last executing test programs: 22.227679808s ago: executing program 4 (id=316): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="95", 0x1}], 0x1, 0x7000, 0x0, 0x9) 21.911373813s ago: executing program 4 (id=319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) (fail_nth: 5) 21.567907098s ago: executing program 4 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r4 = socket(0xa, 0x801, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) getsockopt(r4, 0x29, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00cd0e", @ANYRES16=r7, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x9, 0x0) io_submit(r8, 0x0, &(0x7f0000000280)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800dd00000000000080009b", @ANYRES32, @ANYRES16=r0, @ANYRESDEC=r8], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000900)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x200002ac, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xaa75fbb4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r10], 0x48) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000000240)={0x5e, 0x9, 0x8, 0xa, 0x7}) 21.42316065s ago: executing program 4 (id=330): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4212, r3, 0x202, &(0x7f0000000240)={0x0}) sync() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=ANY=[], 0x0, 0x600) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x548, &(0x7f0000000b40)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='ext4_ext_handle_unwritten_extents\x00', r5}, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x23, 0xb, 0x7fffffffeff3) r6 = openat(0xffffffffffffff9c, &(0x7f0000005e80)='./file1\x00', 0x103042, 0xe0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000000)='V', 0x1}], 0x1, 0x7fff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001680)={0x8, 0x1, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000880)=""/186, 0xba}, {&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/132, 0x84}, {&(0x7f00000012c0)=""/252, 0xfc}, {&(0x7f00000013c0)=""/141, 0x8d}, {&(0x7f0000000940)=""/104, 0x68}, {&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/192, 0xc0}], &(0x7f0000001640)=[0x101, 0x7fffffff, 0x6]}, 0x20) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x10}}, './file0\x00'}) openat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r6}, 0x38) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x100}, 0x40) 17.750244789s ago: executing program 4 (id=396): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 17.722819049s ago: executing program 32 (id=396): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000000000", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) 2.52848732s ago: executing program 1 (id=640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x68, &(0x7f0000000380)={0x0, 0x0, 0x61, 0x41, ""/65}, &(0x7f00000001c0)=0x61, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x2, &(0x7f0000000180), 0xfe) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 2.446918791s ago: executing program 0 (id=642): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x80000) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="341cc329874f3fe53b4ec838deec3c667d673ac7edad174a0e9b577e42232c8a4e3e1e9e509e532d42408eda18821b5d9978ce31044ee455a359d2800306fe38a1479361e65ff33944b0645c1b87b2c0629da736bff1bb30797d226f3d0dc32ad97cd05749ab1694d294c9078ae2208aaa1f5f201df5a018654d066adce7967080db561373a6bafe896610013d9312ec4577218006f33b1cc68739693c1676520a6f72358ccbc807aef0e38136c39561ecf5939e5442d22c57a45eccfdebc929cea76ed2fb9f0816266e433dfdd28b013cdf72436414c4b32200c3e663", 0xdd}, {&(0x7f0000000600)="cfd299c4750e567361882d934c7b3dbde7d673dceec874b4129eff6e0c7120d75d1bf330626da7e0b56a06afa184b95c9dde2e5303b37bcb83f42712bdd6079bcf97051271dae50cdb61174362895d5cb341db95ccae2af8909d58552f980d26464e10a51546824d57447ee60721f43eb3e0c7090c2b57364314928cab6e1976c5ea5b9faea9e93bbebdc772a4f79d0ee52705e5f7200910c77cbe70c6883bf7daf3f93f5f0270488d46bf8e4dd75ea4d69db4c02ee62c6d19ed1b1f10aa6eb663ac29f4e154bb4d2e11175350f8b99f79d7bbf76e1097030bbc168c53d40e8cc3111f", 0xe3}], 0x2, &(0x7f0000001040)=[{0xf8, 0x10e, 0x7, "ba4c37595035405cc3de796004ba88486ef6b32432f535a374e0e9f9cb4d04b9083c951f789b00fc51c05302b4a180d45d493ce4db9aa78f2ce1d947c9652ffc4d87e4fc0df6267d4e3b36ccd0b2524e6b7d1ca544456f33eb20bb8a828de061c1e43cbf14489761fe39edb5c47ae2a0af24eca2b173f93d6a92135c5cdde8dfc3110cf8c87cbc621f3eaee0853cfe295a77094e594b1093840b4c7179e8d497ddffb2494cc6f3f8d7163b0a96d182ec4d03c556844b4d4b505656d6f3e2e6d470a924fd8e445714a25fc7c3944b10ffec6afe9b1f211f701d7d4936a7c26bd0530ae2e9"}, {0x28, 0x112, 0x2, "22931b4a2f04a284a56a97d5c4a16f745eb8ab22"}, {0xb0, 0x111, 0x5, "ed65e135c01160aaff0a33cac2d4dfb7f316a6cebf8f77ba186d12fc2aae49250f41a00f297b7222ea40a3aeec354289c549026cc9f1e89026adc7fe338aadd633928ffda3bc5adf9b150d4dec9179349e5cb38f2eddc180b909f89134ae061ed5a371b0335ba9b2ce6bbcf8e92ccc3a300138c9772301da6a26280bdc69011fce7cb445fab6416e66705c71cc25ee50653f989c0789cb0c02d5169488ac1e"}, {0x38, 0x0, 0x9, "32d2cf5aee5a9d94f32d352d28999205af44dee9a9ac866e00082c23814e3a431092af"}, {0xc8, 0x10e, 0x3, "730ac677586385b00af5a5c03830bbaea99192cfd943f292c3254cfe2207ba212f2624ab946de755468b2aaa6b39aca462913f3646840afc25da774c0ab8d274d18e912b784cb7def4ef6261cc0a7ae884590fd4bb410e42019a1dc9e019e6e472e0328243ae6b03c1965ed4d5c57ee9c1446f849d5620f6917c48e776494ada15aa14dc71d02b65f27dee27a42185e202f476eead6d711da7d16cd95c7aedc87a214ece670eb93d2e81dbb1d59613b307dc7511"}, {0x60, 0x84, 0x294b, "648ceeaaad02f2be02b78e041a242e1052710802b44336a09728e244896ba2276cbb93d10847a31e187694dd5a1aca4b06feecae70fc05086457dfcb3d2f7916b60072b1ed0701cc0ae3b2e43be9"}, {0x68, 0x1, 0x4, "16306df8f65786c8b15a2e9d5af7cfea6f0b8077b47172f6e5c33d2c396d107fdbe2d1a2f0d6974be8e4d1bfba26884cf722d110f1b0b19c95ca00159bb2cd3220155cd16af7940986928f9762ae405cfc6415e91564d8ed"}, {0xf8, 0x6, 0x7, "af2787426748d9edad967ee22a1d375aaa8515b548a634a50b1de59495f563b1fd9c1a6289ebd81cbb43b7130ce986f55fea6562f17c5443fcc6f4cadd1d9f87fb442d8a3c10e9df9a8ce45d14fb1cbe27bd4d6471d9da3c2636911bb646bce1dba5e81a4a033db0ba620b4308d815a0331d709229b37dfdd582d42051400c005cf434712f0ac918721cd485199cd9827e9ddf8712723fd7db57660ca37fba6d06f605a26d6b92898ddb6804601f86f942911b282a55229fb4cc314d24051898a4137c63b650e08e6fc49a39753da35c300be5016846a4092ba0a343b04c2cab96dcd66808142145"}], 0x490}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendfile(r0, r1, 0x0, 0x20000023896) open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x8000) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0xd1a1, 0x80000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 2.198278105s ago: executing program 5 (id=644): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x6, 0x6}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r2}]}}}]}, 0x40}}, 0x8080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001100)={&(0x7f0000001040), 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r10, &(0x7f0000000040)=@known='system.posix_acl_default\x00') write$UHID_INPUT(r9, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b3d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006c090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000007fd8000000000010000000001600000000020000000000000000000000bf010100636d61632861657329000000", @ANYRES8=r3, @ANYRES32=r1, @ANYRESOCT=r0], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 2.092189666s ago: executing program 2 (id=645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 2.084443417s ago: executing program 5 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.986969198s ago: executing program 2 (id=647): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000580), &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xd, &(0x7f00000008c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000002bdd6af3000000000018120000b004729d8ce31d6f24261e6105133b8f9788cdc4dbd8c7828f8d417a0b434e36c359e8", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080), 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file1', './file1'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008001}, 0x8000) 1.950266209s ago: executing program 5 (id=648): unshare(0x28020480) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x8409, 0x5, 0x0, 0x3c, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x1, &(0x7f0000000400)={0x0, 0x30, 0x1, @thr={&(0x7f0000000180)="32da6f6919d1adb66371c6d0c79eef1dfd0f22130930a267b4445ee2d7e4bb6ad1bba285cafa9a47f154ffe1b3f22552af45161105d23e46e930a9b6629e", &(0x7f0000001600)="405b9173f8adbf703dbba0192c906aacc310f63d2cec894d74d778271809312dcc42f8e0c107921d2ed553f8385697a24f73ac1ffd250616fc368455f91e05d4818a89f8bc55f1b6915ffd2159b714fc26dc3f06301e4ac00f5c34738bf03da50573ff3f4f40edaa8eaa198014b50338a2f5a4707e0df8ff3d35af0d6de890d4f82c9ae43daa8957d9e97fae832649f05be4d1f4bad12be7976a409f1cdca2540a702b2f4f35f497bf9fc65f3f8629ceb3c9ce206552229a19de898b7582a9ed26c099f5122a82f943ba5927f0b0abf75d6969bd34568f1b14220ee8dc7af05af3497c8354d8397ab175e1a2ec52bb622a2149894cc115c81b3b95539bad0cef52e52193e3e386034400a380f7e428fcc6e12f855d499e7892af0bb5d60da2e6214b46eda6bb18dfe84810fd5ebe57be0a68bbe8606bae12ed0337ee7d2a9c4219bb73bf1c68b87287b3b0fc7844ff4ffa11250d931e2e06b53fe5959c94483cc763dfd44523b92312f3c3ca60f98dfdb05eddd2644fe646380c75b745e6029f0e9811cef70ccd8ea971e7d1db1b376c7e6688d60bed709d9460ec0e2dbf460ab62ed25a353897f1bb2a7ee9d7bbc9261bd8ad88e9c72d9fea7967f16bbe8aa8c12d56734cf3e2a729f59a62e962b420fb4707616b02e0dbcd3d3422c3f34bcc74b2b80303ad39574722189d3561dd3c39957731593f5bcb7028c998584ada1c651095dad14ab296c2b216e4648ffcedb97e9175d9b06b85ff7784f87626225bd7364a49560b0001ea597fd353c52a9ff5435f4f1e4822cc24462be7e11a29287aacee86e3fbb39f67ede4eae0a27d4b8830cd79915aafa1a33169129ad8783fab8c851dbb538e6cc25559122507410c4cbea10cc1cf712dfa8b1bdbd491275a3fa93e9fdaf66c151b8c05ad0edd895113bab80ef4fd22cac52ec7e1efe0f0b9f6075e452cfda402fd918245c641bc6ce7f63403797ff8a74ef09d09da1560ce9a1a18fdc8d771bc4904f97ba76ef72d9e669dd58044f21fddd903084b7937ad4d952b450bf559bac54cecb7480ce4a7b046a773d42e94d1c187c1347ad7b5e7ac65c4c7664dd71a6b3687091f82188ee53430fa2cf3e4cb754c3d8b670d7c23ae5373a3a05ca9af3f589f74a8211e7fc440f47f9fe5261423f8415c4e431f1de972c7b32758c2d44205e818399d7c544ac3353a47f8c3cfdbfd408098ed91d031aac3b05c185df3a246b161f7c3d53e20db11e26759cc201ccd0a2f1fc7ed635792ac47c7d9af59760b88799a2b5031c3fb919f0b88095919537a82d8aa1fa30d8779d476ac70aa7d762b4025ef30eaca1c15f2635b045942e3271ed90f7d83d0c6cb7a2732a30b9b12bbfd036812102d78ed7c4cae1daac9bfbb3e62aa0e05c5af3494e24ed39c91c4aadf2482e6b513d56c37337c92ed1bb15b19778e179ad583a0dcab6c2050fb3f7199ef43fed1bf5aedae8e94edc193d228f2c8a92adabb3ca77dee0f9b0ec10faf27ee1b2e786ab5b5dea5813776ec737a6268f4ee92327d44f72cd83c6e373b9577bd2b8059b361a420f3832433fc0c9e416214b9e264df9e0684fa8f8681f1e1a41094da4b4ec21f9d60c89d5c6b263e2888191fac746b2467ed685ab67a9ca15ef44967e3a7b7e2ca90eaa6d3a0a1f26a94c454caddb181759bbe287047fd3d5b2556f6a7d3da010b2f264e13dbe789c5189e2edb77503ad045f1c8c6af9bf54c251b1bca4272d38c4a98609d97b6ed8f8e2ac252b96c17c772b8c43937ce6dca1bebfc22c07ebe2892051899ca58a59abf143bddbd711a9834d77e907f9df7225b33fbfe900a861a5ca4146f4098494cae501299ecd857b585005136c58d4ed061bfd6c840581228c2e02f78e7c517faa125c87b0e96fbc1d4ff3bfdc3d92bc26f4c9b9ed9d9f01926c0aafef6f8700f4f73122dbe78280a6eca9d8f698415bdc37ba29e1795dacbfa69c604d2bf7d48b28db7899fc265c0f90a78ddb50b9be749a699e3ec68eac34d147c7eafbbf8efa2146651566e6a0a2253bee8d988ba2b0710189f8e13ebc96d5e8d036d877ed548b7262851978a5e238c19f0598d488089eedc4fb78932a2291212e494baca1414137e735deeba9a65f9f2d6a81f3088bbdf5c864d4b0c22507c12de8cb25045753b8e09a93a5235d502af960ff598cb89f0ff06f9d2647ef33831c073a6bbd032d8b7ccc55b85ad4cffafaf81fc964cb5c1614011d954a364a3aa1af681ccb07a6fc49c7874edf576967dc03c92a43b7c87dadc507acd2e3d67ed57af1ff2a25187e771217ab69c854711a53e689260534d45d287ab26b79f5b8c31619277dd67ee555ddbbe13c8da9578871481e76b63e005223e55a10b41318065502f6d03db3739cb613160169c8a82b4b94432b61a226d1ab3fa8e5e8d4686baf478ca1c40c0f37d7f2d196fc3fde50ff54e2b8e6a230275eb7134eb27c1e9851798b5d199a89a51bbdbf1200a83c88c803518be5d7bf7252a40b84a840ccd92789b89c44c0fa93a37cfc0a7e078ed59dbca0d759b6be362e3ab45815b23158b7d98bbb169b8cc765634a2aa70bcffe05b68f3e1eb4da3f93e98e7cf46ac9d46656f8b257778131bad28a1c75c29dce1e8634be89c7691851a369d7ffa8f2f4719e22d6450b865974e6b130205bcf76df4a6424dd64c86777ba794134099b6513e87b440b066e631aadf61abb7f09251bfaf62d89d3eb696b5eee7d5a9090d5f4d2c7c88902c5c14b93916750b7d2f443e7cf2dd4f76d612a5524a86d7468978ac2a54812a2d4f2c92dc05fd282bd6f03e0a358d98e25f0a1259f814d98902b8cf7296de1b22aca23751312ef59f9e9e90b27fff77338c87baa59f3f35870178487924bad3c4cd4d93954adb9e42f4a71b32c790d565ae384d22992e066e7c5be059a0552cc29434f96e09690e74146f19c619459f460883ff89d6ccbc83a0939a267d07f46ac101e8f8334dc93883466695f74604d3fe6067b94af1436e07699438a8c1232b803bbf6d6b7281aa253f3db2adb7554fbe5e6ab2ea073b367c6b13b07774268e184bd30155e112f048384dd5d46a0112a7f80bfe83c54f620a88d38b60dc4861db2f0aa3e35e6b26ca4af2f268f8106b08ad8e876754dcf8d4de63301e446436e7f78c5ceecfcde8ecc7e03f8aa8cf6fffd7d8b993a458b45c3882b5e89d7bed3f3bc92521d3a95111163ab6ddfabf2145ebf8d95c725f7604efcefdb55a37b1ffeeb81abc3bc9b73bbbbc7b2f3fdd41df804822f3d82125fde91fe54f0751c8e22e6567925c2beb7d71aa0ce80a792f377fa62e5a302af7fa2b07cf97b3ee3a97c35ef1aae14f850f21c8b3e5db83ec8fec41a043b75996cafbe1f05a4456ae0e353028612b6931c8e334a1ad442c068d64e605efc6969736a2d7f863177021c515930c5c5ac33a17d8d3079163c2c98857e4bbd19b8eb037aea7d9fa4be2152d5420acc6dfee2b44f2eb1f73fc53dae7f565a722dded9b6de32c2056b8b175035618a2896d10d466c885a67df590eaae639f216f2e69843a2a4f957f3b0fb6a0aab739654b94ea061be8e48e85db3283f529b0fbcbddb7b15e43b63f6e261b35fe250e4e68f08fba436bc1db05d10dc4a54002a194825230e8e611fd5a6c2d6d715c4d1f1c03f8153cf45473e7e9b0d3f4875d7b6be62ea44ce440eb032d26d16fd0d75c4fd0c9968add86cf0fe67ac15168fe30df6851fd589aed6eb8a0503a23828c7ce2fa4e3ee62da8812fa905e65b58c9566799e58ca83cd4f7d906c13b87d2f06efe3baa064f68f13d035d78a4c59f6ad819dd64cdb2fe510e86ce83cb705017099ad311f69d449f20ff1fe176950d6b9d094ef595d82a94e09627d315a663d01aa38812daaa95dad7ab0770d46d0803aac4a48c3f7979fd1aa483a9368265f502821fb1bd88ff23ff814db6aeaca93affb4ad9e73daa748c1d6e7b6618e980c0e66f1a702a351acaf4fda2ec8c4858d632b61c46d1e738a053f3cb80551012ed16f7d6e1a112770baccc96c05462aeff177d0603098f2dcf2efd529eb9c1aa93125bdf845de02c23baa247212ca482d4abcc6d5b8648893e106c1e569796c2539fa97a30dbad3ca2c4bf97fd0824575649e07f7385dcb7cafd2f88b334bc3ea268253165736b525df70093e40e1b62d2099f535d60e1f00a42b3df53b03b7494b289eed859565e32c91725d700c1194cf63319e0dd88e9ee476ad2d16a6bd6e96073b16d9ca79d8d90d9db537fcab5397b03bbeb5b2a3f9f147cdcd856879655e6dffbb6513800b61dc6d0c011a3e3690913256606562fa6fe2967b0acf586f1aeedff2915ef91a4414b1ceacc736bbeafc015f8b2fc4a76460c5dd85e1660ffb7300c78df3c4f17f962aeb1ca572705d3af3b79869a7a7abc9836a17bc808f3b8662d77c187d8062cd22581e154d15750edd6e578894423062c5597038d896953a4b811823266398b214858aa97b0db9bc4dc88cf3cbd024987967f02ccf649268961d342cb23f649983cb80bba93e560cb0f7633b77a0280d97dbad10b9127cf1628cbfb495ee108ba6fe47a301e729b37a9b451f82d39ccce1ad80f2988d76cab26f853a810fce8d7b94896e7014d630edc7bf159e71b2e0ced83c0aec1a51d25b410e1ea3e0fd4fbf719325d2527e3cd2cc6d63648f912f60387c513247d064a329f4a40482f98ec30c10173bf67969e475cabcf3dab16ce7c6741097505e720fdb0921099b536cd09a4a8ee411d39f003f4106f1df950340606d819a75f27cecb140988da628f97f3216c0f77f43e825d5b123603e57498383e7b7215c7c66b6df12a83443920a918e1ef6c53cc2f6ffb99f8cad2ba3d56b1ad68cd84d7c362a67d9b364869ded057eae1b1cc1dc63c9c6b52609a42e39c26f689b65db641304f6d566fdb24a4d7fa9a5f53d03cf42c61af0474876f5d1710f78b3c93be1c157885619eaaf1f964bb12fc668fd2b7ec2eacd51b731e2c619aedf4c599697294644fd743b7ee2bb1e0ebaf2370db34707324f2d1e470c3b44fb754a6e1d7a1c295762d2479021048cd0458ee502aa0203b0028243e9f8a6bcdab3cd86d2feb47fbd3f4494cde74e211ec320632f019a31c48dad1afbe320395602c4f3427ed25b6553c21152bb030f417babb72b0625d24d16a292fc89bf7489016e2f116d23dab634ab3ea5520818304b1e720c587dc5420fd64f99a357e8166f8405c1afc2be8cad647d2cc2cdc087bf49fc358870eec3d1805a0f4f20571c3a2eab57483f3a46de32a76b725092e184b5b1dae941825b7e69a82e1410a7f0e17e8cd33e1bc4de3e17abe0290956fbb9f3c183f72e89e47b22e90e4898fe3cdeff2bfa66c29bf6177f901bcb65919a69898bafa34820aa7f7414638b7996cc1f7305b3fe15d3c7e6e41c2fd2b33a8c9e773198d0f5b86f77e5a6e35c02b10dc3dd1b5ccc5c7188eb83921176733a464923e25c02eb7b3fd3deb547adb6265d28af3ab5015cdb40e3318e184aa392cc7bd416717e519fc8c9b751a3811c3c8c93aef38890aa4ec7f21b248b8b4dcb85a13d65a97b5199a5732886ef113acf8d40e26fd17f6859cf631872a30574f232a45495d960b002ff939e441330032d2e095abeefb275212f5b5e278309cf526edc32adef3f6d14ec6a3e71ffb5f6d47999a5122d40a0219503b3ad3a38a59ec5e6a7ba4fc93dd4646beb434eb694232d8891413dba22966297e0a886fc4d17ac57fac1075d2f88501d2124be558dd5f936cf"}}, &(0x7f00000004c0)=0x0) timer_getoverrun(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbf8, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x2a, 0xb, 0xfffffff8}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8090}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) fcntl$setownex(r0, 0xf, 0x0) 1.90627656s ago: executing program 0 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x8c) 1.715971393s ago: executing program 0 (id=651): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'lo\x00', {0x2, 0x4e23, @broadcast}}) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(r5, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.576408755s ago: executing program 1 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) unshare(0x24060400) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x5}, 0x18) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r0, r2, 