9007199254740988kB, failcnt 0 [ 162.525047][T11662] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2841: mark_inode_dirty error [ 162.529159][T11625] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 162.529176][T11625] Memory cgroup stats for /syz2: [ 162.529474][T11625] cache 12288 [ 162.912538][T11625] rss 4096 [ 162.915561][T11625] shmem 0 [ 162.918493][T11625] mapped_file 0 [ 162.921965][T11625] dirty 0 [ 162.924951][T11625] writeback 0 [ 162.928292][T11625] workingset_refault_anon 664 [ 162.932977][T11625] workingset_refault_file 1398 [ 162.937755][T11625] swap 1261568 [ 162.941145][T11625] swapcached 8192 [ 162.944825][T11625] pgpgin 66353 [ 162.948257][T11625] pgpgout 66347 [ 162.951726][T11625] pgfault 111098 [ 162.955297][T11625] pgmajfault 349 [ 162.958860][T11625] inactive_anon 8192 [ 162.962827][T11625] active_anon 0 [ 162.966419][T11625] inactive_file 16384 [ 162.970408][T11625] active_file 0 [ 162.973908][T11625] unevictable 0 [ 162.977389][T11625] hierarchical_memory_limit 314572800 [ 162.982901][T11625] hierarchical_memsw_limit 9223372036854771712 [ 162.989230][T11625] total_cache 12288 [ 162.993179][T11625] total_rss 4096 [ 162.996719][T11625] total_shmem 0 [ 163.000249][T11625] total_mapped_file 0 [ 163.004251][T11625] total_dirty 0 [ 163.007786][T11625] total_writeback 0 [ 163.011638][T11625] total_workingset_refault_anon 664 [ 163.016906][T11625] total_workingset_refault_file 1398 [ 163.022233][T11625] total_swap 1261568 [ 163.026123][T11625] total_swapcached 8192 [ 163.030358][T11625] total_pgpgin 66353 [ 163.034296][T11625] total_pgpgout 66347 [ 163.038297][T11625] total_pgfault 111098 [ 163.042377][T11625] total_pgmajfault 349 [ 163.046436][T11625] total_inactive_anon 8192 [ 163.050880][T11625] total_active_anon 0 [ 163.055004][T11625] total_inactive_file 16384 [ 163.059604][T11625] total_active_file 0 [ 163.060859][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.063624][T11625] total_unevictable 0 [ 163.076767][T11625] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2831,pid=11624,uid=0 [ 163.091562][T11625] Memory cgroup out of memory: Killed process 11624 (syz.2.2831) total-vm:93748kB, anon-rss:936kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 163.114838][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.200132][T11675] lo speed is unknown, defaulting to 1000 [ 163.238489][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2843'. [ 163.269498][T11678] loop3: detected capacity change from 0 to 512 [ 163.276379][T11678] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.321812][T11678] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.352102][T11678] EXT4-fs (loop3): 1 truncate cleaned up [ 163.370265][T11678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.475080][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.493860][T11695] lo speed is unknown, defaulting to 1000 [ 163.567226][T11699] loop2: detected capacity change from 0 to 128 [ 163.653470][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2860'. [ 163.668667][T11699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=11699 comm=syz.2.2853 [ 163.735067][T11716] syz.2.2853: attempt to access beyond end of device [ 163.735067][T11716] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 163.748867][T11716] syz.2.2853: attempt to access beyond end of device [ 163.748867][T11716] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 163.763147][T11716] syz.2.2853: attempt to access beyond end of device [ 163.763147][T11716] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 163.777139][T11716] syz.2.2853: attempt to access beyond end of device [ 163.777139][T11716] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 163.791413][T11716] syz.2.2853: attempt to access beyond end of device [ 163.791413][T11716] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 163.806404][T11716] syz.2.2853: attempt to access beyond end of device [ 163.806404][T11716] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 163.820146][T11716] syz.2.2853: attempt to access beyond end of device [ 163.820146][T11716] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 163.850002][T11716] syz.2.2853: attempt to access beyond end of device [ 163.850002][T11716] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 163.866032][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 163.866049][ T29] audit: type=1326 audit(1746069239.367:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11718 comm="syz.5.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3004e969 code=0x7ffc0000 [ 163.900469][ T29] audit: type=1326 audit(1746069239.377:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11718 comm="syz.5.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3004e969 code=0x7ffc0000 [ 163.924282][ T29] audit: type=1326 audit(1746069239.377:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11718 comm="syz.5.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f9a3004e969 code=0x7ffc0000 [ 163.947741][ T29] audit: type=1326 audit(1746069239.377:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11718 comm="syz.5.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3004e969 code=0x7ffc0000 [ 164.053371][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.136878][T11725] loop5: detected capacity change from 0 to 8192 [ 164.151932][T11727] lo speed is unknown, defaulting to 1000 [ 164.245278][T11731] lo speed is unknown, defaulting to 1000 [ 164.495227][T11749] loop2: detected capacity change from 0 to 512 [ 164.510762][T11736] lo speed is unknown, defaulting to 1000 [ 164.521650][T11749] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 164.531951][T11749] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 164.545739][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'. [ 164.555915][T11749] EXT4-fs (loop2): mount failed [ 164.607075][T11736] chnl_net:caif_netlink_parms(): no params data found [ 164.658323][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2875'. [ 164.676266][T11736] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.683518][T11736] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.691147][T11736] bridge_slave_0: entered allmulticast mode [ 164.698014][T11736] bridge_slave_0: entered promiscuous mode [ 164.738569][T11773] loop2: detected capacity change from 0 to 8192 [ 164.753802][T11736] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.760970][T11736] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.768273][T11736] bridge_slave_1: entered allmulticast mode [ 164.775317][T11736] bridge_slave_1: entered promiscuous mode [ 165.081362][ T110] bond0 (unregistering): Released all slaves [ 165.101438][T11736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.127455][T11736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.137070][ T110] tipc: Disabling bearer [ 165.142224][ T110] tipc: Left network mode [ 165.147043][T11777] lo speed is unknown, defaulting to 1000 [ 165.161441][T11788] loop3: detected capacity change from 0 to 512 [ 165.168284][T11788] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.193588][ T110] hsr_slave_0: left promiscuous mode [ 165.200336][ T110] hsr_slave_1: left promiscuous mode [ 165.206744][T11788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.219546][T11788] ext4 filesystem being mounted at /558/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.222322][ T110] pim6reg (unregistering): left allmulticast mode [ 165.240283][T11788] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2880: corrupted xattr block 32: bad e_name length [ 165.255952][T11788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 165.271216][T11788] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2880: corrupted xattr block 32: bad e_name length [ 165.285321][T11788] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 165.296364][T11788] EXT4-fs error (device loop3): __ext4_new_inode:1279: comm syz.3.2880: failed to insert inode 16: doubly allocated? [ 165.331569][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.359316][T11736] team0: Port device team_slave_0 added [ 165.379107][T11736] team0: Port device team_slave_1 added [ 165.424390][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2886'. [ 165.435671][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 165.448777][T11736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.455878][T11736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.481926][T11736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.495182][T11736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.502250][T11736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.528291][T11736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.559072][T11736] hsr_slave_0: entered promiscuous mode [ 165.566200][T11736] hsr_slave_1: entered promiscuous mode [ 165.571860][ T29] audit: type=1326 audit(1746069241.077:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 165.572776][T11736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.595451][ T29] audit: type=1326 audit(1746069241.077:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 165.603599][T11736] Cannot create hsr debugfs directory [ 165.628892][ T29] audit: type=1326 audit(1746069241.137:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 165.656233][ T29] audit: type=1326 audit(1746069241.157:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 165.679877][ T29] audit: type=1326 audit(1746069241.157:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11816 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 165.769995][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 165.779725][T11822] lo speed is unknown, defaulting to 1000 [ 165.791585][T11822] lo speed is unknown, defaulting to 1000 [ 165.797550][T11822] lo speed is unknown, defaulting to 1000 [ 165.804826][T11828] loop5: detected capacity change from 0 to 512 [ 165.807232][T11822] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 165.830726][T11828] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.851896][T11828] EXT4-fs (loop5): mount failed [ 165.852685][T11822] lo speed is unknown, defaulting to 1000 [ 165.867723][T11822] lo speed is unknown, defaulting to 1000 [ 165.906595][T11822] lo speed is unknown, defaulting to 1000 [ 165.916480][T11822] lo speed is unknown, defaulting to 1000 [ 165.924608][T11822] lo speed is unknown, defaulting to 1000 [ 165.931759][T11822] lo speed is unknown, defaulting to 1000 [ 165.938283][T11822] lo speed is unknown, defaulting to 1000 [ 165.974057][T11846] loop5: detected capacity change from 0 to 512 [ 165.993929][T11846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.999957][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2900'. [ 166.013355][T11846] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.044262][T11857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 166.047009][T11846] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.2899: corrupted inode contents [ 166.065717][T11846] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.2899: mark_inode_dirty error [ 166.077573][T11846] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.2899: corrupted inode contents [ 166.089517][T11846] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2899: mark_inode_dirty error [ 166.136668][T11736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.146398][T11736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.160829][T11736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.170373][T11736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.227731][T11864] loop2: detected capacity change from 0 to 128 [ 166.235632][T11864] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.250196][T11864] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.262218][T11736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.286626][T11736] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.304973][T11867] loop2: detected capacity change from 0 to 512 [ 