0x25, 0x15, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x119, 0x487, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000580)={[&(0x7f0000000380)='syzkaller\x00', &(0x7f0000000400)='GPL\x00', &(0x7f0000000440)='macvlan1\x00', &(0x7f0000000480)='kfree\x00', &(0x7f00000004c0)='/dev/ttyS3\x00', &(0x7f0000000500)='&^*!,[\x00']}, &(0x7f0000000740)={[&(0x7f00000005c0)='GPL\x00', &(0x7f0000000600)='\x00']}) r7 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000780)) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f00000007c0)={r2, 0x1, 0x6, @remote}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r9], 0x40}}, 0x4008054) 1.558776365s ago: executing program 0 (id=653): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) timerfd_create(0x0, 0x800) r2 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) 1.433571527s ago: executing program 0 (id=654): clock_settime(0x1ed5d7403, &(0x7f0000000180)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) ptrace$setregs(0xf, r1, 0x0, &(0x7f0000000380)) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x17c87, 0x800, 0x0, 0x1}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r5, r3, 0x0, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, r7, 0x80000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(r6, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x8e) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000280)=ANY=[], 0x18) 1.426580527s ago: executing program 2 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r4, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r6, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r9, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r7, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e23, 0xfffd, 0xa, 0x80, 0xa0, 0x3c, r3, r7}, {0x2, 0x3, 0x9, 0x5c1, 0x1, 0xde, 0xfffffffffffffffb, 0x7}, {0x5, 0x1, 0x2, 0x3}, 0xffff16e6, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x5f}, 0x2, @in=@local, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xff800, 0x4}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.387663498s ago: executing program 3 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.295102089s ago: executing program 1 (id=657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xf, 0xc}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44050) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0x10}}}, 0x24}}, 0x20000004) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000065c0)={0xf4, 0x1e, 0x1, 0x0, 0x2, "", [@nested={0xe1, 0xe7, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3"]}]}, 0xf4}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kvm_fpu\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000005000000050019009500"/31], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) 1.176571921s ago: executing program 2 (id=658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.159427811s ago: executing program 3 (id=659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r2, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 1.131881132s ago: executing program 3 (id=660): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x80000) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="341cc329874f3fe53b4ec838deec3c667d673ac7edad174a0e9b577e42232c8a4e3e1e9e509e532d42408eda18821b5d9978ce31044ee455a359d2800306fe38a1479361e65ff33944b0645c1b87b2c0629da736bff1bb30797d226f3d0dc32ad97cd05749ab1694d294c9078ae2208aaa1f5f201df5a018654d066adce7967080db561373a6bafe896610013d9312ec4577218006f33b1cc68739693c1676520a6f72358ccbc807aef0e38136c39561ecf5939e5442d22c57a45eccfdebc929cea76ed2fb9f0816266e433dfdd28b013cdf72436414c4b32200c3e663", 0xdd}, {&(0x7f0000000600)="cfd299c4750e567361882d934c7b3dbde7d673dceec874b4129eff6e0c7120d75d1bf330626da7e0b56a06afa184b95c9dde2e5303b37bcb83f42712bdd6079bcf97051271dae50cdb61174362895d5cb341db95ccae2af8909d58552f980d26464e10a51546824d57447ee60721f43eb3e0c7090c2b57364314928cab6e1976c5ea5b9faea9e93bbebdc772a4f79d0ee52705e5f7200910c77cbe70c6883bf7daf3f93f5f0270488d46bf8e4dd75ea4d69db4c02ee62c6d19ed1b1f10aa6eb663ac29f4e154bb4d2e11175350f8b99f79d7bbf76e1097030bbc168c53d40e8cc3111f", 0xe3}], 0x2, &(0x7f0000001040)=[{0xf8, 0x10e, 0x7, "ba4c37595035405cc3de796004ba88486ef6b32432f535a374e0e9f9cb4d04b9083c951f789b00fc51c05302b4a180d45d493ce4db9aa78f2ce1d947c9652ffc4d87e4fc0df6267d4e3b36ccd0b2524e6b7d1ca544456f33eb20bb8a828de061c1e43cbf14489761fe39edb5c47ae2a0af24eca2b173f93d6a92135c5cdde8dfc3110cf8c87cbc621f3eaee0853cfe295a77094e594b1093840b4c7179e8d497ddffb2494cc6f3f8d7163b0a96d182ec4d03c556844b4d4b505656d6f3e2e6d470a924fd8e445714a25fc7c3944b10ffec6afe9b1f211f701d7d4936a7c26bd0530ae2e9"}, {0x28, 0x112, 0x2, "22931b4a2f04a284a56a97d5c4a16f745eb8ab22"}, {0xb0, 0x111, 0x5, "ed65e135c01160aaff0a33cac2d4dfb7f316a6cebf8f77ba186d12fc2aae49250f41a00f297b7222ea40a3aeec354289c549026cc9f1e89026adc7fe338aadd633928ffda3bc5adf9b150d4dec9179349e5cb38f2eddc180b909f89134ae061ed5a371b0335ba9b2ce6bbcf8e92ccc3a300138c9772301da6a26280bdc69011fce7cb445fab6416e66705c71cc25ee50653f989c0789cb0c02d5169488ac1e"}, {0x38, 0x0, 0x9, "32d2cf5aee5a9d94f32d352d28999205af44dee9a9ac866e00082c23814e3a431092af"}, {0xc8, 0x10e, 0x3, "730ac677586385b00af5a5c03830bbaea99192cfd943f292c3254cfe2207ba212f2624ab946de755468b2aaa6b39aca462913f3646840afc25da774c0ab8d274d18e912b784cb7def4ef6261cc0a7ae884590fd4bb410e42019a1dc9e019e6e472e0328243ae6b03c1965ed4d5c57ee9c1446f849d5620f6917c48e776494ada15aa14dc71d02b65f27dee27a42185e202f476eead6d711da7d16cd95c7aedc87a214ece670eb93d2e81dbb1d59613b307dc7511"}, {0x60, 0x84, 0x294b, "648ceeaaad02f2be02b78e041a242e1052710802b44336a09728e244896ba2276cbb93d10847a31e187694dd5a1aca4b06feecae70fc05086457dfcb3d2f7916b60072b1ed0701cc0ae3b2e43be9"}, {0x68, 0x1, 0x4, "16306df8f65786c8b15a2e9d5af7cfea6f0b8077b47172f6e5c33d2c396d107fdbe2d1a2f0d6974be8e4d1bfba26884cf722d110f1b0b19c95ca00159bb2cd3220155cd16af7940986928f9762ae405cfc6415e91564d8ed"}, {0xf8, 0x6, 0x7, "af2787426748d9edad967ee22a1d375aaa8515b548a634a50b1de59495f563b1fd9c1a6289ebd81cbb43b7130ce986f55fea6562f17c5443fcc6f4cadd1d9f87fb442d8a3c10e9df9a8ce45d14fb1cbe27bd4d6471d9da3c2636911bb646bce1dba5e81a4a033db0ba620b4308d815a0331d709229b37dfdd582d42051400c005cf434712f0ac918721cd485199cd9827e9ddf8712723fd7db57660ca37fba6d06f605a26d6b92898ddb6804601f86f942911b282a55229fb4cc314d24051898a4137c63b650e08e6fc49a39753da35c300be5016846a4092ba0a343b04c2cab96dcd66808142145"}], 0x490}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendfile(r0, r1, 0x0, 0x20000023896) open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x8000) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0xd1a1, 0x80000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1.096227632s ago: executing program 2 (id=661): syz_emit_ethernet(0x4e, &(0x7f0000000bc0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xb, 0x3ff, @empty}}}}}}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) (fail_nth: 5) 775.902598ms ago: executing program 2 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x68, &(0x7f0000000380)={0x0, 0x0, 0x61, 0x41, ""/65}, &(0x7f00000001c0)=0x61, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000540)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 659.42336ms ago: executing program 5 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 614.47438ms ago: executing program 5 (id=664): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) timerfd_create(0x0, 0x800) r2 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) 600.53708ms ago: executing program 3 (id=665): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="6219646a33", 0x5}], 0x1}}], 0x1, 0x14) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x24, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{0x0}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) socket(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x4}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 547.072841ms ago: executing program 5 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='skb_copy_datagram_iovec\x00', r1, 0x0, 0x3ff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 10) 374.757774ms ago: executing program 1 (id=667): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) timerfd_create(0x0, 0x800) r2 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) 56.008989ms ago: executing program 3 (id=668): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./control\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) unshare(0x2a020400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c", @ANYRESOCT=0x0], 0x1, 0x369, &(0x7f00000041c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f0000000200)={@desc={0x1, 0x0, @auto="8a3d01bdf4cdc537"}}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x810) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x89f3, 0x20001116) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000002000200000f0000004000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) connect$unix(r3, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x229b, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x700, 0x8, 0x9a, 0x1, {{0x23, 0x4, 0x0, 0x11, 0x8c, 0x66, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0x7, [{@multicast1, 0x3}, {@broadcast, 0xd6a}, {@remote, 0x6}, {@local, 0x120}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x100}, {@loopback, 0x4}]}, @cipso={0x86, 0x25, 0x3, [{0x6, 0xd, "0a8cd536e85998de00c6cb"}, {0x2, 0x2}, {0x6, 0x10, "fbf70b555e1e18ab1675709cd878"}]}, @lsrr={0x83, 0xb, 0xc0, [@dev={0xac, 0x14, 0x14, 0xd}, @remote]}, @generic={0x0, 0x9, "7010062b2091c9"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0x4000000, 0x3, 0x4001, r6, 0x5, '\x00', r7, r1, 0x5, 0x2, 0x5}, 0x50) pipe(&(0x7f0000005880)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x140) 54.499409ms ago: executing program 0 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r5, @ANYRESDEC=r4, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r8) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r4, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r6, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r7, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e23, 0xfffd, 0xa, 0x80, 0xa0, 0x3c, r3, r7}, {0x2, 0x3, 0x9, 0x5c1, 0x1, 0xde, 0xfffffffffffffffb, 0x7}, {0x5, 0x1, 0x2, 0x3}, 0xffff16e6, 0x6e6bb6, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0x5f}, 0x2, @in=@local, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xff800, 0x4}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 30.633939ms ago: executing program 1 (id=670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) close(r0) 1.05825ms ago: executing program 3 (id=671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 0s ago: executing program 1 (id=672): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x80000) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="341cc329874f3fe53b4ec838deec3c667d673ac7edad174a0e9b577e42232c8a4e3e1e9e509e532d42408eda18821b5d9978ce31044ee455a359d2800306fe38a1479361e65ff33944b0645c1b87b2c0629da736bff1bb30797d226f3d0dc32ad97cd05749ab1694d294c9078ae2208aaa1f5f201df5a018654d066adce7967080db561373a6bafe896610013d9312ec4577218006f33b1cc68739693c1676520a6f72358ccbc807aef0e38136c39561ecf5939e5442d22c57a45eccfdebc929cea76ed2fb9f0816266e433dfdd28b013cdf72436414c4b32200c3e663", 0xdd}, {&(0x7f0000000600)="cfd299c4750e567361882d934c7b3dbde7d673dceec874b4129eff6e0c7120d75d1bf330626da7e0b56a06afa184b95c9dde2e5303b37bcb83f42712bdd6079bcf97051271dae50cdb61174362895d5cb341db95ccae2af8909d58552f980d26464e10a51546824d57447ee60721f43eb3e0c7090c2b57364314928cab6e1976c5ea5b9faea9e93bbebdc772a4f79d0ee52705e5f7200910c77cbe70c6883bf7daf3f93f5f0270488d46bf8e4dd75ea4d69db4c02ee62c6d19ed1b1f10aa6eb663ac29f4e154bb4d2e11175350f8b99f79d7bbf76e1097030bbc168c53d40e8cc3111f", 0xe3}], 0x2, &(0x7f0000001040)=[{0xf8, 0x10e, 0x7, "ba4c37595035405cc3de796004ba88486ef6b32432f535a374e0e9f9cb4d04b9083c951f789b00fc51c05302b4a180d45d493ce4db9aa78f2ce1d947c9652ffc4d87e4fc0df6267d4e3b36ccd0b2524e6b7d1ca544456f33eb20bb8a828de061c1e43cbf14489761fe39edb5c47ae2a0af24eca2b173f93d6a92135c5cdde8dfc3110cf8c87cbc621f3eaee0853cfe295a77094e594b1093840b4c7179e8d497ddffb2494cc6f3f8d7163b0a96d182ec4d03c556844b4d4b505656d6f3e2e6d470a924fd8e445714a25fc7c3944b10ffec6afe9b1f211f701d7d4936a7c26bd0530ae2e9"}, {0x28, 0x112, 0x2, "22931b4a2f04a284a56a97d5c4a16f745eb8ab22"}, {0xb0, 0x111, 0x5, "ed65e135c01160aaff0a33cac2d4dfb7f316a6cebf8f77ba186d12fc2aae49250f41a00f297b7222ea40a3aeec354289c549026cc9f1e89026adc7fe338aadd633928ffda3bc5adf9b150d4dec9179349e5cb38f2eddc180b909f89134ae061ed5a371b0335ba9b2ce6bbcf8e92ccc3a300138c9772301da6a26280bdc69011fce7cb445fab6416e66705c71cc25ee50653f989c0789cb0c02d5169488ac1e"}, {0x38, 0x0, 0x9, "32d2cf5aee5a9d94f32d352d28999205af44dee9a9ac866e00082c23814e3a431092af"}, {0xc8, 0x10e, 0x3, "730ac677586385b00af5a5c03830bbaea99192cfd943f292c3254cfe2207ba212f2624ab946de755468b2aaa6b39aca462913f3646840afc25da774c0ab8d274d18e912b784cb7def4ef6261cc0a7ae884590fd4bb410e42019a1dc9e019e6e472e0328243ae6b03c1965ed4d5c57ee9c1446f849d5620f6917c48e776494ada15aa14dc71d02b65f27dee27a42185e202f476eead6d711da7d16cd95c7aedc87a214ece670eb93d2e81dbb1d59613b307dc7511"}, {0x60, 0x84, 0x294b, "648ceeaaad02f2be02b78e041a242e1052710802b44336a09728e244896ba2276cbb93d10847a31e187694dd5a1aca4b06feecae70fc05086457dfcb3d2f7916b60072b1ed0701cc0ae3b2e43be9"}, {0x68, 0x1, 0x4, "16306df8f65786c8b15a2e9d5af7cfea6f0b8077b47172f6e5c33d2c396d107fdbe2d1a2f0d6974be8e4d1bfba26884cf722d110f1b0b19c95ca00159bb2cd3220155cd16af7940986928f9762ae405cfc6415e91564d8ed"}, {0xf8, 0x6, 0x7, "af2787426748d9edad967ee22a1d375aaa8515b548a634a50b1de59495f563b1fd9c1a6289ebd81cbb43b7130ce986f55fea6562f17c5443fcc6f4cadd1d9f87fb442d8a3c10e9df9a8ce45d14fb1cbe27bd4d6471d9da3c2636911bb646bce1dba5e81a4a033db0ba620b4308d815a0331d709229b37dfdd582d42051400c005cf434712f0ac918721cd485199cd9827e9ddf8712723fd7db57660ca37fba6d06f605a26d6b92898ddb6804601f86f942911b282a55229fb4cc314d24051898a4137c63b650e08e6fc49a39753da35c300be5016846a4092ba0a343b04c2cab96dcd66808142145"}], 0x490}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendfile(r0, r1, 0x0, 0x20000023896) open_tree(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x8000) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={0x0, 0x3, r0, 0xd1a1, 0x80000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) kernel console output (not intermixed with test programs): 8][ T4282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.136500][ T4282] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.137693][ T4323] loop0: detected capacity change from 0 to 128 [ 59.149843][ T4282] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.153719][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 59.153739][ T29] audit: type=1400 audit(1751358955.378:797): avc: denied { mounton } for pid=4320 comm="syz.0.263" path="/54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.226027][ T4282] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.238074][ T4282] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.256187][ T4323] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.257327][ T29] audit: type=1400 audit(1751358955.478:798): avc: denied { mount } for pid=4320 comm="syz.0.263" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.318976][ T29] audit: type=1400 audit(1751358955.538:799): avc: denied { create } for pid=4330 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.336883][ T4333] siw: device registration error -23 [ 59.338481][ T29] audit: type=1400 audit(1751358955.538:800): avc: denied { setopt } for pid=4330 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.348617][ T4333] loop3: detected capacity change from 0 to 512 [ 59.367873][ T29] audit: type=1400 audit(1751358955.538:801): avc: denied { create } for pid=4320 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.373938][ T4333] EXT4-fs: Ignoring removed orlov option [ 59.389121][ T29] audit: type=1400 audit(1751358955.538:802): avc: denied { bind } for pid=4320 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.414536][ T29] audit: type=1400 audit(1751358955.538:803): avc: denied { read } for pid=4320 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.434247][ T29] audit: type=1400 audit(1751358955.538:804): avc: denied { add_name } for pid=4320 comm="syz.0.263" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.455149][ T29] audit: type=1400 audit(1751358955.538:805): avc: denied { create } for pid=4320 comm="syz.0.263" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.477063][ T29] audit: type=1400 audit(1751358955.538:806): avc: denied { create } for pid=4329 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 59.499983][ T4333] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.508668][ T4331] loop4: detected capacity change from 0 to 512 [ 59.516008][ T4333] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.518638][ T4331] EXT4-fs: Ignoring removed orlov option [ 59.524031][ T4333] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.266: bg 0: block 248: padding at end of block bitmap is not set [ 59.543249][ T4333] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.266: Failed to acquire dquot type 1 [ 59.554955][ T4331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.556961][ T4333] EXT4-fs (loop3): 1 truncate cleaned up [ 59.580906][ T4331] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.609075][ T4331] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.267: bg 0: block 248: padding at end of block bitmap is not set [ 59.626479][ T4331] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.267: Failed to acquire dquot type 1 [ 59.652698][ T4331] EXT4-fs (loop4): 1 truncate cleaned up [ 59.665291][ T4338] loop0: detected capacity change from 0 to 4096 [ 59.695243][ T4338] FAULT_INJECTION: forcing a failure. [ 59.695243][ T4338] name failslab, interval 1, probability 0, space 0, times 0 [ 59.708005][ T4338] CPU: 1 UID: 0 PID: 4338 Comm: syz.0.268 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 59.708039][ T4338] Tainted: [W]=WARN [ 59.708046][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.708061][ T4338] Call Trace: [ 59.708068][ T4338] [ 59.708077][ T4338] __dump_stack+0x1d/0x30 [ 59.708109][ T4338] dump_stack_lvl+0xe8/0x140 [ 59.708139][ T4338] dump_stack+0x15/0x1b [ 59.708155][ T4338] should_fail_ex+0x265/0x280 [ 59.708253][ T4338] should_failslab+0x8c/0xb0 [ 59.708283][ T4338] __kmalloc_noprof+0xa5/0x3e0 [ 59.708316][ T4338] ? qtree_write_dquot+0x70/0x300 [ 59.708388][ T4338] qtree_write_dquot+0x70/0x300 [ 59.708479][ T4338] ? kernel_text_address+0x94/0xb0 [ 59.708511][ T4338] ? bpf_prog_b724608cae728045+0x27/0x2f [ 59.708532][ T4338] ? __kernel_text_address+0xd/0x40 [ 59.708621][ T4338] ? unwind_get_return_address+0x16/0x40 [ 59.708712][ T4338] ? perf_callchain_kernel+0x30b/0x330 [ 59.708787][ T4338] v2_write_dquot+0xda/0x140 [ 59.708861][ T4338] dquot_commit+0x219/0x260 [ 59.708927][ T4338] ext4_write_dquot+0x126/0x1d0 [ 59.708966][ T4338] ext4_mark_dquot_dirty+0x95/0xd0 [ 59.709004][ T4338] __dquot_alloc_space+0x36f/0x8a0 [ 59.709061][ T4338] ext4_mb_new_blocks+0x91b/0x2050 [ 59.709103][ T4338] ? ext4_ext_search_right+0x30b/0x4f0 [ 59.709137][ T4338] ? ext4_inode_to_goal_block+0x1be/0x1e0 [ 59.709173][ T4338] ext4_ext_map_blocks+0xff5/0x38a0 [ 59.709233][ T4338] ext4_map_blocks+0x61c/0xd70 [ 59.709263][ T4338] ext4_iomap_begin+0x93a/0xe00 [ 59.709299][ T4338] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 59.709326][ T4338] iomap_iter+0x338/0x730 [ 59.709357][ T4338] ? should_failslab+0x8c/0xb0 [ 59.709423][ T4338] __iomap_dio_rw+0x708/0x1250 [ 59.709474][ T4338] ? ext4_xattr_security_get+0x32/0x40 [ 59.709586][ T4338] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 59.709680][ T4338] ? ext4_journal_check_start+0x11a/0x1b0 [ 59.709787][ T4338] iomap_dio_rw+0x40/0x90 [ 59.709819][ T4338] ext4_file_write_iter+0xad9/0xf00 [ 59.709894][ T4338] do_iter_readv_writev+0x421/0x4c0 [ 59.709925][ T4338] vfs_writev+0x2df/0x8b0 [ 59.709974][ T4338] __se_sys_pwritev2+0xfc/0x1c0 [ 59.709998][ T4338] __x64_sys_pwritev2+0x67/0x80 [ 59.710022][ T4338] x64_sys_call+0x1cea/0x2fb0 [ 59.710044][ T4338] do_syscall_64+0xd2/0x200 [ 59.710066][ T4338] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.710135][ T4338] ? clear_bhb_loop+0x40/0x90 [ 59.710164][ T4338] ? clear_bhb_loop+0x40/0x90 [ 59.710194][ T4338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.710221][ T4338] RIP: 0033:0x7f140ca3e929 [ 59.710288][ T4338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.710310][ T4338] RSP: 002b:00007f140b0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 59.710331][ T4338] RAX: ffffffffffffffda RBX: 00007f140cc65fa0 RCX: 00007f140ca3e929 [ 59.710424][ T4338] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 59.710436][ T4338] RBP: 00007f140b0a7090 R08: 0000000000000000 R09: 0000000000000003 [ 59.710448][ T4338] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 59.710460][ T4338] R13: 0000000000000000 R14: 00007f140cc65fa0 R15: 00007ffece510828 [ 59.710479][ T4338] [ 59.732724][ T4344] loop3: detected capacity change from 0 to 128 [ 59.738825][ T4338] EXT4-fs error (device loop0): ext4_write_dquot:6913: comm syz.0.268: Failed to commit dquot type 0 [ 59.937120][ T4345] bio_check_eod: 8 callbacks suppressed [ 59.937216][ T4345] syz.3.270: attempt to access beyond end of device [ 59.937216][ T4345] loop3: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 60.090191][ T4345] syz.3.270: attempt to access beyond end of device [ 60.090191][ T4345] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 60.108017][ T4345] syz.3.270: attempt to access beyond end of device [ 60.108017][ T4345] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 60.153375][ T4345] syz.3.270: attempt to access beyond end of device [ 60.153375][ T4345] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 60.210402][ T4345] syz.3.270: attempt to access beyond end of device [ 60.210402][ T4345] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 60.235334][ T4352] loop2: detected capacity change from 0 to 2048 [ 60.243647][ T4345] syz.3.270: attempt to access beyond end of device [ 60.243647][ T4345] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 60.258002][ T4345] syz.3.270: attempt to access beyond end of device [ 60.258002][ T4345] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 60.273386][ T4345] syz.3.270: attempt to access beyond end of device [ 60.273386][ T4345] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 60.325809][ T4345] syz.3.270: attempt to access beyond end of device [ 60.325809][ T4345] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 60.328143][ T4354] netlink: 'syz.4.275': attribute type 10 has an invalid length. [ 60.358284][ T4360] loop2: detected capacity change from 0 to 1024 [ 60.366136][ T4354] ipvlan0: entered allmulticast mode [ 60.371544][ T4354] veth0_vlan: entered allmulticast mode [ 60.414646][ T4360] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.277: Allocating blocks 449-513 which overlap fs metadata [ 60.445202][ T4354] team0: Device ipvlan0 failed to register rx_handler [ 60.469216][ T4369] loop4: detected capacity change from 0 to 256 [ 60.531817][ T4359] EXT4-fs (loop2): pa ffff888106df42a0: logic 48, phys. 177, len 21 [ 60.539929][ T4359] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 60.578709][ T4322] loop1: detected capacity change from 0 to 1024 [ 60.602345][ T4322] EXT4-fs: Ignoring removed nobh option [ 60.607029][ T4373] lo speed is unknown, defaulting to 1000 [ 60.608571][ T4322] EXT4-fs: inline encryption not supported [ 60.688141][ T4322] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.262: Allocating blocks 385-513 which overlap fs metadata [ 60.726607][ T4322] EXT4-fs (loop1): pa ffff888106e66230: logic 16, phys. 129, len 24 [ 60.735697][ T4322] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 60.751420][ T4322] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 60.764952][ T4322] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.764952][ T4322] [ 60.775807][ T4322] EXT4-fs (loop1): Total free blocks count 0 [ 60.783434][ T4322] EXT4-fs (loop1): Free/Dirty block details [ 60.791935][ T4322] EXT4-fs (loop1): free_blocks=128 [ 60.798141][ T4322] EXT4-fs (loop1): dirty_blocks=0 [ 60.804060][ T4322] EXT4-fs (loop1): Block reservation details [ 60.811018][ T4322] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 60.903731][ T4393] program syz.1.288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.017062][ T4404] bridge0: port 3(vlan2) entered blocking state [ 61.023444][ T4404] bridge0: port 3(vlan2) entered disabled state [ 61.031767][ T4404] vlan2: entered allmulticast mode [ 61.036976][ T4404] dummy0: entered allmulticast mode [ 61.043061][ T4406] loop1: detected capacity change from 0 to 1024 [ 61.043237][ T4404] vlan2: entered promiscuous mode [ 61.050438][ T4406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.056504][ T4404] dummy0: entered promiscuous mode [ 61.061451][ T4406] ext4: Unknown parameter 'obj_user' [ 61.067078][ T4404] bridge0: port 3(vlan2) entered blocking state [ 61.078069][ T4404] bridge0: port 3(vlan2) entered forwarding state [ 61.590699][ T4451] loop0: detected capacity change from 0 to 512 [ 61.617699][ T4451] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.669098][ T4456] loop4: detected capacity change from 0 to 4096 [ 61.681433][ T4451] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.314: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 61.762784][ T4461] FAULT_INJECTION: forcing a failure. [ 61.762784][ T4461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.776162][ T4461] CPU: 0 UID: 0 PID: 4461 Comm: syz.3.317 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 61.776204][ T4461] Tainted: [W]=WARN [ 61.776213][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.776229][ T4461] Call Trace: [ 61.776237][ T4461] [ 61.776310][ T4461] __dump_stack+0x1d/0x30 [ 61.776331][ T4461] dump_stack_lvl+0xe8/0x140 [ 61.776355][ T4461] dump_stack+0x15/0x1b [ 61.776377][ T4461] should_fail_ex+0x265/0x280 [ 61.776433][ T4461] should_fail+0xb/0x20 [ 61.776471][ T4461] should_fail_usercopy+0x1a/0x20 [ 61.776544][ T4461] _copy_from_iter+0xcf/0xe40 [ 61.776584][ T4461] ? __build_skb_around+0x1a0/0x200 [ 61.776664][ T4461] ? __alloc_skb+0x223/0x320 [ 61.776695][ T4461] netlink_sendmsg+0x471/0x6b0 [ 61.776719][ T4461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.776746][ T4461] __sock_sendmsg+0x145/0x180 [ 61.776779][ T4461] ____sys_sendmsg+0x345/0x4e0 [ 61.776927][ T4461] ___sys_sendmsg+0x17b/0x1d0 [ 61.776989][ T4461] __sys_sendmmsg+0x178/0x300 [ 61.777028][ T4461] __x64_sys_sendmmsg+0x57/0x70 [ 61.777054][ T4461] x64_sys_call+0x2f2f/0x2fb0 [ 61.777151][ T4461] do_syscall_64+0xd2/0x200 [ 61.777176][ T4461] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.777228][ T4461] ? clear_bhb_loop+0x40/0x90 [ 61.777257][ T4461] ? clear_bhb_loop+0x40/0x90 [ 61.777287][ T4461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.777316][ T4461] RIP: 0033:0x7f86a1d5e929 [ 61.777381][ T4461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.777405][ T4461] RSP: 002b:00007f86a03c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 61.777477][ T4461] RAX: ffffffffffffffda RBX: 00007f86a1f85fa0 RCX: 00007f86a1d5e929 [ 61.777493][ T4461] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 61.777509][ T4461] RBP: 00007f86a03c7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.777524][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.777584][ T4461] R13: 0000000000000000 R14: 00007f86a1f85fa0 R15: 00007ffc283d0498 [ 61.777683][ T4461] [ 61.999736][ T4412] loop1: detected capacity change from 0 to 1024 [ 62.026227][ T4463] loop2: detected capacity change from 0 to 2048 [ 62.048551][ T4465] siw: device registration error -23 [ 62.051207][ T4412] EXT4-fs: Ignoring removed nobh option [ 62.060549][ T4412] EXT4-fs: inline encryption not supported [ 62.069787][ T4467] FAULT_INJECTION: forcing a failure. [ 62.069787][ T4467] name failslab, interval 1, probability 0, space 0, times 0 [ 62.082751][ T4467] CPU: 1 UID: 0 PID: 4467 Comm: syz.4.319 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 62.082991][ T4467] Tainted: [W]=WARN [ 62.083000][ T4467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.083017][ T4467] Call Trace: [ 62.083026][ T4467] [ 62.083036][ T4467] __dump_stack+0x1d/0x30 [ 62.083099][ T4467] dump_stack_lvl+0xe8/0x140 [ 62.083181][ T4467] dump_stack+0x15/0x1b [ 62.083202][ T4467] should_fail_ex+0x265/0x280 [ 62.083238][ T4467] should_failslab+0x8c/0xb0 [ 62.083267][ T4467] kmem_cache_alloc_noprof+0x50/0x310 [ 62.083382][ T4467] ? skb_clone+0x151/0x1f0 [ 62.083422][ T4467] skb_clone+0x151/0x1f0 [ 62.083446][ T4467] __netlink_deliver_tap+0x2c9/0x500 [ 62.083539][ T4467] netlink_unicast+0x64c/0x670 [ 62.083655][ T4467] netlink_sendmsg+0x58b/0x6b0 [ 62.083684][ T4467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.083704][ T4467] __sock_sendmsg+0x145/0x180 [ 62.083809][ T4467] ____sys_sendmsg+0x31e/0x4e0 [ 62.083861][ T4467] ___sys_sendmsg+0x17b/0x1d0 [ 62.083923][ T4467] __x64_sys_sendmsg+0xd4/0x160 [ 62.083969][ T4467] x64_sys_call+0x2999/0x2fb0 [ 62.084046][ T4467] do_syscall_64+0xd2/0x200 [ 62.084100][ T4467] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.084143][ T4467] ? clear_bhb_loop+0x40/0x90 [ 62.084172][ T4467] ? clear_bhb_loop+0x40/0x90 [ 62.084246][ T4467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.084270][ T4467] RIP: 0033:0x7f8ec5ece929 [ 62.084289][ T4467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.084313][ T4467] RSP: 002b:00007f8ec4537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.084397][ T4467] RAX: ffffffffffffffda RBX: 00007f8ec60f5fa0 RCX: 00007f8ec5ece929 [ 62.084413][ T4467] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 62.084428][ T4467] RBP: 00007f8ec4537090 R08: 0000000000000000 R09: 0000000000000000 [ 62.084485][ T4467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.084501][ T4467] R13: 0000000000000000 R14: 00007f8ec60f5fa0 R15: 00007ffd8eece748 [ 62.084562][ T4467] [ 62.367900][ T4480] loop2: detected capacity change from 0 to 128 [ 62.393101][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 62.408182][ T4480] syz.2.324: attempt to access beyond end of device [ 62.408182][ T4480] loop2: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 62.449563][ T4489] SELinux: Context Ü is not valid (left unmapped). [ 62.462978][ T4412] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.297: Allocating blocks 385-513 which overlap fs metadata [ 62.510546][ T4493] siw: device registration error -23 [ 62.529469][ T4412] EXT4-fs (loop1): pa ffff888106df42a0: logic 16, phys. 129, len 24 [ 62.537698][ T4412] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 62.555802][ T4496] FAULT_INJECTION: forcing a failure. [ 62.555802][ T4496] name failslab, interval 1, probability 0, space 0, times 0 [ 62.568713][ T4496] CPU: 1 UID: 0 PID: 4496 Comm: syz.2.331 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 62.568792][ T4496] Tainted: [W]=WARN [ 62.568798][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.568810][ T4496] Call Trace: [ 62.568818][ T4496] [ 62.568825][ T4496] __dump_stack+0x1d/0x30 [ 62.568851][ T4496] dump_stack_lvl+0xe8/0x140 [ 62.568884][ T4496] dump_stack+0x15/0x1b [ 62.568971][ T4496] should_fail_ex+0x265/0x280 [ 62.569009][ T4496] should_failslab+0x8c/0xb0 [ 62.569113][ T4496] kmem_cache_alloc_noprof+0x50/0x310 [ 62.569198][ T4496] ? skb_clone+0x151/0x1f0 [ 62.569269][ T4496] skb_clone+0x151/0x1f0 [ 62.569293][ T4496] __netlink_deliver_tap+0x2c9/0x500 [ 62.569336][ T4496] netlink_unicast+0x64c/0x670 [ 62.569368][ T4496] netlink_sendmsg+0x58b/0x6b0 [ 62.569442][ T4496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.569465][ T4496] __sock_sendmsg+0x145/0x180 [ 62.569497][ T4496] ____sys_sendmsg+0x31e/0x4e0 [ 62.569563][ T4496] ___sys_sendmsg+0x17b/0x1d0 [ 62.569664][ T4496] __x64_sys_sendmsg+0xd4/0x160 [ 62.569710][ T4496] x64_sys_call+0x2999/0x2fb0 [ 62.569803][ T4496] do_syscall_64+0xd2/0x200 [ 62.569827][ T4496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.569868][ T4496] ? clear_bhb_loop+0x40/0x90 [ 62.569893][ T4496] ? clear_bhb_loop+0x40/0x90 [ 62.569914][ T4496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.569943][ T4496] RIP: 0033:0x7fe89ed5e929 [ 62.569960][ T4496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.569983][ T4496] RSP: 002b:00007fe89d3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.570006][ T4496] RAX: ffffffffffffffda RBX: 00007fe89ef85fa0 RCX: 00007fe89ed5e929 [ 62.570100][ T4496] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 62.570115][ T4496] RBP: 00007fe89d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.570129][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.570141][ T4496] R13: 0000000000000000 R14: 00007fe89ef85fa0 R15: 00007ffefcc04f08 [ 62.570228][ T4496] [ 62.807568][ T4503] loop4: detected capacity change from 0 to 512 [ 62.827359][ T4503] EXT4-fs (loop4): 1 orphan inode deleted [ 62.841662][ T3338] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 62.854274][ T4503] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.869728][ T4505] 9pnet: Could not find request transport: 0xffffffffffffffff [ 62.904734][ T4503] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.330: iget: bad i_size value: 360287970189639690 [ 62.918765][ T4514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=4514 comm= [ 62.942736][ T4518] loop1: detected capacity change from 0 to 128 [ 62.959533][ T4518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 62.987038][ T3316] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /77/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.018568][ T3316] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.038149][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.050484][ T3316] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /77/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.071925][ T3316] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.074709][ T4527] program syz.1.344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.105396][ T4528] netlink: 16 bytes leftover after parsing attributes in process `syz.3.339'. [ 63.106621][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.136721][ T3316] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /77/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.166043][ T3316] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.195003][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.199020][ T4532] loop2: detected capacity change from 0 to 128 [ 63.219402][ T4535] FAULT_INJECTION: forcing a failure. [ 63.219402][ T4535] name failslab, interval 1, probability 0, space 0, times 0 [ 63.219860][ T4536] program syz.1.347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.232244][ T4535] CPU: 1 UID: 0 PID: 4535 Comm: gtp Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 63.232291][ T4535] Tainted: [W]=WARN [ 63.232301][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.232320][ T4535] Call Trace: [ 63.232331][ T4535] [ 63.232345][ T4535] __dump_stack+0x1d/0x30 [ 63.232442][ T4535] dump_stack_lvl+0xe8/0x140 [ 63.232472][ T4535] dump_stack+0x15/0x1b [ 63.232496][ T4535] should_fail_ex+0x265/0x280 [ 63.232603][ T4535] ? __se_sys_mount+0xef/0x2e0 [ 63.232630][ T4535] should_failslab+0x8c/0xb0 [ 63.232667][ T4535] __kmalloc_cache_noprof+0x4c/0x320 [ 63.232720][ T4535] ? memdup_user+0x99/0xd0 [ 63.232757][ T4535] __se_sys_mount+0xef/0x2e0 [ 63.232783][ T4535] ? __bpf_trace_sys_enter+0x10/0x30 [ 63.232828][ T4535] ? trace_sys_enter+0xd0/0x110 [ 63.232936][ T4535] __x64_sys_mount+0x67/0x80 [ 63.232963][ T4535] x64_sys_call+0xd36/0x2fb0 [ 63.233051][ T4535] do_syscall_64+0xd2/0x200 [ 63.233077][ T4535] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.233117][ T4535] ? clear_bhb_loop+0x40/0x90 [ 63.233216][ T4535] ? clear_bhb_loop+0x40/0x90 [ 63.233249][ T4535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.233281][ T4535] RIP: 0033:0x7f140ca3e929 [ 63.233304][ T4535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.233331][ T4535] RSP: 002b:00007f140b0a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.233393][ T4535] RAX: ffffffffffffffda RBX: 00007f140cc65fa0 RCX: 00007f140ca3e929 [ 63.233412][ T4535] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 63.233430][ T4535] RBP: 00007f140b0a7090 R08: 0000200000000540 R09: 0000000000000000 [ 63.233448][ T4535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.233466][ T4535] R13: 0000000000000000 R14: 00007f140cc65fa0 R15: 00007ffece510828 [ 63.233496][ T4535] [ 63.236065][ T3316] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 4: comm syz-executor: path /77/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.307401][ T4538] lo speed is unknown, defaulting to 1000 [ 63.329004][ T3316] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 63.483612][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 63.494504][ T4543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.350'. [ 63.505571][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.518547][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.535006][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.547306][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.559581][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.575082][ T4547] loop1: detected capacity change from 0 to 256 [ 63.604798][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.618671][ T3316] EXT4-fs warning (device loop4): ext4_empty_dir:3086: inode #11: comm syz-executor: directory missing '.' [ 63.712341][ T4561] siw: device registration error -23 [ 63.721619][ T4561] loop0: detected capacity change from 0 to 512 [ 63.729031][ T4561] EXT4-fs: Ignoring removed orlov option [ 63.743805][ T4561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.764993][ T4561] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.795665][ T4561] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.357: bg 0: block 248: padding at end of block bitmap is not set [ 63.835737][ T4561] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.357: Failed to acquire dquot type 1 [ 63.838555][ T4574] loop1: detected capacity change from 0 to 1024 [ 63.855150][ T4561] EXT4-fs (loop0): 1 truncate cleaned up [ 63.864984][ T4574] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.362: Allocating blocks 385-513 which overlap fs metadata [ 63.865409][ T4561] EXT4-fs: Ignoring removed orlov option [ 63.885042][ T4561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.893641][ T4561] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 63.906925][ T4574] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.916883][ T4574] EXT4-fs (loop1): pa ffff888106df44d0: logic 16, phys. 129, len 24 [ 63.917081][ T4561] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.357: Abort forced by user [ 63.925032][ T4574] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 63.936909][ T4561] EXT4-fs (loop0): Remounting filesystem read-only [ 63.951714][ T4561] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 63.960237][ T4561] ext4 filesystem being remounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.073477][ T4593] loop1: detected capacity change from 0 to 512 [ 64.081811][ T4593] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.369: bg 0: block 5: invalid block bitmap [ 64.094383][ T4593] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.103431][ T4593] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.369: invalid indirect mapped block 3 (level 2) [ 64.116889][ T4593] EXT4-fs (loop1): 2 truncates cleaned up [ 64.176926][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 64.176942][ T29] audit: type=1326 audit(1751358960.398:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.206961][ T29] audit: type=1326 audit(1751358960.398:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.230413][ T29] audit: type=1326 audit(1751358960.398:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.253826][ T29] audit: type=1326 audit(1751358960.398:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.277207][ T29] audit: type=1326 audit(1751358960.398:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.323285][ T29] audit: type=1326 audit(1751358960.548:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.346803][ T29] audit: type=1326 audit(1751358960.558:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.370193][ T29] audit: type=1326 audit(1751358960.558:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.393757][ T29] audit: type=1326 audit(1751358960.558:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.417114][ T29] audit: type=1326 audit(1751358960.558:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c35b9e929 code=0x7ffc0000 [ 64.451228][ T4599] IPv6: Can't replace route, no match found [ 64.547337][ T4600] loop1: detected capacity change from 0 to 512 [ 64.554723][ T4600] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.561359][ T4600] EXT4-fs: Ignoring removed bh option [ 64.567633][ T4600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.578995][ T4600] EXT4-fs (loop1): 1 truncate cleaned up [ 64.748755][ T4620] siw: device registration error -23 [ 64.757956][ T4620] loop2: detected capacity change from 0 to 512 [ 64.764860][ T4620] EXT4-fs: Ignoring removed orlov option [ 64.771130][ T4620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.782094][ T4620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.789064][ T4620] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.374: bg 0: block 248: padding at end of block bitmap is not set [ 64.805868][ T4620] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.374: Failed to acquire dquot type 1 [ 64.817754][ T4620] EXT4-fs (loop2): 1 truncate cleaned up [ 64.826692][ T4620] EXT4-fs: Ignoring removed orlov option [ 64.832580][ T4620] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.841171][ T4620] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 64.860902][ T4620] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.374: Abort forced by user [ 64.873217][ T4620] EXT4-fs (loop2): Remounting filesystem read-only [ 64.879810][ T4620] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 64.893908][ T4620] ext4 filesystem being remounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.911345][ T4628] FAULT_INJECTION: forcing a failure. [ 64.911345][ T4628] name failslab, interval 1, probability 0, space 0, times 0 [ 64.924036][ T4628] CPU: 1 UID: 0 PID: 4628 Comm: syz.0.377 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 64.924074][ T4628] Tainted: [W]=WARN [ 64.924176][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.924193][ T4628] Call Trace: [ 64.924201][ T4628] [ 64.924210][ T4628] __dump_stack+0x1d/0x30 [ 64.924239][ T4628] dump_stack_lvl+0xe8/0x140 [ 64.924264][ T4628] dump_stack+0x15/0x1b [ 64.924285][ T4628] should_fail_ex+0x265/0x280 [ 64.924345][ T4628] should_failslab+0x8c/0xb0 [ 64.924376][ T4628] kmem_cache_alloc_noprof+0x50/0x310 [ 64.924409][ T4628] ? sctp_get_port_local+0x420/0xab0 [ 64.924450][ T4628] sctp_get_port_local+0x420/0xab0 [ 64.924540][ T4628] sctp_do_bind+0x398/0x4b0 [ 64.924580][ T4628] sctp_connect_new_asoc+0x153/0x3a0 [ 64.924627][ T4628] sctp_sendmsg+0xf10/0x18d0 [ 64.924692][ T4628] ? selinux_socket_sendmsg+0x171/0x1b0 [ 64.924736][ T4628] ? __pfx_sctp_sendmsg+0x10/0x10 [ 64.924793][ T4628] inet_sendmsg+0xc5/0xd0 [ 64.924812][ T4628] __sock_sendmsg+0x102/0x180 [ 64.924843][ T4628] ____sys_sendmsg+0x345/0x4e0 [ 64.924947][ T4628] ___sys_sendmsg+0x17b/0x1d0 [ 64.925008][ T4628] __sys_sendmmsg+0x178/0x300 [ 64.925043][ T4628] __x64_sys_sendmmsg+0x57/0x70 [ 64.925088][ T4628] x64_sys_call+0x2f2f/0x2fb0 [ 64.925113][ T4628] do_syscall_64+0xd2/0x200 [ 64.925134][ T4628] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.925189][ T4628] ? clear_bhb_loop+0x40/0x90 [ 64.925252][ T4628] ? clear_bhb_loop+0x40/0x90 [ 64.925281][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.925308][ T4628] RIP: 0033:0x7f140ca3e929 [ 64.925326][ T4628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.925415][ T4628] RSP: 002b:00007f140b0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 64.925438][ T4628] RAX: ffffffffffffffda RBX: 00007f140cc65fa0 RCX: 00007f140ca3e929 [ 64.925503][ T4628] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 64.925518][ T4628] RBP: 00007f140b0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.925531][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.925601][ T4628] R13: 0000000000000000 R14: 00007f140cc65fa0 R15: 00007ffece510828 [ 64.925636][ T4628] [ 65.185331][ T4632] loop0: detected capacity change from 0 to 512 [ 65.196286][ T4634] FAULT_INJECTION: forcing a failure. [ 65.196286][ T4634] name failslab, interval 1, probability 0, space 0, times 0 [ 65.209030][ T4634] CPU: 1 UID: 0 PID: 4634 Comm: syz.2.380 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 65.209075][ T4634] Tainted: [W]=WARN [ 65.209084][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.209153][ T4634] Call Trace: [ 65.209160][ T4634] [ 65.209168][ T4634] __dump_stack+0x1d/0x30 [ 65.209189][ T4634] dump_stack_lvl+0xe8/0x140 [ 65.209211][ T4634] dump_stack+0x15/0x1b [ 65.209244][ T4634] should_fail_ex+0x265/0x280 [ 65.209287][ T4634] should_failslab+0x8c/0xb0 [ 65.209311][ T4634] __kvmalloc_node_noprof+0x123/0x4e0 [ 65.209341][ T4634] ? alloc_netdev_mqs+0xa1/0xab0 [ 65.209377][ T4634] ? vsnprintf+0x829/0x890 [ 65.209419][ T4634] alloc_netdev_mqs+0xa1/0xab0 [ 65.209519][ T4634] ? __pfx_wg_setup+0x10/0x10 [ 65.209547][ T4634] rtnl_create_link+0x239/0x710 [ 65.209635][ T4634] rtnl_newlink_create+0x14c/0x620 [ 65.209670][ T4634] ? security_capable+0x83/0x90 [ 65.209717][ T4634] ? netlink_ns_capable+0x86/0xa0 [ 65.209754][ T4634] rtnl_newlink+0xf29/0x12d0 [ 65.209784][ T4634] ? ip6_finish_output2+0xa70/0xd30 [ 65.209826][ T4634] ? xas_load+0x413/0x430 [ 65.209885][ T4634] ? mod_memcg_lruvec_state+0x20e/0x2e0 [ 65.209920][ T4634] ? __kfree_skb+0x109/0x150 [ 65.209951][ T4634] ? __rcu_read_unlock+0x4f/0x70 [ 65.210000][ T4634] ? avc_has_perm_noaudit+0x1b1/0x200 [ 65.210041][ T4634] ? selinux_capable+0x1f9/0x270 [ 65.210146][ T4634] ? security_capable+0x83/0x90 [ 65.210192][ T4634] ? ns_capable+0x7d/0xb0 [ 65.210211][ T4634] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.210234][ T4634] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 65.210269][ T4634] netlink_rcv_skb+0x123/0x220 [ 65.210351][ T4634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.210434][ T4634] rtnetlink_rcv+0x1c/0x30 [ 65.210459][ T4634] netlink_unicast+0x59e/0x670 [ 65.210580][ T4634] netlink_sendmsg+0x58b/0x6b0 [ 65.210609][ T4634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.210692][ T4634] __sock_sendmsg+0x145/0x180 [ 65.210727][ T4634] ____sys_sendmsg+0x31e/0x4e0 [ 65.210820][ T4634] ___sys_sendmsg+0x17b/0x1d0 [ 65.210872][ T4634] __x64_sys_sendmsg+0xd4/0x160 [ 65.210921][ T4634] x64_sys_call+0x2999/0x2fb0 [ 65.210985][ T4634] do_syscall_64+0xd2/0x200 [ 65.211007][ T4634] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.211099][ T4634] ? clear_bhb_loop+0x40/0x90 [ 65.211127][ T4634] ? clear_bhb_loop+0x40/0x90 [ 65.211156][ T4634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.211201][ T4634] RIP: 0033:0x7fe89ed5e929 [ 65.211221][ T4634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.211244][ T4634] RSP: 002b:00007fe89d3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.211267][ T4634] RAX: ffffffffffffffda RBX: 00007fe89ef85fa0 RCX: 00007fe89ed5e929 [ 65.211288][ T4634] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 65.211300][ T4634] RBP: 00007fe89d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.211311][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.211322][ T4634] R13: 0000000000000000 R14: 00007fe89ef85fa0 R15: 00007ffefcc04f08 [ 65.211340][ T4634] [ 65.223022][ T4632] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.229178][ T4636] FAULT_INJECTION: forcing a failure. [ 65.229178][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 65.550205][ T4636] CPU: 1 UID: 0 PID: 4636 Comm: syz.1.381 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 65.550248][ T4636] Tainted: [W]=WARN [ 65.550256][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.550295][ T4636] Call Trace: [ 65.550302][ T4636] [ 65.550310][ T4636] __dump_stack+0x1d/0x30 [ 65.550371][ T4636] dump_stack_lvl+0xe8/0x140 [ 65.550395][ T4636] dump_stack+0x15/0x1b [ 65.550435][ T4636] should_fail_ex+0x265/0x280 [ 65.550475][ T4636] ? alloc_netdev_mqs+0x86a/0xab0 [ 65.550520][ T4636] should_failslab+0x8c/0xb0 [ 65.550570][ T4636] __kmalloc_cache_noprof+0x4c/0x320 [ 65.550597][ T4636] alloc_netdev_mqs+0x86a/0xab0 [ 65.550650][ T4636] rtnl_create_link+0x239/0x710 [ 65.550681][ T4636] rtnl_newlink_create+0x14c/0x620 [ 65.550705][ T4636] ? __list_del_entry_valid_or_report+0x65/0x130 [ 65.550731][ T4636] rtnl_newlink+0xf29/0x12d0 [ 65.550783][ T4636] ? xas_load+0x413/0x430 [ 65.550811][ T4636] ? __rcu_read_unlock+0x4f/0x70 [ 65.550830][ T4636] ? xa_load+0xb1/0xe0 [ 65.550845][ T4636] ? __kfree_skb+0x109/0x150 [ 65.550936][ T4636] ? __rcu_read_unlock+0x4f/0x70 [ 65.550955][ T4636] ? avc_has_perm_noaudit+0x1b1/0x200 [ 65.550983][ T4636] ? selinux_capable+0x1f9/0x270 [ 65.551067][ T4636] ? security_capable+0x83/0x90 [ 65.551092][ T4636] ? ns_capable+0x7d/0xb0 [ 65.551108][ T4636] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.551128][ T4636] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 65.551211][ T4636] netlink_rcv_skb+0x123/0x220 [ 65.551242][ T4636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.551268][ T4636] rtnetlink_rcv+0x1c/0x30 [ 65.551309][ T4636] netlink_unicast+0x59e/0x670 [ 65.551352][ T4636] netlink_sendmsg+0x58b/0x6b0 [ 65.551371][ T4636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.551388][ T4636] __sock_sendmsg+0x145/0x180 [ 65.551411][ T4636] ____sys_sendmsg+0x31e/0x4e0 [ 65.551501][ T4636] ___sys_sendmsg+0x17b/0x1d0 [ 65.551547][ T4636] __x64_sys_sendmsg+0xd4/0x160 [ 65.551582][ T4636] x64_sys_call+0x2999/0x2fb0 [ 65.551659][ T4636] do_syscall_64+0xd2/0x200 [ 65.551755][ T4636] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.551779][ T4636] ? clear_bhb_loop+0x40/0x90 [ 65.551798][ T4636] ? clear_bhb_loop+0x40/0x90 [ 65.551818][ T4636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.551837][ T4636] RIP: 0033:0x7f9c35b9e929 [ 65.551850][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.551936][ T4636] RSP: 002b:00007f9c34207038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.551952][ T4636] RAX: ffffffffffffffda RBX: 00007f9c35dc5fa0 RCX: 00007f9c35b9e929 [ 65.551963][ T4636] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003 [ 65.551974][ T4636] RBP: 00007f9c34207090 R08: 0000000000000000 R09: 0000000000000000 [ 65.552044][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.552054][ T4636] R13: 0000000000000000 R14: 00007f9c35dc5fa0 R15: 00007fffe7da7d18 [ 65.552071][ T4636] [ 65.895722][ T4646] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.909004][ T4650] program syz.1.387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.920005][ T4651] loop0: detected capacity change from 0 to 256 [ 65.969027][ T4654] SELinux: policydb string áE Linux does not match my string SE Linux [ 65.974035][ T4657] loop1: detected capacity change from 0 to 512 [ 65.987759][ T4654] SELinux: failed to load policy [ 65.993176][ T4658] wireguard0: entered promiscuous mode [ 65.998725][ T4658] wireguard0: entered allmulticast mode [ 66.020801][ T4663] loop2: detected capacity change from 0 to 512 [ 66.029193][ T4657] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.390: Failed to acquire dquot type 1 [ 66.039650][ T4668] loop3: detected capacity change from 0 to 512 [ 66.042901][ T4657] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.390: corrupted inode contents [ 66.047202][ T4668] ext4: Unknown parameter 'permit_directio' [ 66.059948][ T4657] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.390: mark_inode_dirty error [ 66.083265][ T4663] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.094413][ T4657] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.390: corrupted inode contents [ 66.106973][ T4657] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.390: mark_inode_dirty error [ 66.118770][ T4657] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.390: corrupted inode contents [ 66.133164][ T4657] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 66.142252][ T4657] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.390: corrupted inode contents [ 66.154963][ T4657] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.390: mark_inode_dirty error [ 66.180346][ T4657] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 66.196378][ T4657] EXT4-fs (loop1): 1 truncate cleaned up [ 66.204820][ T3377] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.231252][ T4657] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.274362][ T3377] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.296531][ T4685] program syz.0.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.323467][ T3377] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.335974][ T4687] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.390: Failed to acquire dquot type 1 [ 66.372366][ T3377] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.388048][ T4694] program syz.0.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.447890][ T4700] loop0: detected capacity change from 0 to 512 [ 66.478681][ T4683] lo speed is unknown, defaulting to 1000 [ 66.499786][ T3377] vlan2: left allmulticast mode [ 66.504762][ T3377] dummy0: left allmulticast mode [ 66.509836][ T3377] vlan2: left promiscuous mode [ 66.514881][ T3377] dummy0: left promiscuous mode [ 66.520128][ T3377] bridge0: port 3(vlan2) entered disabled state [ 66.527204][ T3377] bridge_slave_1: left allmulticast mode [ 66.532967][ T3377] bridge_slave_1: left promiscuous mode [ 66.538854][ T3377] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.547778][ T3377] bridge_slave_0: left allmulticast mode [ 66.553563][ T3377] bridge_slave_0: left promiscuous mode [ 66.559375][ T3377] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.585890][ T4703] delete_channel: no stack [ 66.626402][ T4708] loop0: detected capacity change from 0 to 512 [ 66.641698][ T4708] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.655180][ T3377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.666162][ T3377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.676349][ T3377] bond0 (unregistering): Released all slaves [ 66.747541][ T3377] hsr_slave_0: left promiscuous mode [ 66.755016][ T3377] hsr_slave_1: left promiscuous mode [ 66.764590][ T4718] loop1: detected capacity change from 0 to 128 [ 66.766567][ T3377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.778552][ T3377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.786562][ T3377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.794204][ T3377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.806923][ T3377] veth1_macvtap: left promiscuous mode [ 66.812597][ T3377] veth0_macvtap: left promiscuous mode [ 66.818231][ T3377] veth1_vlan: left promiscuous mode [ 66.824998][ T3377] veth0_vlan: left promiscuous mode [ 66.832321][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 66.850589][ T4721] bio_check_eod: 26 callbacks suppressed [ 66.850610][ T4721] syz.1.409: attempt to access beyond end of device [ 66.850610][ T4721] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 66.893761][ T4721] syz.1.409: attempt to access beyond end of device [ 66.893761][ T4721] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 66.929767][ T3377] team0 (unregistering): Port device batadv1 removed [ 66.939981][ T4721] syz.1.409: attempt to access beyond end of device [ 66.939981][ T4721] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 67.007164][ T4721] syz.1.409: attempt to access beyond end of device [ 67.007164][ T4721] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 67.031821][ T4721] syz.1.409: attempt to access beyond end of device [ 67.031821][ T4721] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 67.050249][ T3377] team0 (unregistering): Port device team_slave_1 removed [ 67.060736][ T4721] syz.1.409: attempt to access beyond end of device [ 67.060736][ T4721] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 67.070535][ T3377] team0 (unregistering): Port device team_slave_0 removed [ 67.075113][ T4721] syz.1.409: attempt to access beyond end of device [ 67.075113][ T4721] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 67.095889][ T4721] syz.1.409: attempt to access beyond end of device [ 67.095889][ T4721] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 67.112017][ T4721] syz.1.409: attempt to access beyond end of device [ 67.112017][ T4721] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 67.153644][ T9] lo speed is unknown, defaulting to 1000 [ 67.159524][ T9] infiniband syz0: ib_query_port failed (-19) [ 67.188773][ T4683] chnl_net:caif_netlink_parms(): no params data found [ 67.218555][ T4736] loop2: detected capacity change from 0 to 512 [ 67.307049][ T4737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.415'. [ 67.313070][ T4736] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.334511][ T4734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.415'. [ 67.386974][ T4737] loop1: detected capacity change from 0 to 2048 [ 67.493466][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.500662][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.509491][ T4737] Alternate GPT is invalid, using primary GPT. [ 67.515905][ T4737] loop1: p1 p2 p3 [ 67.559603][ T4683] bridge_slave_0: entered allmulticast mode [ 67.593438][ T4683] bridge_slave_0: entered promiscuous mode [ 67.631682][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.638824][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.696714][ T4683] bridge_slave_1: entered allmulticast mode [ 67.724978][ T4683] bridge_slave_1: entered promiscuous mode [ 67.801599][ T4683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.836516][ T4683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.908225][ T4683] team0: Port device team_slave_0 added [ 67.916327][ T4683] team0: Port device team_slave_1 added [ 67.993628][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.000758][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.027949][ T4683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.181780][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.188845][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.214947][ T4683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.247730][ T4749] loop1: detected capacity change from 0 to 256 [ 68.329951][ T4753] loop2: detected capacity change from 0 to 256 [ 68.372085][ T4751] lo speed is unknown, defaulting to 1000 [ 68.377956][ T4751] lo speed is unknown, defaulting to 1000 [ 68.397727][ T4683] hsr_slave_0: entered promiscuous mode [ 68.410339][ T4754] loop1: detected capacity change from 0 to 512 [ 68.417257][ T4683] hsr_slave_1: entered promiscuous mode [ 68.434833][ T4754] EXT4-fs: Ignoring removed orlov option [ 68.443251][ T4683] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.462084][ T4754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.470670][ T4683] Cannot create hsr debugfs directory [ 68.480018][ T4751] lo speed is unknown, defaulting to 1000 [ 68.504531][ T4751] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 68.523009][ T4754] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.554972][ T4754] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.420: bg 0: block 248: padding at end of block bitmap is not set [ 68.614410][ T4754] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.420: Failed to acquire dquot type 1 [ 68.645974][ T4751] lo speed is unknown, defaulting to 1000 [ 68.668212][ T4754] EXT4-fs (loop1): 1 truncate cleaned up [ 68.688377][ T4751] lo speed is unknown, defaulting to 1000 [ 68.707733][ T4751] lo speed is unknown, defaulting to 1000 [ 68.735640][ T4751] lo speed is unknown, defaulting to 1000 [ 68.743387][ T4683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.762266][ T4754] EXT4-fs: Ignoring removed orlov option [ 68.768060][ T4754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.788927][ T4683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.796635][ T4754] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 68.813199][ T4683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.833406][ T4751] lo speed is unknown, defaulting to 1000 [ 68.839519][ T4683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.849768][ T4754] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.420: Abort forced by user [ 68.877920][ T4754] EXT4-fs (loop1): Remounting filesystem read-only [ 68.884741][ T4754] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 68.924064][ T4754] ext4 filesystem being remounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.980816][ T4683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.036908][ T4683] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.054329][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.061483][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.082995][ T4771] FAULT_INJECTION: forcing a failure. [ 69.082995][ T4771] name failslab, interval 1, probability 0, space 0, times 0 [ 69.095899][ T4771] CPU: 0 UID: 0 PID: 4771 Comm: syz.1.422 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 69.095943][ T4771] Tainted: [W]=WARN [ 69.095951][ T4771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.095966][ T4771] Call Trace: [ 69.095972][ T4771] [ 69.095990][ T4771] __dump_stack+0x1d/0x30 [ 69.096011][ T4771] dump_stack_lvl+0xe8/0x140 [ 69.096030][ T4771] dump_stack+0x15/0x1b [ 69.096051][ T4771] should_fail_ex+0x265/0x280 [ 69.096091][ T4771] ? tcf_block_get_ext+0xcf/0xb30 [ 69.096168][ T4771] should_failslab+0x8c/0xb0 [ 69.096191][ T4771] __kmalloc_cache_noprof+0x4c/0x320 [ 69.096256][ T4771] tcf_block_get_ext+0xcf/0xb30 [ 69.096295][ T4771] ? stack_depot_save_flags+0xa6a/0xb60 [ 69.096333][ T4771] tcf_block_get+0x67/0xa0 [ 69.096417][ T4771] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 69.096472][ T4771] sfq_init+0x7f/0x1290 [ 69.096565][ T4771] ? netlink_rcv_skb+0x123/0x220 [ 69.096668][ T4771] ? rtnetlink_rcv+0x1c/0x30 [ 69.096701][ T4771] ? netlink_unicast+0x59e/0x670 [ 69.096729][ T4771] ? netlink_sendmsg+0x58b/0x6b0 [ 69.096747][ T4771] ? __sock_sendmsg+0x145/0x180 [ 69.096803][ T4771] ? ____sys_sendmsg+0x345/0x4e0 [ 69.096844][ T4771] ? ___sys_sendmsg+0x17b/0x1d0 [ 69.096885][ T4771] ? __sys_sendmmsg+0x178/0x300 [ 69.096985][ T4771] ? __x64_sys_sendmmsg+0x57/0x70 [ 69.097007][ T4771] ? x64_sys_call+0x2f2f/0x2fb0 [ 69.097033][ T4771] ? do_syscall_64+0xd2/0x200 [ 69.097055][ T4771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.097087][ T4771] ? __pfx_sfq_dequeue+0x10/0x10 [ 69.097140][ T4771] ? qdisc_alloc+0x3c3/0x440 [ 69.097170][ T4771] ? __pfx_sfq_init+0x10/0x10 [ 69.097196][ T4771] qdisc_create+0x591/0x9e0 [ 69.097238][ T4771] tc_modify_qdisc+0xe2c/0x1380 [ 69.097356][ T4771] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 69.097395][ T4771] rtnetlink_rcv_msg+0x657/0x6d0 [ 69.097423][ T4771] netlink_rcv_skb+0x123/0x220 [ 69.097615][ T4771] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 69.097649][ T4771] rtnetlink_rcv+0x1c/0x30 [ 69.097673][ T4771] netlink_unicast+0x59e/0x670 [ 69.097768][ T4771] netlink_sendmsg+0x58b/0x6b0 [ 69.097797][ T4771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.097816][ T4771] __sock_sendmsg+0x145/0x180 [ 69.097892][ T4771] ____sys_sendmsg+0x345/0x4e0 [ 69.097935][ T4771] ___sys_sendmsg+0x17b/0x1d0 [ 69.098054][ T4771] __sys_sendmmsg+0x178/0x300 [ 69.098088][ T4771] __x64_sys_sendmmsg+0x57/0x70 [ 69.098112][ T4771] x64_sys_call+0x2f2f/0x2fb0 [ 69.098140][ T4771] do_syscall_64+0xd2/0x200 [ 69.098158][ T4771] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.098198][ T4771] ? clear_bhb_loop+0x40/0x90 [ 69.098231][ T4771] ? clear_bhb_loop+0x40/0x90 [ 69.098300][ T4771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.098331][ T4771] RIP: 0033:0x7f9c35b9e929 [ 69.098346][ T4771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.098369][ T4771] RSP: 002b:00007f9c34207038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.098393][ T4771] RAX: ffffffffffffffda RBX: 00007f9c35dc5fa0 RCX: 00007f9c35b9e929 [ 69.098409][ T4771] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 69.098431][ T4771] RBP: 00007f9c34207090 R08: 0000000000000000 R09: 0000000000000000 [ 69.098485][ T4771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.098497][ T4771] R13: 0000000000000000 R14: 00007f9c35dc5fa0 R15: 00007fffe7da7d18 [ 69.098521][ T4771] [ 69.477166][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.484412][ T3338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.487538][ T4780] loop1: detected capacity change from 0 to 128 [ 69.540596][ T4780] syz.1.425: attempt to access beyond end of device [ 69.540596][ T4780] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 69.582029][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 69.582049][ T29] audit: type=1400 audit(1751358965.808:1197): avc: denied { read } for pid=4788 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.598826][ T4683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.636451][ T29] audit: type=1400 audit(1751358965.858:1198): avc: denied { write } for pid=4788 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.727048][ T4803] loop3: detected capacity change from 0 to 512 [ 69.742809][ T4803] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.750934][ T4803] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.431: bad orphan inode 13 [ 69.793055][ T4803] ext4_test_bit(bit=12, block=18) = 1 [ 69.798535][ T4803] is_bad_inode(inode)=0 [ 69.802868][ T4803] NEXT_ORPHAN(inode)=2130706432 [ 69.807745][ T4803] max_ino=32 [ 69.811058][ T4803] i_nlink=1 [ 69.815185][ T4803] EXT4-fs mount: 78 callbacks suppressed [ 69.815200][ T4803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.841191][ T4803] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 69.861928][ T29] audit: type=1400 audit(1751358966.058:1199): avc: denied { execute } for pid=4801 comm="syz.3.431" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.884493][ T29] audit: type=1400 audit(1751358966.058:1200): avc: denied { read open } for pid=4801 comm="syz.3.431" path="/85/bus/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.918828][ T4803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.431: bg 0: block 248: padding at end of block bitmap is not set [ 69.936461][ T4683] veth0_vlan: entered promiscuous mode [ 69.948756][ T4683] veth1_vlan: entered promiscuous mode [ 69.955607][ T4803] Quota error (device loop3): write_blk: dquota write failed [ 69.963117][ T4803] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 69.973105][ T4803] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.431: Failed to acquire dquot type 1 [ 69.988917][ T4803] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.999111][ T4683] veth0_macvtap: entered promiscuous mode [ 70.011743][ T4683] veth1_macvtap: entered promiscuous mode [ 70.024046][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.036685][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.044788][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.045672][ T4683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.062605][ T4683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.071455][ T4683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.080324][ T4683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.112411][ T29] audit: type=1400 audit(1751358966.338:1201): avc: denied { mounton } for pid=4683 comm="syz-executor" path="/root/syzkaller.ofTveS/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.139882][ T29] audit: type=1400 audit(1751358966.338:1202): avc: denied { mount } for pid=4683 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.146621][ T4821] loop3: detected capacity change from 0 to 512 [ 70.163254][ T29] audit: type=1400 audit(1751358966.338:1203): avc: denied { mount } for pid=4683 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.191884][ T29] audit: type=1400 audit(1751358966.338:1204): avc: denied { mounton } for pid=4683 comm="syz-executor" path="/root/syzkaller.ofTveS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.221651][ T4821] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.228820][ T4821] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.434: bad orphan inode 13 [ 70.239544][ T4821] ext4_test_bit(bit=12, block=18) = 1 [ 70.245400][ T4821] is_bad_inode(inode)=0 [ 70.249936][ T4821] NEXT_ORPHAN(inode)=2130706432 [ 70.255056][ T4821] max_ino=32 [ 70.258646][ T4821] i_nlink=1 [ 70.262651][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.279426][ T4825] loop5: detected capacity change from 0 to 128 [ 70.286022][ T4821] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 70.286751][ T4825] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.312925][ T4821] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 70.331739][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.429684][ T4838] loop5: detected capacity change from 0 to 128 [ 70.468636][ T4840] loop2: detected capacity change from 0 to 2048 [ 70.563064][ T4851] loop5: detected capacity change from 0 to 512 [ 70.579382][ T4852] loop0: detected capacity change from 0 to 512 [ 70.587053][ T4851] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.595419][ T4851] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.445: bad orphan inode 13 [ 70.607068][ T4851] ext4_test_bit(bit=12, block=18) = 1 [ 70.612638][ T4851] is_bad_inode(inode)=0 [ 70.616861][ T4851] NEXT_ORPHAN(inode)=2130706432 [ 70.621856][ T4851] max_ino=32 [ 70.625073][ T4851] i_nlink=1 [ 70.653351][ T4852] EXT4-fs (loop0): orphan cleanup on readonly fs [ 70.663733][ T4851] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.680578][ T4852] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.443: bad orphan inode 13 [ 70.691823][ T4852] ext4_test_bit(bit=12, block=18) = 1 [ 70.697448][ T4852] is_bad_inode(inode)=0 [ 70.701738][ T4852] NEXT_ORPHAN(inode)=2130706432 [ 70.706841][ T4852] max_ino=32 [ 70.710216][ T4852] i_nlink=1 [ 70.715488][ T4851] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 70.715681][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.732580][ T4851] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 70.743837][ T4857] netlink: 'syz.3.446': attribute type 21 has an invalid length. [ 70.746384][ T4852] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 70.753691][ T4857] IPv6: NLM_F_CREATE should be specified when creating new route [ 70.823822][ T4683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.836854][ T4852] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.443: bg 0: block 248: padding at end of block bitmap is not set [ 70.853523][ T4852] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.443: Failed to acquire dquot type 1 [ 70.866923][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 70.885684][ T4867] team0 (unregistering): Port device team_slave_0 removed [ 70.895049][ T4852] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.967133][ T4867] team0 (unregistering): Port device team_slave_1 removed [ 70.996831][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.746076][ T4876] loop5: detected capacity change from 0 to 128 [ 71.776254][ T4876] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.803359][ T4880] loop0: detected capacity change from 0 to 128 [ 71.813917][ T4876] netlink: 32 bytes leftover after parsing attributes in process `syz.5.448'. [ 71.867045][ T4880] bio_check_eod: 17 callbacks suppressed [ 71.867064][ T4880] syz.0.452: attempt to access beyond end of device [ 71.867064][ T4880] loop0: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 71.931434][ T4880] syz.0.452: attempt to access beyond end of device [ 71.931434][ T4880] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 71.977120][ T4880] syz.0.452: attempt to access beyond end of device [ 71.977120][ T4880] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 71.997612][ T4880] syz.0.452: attempt to access beyond end of device [ 71.997612][ T4880] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 72.013581][ T4880] syz.0.452: attempt to access beyond end of device [ 72.013581][ T4880] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 72.028000][ T4880] syz.0.452: attempt to access beyond end of device [ 72.028000][ T4880] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 72.043588][ T4880] syz.0.452: attempt to access beyond end of device [ 72.043588][ T4880] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 72.066338][ T4880] syz.0.452: attempt to access beyond end of device [ 72.066338][ T4880] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 72.103929][ T4880] syz.0.452: attempt to access beyond end of device [ 72.103929][ T4880] loop0: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 72.120257][ T4895] macvlan1: entered promiscuous mode [ 72.126821][ T4895] ipvlan0: entered promiscuous mode [ 72.141812][ T4895] ipvlan0: left promiscuous mode [ 72.157784][ T4895] macvlan1: left promiscuous mode [ 72.254735][ T4903] loop2: detected capacity change from 0 to 512 [ 72.263487][ T4903] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.306131][ T4909] loop5: detected capacity change from 0 to 512 [ 72.315422][ T4903] EXT4-fs (loop2): 1 truncate cleaned up [ 72.322749][ T4909] EXT4-fs (loop5): orphan cleanup on readonly fs [ 72.324279][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.342480][ T4909] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.463: bad orphan inode 13 [ 72.354126][ T4909] ext4_test_bit(bit=12, block=18) = 1 [ 72.360032][ T4909] is_bad_inode(inode)=0 [ 72.364493][ T4909] NEXT_ORPHAN(inode)=2130706432 [ 72.369573][ T4909] max_ino=32 [ 72.373072][ T4909] i_nlink=1 [ 72.377184][ T4909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.405215][ T4683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.436531][ T4925] FAULT_INJECTION: forcing a failure. [ 72.436531][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 72.449561][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: syz.1.468 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 72.449623][ T4925] Tainted: [W]=WARN [ 72.449632][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.449697][ T4925] Call Trace: [ 72.449706][ T4925] [ 72.449717][ T4925] __dump_stack+0x1d/0x30 [ 72.449744][ T4925] dump_stack_lvl+0xe8/0x140 [ 72.449770][ T4925] dump_stack+0x15/0x1b [ 72.449791][ T4925] should_fail_ex+0x265/0x280 [ 72.449830][ T4925] ? audit_log_d_path+0x8d/0x150 [ 72.449895][ T4925] should_failslab+0x8c/0xb0 [ 72.450016][ T4925] __kmalloc_cache_noprof+0x4c/0x320 [ 72.450053][ T4925] audit_log_d_path+0x8d/0x150 [ 72.450097][ T4925] audit_log_d_path_exe+0x42/0x70 [ 72.450195][ T4925] audit_log_task+0x1e9/0x250 [ 72.450289][ T4925] audit_seccomp+0x61/0x100 [ 72.450316][ T4925] ? __seccomp_filter+0x68c/0x10d0 [ 72.450345][ T4925] __seccomp_filter+0x69d/0x10d0 [ 72.450382][ T4925] ? _raw_spin_unlock+0x26/0x50 [ 72.450425][ T4925] __secure_computing+0x82/0x150 [ 72.450457][ T4925] syscall_trace_enter+0xcf/0x1e0 [ 72.450483][ T4925] do_syscall_64+0xac/0x200 [ 72.450500][ T4925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.450527][ T4925] ? clear_bhb_loop+0x40/0x90 [ 72.450548][ T4925] ? clear_bhb_loop+0x40/0x90 [ 72.450625][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.450651][ T4925] RIP: 0033:0x7f9c35b9d33c [ 72.450669][ T4925] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.450692][ T4925] RSP: 002b:00007f9c34207030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.450714][ T4925] RAX: ffffffffffffffda RBX: 00007f9c35dc5fa0 RCX: 00007f9c35b9d33c [ 72.450825][ T4925] RDX: 000000000000000f RSI: 00007f9c342070a0 RDI: 0000000000000003 [ 72.450842][ T4925] RBP: 00007f9c34207090 R08: 0000000000000000 R09: 0000000000000000 [ 72.450857][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.450869][ T4925] R13: 0000000000000000 R14: 00007f9c35dc5fa0 R15: 00007fffe7da7d18 [ 72.450905][ T4925] [ 72.691033][ T4930] netlink: 'syz.5.469': attribute type 2 has an invalid length. [ 72.699002][ T4930] netlink: 'syz.5.469': attribute type 1 has an invalid length. [ 72.706964][ T4930] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.469'. [ 72.717516][ T4929] netlink: 'syz.5.469': attribute type 2 has an invalid length. [ 72.725498][ T4933] loop1: detected capacity change from 0 to 128 [ 72.732133][ T4929] netlink: 'syz.5.469': attribute type 1 has an invalid length. [ 72.739021][ T4933] syz.1.470: attempt to access beyond end of device [ 72.739021][ T4933] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 72.739794][ T4929] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.469'. [ 72.917176][ T4939] macvlan1: entered promiscuous mode [ 72.924129][ T4939] ipvlan0: entered promiscuous mode [ 72.924161][ T4945] loop3: detected capacity change from 0 to 512 [ 72.926489][ T4945] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.474: bg 0: block 5: invalid block bitmap [ 72.930800][ T4939] ipvlan0: left promiscuous mode [ 72.948746][ T4945] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 72.962469][ T4939] macvlan1: left promiscuous mode [ 72.962543][ T4945] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.474: invalid indirect mapped block 3 (level 2) [ 72.981556][ T4945] EXT4-fs (loop3): 2 truncates cleaned up [ 72.987884][ T4945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.014369][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.096263][ T4956] loop0: detected capacity change from 0 to 512 [ 73.104534][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.132053][ T4956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.154027][ T4960] loop3: detected capacity change from 0 to 2048 [ 73.158657][ T4964] loop2: detected capacity change from 0 to 2048 [ 73.167343][ T4956] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.215259][ T4971] loop2: detected capacity change from 0 to 512 [ 73.217811][ T4972] binfmt_misc: register: failed to install interpreter file ./file2 [ 73.228713][ T4969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.484'. [ 73.239210][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.257689][ T4971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.486: bg 0: block 5: invalid block bitmap [ 73.282254][ T4971] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 73.291977][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 73.315059][ T4975] macvlan1: entered promiscuous mode [ 73.321484][ T4975] ipvlan0: entered promiscuous mode [ 73.323859][ T4971] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.486: invalid indirect mapped block 3 (level 2) [ 73.327826][ T4975] ipvlan0: left promiscuous mode [ 73.347225][ T4975] macvlan1: left promiscuous mode [ 73.355461][ T4971] EXT4-fs (loop2): 2 truncates cleaned up [ 73.365622][ T4971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.392116][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.441436][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.448725][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.501863][ T5000] loop3: detected capacity change from 0 to 128 [ 73.529098][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.539726][ T4990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.559355][ T5003] binfmt_misc: register: failed to install interpreter file ./file2 [ 73.582120][ T4990] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.591250][ T4990] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.594417][ T5006] loop2: detected capacity change from 0 to 512 [ 73.600270][ T4990] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.615513][ T4990] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.638829][ T5006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.652896][ T5006] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.673066][ T5010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'. [ 73.683024][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.803533][ T5025] macvlan1: entered promiscuous mode [ 73.810631][ T5025] ipvlan0: entered promiscuous mode [ 73.816635][ T5025] ipvlan0: left promiscuous mode [ 73.822465][ T5025] macvlan1: left promiscuous mode [ 74.034789][ T5034] loop3: detected capacity change from 0 to 128 [ 74.075916][ T5036] loop3: detected capacity change from 0 to 512 [ 74.092551][ T5036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.106480][ T5036] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.131437][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.152136][ T5040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.513'. [ 74.249105][ T5050] loop0: detected capacity change from 0 to 128 [ 74.264508][ T5052] loop2: detected capacity change from 0 to 512 [ 74.275685][ T5052] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.286895][ T5054] loop3: detected capacity change from 0 to 512 [ 74.295000][ T5052] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.519: bad orphan inode 13 [ 74.324567][ T5052] ext4_test_bit(bit=12, block=18) = 1 [ 74.326077][ T5054] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.330034][ T5052] is_bad_inode(inode)=0 [ 74.330046][ T5052] NEXT_ORPHAN(inode)=2130706432 [ 74.345674][ T5052] max_ino=32 [ 74.348101][ T5054] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.520: bad orphan inode 13 [ 74.349054][ T5052] i_nlink=1 [ 74.353840][ T5050] SELinux: syz.0.518 (5050) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.369523][ T5054] ext4_test_bit(bit=12, block=18) = 1 [ 74.382980][ T5054] is_bad_inode(inode)=0 [ 74.387185][ T5054] NEXT_ORPHAN(inode)=2130706432 [ 74.392097][ T5054] max_ino=32 [ 74.395325][ T5054] i_nlink=1 [ 74.398840][ T5052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.410668][ T5054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.438575][ T5052] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 74.452378][ T5054] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 74.462631][ T5052] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.519: bg 0: block 248: padding at end of block bitmap is not set [ 74.489499][ T5052] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.519: Failed to acquire dquot type 1 [ 74.502392][ T5054] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.520: bg 0: block 248: padding at end of block bitmap is not set [ 74.517123][ T5054] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.520: Failed to acquire dquot type 1 [ 74.519254][ T5052] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.544482][ T5054] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.576361][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.587848][ T57] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 74.596096][ T57] FAT-fs (loop0): Filesystem has been set read-only [ 74.603156][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.604702][ T57] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 74.631330][ T5065] loop0: detected capacity change from 0 to 512 [ 74.654249][ T5065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.654779][ T5067] 9pnet_fd: Insufficient options for proto=fd [ 74.668231][ T5065] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.698024][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.702706][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 74.702727][ T29] audit: type=1400 audit(1751358970.928:1338): avc: denied { create } for pid=5072 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.737078][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 74.746320][ T29] audit: type=1400 audit(1751358970.938:1339): avc: denied { read } for pid=5066 comm="syz.3.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.766866][ T29] audit: type=1326 audit(1751358970.938:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.790812][ T29] audit: type=1326 audit(1751358970.938:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.814470][ T29] audit: type=1326 audit(1751358970.938:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.824088][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 74.838202][ T29] audit: type=1326 audit(1751358970.938:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.870275][ T29] audit: type=1326 audit(1751358970.938:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.893831][ T29] audit: type=1326 audit(1751358970.938:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.917351][ T29] audit: type=1326 audit(1751358970.938:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 74.940901][ T29] audit: type=1326 audit(1751358970.938:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a1d5e929 code=0x7ffc0000 [ 75.033261][ T5088] netlink: 'syz.1.530': attribute type 21 has an invalid length. [ 75.071588][ T5088] netlink: 'syz.1.530': attribute type 1 has an invalid length. [ 75.123401][ T5095] loop0: detected capacity change from 0 to 128 [ 75.438765][ T5112] loop0: detected capacity change from 0 to 512 [ 75.447805][ T5112] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.540: bg 0: block 5: invalid block bitmap [ 75.460692][ T5112] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.469790][ T5112] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.540: invalid indirect mapped block 3 (level 2) [ 75.507716][ T5112] EXT4-fs (loop0): 2 truncates cleaned up [ 75.514908][ T5115] loop3: detected capacity change from 0 to 512 [ 75.522726][ T5112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.537707][ T5115] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.541: bg 0: block 5: invalid block bitmap [ 75.553714][ T5115] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 75.570263][ T5115] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.541: invalid indirect mapped block 3 (level 2) [ 75.586016][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.596419][ T5115] EXT4-fs (loop3): 2 truncates cleaned up [ 75.604003][ T5115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.643940][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.676333][ T5124] FAULT_INJECTION: forcing a failure. [ 75.676333][ T5124] name failslab, interval 1, probability 0, space 0, times 0 [ 75.689682][ T5124] CPU: 0 UID: 0 PID: 5124 Comm: syz.0.545 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 75.689791][ T5124] Tainted: [W]=WARN [ 75.689797][ T5124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.689810][ T5124] Call Trace: [ 75.689816][ T5124] [ 75.689824][ T5124] __dump_stack+0x1d/0x30 [ 75.689853][ T5124] dump_stack_lvl+0xe8/0x140 [ 75.689880][ T5124] dump_stack+0x15/0x1b [ 75.689966][ T5124] should_fail_ex+0x265/0x280 [ 75.690009][ T5124] should_failslab+0x8c/0xb0 [ 75.690040][ T5124] __kvmalloc_node_noprof+0x123/0x4e0 [ 75.690207][ T5124] ? io_sqe_buffers_register+0xc2/0x530 [ 75.690241][ T5124] io_sqe_buffers_register+0xc2/0x530 [ 75.690275][ T5124] ? get_pid_task+0x96/0xd0 [ 75.690302][ T5124] ? should_fail_ex+0xdb/0x280 [ 75.690416][ T5124] io_register_rsrc+0x1b2/0x1e0 [ 75.690457][ T5124] __se_sys_io_uring_register+0x9e5/0xeb0 [ 75.690506][ T5124] ? fput+0x8f/0xc0 [ 75.690589][ T5124] ? arch_syscall_is_vdso_sigreturn+0xc6/0x110 [ 75.690688][ T5124] __x64_sys_io_uring_register+0x55/0x70 [ 75.690727][ T5124] x64_sys_call+0xc91/0x2fb0 [ 75.690749][ T5124] do_syscall_64+0xd2/0x200 [ 75.690772][ T5124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.690856][ T5124] ? clear_bhb_loop+0x40/0x90 [ 75.690914][ T5124] ? clear_bhb_loop+0x40/0x90 [ 75.690938][ T5124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.691030][ T5124] RIP: 0033:0x7f140ca3e929 [ 75.691049][ T5124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.691068][ T5124] RSP: 002b:00007f140b0a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 75.691087][ T5124] RAX: ffffffffffffffda RBX: 00007f140cc65fa0 RCX: 00007f140ca3e929 [ 75.691100][ T5124] RDX: 0000200000001580 RSI: 000000000000000f RDI: 0000000000000003 [ 75.691116][ T5124] RBP: 00007f140b0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.691190][ T5124] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 75.691207][ T5124] R13: 0000000000000000 R14: 00007f140cc65fa0 R15: 00007ffece510828 [ 75.691240][ T5124] [ 75.941836][ T5128] loop0: detected capacity change from 0 to 128 [ 76.134558][ T5131] __nla_validate_parse: 2 callbacks suppressed [ 76.134582][ T5131] netlink: 3 bytes leftover after parsing attributes in process `syz.0.548'. [ 76.151001][ T5131] 0ªX¹¦À: renamed from caif0 [ 76.158817][ T5131] 0ªX¹¦À: entered allmulticast mode [ 76.164258][ T5131] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 76.228874][ T5141] loop2: detected capacity change from 0 to 512 [ 76.247242][ T5141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.552: bg 0: block 5: invalid block bitmap [ 76.261730][ T5141] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 76.270775][ T5141] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.552: invalid indirect mapped block 3 (level 2) [ 76.285347][ T5141] EXT4-fs (loop2): 2 truncates cleaned up [ 76.291795][ T5141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.317207][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.336364][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.554'. [ 76.365685][ T5147] loop2: detected capacity change from 0 to 2048 [ 76.387744][ T5149] siw: device registration error -23 [ 76.396959][ T5149] loop0: detected capacity change from 0 to 512 [ 76.426174][ T5149] EXT4-fs: Ignoring removed orlov option [ 76.450545][ T5149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.461145][ T5151] loop5: detected capacity change from 0 to 2048 [ 76.473448][ T5149] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.489491][ T5149] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.555: bg 0: block 248: padding at end of block bitmap is not set [ 76.531307][ T5156] loop2: detected capacity change from 0 to 128 [ 76.586175][ T5149] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.555: Failed to acquire dquot type 1 [ 76.632532][ T5149] EXT4-fs (loop0): 1 truncate cleaned up [ 76.638492][ T5160] macvlan1: entered promiscuous mode [ 76.652356][ T5149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.667091][ T5160] ipvlan0: entered promiscuous mode [ 76.678383][ T5160] ipvlan0: left promiscuous mode [ 76.684984][ T5160] macvlan1: left promiscuous mode [ 76.697399][ T5149] EXT4-fs: Ignoring removed orlov option [ 76.707605][ T5149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.716520][ T5149] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 76.735080][ T5149] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.555: Abort forced by user [ 76.758782][ T5149] EXT4-fs (loop0): Remounting filesystem read-only [ 76.765520][ T5149] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 76.774052][ T5149] ext4 filesystem being remounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.800240][ T5172] futex_wake_op: syz.2.565 tries to shift op by -1; fix this program [ 76.871790][ T5174] lo speed is unknown, defaulting to 1000 [ 76.905834][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.915352][ T5173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5173 comm=syz.5.564 [ 77.051993][ T5138] loop3: detected capacity change from 0 to 1024 [ 77.071163][ T5184] loop1: detected capacity change from 0 to 128 [ 77.104940][ T5184] bio_check_eod: 53 callbacks suppressed [ 77.104961][ T5184] syz.1.570: attempt to access beyond end of device [ 77.104961][ T5184] loop1: rw=2049, sector=145, nr_sectors = 24 limit=128 [ 77.137132][ T5138] EXT4-fs: Ignoring removed nobh option [ 77.143803][ T5138] EXT4-fs: inline encryption not supported [ 77.162673][ T5184] syz.1.570: attempt to access beyond end of device [ 77.162673][ T5184] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 77.178887][ T5184] syz.1.570: attempt to access beyond end of device [ 77.178887][ T5184] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 77.203050][ T5184] syz.1.570: attempt to access beyond end of device [ 77.203050][ T5184] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 77.227232][ T5184] syz.1.570: attempt to access beyond end of device [ 77.227232][ T5184] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 77.233324][ T5193] xt_hashlimit: max too large, truncated to 1048576 [ 77.240956][ T5184] syz.1.570: attempt to access beyond end of device [ 77.240956][ T5184] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 77.265002][ T5138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.293762][ T5184] syz.1.570: attempt to access beyond end of device [ 77.293762][ T5184] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 77.296021][ T5193] loop2: detected capacity change from 0 to 512 [ 77.324963][ T5193] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.333179][ T5184] syz.1.570: attempt to access beyond end of device [ 77.333179][ T5184] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 77.340660][ T5193] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.572: bad orphan inode 13 [ 77.349424][ T5184] syz.1.570: attempt to access beyond end of device [ 77.349424][ T5184] loop1: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 77.371741][ T5193] ext4_test_bit(bit=12, block=18) = 1 [ 77.377193][ T5193] is_bad_inode(inode)=0 [ 77.381433][ T5193] NEXT_ORPHAN(inode)=2130706432 [ 77.386328][ T5193] max_ino=32 [ 77.389672][ T5193] i_nlink=1 [ 77.395540][ T5193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.413179][ T5193] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 77.423997][ T5138] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.435557][ T5193] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.572: bg 0: block 248: padding at end of block bitmap is not set [ 77.456027][ T5193] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.572: Failed to acquire dquot type 1 [ 77.468798][ T5201] macvlan1: entered promiscuous mode [ 77.475826][ T5193] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.494001][ T5201] ipvlan0: entered promiscuous mode [ 77.500829][ T5201] ipvlan0: left promiscuous mode [ 77.506668][ T5201] macvlan1: left promiscuous mode [ 77.523206][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.532493][ T5208] loop3: detected capacity change from 0 to 1024 [ 77.532898][ T5208] EXT4-fs: Ignoring removed orlov option [ 77.546722][ T5208] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #4: comm syz.3.577: iget: bad extended attribute block 4 [ 77.559729][ T5208] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.577: Bad quota inode: 4, type: 1 [ 77.571437][ T5208] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.594986][ T5208] EXT4-fs (loop3): mount failed [ 77.769364][ T5224] loop3: detected capacity change from 0 to 2048 [ 77.857295][ T5238] xt_hashlimit: max too large, truncated to 1048576 [ 77.873136][ T5238] loop3: detected capacity change from 0 to 512 [ 77.882216][ T5238] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.889024][ T5238] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.588: bad orphan inode 13 [ 77.900865][ T5238] ext4_test_bit(bit=12, block=18) = 1 [ 77.906646][ T5238] is_bad_inode(inode)=0 [ 77.911189][ T5238] NEXT_ORPHAN(inode)=2130706432 [ 77.916336][ T5238] max_ino=32 [ 77.919828][ T5238] i_nlink=1 [ 77.924302][ T5238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.938837][ T5238] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 77.964322][ T5238] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.588: bg 0: block 248: padding at end of block bitmap is not set [ 77.984450][ T5238] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.588: Failed to acquire dquot type 1 [ 78.007033][ T5245] macvlan1: entered promiscuous mode [ 78.014641][ T5238] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.031693][ T5245] ipvlan0: entered promiscuous mode [ 78.037847][ T5245] ipvlan0: left promiscuous mode [ 78.050270][ T5245] macvlan1: left promiscuous mode [ 78.066241][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.174545][ T5252] loop1: detected capacity change from 0 to 512 [ 78.183129][ T5252] EXT4-fs: Ignoring removed orlov option [ 78.189476][ T5252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.200474][ T5252] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.207680][ T5252] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.593: bg 0: block 248: padding at end of block bitmap is not set [ 78.224236][ T5252] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.593: Failed to acquire dquot type 1 [ 78.236452][ T5252] EXT4-fs (loop1): 1 truncate cleaned up [ 78.243951][ T5252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.258411][ T5252] EXT4-fs: Ignoring removed orlov option [ 78.265317][ T5252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.274164][ T5252] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.313930][ T5252] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.593: Abort forced by user [ 78.329684][ T5252] EXT4-fs (loop1): Remounting filesystem read-only [ 78.336390][ T5252] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 78.372170][ T5263] loop5: detected capacity change from 0 to 512 [ 78.380144][ T5252] ext4 filesystem being remounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.408252][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.418133][ T5263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.595: bg 0: block 5: invalid block bitmap [ 78.439384][ T5263] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 78.448499][ T5263] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.595: invalid indirect mapped block 3 (level 2) [ 78.482327][ T5268] netlink: 'syz.0.598': attribute type 21 has an invalid length. [ 78.490197][ T5268] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.503660][ T5271] loop1: detected capacity change from 0 to 512 [ 78.512149][ T5271] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.597: bg 0: block 5: invalid block bitmap [ 78.526474][ T5263] EXT4-fs (loop5): 2 truncates cleaned up [ 78.527545][ T5268] netlink: 9396 bytes leftover after parsing attributes in process `syz.0.598'. [ 78.532515][ T5271] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 78.542263][ T5263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.564854][ T5271] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.597: invalid indirect mapped block 3 (level 2) [ 78.565041][ T5268] tipc: Resetting bearer [ 78.590116][ T5271] EXT4-fs (loop1): 2 truncates cleaned up [ 78.597022][ T5271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.615005][ T5268] tipc: Disabling bearer [ 78.624593][ T5268] team0 (unregistering): Port device vlan0 removed [ 78.652975][ T5233] loop2: detected capacity change from 0 to 1024 [ 78.674828][ T5233] EXT4-fs: Ignoring removed nobh option [ 78.681077][ T5233] EXT4-fs: inline encryption not supported [ 78.688343][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.723697][ T5233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.744826][ T5281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43823 sclass=netlink_audit_socket pid=5281 comm=syz.1.600 [ 78.763938][ T5281] loop1: detected capacity change from 0 to 1024 [ 78.771225][ T5281] EXT4-fs: Ignoring removed i_version option [ 78.777641][ T5281] EXT4-fs: dax option not supported [ 78.807006][ T5283] xt_hashlimit: max too large, truncated to 1048576 [ 78.807399][ T5233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.821179][ T5283] loop1: detected capacity change from 0 to 512 [ 78.831217][ T5283] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.838208][ T5283] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.601: bad orphan inode 13 [ 78.848935][ T5283] ext4_test_bit(bit=12, block=18) = 1 [ 78.854448][ T5283] is_bad_inode(inode)=0 [ 78.854459][ T5283] NEXT_ORPHAN(inode)=2130706432 [ 78.854482][ T5283] max_ino=32 [ 78.854488][ T5283] i_nlink=1 [ 78.854936][ T5283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.885907][ T5283] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 78.901973][ T5283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.601: bg 0: block 248: padding at end of block bitmap is not set [ 78.910639][ T5286] macvlan1: entered promiscuous mode [ 78.917625][ T5283] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.601: Failed to acquire dquot type 1 [ 78.923076][ T5286] ipvlan0: entered promiscuous mode [ 78.935691][ T5283] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.939076][ T5286] ipvlan0: left promiscuous mode [ 78.958887][ T5286] macvlan1: left promiscuous mode [ 78.974150][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.122985][ T5299] loop3: detected capacity change from 0 to 512 [ 79.129624][ T5299] EXT4-fs: Ignoring removed oldalloc option [ 79.136269][ T5299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.145579][ T5299] EXT4-fs (loop3): orphan cleanup on readonly fs [ 79.152419][ T5299] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.606: Failed to acquire dquot type 1 [ 79.164304][ T5299] EXT4-fs (loop3): 1 truncate cleaned up [ 79.170470][ T5299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.192929][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.213897][ T4683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.445371][ T5323] macvlan1: entered promiscuous mode [ 79.452943][ T5323] ipvlan0: entered promiscuous mode [ 79.458984][ T5323] ipvlan0: left promiscuous mode [ 79.464130][ T5323] macvlan1: left promiscuous mode [ 79.596643][ T5319] loop5: detected capacity change from 0 to 1024 [ 79.605033][ T5319] EXT4-fs: Ignoring removed bh option [ 79.611113][ T5319] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.623275][ T5319] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 79.631674][ T5319] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.638197][ T5319] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #3: comm syz.5.612: iget: bad i_size value: 1407392063428608 [ 79.651309][ T5319] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.612: Bad quota inode: 3, type: 0 [ 79.662487][ T5319] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 79.677211][ T5319] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 79.684525][ T5319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.720654][ T5329] FAULT_INJECTION: forcing a failure. [ 79.720654][ T5329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.733873][ T5329] CPU: 1 UID: 0 PID: 5329 Comm: syz.0.615 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 79.733929][ T5329] Tainted: [W]=WARN [ 79.733936][ T5329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.733950][ T5329] Call Trace: [ 79.733958][ T5329] [ 79.733966][ T5329] __dump_stack+0x1d/0x30 [ 79.733989][ T5329] dump_stack_lvl+0xe8/0x140 [ 79.734062][ T5329] dump_stack+0x15/0x1b [ 79.734081][ T5329] should_fail_ex+0x265/0x280 [ 79.734115][ T5329] should_fail+0xb/0x20 [ 79.734187][ T5329] should_fail_usercopy+0x1a/0x20 [ 79.734221][ T5329] _copy_from_iter+0xcf/0xe40 [ 79.734292][ T5329] ? __build_skb_around+0x1a0/0x200 [ 79.734326][ T5329] ? __alloc_skb+0x223/0x320 [ 79.734360][ T5329] netlink_sendmsg+0x471/0x6b0 [ 79.734421][ T5329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.734442][ T5329] __sock_sendmsg+0x145/0x180 [ 79.734496][ T5329] ____sys_sendmsg+0x31e/0x4e0 [ 79.734535][ T5329] ___sys_sendmsg+0x17b/0x1d0 [ 79.734711][ T5329] __x64_sys_sendmsg+0xd4/0x160 [ 79.734760][ T5329] x64_sys_call+0x2999/0x2fb0 [ 79.734843][ T5329] do_syscall_64+0xd2/0x200 [ 79.734931][ T5329] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.734964][ T5329] ? clear_bhb_loop+0x40/0x90 [ 79.734990][ T5329] ? clear_bhb_loop+0x40/0x90 [ 79.735016][ T5329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.735043][ T5329] RIP: 0033:0x7f140ca3e929 [ 79.735103][ T5329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.735131][ T5329] RSP: 002b:00007f140b086038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.735152][ T5329] RAX: ffffffffffffffda RBX: 00007f140cc66080 RCX: 00007f140ca3e929 [ 79.735166][ T5329] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 79.735180][ T5329] RBP: 00007f140b086090 R08: 0000000000000000 R09: 0000000000000000 [ 79.735225][ T5329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.735267][ T5329] R13: 0000000000000000 R14: 00007f140cc66080 R15: 00007ffece510828 [ 79.735293][ T5329] [ 79.993236][ T5333] loop1: detected capacity change from 0 to 512 [ 80.012337][ T5333] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.618: bg 0: block 5: invalid block bitmap [ 80.024953][ T5333] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 80.034800][ T5333] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.618: invalid indirect mapped block 3 (level 2) [ 80.048305][ T4683] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.048495][ T5333] EXT4-fs (loop1): 2 truncates cleaned up [ 80.064476][ T5333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.166684][ T5343] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 80.232412][ T5344] Cannot find add_set index 0 as target [ 