166.309551][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.318395][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.333601][T11867] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 166.349265][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.356403][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.373263][T11867] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2904: invalid indirect mapped block 2683928664 (level 1) [ 166.388048][T11867] EXT4-fs (loop2): Remounting filesystem read-only [ 166.403890][T11867] EXT4-fs (loop2): 1 truncate cleaned up [ 166.408362][T11736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.425033][T11867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.439352][T11872] loop3: detected capacity change from 0 to 512 [ 166.476479][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.486795][T11872] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 166.501995][T11872] EXT4-fs (loop3): mount failed [ 166.507174][T11736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.556615][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.579833][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2910'. [ 166.632570][T11899] siw: device registration error -23 [ 166.652867][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 166.670191][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 166.673425][T11736] veth0_vlan: entered promiscuous mode [ 166.693610][T11736] veth1_vlan: entered promiscuous mode [ 166.711174][T11736] veth0_macvtap: entered promiscuous mode [ 166.725234][T11736] veth1_macvtap: entered promiscuous mode [ 166.733710][T11905] loop2: detected capacity change from 0 to 128 [ 166.739391][T11736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.744365][T11905] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.752464][T11736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.768383][T11905] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.781765][T11907] SELinux: syz.5.2914 (11907) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 166.788126][T11736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.804309][T11736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.813100][T11736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.821867][T11736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.839884][T11912] loop3: detected capacity change from 0 to 128 [ 166.896842][T11917] lo speed is unknown, defaulting to 1000 [ 166.924484][T11923] loop2: detected capacity change from 0 to 512 [ 166.946097][T11923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.975763][T11923] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.005535][T11925] bio_check_eod: 86 callbacks suppressed [ 167.005554][T11925] syz.3.2915: attempt to access beyond end of device [ 167.005554][T11925] loop3: rw=1, sector=145, nr_sectors = 85 limit=128 [ 167.071193][T11923] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.2919: corrupted inode contents [ 167.073295][T11912] Falling back ldisc for ttyS3. [ 167.103917][T11923] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.2919: mark_inode_dirty error [ 167.146450][T11923] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.2919: corrupted inode contents [ 167.164621][T11923] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2919: mark_inode_dirty error [ 167.195141][T11933] loop3: detected capacity change from 0 to 2048 [ 167.221462][T11933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.240238][T11933] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.279271][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.307503][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2924'. [ 167.316815][T11939] random: crng reseeded on system resumption [ 167.384287][T11947] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2922: bg 0: block 345: padding at end of block bitmap is not set [ 167.414076][T11952] loop2: detected capacity change from 0 to 1024 [ 167.421214][T11952] EXT4-fs: Ignoring removed i_version option [ 167.423440][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1710 with error 117 [ 167.427264][T11952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.446693][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.446693][ T36] [ 167.458334][T11952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.517631][T11960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2929'. [ 167.534163][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.564323][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.574577][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2928'. [ 167.713818][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2938'. [ 167.752420][T11993] loop3: detected capacity change from 0 to 2048 [ 167.774139][T11993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.795763][T11993] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.889230][T12007] loop5: detected capacity change from 0 to 512 [ 167.890050][T12008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2941: bg 0: block 345: padding at end of block bitmap is not set [ 167.896108][T12007] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.965540][T12007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.966199][ T36] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 942 with error 117 [ 167.990765][ T36] EXT4-fs (loop3): This should not happen!! Data will be lost [ 167.990765][ T36] [ 168.013774][T12007] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.034658][T12019] 9pnet_fd: Insufficient options for proto=fd [ 168.052484][T12007] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2947: corrupted xattr block 32: bad e_name length [ 168.067402][T12007] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.076802][T12007] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.2947: corrupted xattr block 32: bad e_name length [ 168.078666][ T3319] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 958 with max blocks 1 with error 28 [ 168.102840][ T3319] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.102840][ T3319] [ 168.112701][ T3319] EXT4-fs (loop3): Total free blocks count 0 [ 168.118760][ T3319] EXT4-fs (loop3): Free/Dirty block details [ 168.125015][ T3319] EXT4-fs (loop3): free_blocks=0 [ 168.130100][ T3319] EXT4-fs (loop3): dirty_blocks=16 [ 168.135265][ T3319] EXT4-fs (loop3): Block reservation details [ 168.142114][T12007] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.157598][T12025] SELinux: syz.2.2952 (12025) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 168.173390][T12007] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.2947: failed to insert inode 16: doubly allocated? [ 168.218849][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.239054][T12034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.246728][T12034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.255318][T12034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.262860][T12034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.298811][T12043] loop2: detected capacity change from 0 to 1024 [ 168.305857][T12043] EXT4-fs: Ignoring removed i_version option [ 168.311966][T12043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.331378][T12043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.347217][T12038] loop5: detected capacity change from 0 to 512 [ 168.356560][T12038] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.365092][T12038] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.376926][T12038] EXT4-fs (loop5): 1 truncate cleaned up [ 168.383435][T12038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.450848][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.478344][T12058] 9pnet_fd: Insufficient options for proto=fd [ 168.885027][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 168.885042][ T29] audit: type=1326 audit(1746069244.387:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 168.923229][ T29] audit: type=1326 audit(1746069244.387:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 168.946816][ T29] audit: type=1326 audit(1746069244.387:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 168.970509][ T29] audit: type=1326 audit(1746069244.387:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 168.994110][ T29] audit: type=1326 audit(1746069244.387:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 169.017897][ T29] audit: type=1326 audit(1746069244.387:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 169.041432][ T29] audit: type=1326 audit(1746069244.387:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 169.065086][ T29] audit: type=1326 audit(1746069244.387:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 169.088839][ T29] audit: type=1326 audit(1746069244.387:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 169.112321][ T29] audit: type=1326 audit(1746069244.397:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12069 comm="syz.1.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff4c7e969 code=0x7ffc0000 [ 169.147404][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.205060][T12084] loop5: detected capacity change from 0 to 1024 [ 169.212301][T12084] EXT4-fs: Ignoring removed i_version option [ 169.218378][T12084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.239570][T12087] 9pnet_fd: Insufficient options for proto=fd [ 169.255493][T12084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.342805][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.432167][T12103] loop3: detected capacity change from 0 to 512 [ 169.438695][T12103] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.445570][T12103] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.466519][T12115] loop5: detected capacity change from 0 to 512 [ 169.484244][T12103] EXT4-fs (loop3): 1 truncate cleaned up [ 169.490621][T12103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.491023][T12115] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 169.511575][T12115] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2986: invalid indirect mapped block 2683928664 (level 1) [ 169.525743][T12115] EXT4-fs (loop5): Remounting filesystem read-only [ 169.532985][T12115] EXT4-fs (loop5): 1 truncate cleaned up [ 169.539289][T12115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.604335][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.637028][T12125] 9pnet_fd: Insufficient options for proto=fd [ 169.650940][T12127] loop5: detected capacity change from 0 to 2048 [ 169.667349][T12127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.785463][T12141] lo speed is unknown, defaulting to 1000 [ 169.867249][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.007383][T12145] loop5: detected capacity change from 0 to 512 [ 170.031565][T12145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.044366][T12145] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.071141][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.208246][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.314523][T12175] loop5: detected capacity change from 0 to 8192 [ 170.367277][T12188] loop5: detected capacity change from 0 to 128 [ 170.388482][T12189] SELinux: syz.0.3014 (12189) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 170.438981][T12195] random: crng reseeded on system resumption [ 170.486945][T12200] syz.5.3013: attempt to access beyond end of device [ 170.486945][T12200] loop5: rw=1, sector=145, nr_sectors = 85 limit=128 [ 170.625325][T12210] siw: device registration error -23 [ 170.741384][T12230] loop2: detected capacity change from 0 to 128 [ 170.781640][T12234] loop5: detected capacity change from 0 to 128 [ 170.788420][T12234] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.800809][T12234] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.815112][T12230] syz.2.3029: attempt to access beyond end of device [ 170.815112][T12230] loop2: rw=1, sector=145, nr_sectors = 85 limit=128 [ 170.859043][T12239] __nla_validate_parse: 12 callbacks suppressed [ 170.859061][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'. [ 171.081462][T12244] loop5: detected capacity change from 0 to 512 [ 171.088678][T12244] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.095914][T12244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 171.112990][T12244] EXT4-fs (loop5): 1 truncate cleaned up [ 171.120019][T12244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.143828][T12250] loop2: detected capacity change from 0 to 128 [ 171.150592][T12250] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.162798][T12250] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.196656][T12252] loop2: detected capacity change from 0 to 512 [ 171.204762][T12252] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 171.213292][T12252] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3037: invalid indirect mapped block 2683928664 (level 1) [ 171.227600][T12252] EXT4-fs (loop2): Remounting filesystem read-only [ 171.234360][T12252] EXT4-fs (loop2): 1 truncate cleaned up [ 171.240497][T12252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.329906][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.343139][T12258] random: crng reseeded on system resumption [ 171.483840][T12265] loop2: detected capacity change from 0 to 512 [ 171.511956][T12265] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.527275][T12265] EXT4-fs (loop2): mount failed [ 171.586647][T12271] loop3: detected capacity change from 0 to 8192 [ 171.737665][T12288] loop3: detected capacity change from 0 to 2048 [ 171.753065][ T110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.789506][T12278] lo speed is unknown, defaulting to 1000 [ 171.802616][T12288] Alternate GPT is invalid, using primary GPT. [ 171.809087][T12288] loop3: p2 p3 p7 [ 171.820771][ T110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.873119][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.892899][ T110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.908736][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'. [ 171.918914][T12278] chnl_net:caif_netlink_parms(): no params data found [ 171.937136][T12306] loop5: detected capacity change from 0 to 128 [ 171.961132][T12310] siw: device registration error -23 [ 171.968588][ T110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.016282][T12306] syz.5.3053: attempt to access beyond end of device [ 172.016282][T12306] loop5: rw=1, sector=145, nr_sectors = 85 limit=128 [ 172.043277][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.050704][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.058112][T12278] bridge_slave_0: entered allmulticast mode [ 172.064823][T12278] bridge_slave_0: entered promiscuous mode [ 172.073157][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.080436][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.087923][T12278] bridge_slave_1: entered allmulticast mode [ 172.094749][T12278] bridge_slave_1: entered promiscuous mode [ 172.118462][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.145106][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.180945][T12278] team0: Port device team_slave_0 added [ 172.198851][T12278] team0: Port device team_slave_1 added [ 172.204939][ T110] bridge_slave_1: left allmulticast mode [ 172.210693][ T110] bridge_slave_1: left promiscuous mode [ 172.216473][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.227677][ T110] bridge_slave_0: left allmulticast mode [ 172.233608][ T110] bridge_slave_0: left promiscuous mode [ 172.239540][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.263786][T12318] loop5: detected capacity change from 0 to 8192 [ 172.672045][ T110] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.680787][ T110] bond_slave_0: left promiscuous mode [ 172.687387][ T110] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.696445][ T110] bond_slave_1: left promiscuous mode [ 172.702678][ T110] $Hÿ (unregistering): Released all slaves [ 172.711203][ T110] bond0 (unregistering): Released all slaves [ 172.747174][T12278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.754244][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.780186][T12278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.802327][ T110] tipc: Disabling bearer [ 172.807601][ T110] tipc: Disabling bearer [ 172.812660][ T110] tipc: Left network mode [ 172.813070][T12278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.824204][T12278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.850198][T12278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.866168][ T110] hsr_slave_0: left promiscuous mode [ 172.878983][T12347] loop3: detected capacity change from 0 to 2048 [ 172.885992][ T110] hsr_slave_1: left promiscuous mode [ 172.894638][ T110] veth1_macvtap: left promiscuous mode [ 172.900719][ T110] veth0_macvtap: left promiscuous mode [ 172.918116][T12347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.951598][T12347] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.979192][T12353] loop5: detected capacity change from 0 to 8192 [ 173.029325][T12356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3068: bg 0: block 345: padding at end of block bitmap is not set [ 173.062249][T12278] hsr_slave_0: entered promiscuous mode [ 173.068620][T12278] hsr_slave_1: entered promiscuous mode [ 173.068661][ T3319] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 804 with error 117 [ 173.074851][T12278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.086804][ T3319] EXT4-fs (loop3): This should not happen!! Data will be lost [ 173.086804][ T3319] [ 173.094461][T12278] Cannot create hsr debugfs directory [ 173.165237][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.186842][T12358] loop5: detected capacity change from 0 to 8192 [ 173.280815][T12367] lo speed is unknown, defaulting to 1000 [ 173.504962][T12278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.513825][T12278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.522887][T12278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.531868][T12278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.569135][T12278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.582755][T12278] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.593545][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.600695][ T3319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.611916][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.619106][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.678528][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.738740][T12278] veth0_vlan: entered promiscuous mode [ 173.746772][T12278] veth1_vlan: entered promiscuous mode [ 173.762806][T12278] veth0_macvtap: entered promiscuous mode [ 173.770321][T12278] veth1_macvtap: entered promiscuous mode [ 173.781007][T12278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.793648][T12278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.803680][T12278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.812599][T12278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.821528][T12278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.830421][T12278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.872203][T12388] loop2: detected capacity change from 0 to 128 [ 173.878993][T12388] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.891150][T12388] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.975918][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 173.975936][ T29] audit: type=1326 audit(1746069249.477:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face7dae969 code=0x7ffc0000 [ 174.006162][ T29] audit: type=1326 audit(1746069249.477:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face7dae969 code=0x7ffc0000 [ 174.029774][ T29] audit: type=1326 audit(1746069249.487:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7face7dae969 code=0x7ffc0000 [ 174.035314][T12394] loop2: detected capacity change from 0 to 512 [ 174.053403][ T29] audit: type=1326 audit(1746069249.487:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12391 comm="syz.2.3079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7face7dae969 code=0x7ffc0000 [ 174.068715][T12394] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.096379][T12394] EXT4-fs (loop2): 1 truncate cleaned up [ 174.102912][T12394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.161659][T12278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.205816][T12409] loop3: detected capacity change from 0 to 512 [ 174.212262][T12407] loop2: detected capacity change from 0 to 1024 [ 174.212680][T12407] EXT4-fs: Ignoring removed i_version option [ 174.224928][T12407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.251277][T12409] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 174.263008][T12407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.293098][T12409] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.296705][T12416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3088'. [ 174.340773][T12418] loop5: detected capacity change from 0 to 128 [ 174.361490][T12278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.372920][T12418] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.395365][T12409] EXT4-fs (loop3): mount failed [ 174.409856][T12418] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.440248][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 174.562549][T12436] lo speed is unknown, defaulting to 1000 [ 174.592313][T12430] loop3: detected capacity change from 0 to 512 [ 174.633755][T12430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.648587][T12430] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.670649][T12448] lo speed is unknown, defaulting to 1000 [ 174.702176][ T29] audit: type=1326 audit(1746069250.197:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.3.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479416e969 code=0x7ffc0000 [ 174.720901][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.725901][ T29] audit: type=1326 audit(1746069250.197:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.3.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479416e969 code=0x7ffc0000 [ 174.758578][ T29] audit: type=1326 audit(1746069250.197:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.3.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f479416e969 code=0x7ffc0000 [ 174.782410][ T29] audit: type=1326 audit(1746069250.197:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.3.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479416e969 code=0x7ffc0000 [ 174.806406][ T29] audit: type=1326 audit(1746069250.197:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.3.3092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f479416e969 code=0x7ffc0000 [ 174.855794][T12456] SELinux: syz.3.3102 (12456) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 175.009016][T12458] lo speed is unknown, defaulting to 1000 [ 175.062645][T12458] chnl_net:caif_netlink_parms(): no params data found [ 175.099418][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.106617][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.114403][T12458] bridge_slave_0: entered allmulticast mode [ 175.120991][T12458] bridge_slave_0: entered promiscuous mode [ 175.127934][T12458] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.135094][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.142460][T12458] bridge_slave_1: entered allmulticast mode [ 175.149189][T12458] bridge_slave_1: entered promiscuous mode [ 175.163642][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.182573][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.193593][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.215019][T12458] team0: Port device team_slave_0 added [ 175.222431][T12458] team0: Port device team_slave_1 added [ 175.235591][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.252612][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.259717][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.285685][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.297661][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.304688][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.330752][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.344584][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.378309][T12458] hsr_slave_0: entered promiscuous mode [ 175.384854][T12458] hsr_slave_1: entered promiscuous mode [ 175.391627][T12458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.398453][T12475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3105'. [ 175.399291][T12458] Cannot create hsr debugfs directory [ 175.426707][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.522209][T12481] random: crng reseeded on system resumption [ 175.617214][ T31] bridge_slave_1: left allmulticast mode [ 175.623115][ T31] bridge_slave_1: left promiscuous mode [ 175.628797][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.636801][ T31] bridge_slave_0: left allmulticast mode [ 175.642552][ T31] bridge_slave_0: left promiscuous mode [ 175.648270][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.676793][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 175.723367][T12490] loop5: detected capacity change from 0 to 8192 [ 175.763237][T12493] loop5: detected capacity change from 0 to 512 [ 175.798309][T12498] loop2: detected capacity change from 0 to 2048 [ 175.801992][T12493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.817543][T12493] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.832152][T12498] Alternate GPT is invalid, using primary GPT. [ 175.838586][T12498] loop2: p2 p3 p7 [ 175.840993][T12493] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3112: corrupted inode contents [ 175.854389][T12493] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.3112: mark_inode_dirty error [ 175.866029][T12493] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3112: corrupted inode contents [ 175.878046][T12493] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3112: mark_inode_dirty error [ 175.921967][ T31] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.930947][ T31] bond_slave_1: left promiscuous mode [ 175.937064][ T31] $Hÿ (unregistering): Released all slaves [ 175.946452][ T31] bond0 (unregistering): (slave veth3): Releasing backup interface [ 175.954574][ T31] veth3: left promiscuous mode [ 175.960620][ T31] bond0 (unregistering): Released all slaves [ 176.013286][ T31] tipc: Disabling bearer [ 176.018317][ T31] tipc: Left network mode [ 176.037973][ T31] hsr_slave_0: left promiscuous mode [ 176.049537][ T31] hsr_slave_1: left promiscuous mode [ 176.060003][ T31] veth1_macvtap: left promiscuous mode [ 176.072107][ T31] veth0_macvtap: left promiscuous mode [ 176.084035][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.110879][ T31] pim6reg (unregistering): left allmulticast mode [ 176.141368][ T31] team0 (unregistering): Port device team_slave_1 removed [ 176.151661][ T31] team0 (unregistering): Port device team_slave_0 removed [ 176.196752][ T3375] lo speed is unknown, defaulting to 1000 [ 176.202599][ T3375] infiniband syz0: ib_query_port failed (-19) [ 176.317335][T12525] loop5: detected capacity change from 0 to 2048 [ 176.331668][T12525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.346545][T12525] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.358813][T12525] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3120'. [ 176.424084][T12534] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3120: bg 0: block 345: padding at end of block bitmap is not set [ 176.424419][T12458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.448507][T12458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.453175][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 939 with error 117 [ 176.467821][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 176.467821][ T51] [ 176.480241][T12458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.489667][T12458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.532598][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.535885][T12458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.553643][T12458] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.580908][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.588090][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.601808][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.609247][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.657696][T12540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3125'. [ 176.707320][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.714856][T12540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.723728][T12540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.731361][T12540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.773950][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.841466][T12458] veth0_vlan: entered promiscuous mode [ 176.849426][T12458] veth1_vlan: entered promiscuous mode [ 176.865367][T12458] veth0_macvtap: entered promiscuous mode [ 176.873060][T12458] veth1_macvtap: entered promiscuous mode [ 176.883605][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.894548][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.904646][T12458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.913609][T12458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.922447][T12458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.931216][T12458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.973747][T12557] loop3: detected capacity change from 0 to 128 [ 176.981084][T12557] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.993351][T12557] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.031439][T12559] loop3: detected capacity change from 0 to 512 [ 177.039453][T12559] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.3127: corrupted in-inode xattr: invalid ea_ino [ 177.053291][T12559] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3127: couldn't read orphan inode 15 (err -117) [ 177.066086][T12559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.095131][T12458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.123314][T12563] loop3: detected capacity change from 0 to 512 [ 177.152288][T12563] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.167810][T12563] EXT4-fs (loop3): mount failed [ 177.324926][T12567] chnl_net:caif_netlink_parms(): no params data found [ 177.364115][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.371374][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.378814][T12567] bridge_slave_0: entered allmulticast mode [ 177.385956][T12567] bridge_slave_0: entered promiscuous mode [ 177.394558][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.401705][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.409077][T12567] bridge_slave_1: entered allmulticast mode [ 177.416289][T12567] bridge_slave_1: entered promiscuous mode [ 177.440925][T12567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.452380][T12567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.481429][T12567] team0: Port device team_slave_0 added [ 177.498206][T12567] team0: Port device team_slave_1 added [ 177.508178][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.518937][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.691616][ T3319] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.703613][ T3319] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.713346][ T3319] $Hÿ (unregistering): Released all slaves [ 177.734786][T12567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.741855][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.767954][T12567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.781692][T12567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.788800][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.814843][T12567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.829399][ T3319] tipc: Disabling bearer [ 177.834657][ T3319] tipc: Left network mode [ 177.871310][ T3319] team0 (unregistering): Port device team_slave_1 removed [ 177.883462][ T3319] team0 (unregistering): Port device team_slave_0 removed [ 177.933211][T12600] loop5: detected capacity change from 0 to 1024 [ 177.934740][T12567] hsr_slave_0: entered promiscuous mode [ 177.940192][T12600] EXT4-fs: Ignoring removed i_version option [ 177.951482][T12600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.959055][T12567] hsr_slave_1: entered promiscuous mode [ 177.984079][T12600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.003333][T12605] loop2: detected capacity change from 0 to 128 [ 178.010668][T12605] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.023509][T12605] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.118773][T12611] loop3: detected capacity change from 0 to 512 [ 178.130780][T12611] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.146091][T12611] EXT4-fs (loop3): mount failed [ 178.366872][T12567] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.376625][T12567] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.385859][T12567] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.401465][T12567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.444959][T12567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.458789][T12567] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.468485][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.475599][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.486503][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.493765][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.565836][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.629066][T12567] veth0_vlan: entered promiscuous mode [ 178.634833][T12629] Falling back ldisc for ttyS3. [ 178.637531][T12567] veth1_vlan: entered promiscuous mode [ 178.657536][T12567] veth0_macvtap: entered promiscuous mode [ 178.665435][T12567] veth1_macvtap: entered promiscuous mode [ 178.678181][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.688817][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.700790][T12567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.712568][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.723132][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.734085][T12567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.746624][T12567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.755549][T12567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.764407][T12567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.773265][T12567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.785272][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 178.797458][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.832213][T12646] loop5: detected capacity change from 0 to 128 [ 178.839068][T12646] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.853260][T12646] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.853414][T12648] loop1: detected capacity change from 0 to 128 [ 178.870391][T12648] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 178.882749][T12648] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.954384][T12653] loop5: detected capacity change from 0 to 512 [ 178.955476][T12655] loop2: detected capacity change from 0 to 2048 [ 178.991297][T12653] __quota_error: 80 callbacks suppressed [ 178.991313][T12653] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 179.018546][T12653] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 179.021128][T12655] Alternate GPT is invalid, using primary GPT. [ 179.039852][T12655] loop2: p2 p3 p7 [ 179.045693][T12653] EXT4-fs (loop5): mount failed [ 179.099220][ T29] audit: type=1326 audit(1746069254.597:7432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12670 comm="syz.3.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 179.123085][ T29] audit: type=1326 audit(1746069254.597:7433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12670 comm="syz.3.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 179.124934][T12671] loop5: detected capacity change from 0 to 2048 [ 179.146544][ T29] audit: type=1326 audit(1746069254.597:7434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12670 comm="syz.3.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 179.178591][T12667] random: crng reseeded on system resumption [ 179.199447][T12677] loop3: detected capacity change from 0 to 1024 [ 179.207262][T12677] EXT4-fs: Ignoring removed i_version option [ 179.213406][T12677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.222923][T12671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.235525][T12671] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.252854][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3154'. [ 179.263370][T12677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.277962][ T29] audit: type=1326 audit(1746069254.787:7435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.0.3153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ff0fee969 code=0x0 [ 179.329367][T12681] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3154: bg 0: block 345: padding at end of block bitmap is not set [ 179.352448][ T3525] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1158 with error 117 [ 179.365305][ T3525] EXT4-fs (loop5): This should not happen!! Data will be lost [ 179.365305][ T3525] [ 179.398125][ T3319] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1174 with max blocks 1 with error 28 [ 179.410754][ T3319] EXT4-fs (loop5): This should not happen!! Data will be lost [ 179.410754][ T3319] [ 179.420590][ T3319] EXT4-fs (loop5): Total free blocks count 0 [ 179.426611][ T3319] EXT4-fs (loop5): Free/Dirty block details [ 179.432576][ T3319] EXT4-fs (loop5): free_blocks=0 [ 179.437516][ T3319] EXT4-fs (loop5): dirty_blocks=16 [ 179.442727][ T3319] EXT4-fs (loop5): Block reservation details [ 179.539197][T12686] loop5: detected capacity change from 0 to 128 [ 179.546196][T12686] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.558359][T12686] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.591884][T12688] loop5: detected capacity change from 0 to 512 [ 179.601165][T12688] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.618297][T12688] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3159: corrupted inode contents [ 179.631131][T12688] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.3159: mark_inode_dirty error [ 179.643179][T12688] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3159: corrupted inode contents [ 179.655356][T12688] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3159: mark_inode_dirty error [ 179.798499][T12693] loop2: detected capacity change from 0 to 128 [ 179.818842][T12693] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.834167][T12693] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.835347][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 179.852560][T12695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.860203][T12695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.869042][T12695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.876623][T12695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.948336][T12700] loop2: detected capacity change from 0 to 8192 [ 179.987242][T12706] loop2: detected capacity change from 0 to 512 [ 180.001261][T12706] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 180.012457][T12706] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 180.030463][T12706] EXT4-fs (loop2): mount failed [ 180.072061][ T29] audit: type=1326 audit(1746069255.577:7436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 180.145280][ T29] audit: type=1326 audit(1746069255.577:7437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 180.169084][ T29] audit: type=1326 audit(1746069255.607:7438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 180.192540][ T29] audit: type=1326 audit(1746069255.607:7439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.3.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 180.255735][T12721] loop3: detected capacity change from 0 to 2048 [ 180.304007][T12721] Alternate GPT is invalid, using primary GPT. [ 180.310460][T12727] loop2: detected capacity change from 0 to 128 [ 180.310589][T12721] loop3: p2 p3 p7 [ 180.317301][T12727] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.332952][T12727] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.369775][T12729] loop2: detected capacity change from 0 to 512 [ 180.376627][T12729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.388061][T12729] EXT4-fs (loop2): 1 truncate cleaned up [ 180.439990][T12732] loop2: detected capacity change from 0 to 8192 [ 180.500308][T12736] loop2: detected capacity change from 0 to 2048 [ 180.511114][T12736] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.577075][T12739] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3177: bg 0: block 345: padding at end of block bitmap is not set [ 180.642249][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1312 with error 28 [ 180.654864][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 180.654864][ T31] [ 180.664632][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 180.670827][ T31] EXT4-fs (loop2): Free/Dirty block details [ 180.676739][ T31] EXT4-fs (loop2): free_blocks=0 [ 180.681788][ T31] EXT4-fs (loop2): dirty_blocks=1312 [ 180.687080][ T31] EXT4-fs (loop2): Block reservation details [ 180.693132][ T31] EXT4-fs (loop2): i_reserved_data_blocks=82 [ 180.731784][T12743] loop5: detected capacity change from 0 to 128 [ 180.731974][T12745] loop2: detected capacity change from 0 to 128 [ 180.738896][T12743] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.756983][T12743] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.838125][T12753] loop2: detected capacity change from 0 to 128 [ 180.845630][T12753] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.859031][T12753] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.928398][T12759] loop2: detected capacity change from 0 to 512 [ 180.934950][T12757] loop5: detected capacity change from 0 to 8192 [ 180.942398][T12759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 180.954109][T12759] EXT4-fs (loop2): 1 truncate cleaned up [ 180.979120][T12762] loop5: detected capacity change from 0 to 512 [ 180.991477][T12762] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 181.006401][T12762] EXT4-fs (loop5): mount failed [ 181.112150][T12774] loop5: detected capacity change from 0 to 1024 [ 181.119084][T12774] EXT4-fs: Ignoring removed i_version option [ 181.125277][T12774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.233788][T12782] loop5: detected capacity change from 0 to 128 [ 181.240677][T12782] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.253077][T12782] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.282597][T12785] loop3: detected capacity change from 0 to 128 [ 181.293570][T12788] loop5: detected capacity change from 0 to 128 [ 181.301585][T12788] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.318375][T12788] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.399117][T12792] loop5: detected capacity change from 0 to 8192 [ 181.411760][T12790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12790 comm=syz.0.3197 [ 181.449840][T12795] 9pnet_fd: Insufficient options for proto=fd [ 181.477032][T12797] loop5: detected capacity change from 0 to 512 [ 181.484655][T12797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.541985][T12801] loop3: detected capacity change from 0 to 2048 [ 181.548972][T12797] EXT4-fs (loop5): 1 truncate cleaned up [ 181.586200][T12803] loop5: detected capacity change from 0 to 512 [ 181.595254][T12801] Alternate GPT is invalid, using primary GPT. [ 181.601732][T12801] loop3: p2 p3 p7 [ 181.624786][T12803] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.657964][T12803] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3202: corrupted inode contents [ 181.674072][T12803] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.3202: mark_inode_dirty error [ 181.698434][T12807] loop1: detected capacity change from 0 to 2048 [ 181.706594][T12803] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3202: corrupted inode contents [ 181.719738][T12803] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3202: mark_inode_dirty error [ 181.741080][T12807] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.755059][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 181.845536][T12812] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3203: bg 0: block 345: padding at end of block bitmap is not set [ 181.947839][ T3319] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 368 with error 28 [ 181.960550][ T3319] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.960550][ T3319] [ 181.970222][ T3319] EXT4-fs (loop1): Total free blocks count 0 [ 181.976233][ T3319] EXT4-fs (loop1): Free/Dirty block details [ 181.982236][ T3319] EXT4-fs (loop1): free_blocks=0 [ 181.987260][ T3319] EXT4-fs (loop1): dirty_blocks=368 [ 181.992505][ T3319] EXT4-fs (loop1): Block reservation details [ 181.998518][ T3319] EXT4-fs (loop1): i_reserved_data_blocks=23 [ 182.126848][T12818] loop5: detected capacity change from 0 to 128 [ 182.146278][T12818] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.162564][T12816] loop1: detected capacity change from 0 to 8192 [ 182.189129][T12818] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.266859][T12824] loop5: detected capacity change from 0 to 128 [ 182.281334][T12824] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.295872][T12826] loop1: detected capacity change from 0 to 128 [ 182.303408][T12824] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.338160][T12830] 9pnet_fd: Insufficient options for proto=fd [ 182.395705][T12834] random: crng reseeded on system resumption [ 182.538267][T12849] loop1: detected capacity change from 0 to 128 [ 182.545196][T12849] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.557428][T12849] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.632593][T12857] loop1: detected capacity change from 0 to 128 [ 182.639439][T12857] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.651664][T12857] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.686809][T12859] loop1: detected capacity change from 0 to 512 [ 182.701665][T12859] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.719247][T12859] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.3222: corrupted inode contents [ 182.731414][T12859] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.3222: mark_inode_dirty error [ 182.742912][T12859] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.3222: corrupted inode contents [ 182.755412][T12859] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3222: mark_inode_dirty error [ 182.779250][T12863] loop2: detected capacity change from 0 to 128 [ 182.874013][T12867] 9pnet_fd: Insufficient options for proto=fd [ 182.929494][T12870] loop2: detected capacity change from 0 to 512 [ 182.936510][T12870] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.954133][T12871] loop1: detected capacity change from 0 to 2048 [ 182.958183][T12870] EXT4-fs (loop2): 1 truncate cleaned up [ 183.003099][T12878] loop2: detected capacity change from 0 to 1024 [ 183.010095][T12878] EXT4-fs: Ignoring removed i_version option [ 183.012448][T12871] Alternate GPT is invalid, using primary GPT. [ 183.016195][T12878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.022605][T12871] loop1: p2 p3 p7 [ 183.253299][T12883] loop5: detected capacity change from 0 to 2048 [ 183.272681][T12883] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.344576][T12891] loop3: detected capacity change from 0 to 8192 [ 183.370618][T12895] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3229: bg 0: block 345: padding at end of block bitmap is not set [ 183.386081][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 183.416681][T12898] SELinux: syz.3.3234 (12898) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.422897][ T3319] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1380 with error 117 [ 183.443277][ T3319] EXT4-fs (loop5): This should not happen!! Data will be lost [ 183.443277][ T3319] [ 183.481037][ T3319] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1396 with max blocks 1 with error 28 [ 183.493598][ T3319] EXT4-fs (loop5): This should not happen!! Data will be lost [ 183.493598][ T3319] [ 183.503380][ T3319] EXT4-fs (loop5): Total free blocks count 0 [ 183.509379][ T3319] EXT4-fs (loop5): Free/Dirty block details [ 183.515317][ T3319] EXT4-fs (loop5): free_blocks=0 [ 183.520321][ T3319] EXT4-fs (loop5): dirty_blocks=16 [ 183.525516][ T3319] EXT4-fs (loop5): Block reservation details [ 183.531614][ T3319] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 183.633869][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 183.787219][T12921] random: crng reseeded on system resumption [ 183.795073][T12920] loop1: detected capacity change from 0 to 128 [ 183.802371][T12920] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.816505][T12920] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.892198][T12926] loop1: detected capacity change from 0 to 8192 [ 183.935144][T12929] SELinux: syz.1.3245 (12929) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 183.968619][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 184.101881][T12944] loop1: detected capacity change from 0 to 2048 [ 184.132194][T12944] Alternate GPT is invalid, using primary GPT. [ 184.138578][T12944] loop1: p2 p3 p7 [ 184.161266][T12948] loop2: detected capacity change from 0 to 2048 [ 184.202018][T12948] Alternate GPT is invalid, using primary GPT. [ 184.208415][T12948] loop2: p2 p3 p7 [ 184.324220][T12957] loop3: detected capacity change from 0 to 128 [ 184.331224][T12957] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.343664][T12957] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.401348][T12959] loop3: detected capacity change from 0 to 8192 [ 184.434176][T12961] random: crng reseeded on system resumption [ 184.485399][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 184.485442][ T29] audit: type=1326 audit(1746069259.987:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.3.3257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x0 [ 184.556739][T12966] SELinux: syz.3.3259 (12966) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 184.629463][T12972] loop5: detected capacity change from 0 to 8192 [ 184.670541][T12975] loop5: detected capacity change from 0 to 2048 [ 184.681220][T12975] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.694280][T12969] loop3: detected capacity change from 0 to 512 [ 184.712552][T12969] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.726749][ T29] audit: type=1326 audit(1746069260.227:7457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.750390][ T29] audit: type=1326 audit(1746069260.227:7458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.774605][ T29] audit: type=1326 audit(1746069260.227:7459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.798420][ T29] audit: type=1326 audit(1746069260.227:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.821927][ T29] audit: type=1326 audit(1746069260.227:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.845990][ T29] audit: type=1326 audit(1746069260.227:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.863487][T12981] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3263: bg 0: block 345: padding at end of block bitmap is not set [ 184.869644][ T29] audit: type=1326 audit(1746069260.227:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.896237][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1507 with error 117 [ 184.907588][ T29] audit: type=1326 audit(1746069260.227:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 184.920448][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 184.920448][ T36] [ 184.943840][ T29] audit: type=1326 audit(1746069260.227:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12967 comm="syz.3.3260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f189e969 code=0x7ffc0000 [ 185.005942][T12985] loop1: detected capacity change from 0 to 512 [ 185.023346][ T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1523 with max blocks 1 with error 28 [ 185.035972][ T36] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.035972][ T36] [ 185.045685][ T36] EXT4-fs (loop5): Total free blocks count 0 [ 185.051775][ T36] EXT4-fs (loop5): Free/Dirty block details [ 185.057686][ T36] EXT4-fs (loop5): free_blocks=0 [ 185.062701][ T36] EXT4-fs (loop5): dirty_blocks=16 [ 185.062800][T12987] loop2: detected capacity change from 0 to 128 [ 185.067831][ T36] EXT4-fs (loop5): Block reservation details [ 185.067847][ T36] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 185.088924][T12987] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.102095][T12985] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.130106][T12987] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.154483][T12985] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.3265: corrupted inode contents [ 185.174482][T12985] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.3265: mark_inode_dirty error [ 185.190493][T12985] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.3265: corrupted inode contents [ 185.190685][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 185.213235][T12985] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3265: mark_inode_dirty error [ 185.224838][T12997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.232396][T12997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.242665][T13003] random: crng reseeded on system resumption [ 185.309577][T12997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.317074][T12997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.433567][T13017] SELinux: syz.2.3276 (13017) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 185.451268][T13013] loop5: detected capacity change from 0 to 2048 [ 185.491887][T13013] Alternate GPT is invalid, using primary GPT. [ 185.498288][T13013] loop5: p2 p3 p7 [ 185.523220][T13022] loop2: detected capacity change from 0 to 1024 [ 185.530616][T13022] EXT4-fs: Ignoring removed i_version option [ 185.536684][T13022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.560628][T13028] loop3: detected capacity change from 0 to 128 [ 185.577933][T13028] syz.3.3280: attempt to access beyond end of device [ 185.577933][T13028] loop3: rw=1, sector=145, nr_sectors = 85 limit=128 [ 185.615981][T13032] loop3: detected capacity change from 0 to 128 [ 185.623259][T13032] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.640024][T13032] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.778093][T13045] loop3: detected capacity change from 0 to 512 [ 185.788417][T13048] random: crng reseeded on system resumption [ 185.789143][T13045] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.3285: corrupted in-inode xattr: invalid ea_ino [ 185.808654][T13045] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3285: couldn't read orphan inode 15 (err -117) [ 185.926652][T13055] random: crng reseeded on system resumption [ 185.975151][T13053] loop3: detected capacity change from 0 to 512 [ 186.001795][T13053] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.054493][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3290'. [ 186.282669][T13088] loop5: detected capacity change from 0 to 512 [ 186.290446][T13088] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.3301: corrupted in-inode xattr: invalid ea_ino [ 186.304074][T13088] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3301: couldn't read orphan inode 15 (err -117) [ 186.342988][T13093] loop5: detected capacity change from 0 to 512 [ 186.350306][T13093] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.376559][T13093] EXT4-fs (loop5): 1 truncate cleaned up [ 186.385646][T13086] loop3: detected capacity change from 0 to 512 [ 186.415776][T13105] random: crng reseeded on system resumption [ 186.424391][T13086] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.438585][T13103] loop2: detected capacity change from 0 to 512 [ 186.475365][T13103] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.500005][T13103] EXT4-fs (loop2): mount failed [ 186.524766][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 186.551551][T13115] loop2: detected capacity change from 0 to 128 [ 186.565733][T13115] syz.2.3309: attempt to access beyond end of device [ 186.565733][T13115] loop2: rw=1, sector=145, nr_sectors = 85 limit=128 [ 186.642461][T13123] loop3: detected capacity change from 0 to 8192 [ 186.655032][T13125] loop2: detected capacity change from 0 to 1024 [ 186.663544][T13125] EXT4-fs: Ignoring removed i_version option [ 186.669664][T13125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.708727][T13133] loop1: detected capacity change from 0 to 512 [ 186.716251][T13133] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.727763][T13133] EXT4-fs (loop1): 1 truncate cleaned up [ 186.733608][T13135] loop3: detected capacity change from 0 to 2048 [ 186.761345][T13135] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.826865][T13142] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3317: bg 0: block 345: padding at end of block bitmap is not set [ 187.311986][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3325'. [ 187.391066][T13168] random: crng reseeded on system resumption [ 187.579212][T12458] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 187.590290][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 187.590386][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.590399][T12458] Call Trace: [ 187.590406][T12458] [ 187.590413][T12458] __dump_stack+0x1d/0x30 [ 187.590439][T12458] dump_stack_lvl+0xe8/0x140 [ 187.590462][T12458] dump_stack+0x15/0x1b [ 187.590478][T12458] dump_header+0x81/0x220 [ 187.590525][T12458] oom_kill_process+0x334/0x3f0 [ 187.590558][T12458] out_of_memory+0x979/0xb80 [ 187.590582][T12458] ? css_next_descendant_pre+0x138/0x160 [ 187.590617][T12458] mem_cgroup_out_of_memory+0x13d/0x190 [ 187.590669][T12458] try_charge_memcg+0x5e2/0x870 [ 187.590707][T12458] charge_memcg+0x51/0xc0 [ 187.590730][T12458] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 187.590781][T12458] __read_swap_cache_async+0x1df/0x350 [ 187.590815][T12458] swap_cluster_readahead+0x376/0x3e0 [ 187.590852][T12458] swapin_readahead+0xde/0x6f0 [ 187.590907][T12458] ? __filemap_get_folio+0x49f/0x650 [ 187.590931][T12458] ? next_uptodate_folio+0x81c/0x890 [ 187.590968][T12458] ? swap_cache_get_folio+0x77/0x200 [ 187.590999][T12458] do_swap_page+0x301/0x2460 [ 187.591098][T12458] ? trace_reschedule_exit+0xd/0xc0 [ 187.591150][T12458] ? mas_state_walk+0x2f5/0x650 [ 187.591172][T12458] ? __pfx_default_wake_function+0x10/0x10 [ 187.591227][T12458] handle_mm_fault+0xb60/0x2ae0 [ 187.591255][T12458] ? mas_walk+0xf2/0x120 [ 187.591277][T12458] do_user_addr_fault+0x636/0x1090 [ 187.591348][T12458] ? restore_fpregs_from_fpstate+0x61/0x120 [ 187.591383][T12458] ? fpregs_restore_userregs+0xbb/0x190 [ 187.591462][T12458] exc_page_fault+0x54/0xc0 [ 187.591543][T12458] asm_exc_page_fault+0x26/0x30 [ 187.591565][T12458] RIP: 0033:0x7f57f1775997 [ 187.591584][T12458] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 08 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 fd e7 00 48 01 d1 39 7c 24 [ 187.591608][T12458] RSP: 002b:00007fff835fde20 EFLAGS: 00010206 [ 187.591627][T12458] RAX: 0000001b2e520000 RBX: 000000000000006f RCX: 000000000002da78 [ 187.591642][T12458] RDX: 0000000007ced3b6 RSI: 00007fff835fdeb0 RDI: 000000000000000a [ 187.591654][T12458] RBP: 00007fff835fde5c R08: 000000001dc8eb7d R09: 7fffffffffffffff [ 187.591691][T12458] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 187.591703][T12458] R13: 00000000000927c0 R14: 000000000002d9da R15: 00007fff835fdeb0 [ 187.591721][T12458] [ 187.591727][T12458] memory: usage 307200kB, limit 307200kB, failcnt 343 [ 187.841050][T12458] memory+swap: usage 308412kB, limit 9007199254740988kB, failcnt 0 [ 187.849099][T12458] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 187.856403][T12458] Memory cgroup stats for /syz3: [ 187.856885][T12458] cache 12288 [ 187.865254][T12458] rss 0 [ 187.868091][T12458] shmem 0 [ 187.871080][T12458] mapped_file 0 [ 187.874545][T12458] dirty 0 [ 187.877505][T12458] writeback 0 [ 187.880807][T12458] workingset_refault_anon 455 [ 187.885575][T12458] workingset_refault_file 607 [ 187.890289][T12458] swap 1241088 [ 187.893663][T12458] swapcached 8192 [ 187.897362][T12458] pgpgin 81121 [ 187.900803][T12458] pgpgout 81116 [ 187.904269][T12458] pgfault 138132 [ 187.907873][T12458] pgmajfault 269 [ 187.911558][T12458] inactive_anon 4096 [ 187.915497][T12458] active_anon 4096 [ 187.919237][T12458] inactive_file 0 [ 187.922888][T12458] active_file 12288 [ 187.926691][T12458] unevictable 0 [ 187.930304][T12458] hierarchical_memory_limit 314572800 [ 187.935720][T12458] hierarchical_memsw_limit 9223372036854771712 [ 187.941989][T12458] total_cache 12288 [ 187.945818][T12458] total_rss 0 [ 187.949147][T12458] total_shmem 0 [ 187.952702][T12458] total_mapped_file 0 [ 187.956749][T12458] total_dirty 0 [ 187.960251][T12458] total_writeback 0 [ 187.964087][T12458] total_workingset_refault_anon 455 [ 187.969287][T12458] total_workingset_refault_file 607 [ 187.974504][T12458] total_swap 1241088 [ 187.978405][T12458] total_swapcached 8192 [ 187.982658][T12458] total_pgpgin 81121 [ 187.986606][T12458] total_pgpgout 81116 [ 187.990604][T12458] total_pgfault 138132 [ 187.994790][T12458] total_pgmajfault 269 [ 187.998896][T12458] total_inactive_anon 4096 [ 188.003425][T12458] total_active_anon 4096 [ 188.007687][T12458] total_inactive_file 0 [ 188.011888][T12458] total_active_file 12288 [ 188.016299][T12458] total_unevictable 0 [ 188.020298][T12458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3317,pid=13134,uid=0 [ 188.035149][T12458] Memory cgroup out of memory: Killed process 13134 (syz.3.3317) total-vm:93748kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 188.155762][T13182] loop5: detected capacity change from 0 to 128 [ 188.175146][T13182] syz.5.3335: attempt to access beyond end of device [ 188.175146][T13182] loop5: rw=1, sector=145, nr_sectors = 85 limit=128 [ 188.261260][T13188] SELinux: syz.5.3338 (13188) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.299079][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 188.384794][T13200] loop5: detected capacity change from 0 to 512 [ 188.393851][T13203] SELinux: syz.0.3344 (13203) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.410218][T13205] SELinux: syz.2.3345 (13205) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.435957][T13200] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.469283][T13213] SELinux: syz.0.3348 (13213) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.483393][T13211] SELinux: syz.3.3346 (13211) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.489756][T13200] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3343: corrupted inode contents [ 188.517465][T13217] SELinux: syz.3.3350 (13217) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.531989][T13200] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.3343: mark_inode_dirty error [ 188.545925][T13218] loop1: detected capacity change from 0 to 512 [ 188.559256][T13200] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.3343: corrupted inode contents [ 188.572092][T13200] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3343: mark_inode_dirty error [ 188.574854][T13209] loop2: detected capacity change from 0 to 512 [ 188.597904][T13222] loop3: detected capacity change from 0 to 128 [ 188.611194][T13218] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.622525][T13209] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.639550][T13222] syz.3.3352: attempt to access beyond end of device [ 188.639550][T13222] loop3: rw=1, sector=145, nr_sectors = 85 limit=128 [ 188.666511][T13218] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.3349: corrupted inode contents [ 188.678943][T13218] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #2: comm syz.1.3349: mark_inode_dirty error [ 188.691364][T13218] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #2: comm syz.1.3349: corrupted inode contents [ 188.703389][T13218] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.3349: mark_inode_dirty error [ 188.767974][T13236] loop2: detected capacity change from 0 to 512 [ 188.778165][T13236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.791224][T13240] loop3: detected capacity change from 0 to 512 [ 188.801175][T13236] EXT4-fs (loop2): 1 truncate cleaned up [ 188.842326][T13240] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.918813][T13240] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.3358: corrupted inode contents [ 189.081281][T13240] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #2: comm syz.3.3358: mark_inode_dirty error [ 189.106324][T13252] loop2: detected capacity change from 0 to 512 [ 189.116077][T13240] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #2: comm syz.3.3358: corrupted inode contents [ 189.173070][T13240] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.3358: mark_inode_dirty error [ 189.195519][T13252] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.305324][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3360'. [ 189.333112][T13263] loop2: detected capacity change from 0 to 2048 [ 189.351196][T13263] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.499684][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 189.499701][ T29] audit: type=1326 audit(1746069264.997:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 189.550306][T13271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3362: bg 0: block 345: padding at end of block bitmap is not set [ 189.574019][ T29] audit: type=1326 audit(1746069265.037:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 189.597615][ T29] audit: type=1326 audit(1746069265.037:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13269 comm="syz.1.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 189.630710][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 637 with error 117 [ 189.643302][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 189.643302][ T36] [ 189.668749][T13275] loop3: detected capacity change from 0 to 128 [ 189.675762][T13275] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.708682][T13275] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.765372][T13277] loop1: detected capacity change from 0 to 128 [ 189.781713][T13277] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.798118][T13279] loop3: detected capacity change from 0 to 1024 [ 189.805398][T13279] EXT4-fs: Ignoring removed i_version option [ 189.811494][T13279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.818764][T13277] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.858445][T13283] netlink: 'syz.0.3368': attribute type 13 has an invalid length. [ 189.866547][T13283] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3368'. [ 189.879217][T13283] FAULT_INJECTION: forcing a failure. [ 189.879217][T13283] name failslab, interval 1, probability 0, space 0, times 0 [ 189.892530][T13283] CPU: 0 UID: 0 PID: 13283 Comm: syz.0.3368 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 189.892648][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 189.892662][T13283] Call Trace: [ 189.892670][T13283] [ 189.892679][T13283] __dump_stack+0x1d/0x30 [ 189.892701][T13283] dump_stack_lvl+0xe8/0x140 [ 189.892725][T13283] dump_stack+0x15/0x1b [ 189.892761][T13283] should_fail_ex+0x265/0x280 [ 189.892802][T13283] should_failslab+0x8c/0xb0 [ 189.892839][T13283] __kmalloc_noprof+0xa5/0x3e0 [ 189.892863][T13283] ? netif_set_alias+0x5d/0x110 [ 189.892897][T13283] ? rcu_preempt_deferred_qs_irqrestore+0x140/0x5a0 [ 189.892927][T13283] netif_set_alias+0x5d/0x110 [ 189.892953][T13283] do_setlink+0x7d7/0x27f0 [ 189.892984][T13283] ? xfd_validate_state+0x45/0xf0 [ 189.893046][T13283] ? save_fpregs_to_fpstate+0x100/0x160 [ 189.893074][T13283] ? _raw_spin_unlock+0x26/0x50 [ 189.893107][T13283] ? finish_task_switch+0xad/0x2b0 [ 189.893136][T13283] ? __schedule+0x6a2/0xb20 [ 189.893190][T13283] rtnl_newlink+0xe75/0x12d0 [ 189.893237][T13283] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 189.893273][T13283] ? xas_load+0x413/0x430 [ 189.893298][T13283] ? xas_load+0x413/0x430 [ 189.893347][T13283] ? __memcg_slab_free_hook+0xb7/0x1c0 [ 189.893426][T13283] ? __kfree_skb+0x109/0x150 [ 189.893464][T13283] ? __rcu_read_unlock+0x4f/0x70 [ 189.893541][T13283] ? avc_has_perm_noaudit+0x1b1/0x200 [ 189.893587][T13283] ? selinux_capable+0x1f9/0x270 [ 189.893617][T13283] ? security_capable+0x83/0x90 [ 189.893648][T13283] ? ns_capable+0x7d/0xb0 [ 189.893695][T13283] ? __pfx_rtnl_newlink+0x10/0x10 [ 189.893725][T13283] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 189.893759][T13283] netlink_rcv_skb+0x120/0x220 [ 189.893799][T13283] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.893855][T13283] rtnetlink_rcv+0x1c/0x30 [ 189.893881][T13283] netlink_unicast+0x59e/0x670 [ 189.893922][T13283] netlink_sendmsg+0x58b/0x6b0 [ 189.893972][T13283] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.894079][T13283] __sock_sendmsg+0x142/0x180 [ 189.894105][T13283] ____sys_sendmsg+0x31e/0x4e0 [ 189.894130][T13283] ___sys_sendmsg+0x17b/0x1d0 [ 189.894173][T13283] __x64_sys_sendmsg+0xd4/0x160 [ 189.894212][T13283] x64_sys_call+0x2999/0x2fb0 [ 189.894252][T13283] do_syscall_64+0xd0/0x1a0 [ 189.894279][T13283] ? clear_bhb_loop+0x25/0x80 [ 189.894339][T13283] ? clear_bhb_loop+0x25/0x80 [ 189.894368][T13283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.894397][T13283] RIP: 0033:0x7f0ff0fee969 [ 189.894416][T13283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.894447][T13283] RSP: 002b:00007f0fef657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.894544][T13283] RAX: ffffffffffffffda RBX: 00007f0ff1215fa0 RCX: 00007f0ff0fee969 [ 189.894579][T13283] RDX: 0000000002008854 RSI: 0000200000000180 RDI: 0000000000000005 [ 189.894615][T13283] RBP: 00007f0fef657090 R08: 0000000000000000 R09: 0000000000000000 [ 189.894632][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.894646][T13283] R13: 0000000000000000 R14: 00007f0ff1215fa0 R15: 00007ffc420fa4f8 [ 189.894666][T13283] [ 190.235417][T13290] loop2: detected capacity change from 0 to 2048 [ 190.255942][ T29] audit: type=1326 audit(1746069265.757:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.279567][ T29] audit: type=1326 audit(1746069265.757:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.307002][T13290] Alternate GPT is invalid, using primary GPT. [ 190.313504][T13290] loop2: p2 p3 p7 [ 190.334178][ T29] audit: type=1326 audit(1746069265.807:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.334799][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3373'. [ 190.357818][ T29] audit: type=1326 audit(1746069265.807:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.390296][ T29] audit: type=1326 audit(1746069265.807:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.414311][ T29] audit: type=1326 audit(1746069265.827:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.439222][ T29] audit: type=1326 audit(1746069265.827:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13292 comm="syz.1.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffad7a8e969 code=0x7ffc0000 [ 190.446480][T13306] loop1: detected capacity change from 0 to 128 [ 190.481569][T13306] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.498564][T13306] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.517728][T13312] loop3: detected capacity change from 0 to 512 [ 190.543297][T13314] loop1: detected capacity change from 0 to 2048 [ 190.560058][T13312] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.585457][T13312] EXT4-fs (loop3): mount failed [ 190.600037][T13314] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.681461][T13336] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3379: bg 0: block 345: padding at end of block bitmap is not set [ 190.786563][T13344] loop5: detected capacity change from 0 to 128 [ 190.805223][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 190.815403][T13344] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.828444][T13344] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.882856][T13355] loop3: detected capacity change from 0 to 512 [ 190.929133][T13355] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.996817][T13355] EXT4-fs (loop3): mount failed [ 191.074097][T13377] loop5: detected capacity change from 0 to 128 [ 191.088868][T13372] loop2: detected capacity change from 0 to 2048 [ 191.111587][T13377] syz.5.3403: attempt to access beyond end of device [ 191.111587][T13377] loop5: rw=1, sector=145, nr_sectors = 77 limit=128 [ 191.134450][T13372] Alternate GPT is invalid, using primary GPT. [ 191.141840][T13372] loop2: p2 p3 p7 [ 191.199879][T13384] loop5: detected capacity change from 0 to 128 [ 191.221663][T13384] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.239887][T13384] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.294422][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3407'. [ 191.389993][T13406] loop5: detected capacity change from 0 to 512 [ 191.409031][T13406] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.420703][T13406] EXT4-fs (loop5): 1 truncate cleaned up [ 191.487786][T13408] loop3: detected capacity change from 0 to 8192 [ 191.526858][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3415'. [ 191.539233][T13413] lo speed is unknown, defaulting to 1000 [ 191.545570][T13413] lo speed is unknown, defaulting to 1000 [ 191.553397][T13413] lo speed is unknown, defaulting to 1000 [ 191.560629][T13413] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 191.576435][T13413] lo speed is unknown, defaulting to 1000 [ 191.585842][T13421] lo speed is unknown, defaulting to 1000 [ 191.594748][T13413] lo speed is unknown, defaulting to 1000 [ 191.614363][T13413] lo speed is unknown, defaulting to 1000 [ 191.626879][T13413] lo speed is unknown, defaulting to 1000 [ 191.633277][T13413] lo speed is unknown, defaulting to 1000 [ 191.658727][T13426] loop1: detected capacity change from 0 to 512 [ 191.665627][T13426] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.688269][T13426] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.703284][T13426] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3420: corrupted xattr block 32: bad e_name length [ 191.717249][T13426] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 191.726520][T13426] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3420: corrupted xattr block 32: bad e_name length [ 191.773606][T13426] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 191.810783][T13426] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.3420: failed to insert inode 16: doubly allocated? [ 191.842623][T12567] EXT4-fs unmount: 70 callbacks suppressed [ 191.842640][T12567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.887330][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 191.915213][T13446] loop5: detected capacity change from 0 to 1024 [ 191.922668][T13446] EXT4-fs: Ignoring removed i_version option [ 191.928840][T13446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.951761][T13446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.964371][T13454] loop2: detected capacity change from 0 to 2048 [ 191.981163][T13454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.993453][T13454] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.104566][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 192.117053][T13471] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3431: bg 0: block 345: padding at end of block bitmap is not set [ 192.165534][T13474] siw: device registration error -23 [ 192.340722][T13479] loop1: detected capacity change from 0 to 2048 [ 192.381666][T13482] ================================================================== [ 192.389807][T13482] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 192.396531][T13482] [ 192.398867][T13482] write to 0xffff888105ff0d90 of 8 bytes by task 13477 on cpu 1: [ 192.406589][T13482] __dentry_kill+0x142/0x4b0 [ 192.411206][T13482] dput+0x5e/0xd0 [ 192.414858][T13482] step_into+0x5b2/0x820 [ 192.419120][T13482] path_openat+0x13e8/0x2170 [ 192.423739][T13482] do_filp_open+0x109/0x230 [ 192.428265][T13482] io_openat2+0x272/0x390 [ 192.432625][T13482] io_openat+0x1b/0x30 [ 192.436719][T13482] io_issue_sqe+0x1a8/0xb70 [ 192.441253][T13482] io_wq_submit_work+0x427/0x640 [ 192.446209][T13482] io_worker_handle_work+0x46a/0x9f0 [ 192.451528][T13482] io_wq_worker+0x22e/0x870 [ 192.456063][T13482] ret_from_fork+0x4b/0x60 [ 192.460509][T13482] ret_from_fork_asm+0x1a/0x30 [ 192.465291][T13482] [ 192.467623][T13482] read to 0xffff888105ff0d90 of 8 bytes by task 13482 on cpu 0: [ 192.475270][T13482] fast_dput+0x5f/0x2c0 [ 192.479472][T13482] dput+0x24/0xd0 [ 192.483142][T13482] step_into+0x5b2/0x820 [ 192.487422][T13482] path_openat+0x13e8/0x2170 [ 192.492044][T13482] do_filp_open+0x109/0x230 [ 192.496581][T13482] io_openat2+0x272/0x390 [ 192.500954][T13482] io_openat+0x1b/0x30 [ 192.505049][T13482] io_issue_sqe+0x1a8/0xb70 [ 192.509589][T13482] io_wq_submit_work+0x427/0x640 [ 192.514571][T13482] io_worker_handle_work+0x46a/0x9f0 [ 192.519896][T13482] io_wq_worker+0x22e/0x870 [ 192.524479][T13482] ret_from_fork+0x4b/0x60 [ 192.528942][T13482] ret_from_fork_asm+0x1a/0x30 [ 192.533723][T13482] [ 192.536056][T13482] value changed: 0xffff888237aa37f8 -> 0x0000000000000000 [ 192.543189][T13482] [ 192.545531][T13482] Reported by Kernel Concurrency Sanitizer on: [ 192.551688][T13482] CPU: 0 UID: 0 PID: 13482 Comm: iou-wrk-13476 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 192.564517][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.574598][T13482] ================================================================== [ 192.587664][T13479] Alternate GPT is invalid, using primary GPT. [ 192.594123][T13479] loop1: p2 p3 p7 [ 192.754874][T10875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.851881][T13454] syz.2.3431 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 192.866129][T13454] CPU: 0 UID: 0 PID: 13454 Comm: syz.2.3431 Not tainted 6.15.0-rc4-syzkaller-00051-g7a13c14ee59d #0 PREEMPT(voluntary) [ 192.866167][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.866185][T13454] Call Trace: [ 192.866194][T13454] [ 192.866204][T13454] __dump_stack+0x1d/0x30 [ 192.866233][T13454] dump_stack_lvl+0xe8/0x140 [ 192.866264][T13454] dump_stack+0x15/0x1b [ 192.866281][T13454] dump_header+0x81/0x220 [ 192.866314][T13454] oom_kill_process+0x334/0x3f0 [ 192.866445][T13454] out_of_memory+0x979/0xb80 [ 192.866469][T13454] ? css_next_descendant_pre+0x138/0x160 [ 192.866516][T13454] mem_cgroup_out_of_memory+0x13d/0x190 [ 192.866578][T13454] try_charge_memcg+0x5e2/0x870 [ 192.866608][T13454] obj_cgroup_charge_pages+0xb7/0x1a0 [ 192.866631][T13454] __memcg_kmem_charge_page+0x9f/0x170 [ 192.866660][T13454] __alloc_frozen_pages_noprof+0x188/0x360 [ 192.866699][T13454] alloc_pages_mpol+0xb3/0x250 [ 192.866745][T13454] alloc_pages_noprof+0x90/0x130 [ 192.866835][T13454] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 192.866873][T13454] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 192.866920][T13454] ? ip_set_alloc+0x1f/0x30 [ 192.866952][T13454] ? ip_set_alloc+0x1f/0x30 [ 192.867004][T13454] ? __kmalloc_cache_noprof+0x189/0x320 [ 192.867032][T13454] ip_set_alloc+0x1f/0x30 [ 192.867063][T13454] hash_netiface_create+0x282/0x740 [ 192.867143][T13454] ? __pfx_hash_netiface_create+0x10/0x10 [ 192.867245][T13454] ip_set_create+0x3c9/0x960 [ 192.867306][T13454] ? __nla_parse+0x40/0x60 [ 192.867326][T13454] nfnetlink_rcv_msg+0x4c3/0x590 [ 192.867354][T13454] ? put_dec+0xd3/0xe0 [ 192.867484][T13454] netlink_rcv_skb+0x120/0x220 [ 192.867523][T13454] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 192.867561][T13454] nfnetlink_rcv+0x16b/0x1690 [ 192.867585][T13454] ? __kfree_skb+0x109/0x150 [ 192.867699][T13454] ? nlmon_xmit+0x4f/0x60 [ 192.867776][T13454] ? consume_skb+0x49/0x150 [ 192.867879][T13454] ? nlmon_xmit+0x4f/0x60 [ 192.867897][T13454] ? dev_hard_start_xmit+0x39e/0x3d0 [ 192.867938][T13454] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 192.868051][T13454] ? __dev_queue_xmit+0x182/0x1fb0 [ 192.868098][T13454] ? ref_tracker_free+0x37d/0x3e0 [ 192.868145][T13454] ? __netlink_deliver_tap+0x4dc/0x500 [ 192.868259][T13454] netlink_unicast+0x59e/0x670 [ 192.868316][T13454] netlink_sendmsg+0x58b/0x6b0 [ 192.868430][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.868463][T13454] __sock_sendmsg+0x142/0x180 [ 192.868616][T13454] ____sys_sendmsg+0x31e/0x4e0 [ 192.868645][T13454] ___sys_sendmsg+0x17b/0x1d0 [ 192.868694][T13454] __x64_sys_sendmsg+0xd4/0x160 [ 192.868744][T13454] x64_sys_call+0x2999/0x2fb0 [ 192.868766][T13454] do_syscall_64+0xd0/0x1a0 [ 192.868794][T13454] ? clear_bhb_loop+0x25/0x80 [ 192.868841][T13454] ? clear_bhb_loop+0x25/0x80 [ 192.868862][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.868956][T13454] RIP: 0033:0x7face7dae969 [ 192.868975][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.868992][T13454] RSP: 002b:00007face6417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.869012][T13454] RAX: ffffffffffffffda RBX: 00007face7fd5fa0 RCX: 00007face7dae969 [ 192.869029][T13454] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 192.869045][T13454] RBP: 00007face7e30ab1 R08: 0000000000000000 R09: 0000000000000000 [ 192.869078][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.869154][T13454] R13: 0000000000000000 R14: 00007face7fd5fa0 R15: 00007ffe4dcbf1c8 [ 192.869174][T13454] [ 192.869182][T13454] memory: usage 307200kB, limit 307200kB, failcnt 1129 [ 193.227642][T13454] memory+swap: usage 308424kB, limit 9007199254740988kB, failcnt 0 [ 193.235552][T13454] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 193.242872][T13454] Memory cgroup stats for /syz2: [ 193.243342][T13454] cache 12288 [ 193.251649][T13454] rss 0 [ 193.254515][T13454] shmem 0 [ 193.257478][T13454] mapped_file 0 [ 193.261045][T13454] dirty 0 [ 193.263996][T13454] writeback 0 [ 193.267274][T13454] workingset_refault_anon 768 [ 193.272006][T13454] workingset_refault_file 1545 [ 193.276841][T13454] swap 1253376 [ 193.280243][T13454] swapcached 0 [ 193.283639][T13454] pgpgin 89264 [ 193.287040][T13454] pgpgout 89256 [ 193.290519][T13454] pgfault 139826 [ 193.294142][T13454] pgmajfault 413 [ 193.297700][T13454] inactive_anon 0 [ 193.301357][T13454] active_anon 0 [ 193.304822][T13454] inactive_file 0 [ 193.308458][T13454] active_file 32768 [ 193.312295][T13454] unevictable 0 [ 193.315839][T13454] hierarchical_memory_limit 314572800 [ 193.321245][T13454] hierarchical_memsw_limit 9223372036854771712 [ 193.327406][T13454] total_cache 12288 [ 193.331243][T13454] total_rss 0 [ 193.334550][T13454] total_shmem 0 [ 193.338005][T13454] total_mapped_file 0 [ 193.341998][T13454] total_dirty 0 [ 193.345472][T13454] total_writeback 0 [ 193.349330][T13454] total_workingset_refault_anon 768 [ 193.354576][T13454] total_workingset_refault_file 1545 [ 193.359902][T13454] total_swap 1253376 [ 193.363792][T13454] total_swapcached 0 [ 193.367724][T13454] total_pgpgin 89264 [ 193.371699][T13454] total_pgpgout 89256 [ 193.375674][T13454] total_pgfault 139826 [ 193.379754][T13454] total_pgmajfault 413 [ 193.383821][T13454] total_inactive_anon 0 [ 193.387994][T13454] total_active_anon 0 [ 193.391982][T13454] total_inactive_file 0 [ 193.396219][T13454] total_active_file 32768 [ 193.400558][T13454] total_unevictable 0 [ 193.404539][T13454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3431,pid=13453,uid=0 [ 193.419370][T13454] Memory cgroup out of memory: Killed process 13453 (syz.2.3431) total-vm:93748kB, anon-rss:936kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 193.643855][T12278] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.