80.456893][ T5354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.625'. [ 80.478542][ T5356] loop0: detected capacity change from 0 to 512 [ 80.497575][ T5356] EXT4-fs: Ignoring removed orlov option [ 80.504015][ T5356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.520772][ T5356] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.528540][ T5356] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.624: bg 0: block 248: padding at end of block bitmap is not set [ 80.545007][ T5358] macvlan1: entered promiscuous mode [ 80.551506][ T5358] ipvlan0: entered promiscuous mode [ 80.554985][ T5356] __quota_error: 59 callbacks suppressed [ 80.555005][ T5356] Quota error (device loop0): write_blk: dquota write failed [ 80.557376][ T5358] ipvlan0: left promiscuous mode [ 80.562448][ T5356] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.584884][ T5356] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.624: Failed to acquire dquot type 1 [ 80.597472][ T5358] macvlan1: left promiscuous mode [ 80.598089][ T5356] EXT4-fs (loop0): 1 truncate cleaned up [ 80.609007][ T5356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.634712][ T5356] EXT4-fs: Ignoring removed orlov option [ 80.641913][ T5356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.650586][ T5356] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 80.678425][ T5356] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.624: Abort forced by user [ 80.690473][ T5356] EXT4-fs (loop0): Remounting filesystem read-only [ 80.697057][ T5356] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 80.699089][ T5362] loop3: detected capacity change from 0 to 512 [ 80.712431][ T5356] ext4 filesystem being remounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.724503][ T5362] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.731445][ T5362] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.627: bad orphan inode 13 [ 80.754783][ T5362] ext4_test_bit(bit=12, block=18) = 1 [ 80.760322][ T5362] is_bad_inode(inode)=0 [ 80.764502][ T5362] NEXT_ORPHAN(inode)=2130706432 [ 80.769377][ T5362] max_ino=32 [ 80.772802][ T5362] i_nlink=1 [ 80.772832][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.791194][ T5362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.792168][ T5366] siw: device registration error -23 [ 80.809482][ T5362] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 80.819489][ T5366] loop0: detected capacity change from 0 to 512 [ 80.826299][ T5366] EXT4-fs: Ignoring removed orlov option [ 80.832933][ T5366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.832964][ T5362] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.627: bg 0: block 248: padding at end of block bitmap is not set [ 80.856906][ T5366] EXT4-fs (loop0): orphan cleanup on readonly fs [ 80.865680][ T5366] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.628: bg 0: block 248: padding at end of block bitmap is not set [ 80.869012][ T5362] Quota error (device loop3): write_blk: dquota write failed [ 80.887529][ T5362] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 80.897642][ T5362] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.627: Failed to acquire dquot type 1 [ 80.910948][ T5366] Quota error (device loop0): write_blk: dquota write failed [ 80.911649][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.918650][ T5366] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 80.937661][ T5366] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.628: Failed to acquire dquot type 1 [ 80.951499][ T5362] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.954540][ T5366] EXT4-fs (loop0): 1 truncate cleaned up [ 80.973366][ T5366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.001225][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.009464][ T5375] loop2: detected capacity change from 0 to 128 [ 81.016817][ T5374] loop1: detected capacity change from 0 to 512 [ 81.017358][ T29] audit: type=1400 audit(1751358977.228:1395): avc: denied { setopt } for pid=5371 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.023968][ T5366] EXT4-fs: Ignoring removed orlov option [ 81.048980][ T5366] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.057661][ T5374] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.064264][ T5366] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.066204][ T5374] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.630: bad orphan inode 13 [ 81.083954][ T5374] ext4_test_bit(bit=12, block=18) = 1 [ 81.089419][ T5374] is_bad_inode(inode)=0 [ 81.093718][ T5374] NEXT_ORPHAN(inode)=2130706432 [ 81.098600][ T5374] max_ino=32 [ 81.101871][ T5374] i_nlink=1 [ 81.109886][ T5366] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.628: Abort forced by user [ 81.120923][ T5374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.134125][ T5366] EXT4-fs (loop0): Remounting filesystem read-only [ 81.140746][ T5366] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 81.149310][ T5366] ext4 filesystem being remounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.162692][ T5374] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 81.182872][ T5374] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.630: bg 0: block 248: padding at end of block bitmap is not set [ 81.201304][ T5374] Quota error (device loop1): write_blk: dquota write failed [ 81.208905][ T5374] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 81.218977][ T5374] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.630: Failed to acquire dquot type 1 [ 81.241182][ T5374] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.258415][ T5389] syzkaller1: entered promiscuous mode [ 81.264017][ T5389] syzkaller1: entered allmulticast mode [ 81.270169][ T29] audit: type=1400 audit(1751358977.488:1396): avc: denied { read write } for pid=5392 comm="syz.0.636" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 81.346893][ T5397] loop1: detected capacity change from 0 to 2048 [ 81.347830][ T5395] macvlan1: entered promiscuous mode [ 81.360250][ T5395] ipvlan0: entered promiscuous mode [ 81.366029][ T5395] ipvlan0: left promiscuous mode [ 81.381186][ T5395] macvlan1: left promiscuous mode [ 81.406394][ T5401] loop1: detected capacity change from 0 to 256 [ 81.703077][ T5413] gtp0: entered promiscuous mode [ 81.708366][ T5413] gtp0: entered allmulticast mode [ 82.118060][ T5424] loop3: detected capacity change from 0 to 512 [ 82.134374][ T5420] loop2: detected capacity change from 0 to 1024 [ 82.147713][ T5424] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.175948][ T5420] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 82.185730][ T5424] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.650: bad orphan inode 13 [ 82.201238][ T5420] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 82.213748][ T5420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 82.213748][ T5420] [ 82.223529][ T5420] EXT4-fs (loop2): Total free blocks count 0 [ 82.225506][ T5424] ext4_test_bit(bit=12, block=18) = 1 [ 82.229528][ T5420] EXT4-fs (loop2): Free/Dirty block details [ 82.234971][ T5424] is_bad_inode(inode)=0 [ 82.240884][ T5420] EXT4-fs (loop2): free_blocks=68451041280 [ 82.240905][ T5420] EXT4-fs (loop2): dirty_blocks=64 [ 82.245095][ T5424] NEXT_ORPHAN(inode)=2130706432 [ 82.245107][ T5424] max_ino=32 [ 82.250942][ T5420] EXT4-fs (loop2): Block reservation details [ 82.256037][ T5424] i_nlink=1 [ 82.273439][ T5420] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 82.387190][ T5424] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 82.400649][ T5436] macvlan1: entered promiscuous mode [ 82.407031][ T5436] ipvlan0: entered promiscuous mode [ 82.413639][ T5424] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.650: bg 0: block 248: padding at end of block bitmap is not set [ 82.414712][ T5436] ipvlan0: left promiscuous mode [ 82.434903][ T5424] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.650: Failed to acquire dquot type 1 [ 82.459016][ T5424] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.494036][ T5436] macvlan1: left promiscuous mode [ 82.533972][ T5449] siw: device registration error -23 [ 82.543744][ T5449] loop2: detected capacity change from 0 to 512 [ 82.553170][ T5449] EXT4-fs: Ignoring removed orlov option [ 82.584586][ T5449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.603985][ T5449] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.613970][ T5449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.655: bg 0: block 248: padding at end of block bitmap is not set [ 82.628900][ T5449] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.655: Failed to acquire dquot type 1 [ 82.642423][ T5449] EXT4-fs (loop2): 1 truncate cleaned up [ 82.650691][ T5449] EXT4-fs: Ignoring removed orlov option [ 82.656765][ T5449] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.666903][ T5449] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 82.682485][ T5449] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.655: Abort forced by user [ 82.692637][ T5455] loop3: detected capacity change from 0 to 2048 [ 82.693203][ T5449] EXT4-fs (loop2): Remounting filesystem read-only [ 82.705644][ T5449] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 82.715483][ T5449] ext4 filesystem being remounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.824188][ T5468] FAULT_INJECTION: forcing a failure. [ 82.824188][ T5468] name failslab, interval 1, probability 0, space 0, times 0 [ 82.837101][ T5468] CPU: 1 UID: 0 PID: 5468 Comm: syz.2.661 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 82.837146][ T5468] Tainted: [W]=WARN [ 82.837155][ T5468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.837212][ T5468] Call Trace: [ 82.837221][ T5468] [ 82.837231][ T5468] __dump_stack+0x1d/0x30 [ 82.837266][ T5468] dump_stack_lvl+0xe8/0x140 [ 82.837291][ T5468] dump_stack+0x15/0x1b [ 82.837381][ T5468] should_fail_ex+0x265/0x280 [ 82.837423][ T5468] ? sctp_association_new+0x71/0x1200 [ 82.837463][ T5468] should_failslab+0x8c/0xb0 [ 82.837494][ T5468] __kmalloc_cache_noprof+0x4c/0x320 [ 82.837594][ T5468] sctp_association_new+0x71/0x1200 [ 82.837631][ T5468] ? sctp_v4_to_sk_saddr+0x29/0x40 [ 82.837731][ T5468] ? sctp_do_bind+0x49a/0x4b0 [ 82.837846][ T5468] ? sctp_v4_scope+0x140/0x150 [ 82.837880][ T5468] sctp_connect_new_asoc+0x1a8/0x3a0 [ 82.837924][ T5468] sctp_sendmsg+0xf10/0x18d0 [ 82.837965][ T5468] ? selinux_socket_sendmsg+0x171/0x1b0 [ 82.838063][ T5468] ? __pfx_sctp_sendmsg+0x10/0x10 [ 82.838164][ T5468] inet_sendmsg+0xc5/0xd0 [ 82.838190][ T5468] __sock_sendmsg+0x102/0x180 [ 82.838223][ T5468] ____sys_sendmsg+0x345/0x4e0 [ 82.838272][ T5468] ___sys_sendmsg+0x17b/0x1d0 [ 82.838358][ T5468] __sys_sendmmsg+0x178/0x300 [ 82.838399][ T5468] __x64_sys_sendmmsg+0x57/0x70 [ 82.838424][ T5468] x64_sys_call+0x2f2f/0x2fb0 [ 82.838461][ T5468] do_syscall_64+0xd2/0x200 [ 82.838484][ T5468] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 82.838589][ T5468] ? clear_bhb_loop+0x40/0x90 [ 82.838668][ T5468] ? clear_bhb_loop+0x40/0x90 [ 82.838699][ T5468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.838727][ T5468] RIP: 0033:0x7fe89ed5e929 [ 82.838748][ T5468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.838772][ T5468] RSP: 002b:00007fe89d3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.838796][ T5468] RAX: ffffffffffffffda RBX: 00007fe89ef85fa0 RCX: 00007fe89ed5e929 [ 82.838844][ T5468] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 82.838861][ T5468] RBP: 00007fe89d3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.838878][ T5468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.838973][ T5468] R13: 0000000000000000 R14: 00007fe89ef85fa0 R15: 00007ffefcc04f08 [ 82.838999][ T5468] [ 83.109710][ T5471] loop2: detected capacity change from 0 to 256 [ 83.176034][ T5426] loop5: detected capacity change from 0 to 1024 [ 83.199847][ T5426] EXT4-fs: Ignoring removed nobh option [ 83.207057][ T5426] EXT4-fs: inline encryption not supported [ 83.558994][ T5487] FAULT_INJECTION: forcing a failure. [ 83.558994][ T5487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.572164][ T5487] CPU: 0 UID: 0 PID: 5487 Comm: syz.5.666 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 83.572206][ T5487] Tainted: [W]=WARN [ 83.572216][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.572232][ T5487] Call Trace: [ 83.572280][ T5487] [ 83.572288][ T5487] __dump_stack+0x1d/0x30 [ 83.572322][ T5487] dump_stack_lvl+0xe8/0x140 [ 83.572348][ T5487] dump_stack+0x15/0x1b [ 83.572371][ T5487] should_fail_ex+0x265/0x280 [ 83.572408][ T5487] should_fail+0xb/0x20 [ 83.572458][ T5487] should_fail_usercopy+0x1a/0x20 [ 83.572500][ T5487] _copy_from_user+0x1c/0xb0 [ 83.572595][ T5487] ___sys_recvmsg+0xaa/0x370 [ 83.572632][ T5487] do_recvmmsg+0x1ef/0x540 [ 83.572726][ T5487] ? schedule+0x5f/0xd0 [ 83.572816][ T5487] __x64_sys_recvmmsg+0xe5/0x170 [ 83.572844][ T5487] x64_sys_call+0x1c6a/0x2fb0 [ 83.572873][ T5487] do_syscall_64+0xd2/0x200 [ 83.572964][ T5487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.572999][ T5487] ? clear_bhb_loop+0x40/0x90 [ 83.573028][ T5487] ? clear_bhb_loop+0x40/0x90 [ 83.573057][ T5487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.573110][ T5487] RIP: 0033:0x7fd9bc42e929 [ 83.573130][ T5487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.573154][ T5487] RSP: 002b:00007fd9baa76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 83.573178][ T5487] RAX: ffffffffffffffda RBX: 00007fd9bc656080 RCX: 00007fd9bc42e929 [ 83.573194][ T5487] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 83.573210][ T5487] RBP: 00007fd9baa76090 R08: 0000000000000000 R09: 0000000000000000 [ 83.573224][ T5487] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 83.573239][ T5487] R13: 0000000000000001 R14: 00007fd9bc656080 R15: 00007ffe78b81bf8 [ 83.573304][ T5487] [ 83.840897][ T5492] loop3: detected capacity change from 0 to 512 [ 83.848761][ T5492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.872976][ T5492] EXT4-fs (loop3): 1 truncate cleaned up [ 83.876513][ T5496] loop0: detected capacity change from 0 to 512 [ 83.889823][ T5496] EXT4-fs: Ignoring removed orlov option [ 83.907812][ T5496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.918074][ T5496] EXT4-fs (loop0): orphan cleanup on readonly fs [ 83.929931][ T5496] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.669: bg 0: block 248: padding at end of block bitmap is not set [ 83.956186][ T5505] ================================================================== [ 83.964326][ T5505] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 83.971496][ T5505] [ 83.973849][ T5505] read-write to 0xffff888237c1b254 of 4 bytes by interrupt on cpu 0: [ 83.981930][ T5505] hrtimer_interrupt+0x70/0x460 [ 83.986830][ T5505] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 83.992772][ T5505] sysvec_apic_timer_interrupt+0x6f/0x80 [ 83.998457][ T5505] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.000467][ T5496] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.669: Failed to acquire dquot type 1 [ 84.004474][ T5505] kcsan_setup_watchpoint+0x415/0x430 [ 84.021108][ T5505] __tlb_remove_folio_pages+0x7b/0x220 [ 84.026605][ T5505] unmap_page_range+0x158a/0x2740 [ 84.031666][ T5505] unmap_vmas+0x23d/0x3a0 [ 84.036034][ T5505] exit_mmap+0x1b0/0x6c0 [ 84.040297][ T5505] __mmput+0x28/0x1c0 [ 84.044300][ T5505] mmput+0x40/0x50 [ 84.048043][ T5505] exit_mm+0xe4/0x190 [ 84.052054][ T5505] do_exit+0x417/0x1590 [ 84.056239][ T5505] do_group_exit+0xff/0x140 [ 84.060777][ T5505] get_signal+0xe59/0xf70 [ 84.065139][ T5505] arch_do_signal_or_restart+0x96/0x480 [ 84.070704][ T5505] exit_to_user_mode_loop+0x7a/0x100 [ 84.076014][ T5505] do_syscall_64+0x1d6/0x200 [ 84.080624][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.086537][ T5505] [ 84.088875][ T5505] read to 0xffff888237c1b254 of 4 bytes by task 5505 on cpu 1: [ 84.096451][ T5505] print_cpu+0x359/0x680 [ 84.100714][ T5505] timer_list_show+0x107/0x170 [ 84.105494][ T5505] seq_read_iter+0x62a/0x940 [ 84.110114][ T5505] proc_reg_read_iter+0x110/0x180 [ 84.115161][ T5505] copy_splice_read+0x3c4/0x5f0 [ 84.120054][ T5505] splice_direct_to_actor+0x26f/0x680 [ 84.125468][ T5505] do_splice_direct+0xda/0x150 [ 84.130264][ T5505] do_sendfile+0x380/0x650 [ 84.134703][ T5505] __x64_sys_sendfile64+0x105/0x150 [ 84.139921][ T5505] x64_sys_call+0xb39/0x2fb0 [ 84.144532][ T5505] do_syscall_64+0xd2/0x200 [ 84.149051][ T5505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.154962][ T5505] [ 84.157317][ T5505] value changed: 0x0004e7bd -> 0x0004e7be [ 84.163043][ T5505] [ 84.165377][ T5505] Reported by Kernel Concurrency Sanitizer on: [ 84.171543][ T5505] CPU: 1 UID: 0 PID: 5505 Comm: syz.1.672 Tainted: G W 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 84.185457][ T5505] Tainted: [W]=WARN [ 84.189274][ T5505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.199347][ T5505] ================================================================== [ 84.212391][ T5496] EXT4-fs (loop0): 1 truncate cleaned up [ 84.225853][ T5496] EXT4-fs: Ignoring removed orlov option [ 84.233980][ T5496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.243440][ T5496] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 84.270955][ T5496] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.669: Abort forced by user [ 84.281693][ T5496] EXT4-fs (loop0): Remounting filesystem read-only [ 84.288453][ T5496] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 84.298175][ T5496] ext4 filesystem being remounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff)