last executing test programs: 2m59.595182549s ago: executing program 4 (id=22): socket(0x22, 0xa, 0xf) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfff}, 0x18) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r3) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000580)=@keyring={'key_or_keyring:', r7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2m59.551615683s ago: executing program 4 (id=23): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) getpgrp(0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x20004401}, 0x0) 2m59.419960867s ago: executing program 4 (id=24): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00"], 0x48) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000400), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") 2m58.521123188s ago: executing program 4 (id=31): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000400), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") 2m58.237269476s ago: executing program 4 (id=34): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x2c, 0x2) 2m57.679756343s ago: executing program 1 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) fstat(r4, &(0x7f00000003c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x20, r11, 0x9c3fa077fa966179, 0x0, 0x8000000, {{0x7e}, {@void, @val={0xc, 0x99, {0x100, 0x5e}}}}}, 0x20}}, 0x4000054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x9, 0x3, 0xfa, 0xbc5}, {0x6, 0xe, 0x6, 0x6}, {0xcb, 0x0, 0xd, 0x3}, {0x3, 0xff, 0x1, 0xba8}, {0xfff7, 0xfd, 0x2, 0x3}, {0x5, 0x8, 0x0, 0x94}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x8) 2m57.205622191s ago: executing program 1 (id=41): socket(0x22, 0xa, 0xf) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfff}, 0x18) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r3) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 2m57.11561974s ago: executing program 1 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x345, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7ffffffc}]}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000008400"], 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001080)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newrule={0x48, 0x20, 0x100, 0x70bd29, 0x25dfdbfb, {0x2, 0x94, 0x20, 0x8, 0x76, 0x0, 0x0, 0x8, 0x15}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x27}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_DST={0x8, 0x1, @remote}, @FRA_SRC={0x8, 0x2, @empty}, @FRA_FLOW={0x8, 0xb, 0xf}]}, 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="14000600ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m56.888139373s ago: executing program 1 (id=45): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000400), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") 2m56.630086179s ago: executing program 1 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c3000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) fstat(r4, &(0x7f00000003c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)={0x20, r11, 0x9c3fa077fa966179, 0x0, 0x8000000, {{0x7e}, {@void, @val={0xc, 0x99, {0x100, 0x5e}}}}}, 0x20}}, 0x4000054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xdc}}, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x9, 0x3, 0xfa, 0xbc5}, {0x6, 0xe, 0x6, 0x6}, {0xcb, 0x0, 0xd, 0x3}, {0x3, 0xff, 0x1, 0xba8}, {0xfff7, 0xfd, 0x2, 0x3}, {0x5, 0x8, 0x0, 0x94}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x8) 2m56.233830119s ago: executing program 4 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x97}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000dc0)={0x300, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x50, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1c0000}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_PAYLOAD={0xa0, 0xa, "fae16e2a312329e05f478712f1b670f7728d3f6304be0e3653720abc9bcc6bc29962e822a0edbfca5abc05e26e1d675df405faf4be6cffdf352c1e872ddda13be2c96e0b5571e4795d04f94c1c33ae3b01d93c7927c3df6bc2dfef5c062dc746dcc2596954bdc339c9ce004061b2b2a4f4dfaefc40e50162cf2d6ae2c97f8709d037d87b27b85636e91012a2aeb11d819074e80aae19d412e0b56b5f"}, @NFQA_PAYLOAD={0x4f, 0xa, "f78500fcd22d8f329dcb0417f4ea4a08d964c103bacbace059d85afb8c2c76a550fde638f4ae90f17afca078c5cb1e2b478453266b1e5ea7e3365d2b3a1140b48ea62dc1bd351700edc088"}, @NFQA_EXP={0x90, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf7c}]}, @NFQA_EXP={0x4}, @NFQA_EXP={0xf0, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x80}, 0x4080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x3, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYRESOCT=r8, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX=r5, @ANYRES64=r9], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x16, 0x24, 0x0, @void, @void, @void, @value=r5}, 0x20) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0xffff, 0x4}, &(0x7f0000000300)=0xfff, 0x0, 0x100000001, 0xc, 0x4e, 0xffffffffffffa6e6, 0x4, 0x9}}], 0x58}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$VT_DISALLOCATE(r1, 0x5608) 2m56.233511729s ago: executing program 32 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x97}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000dc0)={0x300, 0x1, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_EXP={0x50, 0xf, 0x0, 0x1, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1c0000}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_PAYLOAD={0xa0, 0xa, "fae16e2a312329e05f478712f1b670f7728d3f6304be0e3653720abc9bcc6bc29962e822a0edbfca5abc05e26e1d675df405faf4be6cffdf352c1e872ddda13be2c96e0b5571e4795d04f94c1c33ae3b01d93c7927c3df6bc2dfef5c062dc746dcc2596954bdc339c9ce004061b2b2a4f4dfaefc40e50162cf2d6ae2c97f8709d037d87b27b85636e91012a2aeb11d819074e80aae19d412e0b56b5f"}, @NFQA_PAYLOAD={0x4f, 0xa, "f78500fcd22d8f329dcb0417f4ea4a08d964c103bacbace059d85afb8c2c76a550fde638f4ae90f17afca078c5cb1e2b478453266b1e5ea7e3365d2b3a1140b48ea62dc1bd351700edc088"}, @NFQA_EXP={0x90, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf7c}]}, @NFQA_EXP={0x4}, @NFQA_EXP={0xf0, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASTER={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x80}, 0x4080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x3, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYRESOCT=r8, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX=r5, @ANYRES64=r9], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x16, 0x24, 0x0, @void, @void, @void, @value=r5}, 0x20) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@cswp={0x58, 0x114, 0x7, {{0xffff, 0x4}, &(0x7f0000000300)=0xfff, 0x0, 0x100000001, 0xc, 0x4e, 0xffffffffffffa6e6, 0x4, 0x9}}], 0x58}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$VT_DISALLOCATE(r1, 0x5608) 2m56.12605447s ago: executing program 1 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) 2m56.12589373s ago: executing program 33 (id=54): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x90) 1m31.897811727s ago: executing program 5 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.030137385s ago: executing program 5 (id=1025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r1 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) 1m30.866982971s ago: executing program 5 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd00041100040000"], 0x7a) 1m30.707334057s ago: executing program 5 (id=1033): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) setpgid(r0, r0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000400), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") 1m30.458963352s ago: executing program 5 (id=1038): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r7, r6, 0x0, 0x3ffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x2000000000007, &(0x7f0000ffc000/0x3000)=nil, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0003020000000000"], 0x48}}, 0x4040004) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1m30.177800221s ago: executing program 5 (id=1044): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) 1m30.153314773s ago: executing program 34 (id=1044): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) 2.481480328s ago: executing program 3 (id=2231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x8}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf563", 0x6a, 0x52, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 1.717523106s ago: executing program 6 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) gettid() recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") 1.666140871s ago: executing program 6 (id=2244): r0 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000600)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x2, 0x3a, '-', 0x3a, '+:', 0x3a, './file1'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) 1.645803753s ago: executing program 6 (id=2245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 1.618292976s ago: executing program 6 (id=2246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x800, 0x5, 0x20c, 0xfffffffffffffff9, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 1.601057728s ago: executing program 3 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.565062971s ago: executing program 3 (id=2248): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(0x0, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001cc0)='task_rename\x00', r1, 0x0, 0x1049c}, 0x2d) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (fail_nth: 1) 1.556161092s ago: executing program 6 (id=2249): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) close_range(r0, r3, 0x0) 1.178017671s ago: executing program 3 (id=2250): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x3c, 0x48, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_prespec={0x44, 0x4, 0xe6, 0x3, 0x1}, @rr={0x7, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x6, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) getpgrp(0xffffffffffffffff) 1.157750922s ago: executing program 3 (id=2252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(0x0, 0x4800) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000c908dd3bd4b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd000001006400000000", 0x1e}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@nomblk_io_submit}, {@resuid}, {@debug}, {@data_err_ignore}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x20000900) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'btrfs.', 'debug'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') writev(r6, &(0x7f0000000580)=[{0x0, 0x2}, {&(0x7f0000000440)="8e", 0x1}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000100001000049fe66970000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000065f60febf0c3a9c15b4c34a4eafd559cb23b25f719383f0a23c703ae5b95e673ba466bb4cf66a30e7b0b5b6c1c234de33b140c08b99d9348b369a8b0a6a11fbb2824e86f0c80078f37ac087646704f822713a4121b14be0a1d71be1d266ee1ebcd5801799eb4e2c37ee35a73dde18bdf05b1447988b0bee13ff5e1f3cc45a5d0b3d20d0dd2bbdc45000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000000db2ffff18000a801400"/31], 0x3c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a190000000008004100736977001400330076657468305f746f5f6272696467650032b60fb7c3f8e33992a4f907f6990509be1c6a8c18c2fc0a0de8aeabc8515331d72ca72b72732e8941b9b26437e4218c78aa9e3b1875e904e52b"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 914.625397ms ago: executing program 7 (id=2258): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x90, 0x886}, 0x10403a, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) 885.88752ms ago: executing program 7 (id=2259): socket$packet(0x11, 0x2, 0x300) r0 = getpid() kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$poke(0xffffffffffffffff, r0, &(0x7f0000000140), 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1, 0xffff, 0x6, 0x3, 0x7, 0x2, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'wlan1\x00', 0x2000}) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create(0x2) uname(&(0x7f00000004c0)=""/200) 744.018234ms ago: executing program 7 (id=2260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, 0x17, 0xa, 0xb03, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x54}}, 0x80) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f00000002c0)={0x1, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f0000000280)='system_u:object_r:hald_exec_t:s0\x00', 0x21, 0x0) 709.352758ms ago: executing program 3 (id=2261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000020000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a3ce07a162843812fc2d858eeb71000c108844f7b236c5df4e4f2b50303c0a8e36f82063e66f1865d21518f7cd187e103af01502eb9d3c38d86d7a51e76efd7746c010d2a808d018912a34b9681037af30", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) io_setup(0x7, &(0x7f00000000c0)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r8, &(0x7f0000001280)='3', 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x43, r7, 0x0, 0x0, 0x7}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000280)={r9, 0x0, r5, 0x7fff}) 707.753538ms ago: executing program 2 (id=2262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f0000000280)='system_u:object_r:hald_exec_t:s0\x00', 0x21, 0x0) (fail_nth: 2) 629.549616ms ago: executing program 7 (id=2264): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) getpgrp(0xffffffffffffffff) 536.922335ms ago: executing program 7 (id=2265): socket$packet(0x11, 0x2, 0x300) r0 = getpid() kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$poke(0xffffffffffffffff, r0, &(0x7f0000000140), 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1, 0xffff, 0x6, 0x3, 0x7, 0x2, 0x4}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 456.588823ms ago: executing program 2 (id=2266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(0x0, 0x4800) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000c908dd3bd4b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd000001006400000000", 0x1e}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@nomblk_io_submit}, {@resuid}, {@debug}, {@data_err_ignore}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x20000900) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'btrfs.', 'debug'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='setgroups\x00') writev(r6, &(0x7f0000000580)=[{0x0, 0x2}, {&(0x7f0000000440)="8e", 0x1}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000000db2ffff18000a801400"/31], 0x3c}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010026bd7000ffdbdf250900020073797a190000000008004100736977001400330076657468305f746f5f6272696467650032b60fb7c3f8e33992a4f907f6990509be1c6a8c18c2fc0a0de8aeabc8515331d72ca72b72732e8941b9b26437e4218c78aa9e3b1875e904e52b"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 453.726984ms ago: executing program 7 (id=2267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r7, r6, 0x0, 0x3ffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(&(0x7f0000000100), 0x0, 0x2000000000007, &(0x7f0000ffc000/0x3000)=nil, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00030200000000"], 0x48}}, 0x4040004) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 363.970543ms ago: executing program 0 (id=2268): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380", @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) 330.984846ms ago: executing program 0 (id=2269): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 325.874627ms ago: executing program 2 (id=2270): socket$packet(0x11, 0x2, 0x300) r0 = getpid() kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$poke(0xffffffffffffffff, r0, &(0x7f0000000140), 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1, 0xffff, 0x6, 0x3, 0x7, 0x2, 0x4}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'wlan1\x00', 0x2000}) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) uname(&(0x7f00000004c0)=""/200) 269.627762ms ago: executing program 2 (id=2271): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) 269.214482ms ago: executing program 0 (id=2272): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x80000000, @remote, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000640)="cddfb35dfaf85f855bd8e0", 0xb}, {&(0x7f0000000800)="c67a9d8f410e1289d86946498090988fa534b320110ad56d8580e7e570340464dc34c9cce6fdbdc56979d84880afcd9f6f110a157d61f87b112fbe81865d978550d85f2e71", 0x45}], 0x2, &(0x7f0000000940)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x18}}, {{&(0x7f00000009c0)={0xa, 0x4e23, 0x7e, @empty, 0xffff6d33}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000b00)="98293022ea2f89427b0ef62f1a49f2b2ef037786a57ff279ce77de6727d0d889f654a8ed73e08e01ba396779c4540a22634b14856a14bdbc1bac79a7e473df69d809ffab427e1c45e8b267dbc07edaa5fbf01735b64c1911623e7df71e8c16ef9e73bef055e4aa711b9e0dac4e4a258449249fed3191fbaae56049c494ecb616ba6c895e73f0e57ce271f4e8c39ef4f87c1ea4283a361f17c9a42a69c44b3b5ed2a976f60f20b1aa44f3b7d967aefeb0d937fad1bce8b2f59eaf04812ab27dd7b0262ab02bbb7bdcbdbb0b", 0xcb}, {&(0x7f0000000a00)}, {&(0x7f00000028c0)="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", 0x1000}], 0x3, &(0x7f0000000c00)=[@rthdrdstopts={{0x80, 0x29, 0x37, {0x33, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x48, {0x0, 0x10, 0x7, 0x9, [0x2, 0xffffffffffffff01, 0x2, 0xef, 0xffffffffffff8001, 0x5, 0x3, 0xd1]}}]}}}], 0x80}}], 0x3, 0xff14) 240.728425ms ago: executing program 2 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x8}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) pipe2$9p(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf563", 0x6a, 0x52, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 232.406726ms ago: executing program 0 (id=2274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2], 0x14}, 0x1, 0x40030000000000}, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) fcntl$addseals(r1, 0x409, 0x4) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x7}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 56.700784ms ago: executing program 0 (id=2275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x8}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf563", 0x6a, 0x52, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) 0s ago: executing program 0 (id=2276): socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00bbb6ed53f2c5696c7fa528000b00000000000000000030d0ed"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000085ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='mm_page_free\x00', r7, 0x0, 0x201}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xa14e, 0x1, 0x2, 0xfffffffe}, &(0x7f0000010080), &(0x7f0000000000)) kernel console output (not intermixed with test programs): : ext4_xattr_inode_iget:446: comm syz.7.1598: error while reading EA inode 32 err=-116 [ 165.689384][ T8423] loop3: detected capacity change from 0 to 1024 [ 165.697230][ T8414] EXT4-fs (loop7): Remounting filesystem read-only [ 165.714146][ T8423] EXT4-fs: Ignoring removed orlov option [ 165.733295][ T8414] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 165.743444][ T8414] EXT4-fs (loop7): 1 orphan inode deleted [ 165.749648][ T8414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.788476][ T8425] lo speed is unknown, defaulting to 1000 [ 165.794837][ T8425] lo speed is unknown, defaulting to 1000 [ 165.891414][ T8425] loop2: detected capacity change from 0 to 512 [ 165.900886][ T8425] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.913577][ T8423] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 165.925703][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.935317][ T8425] EXT4-fs (loop2): 1 truncate cleaned up [ 165.941954][ T8425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.966838][ T6915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.015204][ T8423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.076091][ T8423] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.1601: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 166.195556][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.228625][ T8439] loop6: detected capacity change from 0 to 1024 [ 166.252191][ T8439] EXT4-fs: Ignoring removed orlov option [ 166.331058][ T8439] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 166.360198][ T8439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.392727][ T8459] loop7: detected capacity change from 0 to 512 [ 166.393660][ T8439] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1608: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 166.474686][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.490857][ T8460] loop3: detected capacity change from 0 to 512 [ 166.498005][ T8460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.511089][ T8460] EXT4-fs (loop3): 1 truncate cleaned up [ 166.516930][ T8459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.529895][ T8460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.539001][ T8459] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.630070][ T8459] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.757089][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.802870][ T8469] loop6: detected capacity change from 0 to 1024 [ 166.831550][ T8469] EXT4-fs: Ignoring removed orlov option [ 166.847032][ T8470] 9p: Bad value for 'wfdno' [ 166.852871][ T8469] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 166.880823][ T8469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.915844][ T8469] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1618: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 167.003006][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.210337][ T8486] loop6: detected capacity change from 0 to 512 [ 167.249566][ T8486] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.371597][ T8486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.390613][ T8486] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.390806][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.478236][ T8495] lo speed is unknown, defaulting to 1000 [ 167.484796][ T8495] lo speed is unknown, defaulting to 1000 [ 167.584307][ T8495] loop2: detected capacity change from 0 to 512 [ 167.915523][ T8497] EXT4-fs: Ignoring removed i_version option [ 167.921639][ T8497] EXT4-fs: Ignoring removed bh option [ 167.930012][ T8495] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.951385][ T8495] EXT4-fs (loop2): 1 truncate cleaned up [ 167.957549][ T8495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.978603][ T8497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.991465][ T8497] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.045559][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.074087][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 168.074099][ T29] audit: type=1326 audit(1768139823.957:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.172132][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.242537][ T29] audit: type=1326 audit(1768139824.057:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.266056][ T29] audit: type=1326 audit(1768139824.057:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.289489][ T29] audit: type=1326 audit(1768139824.057:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.313002][ T29] audit: type=1326 audit(1768139824.057:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.3.1628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.336519][ T29] audit: type=1326 audit(1768139824.097:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.360002][ T29] audit: type=1326 audit(1768139824.097:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.383415][ T29] audit: type=1326 audit(1768139824.107:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.406824][ T29] audit: type=1326 audit(1768139824.107:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.3.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 168.479986][ T8507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.547523][ T8509] EXT4-fs: Ignoring removed orlov option [ 168.568915][ T8509] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 168.659884][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.673724][ T8509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.729507][ T8507] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.749814][ T8509] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1629: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 168.776298][ T8525] FAULT_INJECTION: forcing a failure. [ 168.776298][ T8525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.789443][ T8525] CPU: 1 UID: 0 PID: 8525 Comm: syz.2.1637 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.789469][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.789528][ T8525] Call Trace: [ 168.789537][ T8525] [ 168.789543][ T8525] __dump_stack+0x1d/0x30 [ 168.789564][ T8525] dump_stack_lvl+0x95/0xd0 [ 168.789581][ T8525] dump_stack+0x15/0x1b [ 168.789599][ T8525] should_fail_ex+0x265/0x280 [ 168.789617][ T8525] should_fail+0xb/0x20 [ 168.789645][ T8525] should_fail_usercopy+0x1a/0x20 [ 168.789669][ T8525] _copy_from_user+0x1c/0xb0 [ 168.789695][ T8525] ___sys_sendmsg+0xc1/0x1d0 [ 168.789776][ T8525] __sys_sendmmsg+0x178/0x300 [ 168.789811][ T8525] __x64_sys_sendmmsg+0x57/0x70 [ 168.789851][ T8525] x64_sys_call+0x1e28/0x3000 [ 168.789909][ T8525] do_syscall_64+0xca/0x2b0 [ 168.789937][ T8525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.789970][ T8525] RIP: 0033:0x7f1e2579f749 [ 168.789986][ T8525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.790005][ T8525] RSP: 002b:00007f1e241ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.790025][ T8525] RAX: ffffffffffffffda RBX: 00007f1e259f5fa0 RCX: 00007f1e2579f749 [ 168.790037][ T8525] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000005 [ 168.790051][ T8525] RBP: 00007f1e241ff090 R08: 0000000000000000 R09: 0000000000000000 [ 168.790064][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.790077][ T8525] R13: 00007f1e259f6038 R14: 00007f1e259f5fa0 R15: 00007fffab9448e8 [ 168.790164][ T8525] [ 168.970942][ T29] audit: type=1326 audit(1768139824.857:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e22b6f749 code=0x7ffc0000 [ 169.198849][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.235366][ T8533] smc: net device bond0 applied user defined pnetid SYZ0 [ 169.260369][ T8533] smc: net device bond0 erased user defined pnetid SYZ0 [ 169.621258][ T6915] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.647214][ T8541] lo speed is unknown, defaulting to 1000 [ 169.653771][ T8541] lo speed is unknown, defaulting to 1000 [ 169.750023][ T8541] set_capacity_and_notify: 3 callbacks suppressed [ 169.750037][ T8541] loop6: detected capacity change from 0 to 512 [ 169.765887][ T8541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 169.830646][ T8541] EXT4-fs (loop6): 1 truncate cleaned up [ 169.837097][ T8541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.887298][ T8540] loop2: detected capacity change from 0 to 512 [ 169.969676][ T8545] loop7: detected capacity change from 0 to 1024 [ 169.984353][ T8540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.022080][ T8545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 170.033852][ T8540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.040986][ T8545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.061580][ T8540] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.097973][ T8545] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1644: bg 0: block 88: padding at end of block bitmap is not set [ 170.182350][ T8545] netlink: 'syz.7.1644': attribute type 22 has an invalid length. [ 170.190233][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1644'. [ 170.212588][ T1578] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.212603][ T8545] netlink: 'syz.7.1644': attribute type 22 has an invalid length. [ 170.212617][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1644'. [ 170.287150][ T1578] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.297388][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.306824][ T1578] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.328898][ T1578] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.352077][ T8555] loop6: detected capacity change from 0 to 512 [ 170.371420][ T8555] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.460846][ T8559] 9p: Bad value for 'wfdno' [ 170.803097][ T8561] smc: net device bond0 applied user defined pnetid SYZ0 [ 170.810539][ T8561] smc: net device bond0 erased user defined pnetid SYZ0 [ 170.952922][ T8567] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1650'. [ 171.103038][ T8573] loop7: detected capacity change from 0 to 512 [ 171.161011][ T8573] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.270250][ T8580] loop6: detected capacity change from 0 to 512 [ 171.301606][ T8580] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.530655][ T8592] lo speed is unknown, defaulting to 1000 [ 171.537170][ T8592] lo speed is unknown, defaulting to 1000 [ 171.636460][ T8592] loop7: detected capacity change from 0 to 512 [ 171.647175][ T8592] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 171.659827][ T8595] 9p: Bad value for 'wfdno' [ 171.666342][ T8592] EXT4-fs (loop7): 1 truncate cleaned up [ 171.737722][ T8590] FAULT_INJECTION: forcing a failure. [ 171.737722][ T8590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.750868][ T8590] CPU: 1 UID: 0 PID: 8590 Comm: syz.0.1658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.750893][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.750924][ T8590] Call Trace: [ 171.750931][ T8590] [ 171.750938][ T8590] __dump_stack+0x1d/0x30 [ 171.750961][ T8590] dump_stack_lvl+0x95/0xd0 [ 171.750984][ T8590] dump_stack+0x15/0x1b [ 171.751053][ T8590] should_fail_ex+0x265/0x280 [ 171.751072][ T8590] should_fail+0xb/0x20 [ 171.751087][ T8590] should_fail_usercopy+0x1a/0x20 [ 171.751139][ T8590] _copy_from_user+0x1c/0xb0 [ 171.751164][ T8590] ___sys_sendmsg+0xc1/0x1d0 [ 171.751252][ T8590] __x64_sys_sendmsg+0xd4/0x160 [ 171.751278][ T8590] x64_sys_call+0x17ba/0x3000 [ 171.751375][ T8590] do_syscall_64+0xca/0x2b0 [ 171.751402][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.751425][ T8590] RIP: 0033:0x7f356461f749 [ 171.751439][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.751465][ T8590] RSP: 002b:00007f3563087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.751481][ T8590] RAX: ffffffffffffffda RBX: 00007f3564875fa0 RCX: 00007f356461f749 [ 171.751491][ T8590] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 171.751512][ T8590] RBP: 00007f3563087090 R08: 0000000000000000 R09: 0000000000000000 [ 171.751523][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.751533][ T8590] R13: 00007f3564876038 R14: 00007f3564875fa0 R15: 00007fffe263a928 [ 171.751552][ T8590] [ 171.995067][ T8597] smc: net device bond0 applied user defined pnetid SYZ0 [ 172.002346][ T8597] smc: net device bond0 erased user defined pnetid SYZ0 [ 172.067610][ T8605] loop6: detected capacity change from 0 to 1024 [ 172.080846][ T8607] smc: net device bond0 applied user defined pnetid SYZ0 [ 172.088211][ T8607] smc: net device bond0 erased user defined pnetid SYZ0 [ 172.101050][ T8605] EXT4-fs: Ignoring removed orlov option [ 172.114261][ T8605] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 172.176981][ T8605] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1662: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 172.216376][ T8611] loop7: detected capacity change from 0 to 512 [ 172.284070][ T8611] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.394912][ T8627] 9p: Bad value for 'wfdno' [ 172.558443][ T8630] wireguard0: entered promiscuous mode [ 172.564008][ T8630] wireguard0: entered allmulticast mode [ 172.795696][ T8639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1673'. [ 173.086993][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 173.087007][ T29] audit: type=1326 audit(1768139828.967:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.121309][ T8655] loop3: detected capacity change from 0 to 1024 [ 173.128102][ T8655] EXT4-fs: Ignoring removed orlov option [ 173.139639][ T8655] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 173.140062][ T29] audit: type=1326 audit(1768139829.017:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.172826][ T29] audit: type=1326 audit(1768139829.017:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.196309][ T29] audit: type=1326 audit(1768139829.017:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.219700][ T29] audit: type=1326 audit(1768139829.017:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.243099][ T29] audit: type=1326 audit(1768139829.017:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.267128][ T29] audit: type=1326 audit(1768139829.017:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.290611][ T29] audit: type=1326 audit(1768139829.017:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.314187][ T29] audit: type=1326 audit(1768139829.017:8879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.337583][ T29] audit: type=1326 audit(1768139829.017:8880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8656 comm="syz.7.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 173.373979][ T8655] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.1680: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 173.501582][ T8672] SELinux: policydb magic number 0x234e0002 does not match expected magic number 0xf97cff8c [ 173.512336][ T8672] SELinux: failed to load policy [ 173.599730][ T8681] infiniband syz!: set active [ 173.600097][ T8687] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.604561][ T8681] infiniband syz!: added team_slave_0 [ 173.626291][ T8681] RDS/IB: syz!: added [ 173.631347][ T8681] smc: adding ib device syz! with port count 1 [ 173.637626][ T8681] smc: ib device syz! port 1 has no pnetid [ 173.725039][ T8697] 9p: Bad value for 'wfdno' [ 173.893115][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 173.933727][ T8715] pim6reg1: entered promiscuous mode [ 173.939085][ T8715] pim6reg1: entered allmulticast mode [ 173.948383][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1702'. [ 173.957531][ T8715] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1702'. [ 173.970680][ T8715] bridge0: port 3(vlan3) entered blocking state [ 173.977450][ T8715] bridge0: port 3(vlan3) entered disabled state [ 173.984534][ T8715] vlan3: entered allmulticast mode [ 173.989722][ T8715] bridge0: entered allmulticast mode [ 173.995822][ T8715] vlan3: left allmulticast mode [ 174.000728][ T8715] bridge0: left allmulticast mode [ 174.090800][ T8725] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.103684][ T8725] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.130130][ T8728] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.139108][ T8728] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.175428][ T8730] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.190833][ T8730] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.265708][ T8738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.290773][ T8738] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.341453][ T8744] EXT4-fs: Ignoring removed orlov option [ 174.347633][ T8744] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.410927][ T8744] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1716: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 174.583902][ T8757] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.591418][ T8757] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.613235][ T8760] smc: net device bond0 applied user defined pnetid SYZ0 [ 174.634864][ T8760] smc: net device bond0 erased user defined pnetid SYZ0 [ 174.654538][ T8763] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 174.682052][ T8767] EXT4-fs: Ignoring removed orlov option [ 174.701461][ T8763] EXT4-fs (loop6): mount failed [ 174.718445][ T8767] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.749519][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1720'. [ 174.758946][ T8763] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 174.802425][ T8767] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #12: block 7: comm syz.7.1724: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 174.862702][ T8777] set_capacity_and_notify: 5 callbacks suppressed [ 174.862716][ T8777] loop6: detected capacity change from 0 to 512 [ 174.880826][ T8777] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.956013][ T8783] 9p: Bad value for 'wfdno' [ 175.306677][ T8787] loop7: detected capacity change from 0 to 512 [ 175.321522][ T8787] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 175.521637][ T8787] EXT4-fs (loop7): 1 truncate cleaned up [ 175.743501][ T8790] loop6: detected capacity change from 0 to 512 [ 175.775162][ T8792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1732'. [ 175.785860][ T8790] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.799171][ T8790] 9p: Bad value for 'wfdno' [ 175.918841][ T3686] IPVS: starting estimator thread 0... [ 175.925761][ T5619] tipc: Subscription rejected, illegal request [ 175.939369][ T8805] IPVS: dh: FWM 3 0x00000003 - no destination available [ 176.009145][ T8806] IPVS: using max 2160 ests per chain, 108000 per kthread [ 176.104491][ T8814] loop6: detected capacity change from 0 to 1024 [ 176.119321][ T8814] EXT4-fs: Ignoring removed orlov option [ 176.135450][ T8814] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 176.169748][ T8814] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1740: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 176.291434][ T8822] FAULT_INJECTION: forcing a failure. [ 176.291434][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.304604][ T8822] CPU: 1 UID: 0 PID: 8822 Comm: syz.7.1743 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.304628][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.304637][ T8822] Call Trace: [ 176.304643][ T8822] [ 176.304651][ T8822] __dump_stack+0x1d/0x30 [ 176.304714][ T8822] dump_stack_lvl+0x95/0xd0 [ 176.304733][ T8822] dump_stack+0x15/0x1b [ 176.304748][ T8822] should_fail_ex+0x265/0x280 [ 176.304768][ T8822] should_fail+0xb/0x20 [ 176.304787][ T8822] should_fail_usercopy+0x1a/0x20 [ 176.304824][ T8822] _copy_from_iter+0xcf/0xe70 [ 176.304850][ T8822] ? __alloc_skb+0x396/0x4b0 [ 176.304872][ T8822] ? __alloc_skb+0x228/0x4b0 [ 176.304892][ T8822] netlink_sendmsg+0x471/0x6b0 [ 176.304950][ T8822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.304982][ T8822] __sock_sendmsg+0x145/0x180 [ 176.305002][ T8822] ____sys_sendmsg+0x31e/0x4a0 [ 176.305033][ T8822] ___sys_sendmsg+0x17b/0x1d0 [ 176.305146][ T8822] __x64_sys_sendmsg+0xd4/0x160 [ 176.305173][ T8822] x64_sys_call+0x17ba/0x3000 [ 176.305203][ T8822] do_syscall_64+0xca/0x2b0 [ 176.305237][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.305288][ T8822] RIP: 0033:0x7fb1dffef749 [ 176.305300][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.305315][ T8822] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.305365][ T8822] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 176.305378][ T8822] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 176.305392][ T8822] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 176.305412][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.305425][ T8822] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 176.305504][ T8822] [ 176.513774][ T8824] loop6: detected capacity change from 0 to 512 [ 176.532818][ T8824] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.584633][ T8824] 9p: Bad value for 'wfdno' [ 176.694697][ T8840] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 176.725311][ T8840] netlink: 'syz.7.1749': attribute type 7 has an invalid length. [ 176.733160][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1749'. [ 176.747140][ T8842] loop6: detected capacity change from 0 to 512 [ 176.775581][ T8842] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1750: error while reading EA inode 32 err=-116 [ 176.812193][ T8842] EXT4-fs (loop6): Remounting filesystem read-only [ 176.823738][ T8842] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 176.843742][ T8842] EXT4-fs (loop6): 1 orphan inode deleted [ 177.163508][ T8856] loop6: detected capacity change from 0 to 512 [ 177.170176][ T8856] EXT4-fs: Ignoring removed i_version option [ 177.176245][ T8856] EXT4-fs: Ignoring removed bh option [ 177.265283][ T8858] loop3: detected capacity change from 0 to 512 [ 177.379769][ T8858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.464437][ T8856] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.501205][ T8858] EXT4-fs (loop3): 1 truncate cleaned up [ 177.544993][ T8863] smc: net device bond0 applied user defined pnetid SYZ0 [ 177.621593][ T8866] smc: net device bond0 erased user defined pnetid SYZ0 [ 177.900137][ T8870] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1758'. [ 178.247993][ T8885] FAULT_INJECTION: forcing a failure. [ 178.247993][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 178.260678][ T8885] CPU: 0 UID: 0 PID: 8885 Comm: syz.7.1765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.260765][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.260854][ T8885] Call Trace: [ 178.260859][ T8885] [ 178.260865][ T8885] __dump_stack+0x1d/0x30 [ 178.260885][ T8885] dump_stack_lvl+0x95/0xd0 [ 178.260922][ T8885] dump_stack+0x15/0x1b [ 178.260943][ T8885] should_fail_ex+0x265/0x280 [ 178.260965][ T8885] should_failslab+0x8c/0xb0 [ 178.260983][ T8885] __kmalloc_cache_noprof+0x65/0x4c0 [ 178.261002][ T8885] ? kobject_uevent_env+0x1c0/0x570 [ 178.261107][ T8885] ? _raw_spin_lock_irq+0x53/0xa0 [ 178.261132][ T8885] kobject_uevent_env+0x1c0/0x570 [ 178.261157][ T8885] kobject_uevent+0x1d/0x30 [ 178.261176][ T8885] device_del+0x710/0x790 [ 178.261223][ T8885] ? mntput+0xa9/0xb0 [ 178.261254][ T8885] device_unregister+0x15/0x40 [ 178.261283][ T8885] bdi_unregister+0x307/0x3a0 [ 178.261314][ T8885] __del_gendisk+0x2c3/0x570 [ 178.261400][ T8885] del_gendisk+0xac/0xf0 [ 178.261417][ T8885] loop_remove+0x26/0x80 [ 178.261498][ T8885] loop_control_ioctl+0x3b3/0x3f0 [ 178.261518][ T8885] ? __pfx_loop_control_ioctl+0x10/0x10 [ 178.261538][ T8885] __se_sys_ioctl+0xce/0x140 [ 178.261570][ T8885] __x64_sys_ioctl+0x43/0x50 [ 178.261661][ T8885] x64_sys_call+0x14b0/0x3000 [ 178.261681][ T8885] do_syscall_64+0xca/0x2b0 [ 178.261760][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.261793][ T8885] RIP: 0033:0x7fb1dffef749 [ 178.261808][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.261864][ T8885] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.261885][ T8885] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 178.261899][ T8885] RDX: 0000000000000007 RSI: 0000000000004c81 RDI: 0000000000000004 [ 178.261923][ T8885] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 178.261935][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.261945][ T8885] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 178.261967][ T8885] [ 179.228937][ T29] kauditd_printk_skb: 1008 callbacks suppressed [ 179.228952][ T29] audit: type=1326 audit(1768139835.057:9886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.258609][ T29] audit: type=1326 audit(1768139835.057:9887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.282074][ T29] audit: type=1326 audit(1768139835.057:9888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.305516][ T29] audit: type=1326 audit(1768139835.057:9889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.329017][ T29] audit: type=1326 audit(1768139835.057:9890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.352788][ T29] audit: type=1326 audit(1768139835.057:9891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.376313][ T29] audit: type=1326 audit(1768139835.057:9892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.399689][ T29] audit: type=1326 audit(1768139835.057:9893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.423154][ T29] audit: type=1326 audit(1768139835.057:9894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.446672][ T29] audit: type=1326 audit(1768139835.057:9895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8897 comm="syz.0.1771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 179.488119][ T8903] smc: net device bond0 applied user defined pnetid SYZ0 [ 179.496886][ T8903] smc: net device bond0 erased user defined pnetid SYZ0 [ 179.504648][ T8906] SET target dimension over the limit! [ 179.563591][ T8912] netlink: 'syz.6.1776': attribute type 29 has an invalid length. [ 179.588751][ T8912] netlink: 'syz.6.1776': attribute type 29 has an invalid length. [ 179.601696][ T8924] loop2: detected capacity change from 0 to 256 [ 179.608749][ T8912] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1776'. [ 179.617966][ T8912] unsupported nla_type 58 [ 179.623472][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.633656][ T8923] FAT-fs (loop2): Filesystem has been set read-only [ 179.634947][ T8921] FAULT_INJECTION: forcing a failure. [ 179.634947][ T8921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 179.641293][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.653647][ T8921] CPU: 1 UID: 0 PID: 8921 Comm: syz.7.1781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 179.653668][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.653679][ T8921] Call Trace: [ 179.653687][ T8921] [ 179.653695][ T8921] __dump_stack+0x1d/0x30 [ 179.653720][ T8921] dump_stack_lvl+0x95/0xd0 [ 179.653801][ T8921] dump_stack+0x15/0x1b [ 179.653837][ T8921] should_fail_ex+0x265/0x280 [ 179.653859][ T8921] should_fail_alloc_page+0xf2/0x100 [ 179.653922][ T8921] __alloc_frozen_pages_noprof+0x109/0x360 [ 179.653964][ T8921] alloc_pages_mpol+0xb3/0x260 [ 179.653992][ T8921] folio_alloc_mpol_noprof+0x39/0x80 [ 179.654023][ T8921] shmem_get_folio_gfp+0x3cf/0xd50 [ 179.654047][ T8921] ? simple_xattr_get+0xb9/0x120 [ 179.654077][ T8921] shmem_write_begin+0xfc/0x1f0 [ 179.654128][ T8921] generic_perform_write+0x184/0x490 [ 179.654159][ T8921] shmem_file_write_iter+0xc5/0xf0 [ 179.654236][ T8921] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 179.654264][ T8921] vfs_write+0x52a/0x960 [ 179.654286][ T8921] __x64_sys_pwrite64+0xfd/0x150 [ 179.654376][ T8921] x64_sys_call+0x9f7/0x3000 [ 179.654400][ T8921] do_syscall_64+0xca/0x2b0 [ 179.654431][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.654512][ T8921] RIP: 0033:0x7fb1dffef749 [ 179.654526][ T8921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.654544][ T8921] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 179.654562][ T8921] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 179.654575][ T8921] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000007 [ 179.654587][ T8921] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 179.654599][ T8921] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 179.654612][ T8921] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 179.654630][ T8921] [ 179.859395][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.869792][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.879914][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.890046][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.900152][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.910315][ T8923] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 195, start 00000006) [ 179.992292][ T8933] smc: net device bond0 applied user defined pnetid SYZ0 [ 180.004782][ T8933] smc: net device bond0 erased user defined pnetid SYZ0 [ 180.300112][ T8944] loop3: detected capacity change from 0 to 512 [ 180.386279][ T8944] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.519293][ T8956] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1791'. [ 180.564656][ T8960] 9p: Bad value for 'wfdno' [ 181.457644][ T8974] loop2: detected capacity change from 0 to 1024 [ 181.533629][ T8974] netlink: 'syz.2.1798': attribute type 12 has an invalid length. [ 181.545769][ T8980] netlink: 'syz.6.1800': attribute type 4 has an invalid length. [ 181.604432][ T8980] loop6: detected capacity change from 0 to 2048 [ 181.680694][ T8980] Alternate GPT is invalid, using primary GPT. [ 181.687058][ T8980] loop6: p2 p3 p7 [ 181.921122][ T8998] netlink: 'syz.6.1808': attribute type 1 has an invalid length. [ 182.000097][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1812'. [ 182.009186][ T9006] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1812'. [ 182.075550][ T9011] loop6: detected capacity change from 0 to 512 [ 182.090800][ T9011] EXT4-fs: Ignoring removed nobh option [ 182.385624][ T9019] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1815'. [ 182.616749][ T9021] loop3: detected capacity change from 0 to 512 [ 182.623375][ T9021] EXT4-fs: Ignoring removed i_version option [ 182.629506][ T9021] EXT4-fs: Ignoring removed bh option [ 182.642398][ T9021] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.679133][ T9025] FAULT_INJECTION: forcing a failure. [ 182.679133][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 182.691802][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.7.1818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.691824][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.691838][ T9025] Call Trace: [ 182.691845][ T9025] [ 182.691852][ T9025] __dump_stack+0x1d/0x30 [ 182.691893][ T9025] dump_stack_lvl+0x95/0xd0 [ 182.691986][ T9025] dump_stack+0x15/0x1b [ 182.692005][ T9025] should_fail_ex+0x265/0x280 [ 182.692026][ T9025] should_failslab+0x8c/0xb0 [ 182.692044][ T9025] kmem_cache_alloc_noprof+0x69/0x4b0 [ 182.692105][ T9025] ? audit_log_start+0x342/0x720 [ 182.692158][ T9025] audit_log_start+0x342/0x720 [ 182.692179][ T9025] audit_seccomp+0x48/0x100 [ 182.692220][ T9025] ? __seccomp_filter+0x832/0x1260 [ 182.692311][ T9025] __seccomp_filter+0x843/0x1260 [ 182.692473][ T9025] ? __schedule+0x85f/0xcd0 [ 182.692570][ T9025] __secure_computing+0x82/0x150 [ 182.692597][ T9025] syscall_trace_enter+0xcf/0x1e0 [ 182.692644][ T9025] do_syscall_64+0xa4/0x2b0 [ 182.692731][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.692784][ T9025] RIP: 0033:0x7fb1dffef749 [ 182.692805][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.692904][ T9025] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000087 [ 182.692928][ T9025] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 182.692941][ T9025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800000 [ 182.692953][ T9025] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 182.693026][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.693039][ T9025] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 182.693056][ T9025] [ 183.187783][ T9030] FAULT_INJECTION: forcing a failure. [ 183.187783][ T9030] name failslab, interval 1, probability 0, space 0, times 0 [ 183.200491][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.6.1820 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.200588][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.200601][ T9030] Call Trace: [ 183.200608][ T9030] [ 183.200614][ T9030] __dump_stack+0x1d/0x30 [ 183.200704][ T9030] dump_stack_lvl+0x95/0xd0 [ 183.200723][ T9030] dump_stack+0x15/0x1b [ 183.200739][ T9030] should_fail_ex+0x265/0x280 [ 183.200783][ T9030] should_failslab+0x8c/0xb0 [ 183.200803][ T9030] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 183.200826][ T9030] ? __alloc_skb+0x2ff/0x4b0 [ 183.200851][ T9030] __alloc_skb+0x2ff/0x4b0 [ 183.201007][ T9030] ? __alloc_skb+0x228/0x4b0 [ 183.201031][ T9030] alloc_skb_with_frags+0x7d/0x470 [ 183.201222][ T9030] ? bsearch+0x95/0xc0 [ 183.201250][ T9030] ? __pfx_cmp_ex_search+0x10/0x10 [ 183.201269][ T9030] ? rep_movs_alternative+0xf/0x90 [ 183.201302][ T9030] ? search_extable+0x53/0x80 [ 183.201319][ T9030] ? rep_movs_alternative+0xf/0x90 [ 183.201390][ T9030] tcp_send_rcvq+0xef/0x2b0 [ 183.201422][ T9030] tcp_sendmsg_locked+0x27d0/0x2c00 [ 183.201454][ T9030] ? do_user_addr_fault+0xd9e/0x1080 [ 183.201543][ T9030] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 183.201622][ T9030] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 183.201650][ T9030] ? copy_from_user_nofault+0xa2/0x120 [ 183.201678][ T9030] ? rep_movs_alternative+0x1e/0x90 [ 183.201782][ T9030] tls_push_sg+0x155/0x590 [ 183.201814][ T9030] tls_tx_records+0x219/0x350 [ 183.201853][ T9030] tls_sw_release_resources_tx+0xa7/0x310 [ 183.201915][ T9030] tls_sk_proto_close+0x1aa/0x520 [ 183.201946][ T9030] inet_release+0xce/0xf0 [ 183.201968][ T9030] inet6_release+0x3e/0x60 [ 183.201996][ T9030] sock_close+0x6b/0x150 [ 183.202028][ T9030] ? __pfx_sock_close+0x10/0x10 [ 183.202129][ T9030] __fput+0x29b/0x650 [ 183.202158][ T9030] ____fput+0x1c/0x30 [ 183.202250][ T9030] task_work_run+0x131/0x1a0 [ 183.202285][ T9030] exit_to_user_mode_loop+0x1fe/0x740 [ 183.202309][ T9030] do_syscall_64+0x1dd/0x2b0 [ 183.202410][ T9030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.202432][ T9030] RIP: 0033:0x7efeed39f749 [ 183.202454][ T9030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.202472][ T9030] RSP: 002b:00007efeebe07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 183.202492][ T9030] RAX: 0000000000000000 RBX: 00007efeed5f5fa0 RCX: 00007efeed39f749 [ 183.202503][ T9030] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 183.202545][ T9030] RBP: 00007efeebe07090 R08: 0000000000000000 R09: 0000000000000000 [ 183.202555][ T9030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.202567][ T9030] R13: 00007efeed5f6038 R14: 00007efeed5f5fa0 R15: 00007ffd338c8318 [ 183.202587][ T9030] [ 183.362524][ T9034] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 183.511121][ T9036] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.529204][ T9036] smc: net device bond0 erased user defined pnetid SYZ0 [ 183.557013][ T9038] smc: net device bond0 applied user defined pnetid SYZ0 [ 183.586290][ T9038] smc: net device bond0 erased user defined pnetid SYZ0 [ 183.645074][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1824'. [ 183.654331][ T9041] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1824'. [ 183.725706][ T9043] loop6: detected capacity change from 0 to 512 [ 183.763117][ T9043] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 183.801724][ T9043] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.1825: iget: bad i_size value: 12154757448730 [ 183.850422][ T9043] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1825: couldn't read orphan inode 13 (err -117) [ 183.920526][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1825'. [ 184.243271][ T9053] loop6: detected capacity change from 0 to 1024 [ 184.265644][ T9053] EXT4-fs: Ignoring removed bh option [ 184.803396][ T9053] EXT4-fs: inline encryption not supported [ 184.830289][ T9053] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.869468][ T9053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 184.895732][ T9053] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1828: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.940416][ T9053] __quota_error: 121 callbacks suppressed [ 184.940431][ T9053] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 185.017650][ T29] audit: type=1326 audit(1768139840.897:10015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.065460][ T9053] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1828: lblock 0 mapped to illegal pblock 48 (length 1) [ 185.084152][ T29] audit: type=1326 audit(1768139840.927:10016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.107725][ T29] audit: type=1326 audit(1768139840.927:10017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.131244][ T29] audit: type=1326 audit(1768139840.927:10018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.154830][ T29] audit: type=1326 audit(1768139840.927:10019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.178313][ T29] audit: type=1326 audit(1768139840.927:10020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.191889][ T9053] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 185.201771][ T29] audit: type=1326 audit(1768139840.927:10021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.210542][ T9053] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1828: Failed to acquire dquot type 0 [ 185.233978][ T29] audit: type=1326 audit(1768139840.927:10022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.0.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 185.282625][ T9053] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 185.284156][ T9066] 9p: Bad value for 'rfdno' [ 185.293130][ T9053] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1828: mark_inode_dirty error [ 185.311407][ T9053] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 185.330304][ T9053] EXT4-fs (loop6): 1 orphan inode deleted [ 185.335702][ T9070] loop3: detected capacity change from 0 to 1024 [ 185.343953][ T9071] 9p: Bad value for 'wfdno' [ 185.349118][ T5617] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.352949][ T9073] x_tables: duplicate underflow at hook 3 [ 185.363869][ T5617] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0 [ 185.383202][ T9053] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.1828: Invalid inode table block 1 in block_group 0 [ 185.396381][ T9053] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 185.406503][ T9053] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.1828: mark_inode_dirty error [ 185.502334][ T9087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1842'. [ 185.518228][ T9089] loop6: detected capacity change from 0 to 512 [ 185.524890][ T9089] EXT4-fs: Ignoring removed nobh option [ 185.532580][ T9089] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1843'. [ 185.591565][ T9096] loop6: detected capacity change from 0 to 512 [ 185.600105][ T9096] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.617903][ T9096] 9p: Bad value for 'wfdno' [ 185.689822][ T9102] loop6: detected capacity change from 0 to 2048 [ 185.697120][ T9102] EXT4-fs: dax option not supported [ 185.758072][ T9108] loop6: detected capacity change from 0 to 1024 [ 185.814027][ T9119] netlink: 'syz.6.1854': attribute type 4 has an invalid length. [ 185.831374][ T9119] loop6: detected capacity change from 0 to 2048 [ 185.863145][ T9119] Alternate GPT is invalid, using primary GPT. [ 185.869776][ T9119] loop6: p2 p3 p7 [ 185.965938][ T9129] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 185.978049][ T9129] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 186.087603][ T9133] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1860'. [ 186.263731][ T9159] loop6: detected capacity change from 0 to 512 [ 186.285345][ T9159] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.314270][ T9159] 9p: Bad value for 'wfdno' [ 186.332581][ T9169] smc: net device bond0 applied user defined pnetid SYZ0 [ 186.373684][ T9177] netlink: 'syz.6.1877': attribute type 4 has an invalid length. [ 186.376503][ T9176] loop3: detected capacity change from 0 to 512 [ 186.389128][ T9177] netlink: 'syz.6.1877': attribute type 4 has an invalid length. [ 186.420400][ T9176] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 186.428480][ T9176] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.446341][ T9176] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1879: corrupted inode contents [ 186.458423][ T9176] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #16: comm syz.3.1879: mark_inode_dirty error [ 186.479283][ T9176] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1879: corrupted inode contents [ 186.491701][ T9176] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.1879: mark_inode_dirty error [ 186.504990][ T9176] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1879: corrupted inode contents [ 186.518131][ T9176] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 186.527019][ T9176] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.1879: corrupted inode contents [ 186.541208][ T9176] EXT4-fs error (device loop3): ext4_truncate:4635: inode #16: comm syz.3.1879: mark_inode_dirty error [ 186.552631][ T9176] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 186.562017][ T9176] EXT4-fs (loop3): 1 truncate cleaned up [ 186.567982][ T5621] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 1 [ 186.598619][ T9199] loop6: detected capacity change from 0 to 512 [ 186.612695][ T9199] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.656691][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1889'. [ 186.675359][ T9204] FAULT_INJECTION: forcing a failure. [ 186.675359][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 186.688068][ T9204] CPU: 0 UID: 0 PID: 9204 Comm: syz.0.1887 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.688091][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.688104][ T9204] Call Trace: [ 186.688110][ T9204] [ 186.688117][ T9204] __dump_stack+0x1d/0x30 [ 186.688217][ T9204] dump_stack_lvl+0x95/0xd0 [ 186.688239][ T9204] dump_stack+0x15/0x1b [ 186.688260][ T9204] should_fail_ex+0x265/0x280 [ 186.688346][ T9204] should_failslab+0x8c/0xb0 [ 186.688406][ T9204] __kvmalloc_node_noprof+0x149/0x6b0 [ 186.688433][ T9204] ? xt_alloc_table_info+0x40/0x80 [ 186.688465][ T9204] ? should_fail_ex+0xdb/0x280 [ 186.688530][ T9204] xt_alloc_table_info+0x40/0x80 [ 186.688562][ T9204] do_ipt_set_ctl+0x59c/0x820 [ 186.688581][ T9204] ? _raw_spin_unlock_bh+0x36/0x40 [ 186.688603][ T9204] ? tcp_release_cb+0xf1/0x370 [ 186.688635][ T9204] nf_setsockopt+0x199/0x1b0 [ 186.688658][ T9204] ip_setsockopt+0x102/0x110 [ 186.688741][ T9204] tcp_setsockopt+0x98/0xb0 [ 186.688797][ T9204] sock_common_setsockopt+0x69/0x80 [ 186.688819][ T9204] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 186.688844][ T9204] __sys_setsockopt+0x184/0x200 [ 186.688942][ T9204] __x64_sys_setsockopt+0x64/0x80 [ 186.688965][ T9204] x64_sys_call+0x21d5/0x3000 [ 186.688984][ T9204] do_syscall_64+0xca/0x2b0 [ 186.689046][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.689068][ T9204] RIP: 0033:0x7f356461f749 [ 186.689104][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.689121][ T9204] RSP: 002b:00007f3563066038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.689290][ T9204] RAX: ffffffffffffffda RBX: 00007f3564876090 RCX: 00007f356461f749 [ 186.689374][ T9204] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 186.689387][ T9204] RBP: 00007f3563066090 R08: 0000000000000570 R09: 0000000000000000 [ 186.689400][ T9204] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 186.689413][ T9204] R13: 00007f3564876128 R14: 00007f3564876090 R15: 00007fffe263a928 [ 186.689431][ T9204] [ 186.924837][ T9210] loop6: detected capacity change from 0 to 1024 [ 186.931630][ T9210] EXT4-fs: Ignoring removed orlov option [ 186.937676][ T9210] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 186.987573][ T9210] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1890: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 187.068506][ T9230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9230 comm=syz.7.1898 [ 187.111163][ T9226] Alternate GPT is invalid, using primary GPT. [ 187.117532][ T9226] loop3: p2 p3 p7 [ 187.181321][ T9251] EXT4-fs: Ignoring removed orlov option [ 187.187595][ T9251] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 187.212771][ T9251] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1908: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 187.298125][ T9271] FAULT_INJECTION: forcing a failure. [ 187.298125][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.311218][ T9271] CPU: 0 UID: 0 PID: 9271 Comm: syz.2.1914 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.311280][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.311291][ T9271] Call Trace: [ 187.311297][ T9271] [ 187.311304][ T9271] __dump_stack+0x1d/0x30 [ 187.311325][ T9271] dump_stack_lvl+0x95/0xd0 [ 187.311347][ T9271] dump_stack+0x15/0x1b [ 187.311409][ T9271] should_fail_ex+0x265/0x280 [ 187.311433][ T9271] should_fail+0xb/0x20 [ 187.311453][ T9271] should_fail_usercopy+0x1a/0x20 [ 187.311476][ T9271] _copy_from_user+0x1c/0xb0 [ 187.311550][ T9271] __sys_connect+0xd0/0x2b0 [ 187.311580][ T9271] __x64_sys_connect+0x3f/0x50 [ 187.311625][ T9271] x64_sys_call+0x2e09/0x3000 [ 187.311645][ T9271] do_syscall_64+0xca/0x2b0 [ 187.311787][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.311823][ T9271] RIP: 0033:0x7f1e2579f749 [ 187.311839][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.311858][ T9271] RSP: 002b:00007f1e241ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 187.311879][ T9271] RAX: ffffffffffffffda RBX: 00007f1e259f5fa0 RCX: 00007f1e2579f749 [ 187.311892][ T9271] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000003 [ 187.311980][ T9271] RBP: 00007f1e241ff090 R08: 0000000000000000 R09: 0000000000000000 [ 187.311992][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.312005][ T9271] R13: 00007f1e259f6038 R14: 00007f1e259f5fa0 R15: 00007fffab9448e8 [ 187.312025][ T9271] [ 187.483145][ T9272] random: crng reseeded on system resumption [ 187.545603][ T9293] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1920'. [ 187.674354][ T9304] netlink: 'syz.2.1923': attribute type 30 has an invalid length. [ 187.818029][ T9310] smc: net device bond0 erased user defined pnetid SYZ0 [ 188.045654][ T9332] GUP no longer grows the stack in syz.2.1934 (9332): 200000004000-20000000a000 (200000002000) [ 188.056123][ T9332] CPU: 0 UID: 0 PID: 9332 Comm: syz.2.1934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.056151][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.056161][ T9332] Call Trace: [ 188.056168][ T9332] [ 188.056176][ T9332] __dump_stack+0x1d/0x30 [ 188.056271][ T9332] dump_stack_lvl+0x95/0xd0 [ 188.056289][ T9332] dump_stack+0x15/0x1b [ 188.056306][ T9332] __get_user_pages+0x1979/0x1ed0 [ 188.056354][ T9332] ? __rcu_read_unlock+0x4f/0x70 [ 188.056395][ T9332] get_user_pages_remote+0x1d5/0x6c0 [ 188.056428][ T9332] __access_remote_vm+0x15c/0x590 [ 188.056464][ T9332] access_remote_vm+0x32/0x40 [ 188.056572][ T9332] proc_pid_cmdline_read+0x32b/0x6c0 [ 188.056595][ T9332] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 188.056615][ T9332] vfs_readv+0x3fb/0x690 [ 188.056706][ T9332] ? finish_task_switch+0x7a/0x2a0 [ 188.056752][ T9332] __x64_sys_preadv+0xfd/0x1c0 [ 188.056776][ T9332] x64_sys_call+0x2805/0x3000 [ 188.056825][ T9332] do_syscall_64+0xca/0x2b0 [ 188.056875][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.056893][ T9332] RIP: 0033:0x7f1e2579f749 [ 188.056906][ T9332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.056921][ T9332] RSP: 002b:00007f1e241de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 188.056977][ T9332] RAX: ffffffffffffffda RBX: 00007f1e259f6090 RCX: 00007f1e2579f749 [ 188.056989][ T9332] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 188.057003][ T9332] RBP: 00007f1e25823f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.057016][ T9332] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 188.057029][ T9332] R13: 00007f1e259f6128 R14: 00007f1e259f6090 R15: 00007fffab9448e8 [ 188.057048][ T9332] [ 188.984364][ T9358] Alternate GPT is invalid, using primary GPT. [ 188.990732][ T9358] loop3: p2 p3 p7 [ 189.091958][ T9369] EXT4-fs mount: 69 callbacks suppressed [ 189.091974][ T9369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.106315][ T9375] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1952'. [ 189.110228][ T9369] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.130032][ T9369] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.312097][ T9388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1956'. [ 189.741897][ T9414] 9p: Bad value for 'rfdno' [ 190.170124][ T9420] FAULT_INJECTION: forcing a failure. [ 190.170124][ T9420] name failslab, interval 1, probability 0, space 0, times 0 [ 190.182783][ T9420] CPU: 1 UID: 0 PID: 9420 Comm: syz.6.1968 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.182863][ T9420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.182876][ T9420] Call Trace: [ 190.182883][ T9420] [ 190.182891][ T9420] __dump_stack+0x1d/0x30 [ 190.182914][ T9420] dump_stack_lvl+0x95/0xd0 [ 190.182993][ T9420] dump_stack+0x15/0x1b [ 190.183014][ T9420] should_fail_ex+0x265/0x280 [ 190.183035][ T9420] should_failslab+0x8c/0xb0 [ 190.183074][ T9420] kmem_cache_alloc_noprof+0x69/0x4b0 [ 190.183168][ T9420] ? skb_clone+0x151/0x1f0 [ 190.183266][ T9420] skb_clone+0x151/0x1f0 [ 190.183289][ T9420] __netlink_deliver_tap+0x2c9/0x500 [ 190.183320][ T9420] ? netlink_unicast+0x37e/0x690 [ 190.183342][ T9420] netlink_unicast+0x66b/0x690 [ 190.183480][ T9420] netlink_sendmsg+0x58b/0x6b0 [ 190.183507][ T9420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.183565][ T9420] __sock_sendmsg+0x145/0x180 [ 190.183581][ T9420] ____sys_sendmsg+0x31e/0x4a0 [ 190.183620][ T9420] ___sys_sendmsg+0x17b/0x1d0 [ 190.183673][ T9420] __x64_sys_sendmsg+0xd4/0x160 [ 190.183698][ T9420] x64_sys_call+0x17ba/0x3000 [ 190.183721][ T9420] do_syscall_64+0xca/0x2b0 [ 190.183778][ T9420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.183795][ T9420] RIP: 0033:0x7efeed39f749 [ 190.183809][ T9420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.183827][ T9420] RSP: 002b:00007efeebe07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.183859][ T9420] RAX: ffffffffffffffda RBX: 00007efeed5f5fa0 RCX: 00007efeed39f749 [ 190.183869][ T9420] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 190.183879][ T9420] RBP: 00007efeebe07090 R08: 0000000000000000 R09: 0000000000000000 [ 190.183889][ T9420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.183901][ T9420] R13: 00007efeed5f6038 R14: 00007efeed5f5fa0 R15: 00007ffd338c8318 [ 190.184017][ T9420] [ 190.695209][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 190.695224][ T29] audit: type=1326 audit(1768139846.577:10824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.719743][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 190.757599][ T9426] set_capacity_and_notify: 5 callbacks suppressed [ 190.757614][ T9426] loop3: detected capacity change from 0 to 2048 [ 190.774439][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 190.783394][ T9435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1975'. [ 190.798991][ T29] audit: type=1326 audit(1768139846.587:10825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.822564][ T29] audit: type=1326 audit(1768139846.587:10826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.846074][ T29] audit: type=1326 audit(1768139846.587:10827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.853599][ T9435] bridge1: entered promiscuous mode [ 190.869568][ T29] audit: type=1326 audit(1768139846.587:10828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.876180][ T9435] bridge1: entered allmulticast mode [ 190.899774][ T29] audit: type=1326 audit(1768139846.587:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.928644][ T29] audit: type=1326 audit(1768139846.587:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.952251][ T29] audit: type=1326 audit(1768139846.587:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.975753][ T29] audit: type=1326 audit(1768139846.587:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 190.999301][ T29] audit: type=1326 audit(1768139846.587:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9427 comm="syz.6.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 191.041923][ T9426] Alternate GPT is invalid, using primary GPT. [ 191.048322][ T9426] loop3: p2 p3 p7 [ 191.198639][ T9453] FAULT_INJECTION: forcing a failure. [ 191.198639][ T9453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.211827][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.3.1981 Not tainted syzkaller #0 PREEMPT(voluntary) [ 191.211859][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.211871][ T9453] Call Trace: [ 191.211886][ T9453] [ 191.211893][ T9453] __dump_stack+0x1d/0x30 [ 191.211913][ T9453] dump_stack_lvl+0x95/0xd0 [ 191.211931][ T9453] dump_stack+0x15/0x1b [ 191.211952][ T9453] should_fail_ex+0x265/0x280 [ 191.212042][ T9453] should_fail+0xb/0x20 [ 191.212058][ T9453] should_fail_usercopy+0x1a/0x20 [ 191.212083][ T9453] _copy_from_user+0x1c/0xb0 [ 191.212111][ T9453] ___sys_sendmsg+0xc1/0x1d0 [ 191.212261][ T9453] __x64_sys_sendmsg+0xd4/0x160 [ 191.212294][ T9453] x64_sys_call+0x17ba/0x3000 [ 191.212319][ T9453] do_syscall_64+0xca/0x2b0 [ 191.212486][ T9453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.212508][ T9453] RIP: 0033:0x7f9e22b6f749 [ 191.212522][ T9453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.212607][ T9453] RSP: 002b:00007f9e215cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.212636][ T9453] RAX: ffffffffffffffda RBX: 00007f9e22dc5fa0 RCX: 00007f9e22b6f749 [ 191.212650][ T9453] RDX: 0000000004008090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 191.212663][ T9453] RBP: 00007f9e215cf090 R08: 0000000000000000 R09: 0000000000000000 [ 191.212682][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.212695][ T9453] R13: 00007f9e22dc6038 R14: 00007f9e22dc5fa0 R15: 00007fffafeddd58 [ 191.212759][ T9453] [ 191.445556][ T9456] lo speed is unknown, defaulting to 1000 [ 191.451945][ T9456] lo speed is unknown, defaulting to 1000 [ 191.874489][ T9461] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 192.060943][ T9462] loop3: detected capacity change from 0 to 512 [ 192.112627][ T9462] EXT4-fs: Ignoring removed oldalloc option [ 192.161429][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1989'. [ 192.182136][ T9462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.250550][ T9462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.331482][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1991'. [ 192.469044][ T9491] loop3: detected capacity change from 0 to 2048 [ 192.501965][ T9491] Alternate GPT is invalid, using primary GPT. [ 192.508322][ T9491] loop3: p2 p3 p7 [ 192.569479][ T9495] lo speed is unknown, defaulting to 1000 [ 192.575784][ T9495] lo speed is unknown, defaulting to 1000 [ 193.112289][ T9507] loop6: detected capacity change from 0 to 512 [ 193.151260][ T9507] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.207185][ T9507] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.233313][ T9507] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.308284][ T9515] 9p: Bad value for 'wfdno' [ 193.387429][ T9523] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2007'. [ 193.624263][ T9538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2012'. [ 194.224651][ T9550] loop3: detected capacity change from 0 to 512 [ 194.252083][ T9550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.279012][ T9550] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.301010][ T9550] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.369437][ T9554] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2019'. [ 194.400933][ T9555] 9p: Bad value for 'wfdno' [ 194.673204][ T9567] lo speed is unknown, defaulting to 1000 [ 194.679660][ T9567] lo speed is unknown, defaulting to 1000 [ 195.183107][ T9577] loop6: detected capacity change from 0 to 1024 [ 195.237587][ T9577] EXT4-fs: Ignoring removed orlov option [ 195.279141][ T9579] loop3: detected capacity change from 0 to 1024 [ 195.348755][ T9579] EXT4-fs: Ignoring removed bh option [ 195.364764][ T9577] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.384004][ T9579] EXT4-fs: inline encryption not supported [ 195.400703][ T9579] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.444254][ T9577] FAULT_INJECTION: forcing a failure. [ 195.444254][ T9577] name failslab, interval 1, probability 0, space 0, times 0 [ 195.456977][ T9577] CPU: 0 UID: 0 PID: 9577 Comm: syz.6.2027 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.457003][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.457016][ T9577] Call Trace: [ 195.457023][ T9577] [ 195.457031][ T9577] __dump_stack+0x1d/0x30 [ 195.457063][ T9577] dump_stack_lvl+0x95/0xd0 [ 195.457086][ T9577] dump_stack+0x15/0x1b [ 195.457106][ T9577] should_fail_ex+0x265/0x280 [ 195.457125][ T9577] should_failslab+0x8c/0xb0 [ 195.457156][ T9577] __kmalloc_cache_noprof+0x65/0x4c0 [ 195.457179][ T9577] ? alloc_pipe_info+0xae/0x340 [ 195.457200][ T9577] alloc_pipe_info+0xae/0x340 [ 195.457241][ T9577] splice_direct_to_actor+0x592/0x680 [ 195.457262][ T9577] ? kstrtouint_from_user+0x9f/0xf0 [ 195.457285][ T9577] ? __pfx_direct_splice_actor+0x10/0x10 [ 195.457362][ T9577] ? __rcu_read_unlock+0x4f/0x70 [ 195.457389][ T9577] ? get_pid_task+0x96/0xd0 [ 195.457417][ T9577] ? avc_policy_seqno+0x15/0x30 [ 195.457451][ T9577] ? selinux_file_permission+0x1e2/0x320 [ 195.457481][ T9577] do_splice_direct+0xda/0x150 [ 195.457501][ T9577] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 195.457527][ T9577] do_sendfile+0x380/0x650 [ 195.457556][ T9577] __x64_sys_sendfile64+0x105/0x150 [ 195.457576][ T9577] x64_sys_call+0x2db1/0x3000 [ 195.457595][ T9577] do_syscall_64+0xca/0x2b0 [ 195.457629][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.457692][ T9577] RIP: 0033:0x7efeed39f749 [ 195.457705][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.457720][ T9577] RSP: 002b:00007efeebe07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 195.457738][ T9577] RAX: ffffffffffffffda RBX: 00007efeed5f5fa0 RCX: 00007efeed39f749 [ 195.457751][ T9577] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 195.457763][ T9577] RBP: 00007efeebe07090 R08: 0000000000000000 R09: 0000000000000000 [ 195.457791][ T9577] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 195.457801][ T9577] R13: 00007efeed5f6038 R14: 00007efeed5f5fa0 R15: 00007ffd338c8318 [ 195.457816][ T9577] [ 195.693906][ T9579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 195.704402][ T9579] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2028: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.718719][ T9579] __quota_error: 473 callbacks suppressed [ 195.718730][ T9579] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 195.736148][ T9579] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2028: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.753213][ T9579] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 195.761986][ T9579] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2028: Failed to acquire dquot type 0 [ 195.774649][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.805848][ T9579] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 195.825460][ T9579] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2028: mark_inode_dirty error [ 195.857247][ T9579] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 195.877702][ T9579] EXT4-fs (loop3): 1 orphan inode deleted [ 195.883847][ T9579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.896440][ T5615] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.913249][ T5615] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 195.921671][ T5615] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0 [ 195.960331][ T9589] 9p: Bad value for 'rfdno' [ 195.982009][ T9579] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.006803][ T9579] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.2028: Invalid inode table block 1 in block_group 0 [ 196.020382][ T29] audit: type=1326 audit(1768139851.907:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.045229][ T9579] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 196.060357][ T9579] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.2028: mark_inode_dirty error [ 196.063551][ T29] audit: type=1326 audit(1768139851.927:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.094958][ T29] audit: type=1326 audit(1768139851.927:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.118555][ T29] audit: type=1326 audit(1768139851.927:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.142148][ T29] audit: type=1326 audit(1768139851.927:11311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.165638][ T29] audit: type=1326 audit(1768139851.927:11312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.189238][ T29] audit: type=1326 audit(1768139851.927:11313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeed39f749 code=0x7ffc0000 [ 196.279436][ T9606] loop3: detected capacity change from 0 to 512 [ 196.286346][ T9606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.301439][ T9606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.314236][ T9606] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.066232][ T9626] lo speed is unknown, defaulting to 1000 [ 197.072537][ T9626] lo speed is unknown, defaulting to 1000 [ 197.187347][ T9627] loop6: detected capacity change from 0 to 512 [ 197.198276][ T9627] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.211945][ T9627] EXT4-fs (loop6): 1 truncate cleaned up [ 197.218464][ T9627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.979091][ T9633] FAULT_INJECTION: forcing a failure. [ 197.979091][ T9633] name failslab, interval 1, probability 0, space 0, times 0 [ 197.991795][ T9633] CPU: 1 UID: 0 PID: 9633 Comm: syz.7.2043 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.991822][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.991835][ T9633] Call Trace: [ 197.991841][ T9633] [ 197.991849][ T9633] __dump_stack+0x1d/0x30 [ 197.991873][ T9633] dump_stack_lvl+0x95/0xd0 [ 197.991948][ T9633] dump_stack+0x15/0x1b [ 197.991964][ T9633] should_fail_ex+0x265/0x280 [ 197.991986][ T9633] should_failslab+0x8c/0xb0 [ 197.992004][ T9633] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 197.992036][ T9633] ? __alloc_skb+0x2ff/0x4b0 [ 197.992149][ T9633] __alloc_skb+0x2ff/0x4b0 [ 197.992219][ T9633] ? __alloc_skb+0x228/0x4b0 [ 197.992278][ T9633] netlink_alloc_large_skb+0xbf/0xf0 [ 197.992333][ T9633] netlink_sendmsg+0x3cf/0x6b0 [ 197.992365][ T9633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.992394][ T9633] __sock_sendmsg+0x145/0x180 [ 197.992431][ T9633] ____sys_sendmsg+0x31e/0x4a0 [ 197.992463][ T9633] ___sys_sendmsg+0x17b/0x1d0 [ 197.992495][ T9633] __x64_sys_sendmsg+0xd4/0x160 [ 197.992585][ T9633] x64_sys_call+0x17ba/0x3000 [ 197.992610][ T9633] do_syscall_64+0xca/0x2b0 [ 197.992643][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.992665][ T9633] RIP: 0033:0x7fb1dffef749 [ 197.992740][ T9633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.992754][ T9633] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.992773][ T9633] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 197.992787][ T9633] RDX: 0000000020000000 RSI: 0000200000009b40 RDI: 0000000000000005 [ 197.992800][ T9633] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 197.992816][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.992829][ T9633] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 197.992848][ T9633] [ 198.329237][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.447483][ T9647] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2049'. [ 198.457305][ T9642] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2047'. [ 198.468570][ T9642] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 198.542307][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 198.731936][ T9668] lo speed is unknown, defaulting to 1000 [ 198.746121][ T9668] lo speed is unknown, defaulting to 1000 [ 198.772990][ T9673] pimreg: entered allmulticast mode [ 198.810734][ T9673] pimreg: left allmulticast mode [ 198.867653][ T9676] netlink: 'syz.7.2057': attribute type 1 has an invalid length. [ 198.896259][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 198.905251][ T9678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 199.008090][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 199.089574][ T9686] FAULT_INJECTION: forcing a failure. [ 199.089574][ T9686] name failslab, interval 1, probability 0, space 0, times 0 [ 199.102318][ T9686] CPU: 1 UID: 0 PID: 9686 Comm: syz.7.2065 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.102346][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.102417][ T9686] Call Trace: [ 199.102423][ T9686] [ 199.102429][ T9686] __dump_stack+0x1d/0x30 [ 199.102451][ T9686] dump_stack_lvl+0x95/0xd0 [ 199.102473][ T9686] dump_stack+0x15/0x1b [ 199.102492][ T9686] should_fail_ex+0x265/0x280 [ 199.102542][ T9686] should_failslab+0x8c/0xb0 [ 199.102563][ T9686] kmem_cache_alloc_noprof+0x69/0x4b0 [ 199.102583][ T9686] ? getname_flags+0x80/0x3b0 [ 199.102602][ T9686] getname_flags+0x80/0x3b0 [ 199.102621][ T9686] user_path_at+0x28/0x130 [ 199.102686][ T9686] __x64_sys_umount+0x85/0xe0 [ 199.102718][ T9686] x64_sys_call+0xd6a/0x3000 [ 199.102746][ T9686] do_syscall_64+0xca/0x2b0 [ 199.102774][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.102801][ T9686] RIP: 0033:0x7fb1dffef749 [ 199.102905][ T9686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.102959][ T9686] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.102975][ T9686] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 199.103123][ T9686] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000002040 [ 199.103136][ T9686] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 199.103149][ T9686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.103162][ T9686] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 199.103177][ T9686] [ 199.105585][ T9688] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 199.277398][ T9688] SELinux: failed to load policy [ 199.299128][ T9690] lo speed is unknown, defaulting to 1000 [ 199.305213][ T9690] lo speed is unknown, defaulting to 1000 [ 199.407804][ T9695] 9p: Bad value for 'wfdno' [ 199.581015][ T9700] loop6: detected capacity change from 0 to 2048 [ 199.639227][ T9700] Alternate GPT is invalid, using primary GPT. [ 199.645605][ T9700] loop6: p2 p3 p7 [ 199.713716][ T9706] FAULT_INJECTION: forcing a failure. [ 199.713716][ T9706] name failslab, interval 1, probability 0, space 0, times 0 [ 199.726354][ T9706] CPU: 1 UID: 0 PID: 9706 Comm: syz.7.2073 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.726413][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.726426][ T9706] Call Trace: [ 199.726432][ T9706] [ 199.726439][ T9706] __dump_stack+0x1d/0x30 [ 199.726464][ T9706] dump_stack_lvl+0x95/0xd0 [ 199.726494][ T9706] dump_stack+0x15/0x1b [ 199.726514][ T9706] should_fail_ex+0x265/0x280 [ 199.726538][ T9706] should_failslab+0x8c/0xb0 [ 199.726556][ T9706] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 199.726694][ T9706] ? __get_vm_area_node+0x106/0x1d0 [ 199.726717][ T9706] __get_vm_area_node+0x106/0x1d0 [ 199.726737][ T9706] __vmalloc_node_range_noprof+0x28e/0x1310 [ 199.726758][ T9706] ? sel_write_load+0x157/0x380 [ 199.726801][ T9706] ? _parse_integer_limit+0x170/0x190 [ 199.726824][ T9706] ? _parse_integer+0x27/0x40 [ 199.726842][ T9706] ? __rcu_read_unlock+0x4f/0x70 [ 199.726908][ T9706] ? avc_has_perm_noaudit+0xab/0x130 [ 199.726936][ T9706] ? sel_write_load+0x157/0x380 [ 199.726960][ T9706] vmalloc_noprof+0x82/0xc0 [ 199.726989][ T9706] ? sel_write_load+0x157/0x380 [ 199.727038][ T9706] sel_write_load+0x157/0x380 [ 199.727075][ T9706] ? __pfx_sel_write_load+0x10/0x10 [ 199.727103][ T9706] vfs_write+0x269/0x960 [ 199.727122][ T9706] ? __rcu_read_unlock+0x4f/0x70 [ 199.727142][ T9706] ? __fget_files+0x184/0x1c0 [ 199.727166][ T9706] ? mutex_lock+0x58/0x90 [ 199.727193][ T9706] ksys_write+0xda/0x1a0 [ 199.727214][ T9706] __x64_sys_write+0x40/0x50 [ 199.727233][ T9706] x64_sys_call+0x2847/0x3000 [ 199.727291][ T9706] do_syscall_64+0xca/0x2b0 [ 199.727319][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.727340][ T9706] RIP: 0033:0x7fb1dffef749 [ 199.727356][ T9706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.727452][ T9706] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.727471][ T9706] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 199.727485][ T9706] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000005 [ 199.727498][ T9706] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 199.727511][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.727574][ T9706] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 199.727589][ T9706] [ 199.727595][ T9706] syz.7.2073: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 199.978451][ T9706] CPU: 1 UID: 0 PID: 9706 Comm: syz.7.2073 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.978474][ T9706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.978486][ T9706] Call Trace: [ 199.978492][ T9706] [ 199.978498][ T9706] __dump_stack+0x1d/0x30 [ 199.978521][ T9706] dump_stack_lvl+0x95/0xd0 [ 199.978543][ T9706] dump_stack+0x15/0x1b [ 199.978646][ T9706] warn_alloc+0x12b/0x1a0 [ 199.978681][ T9706] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 199.978702][ T9706] ? _parse_integer_limit+0x170/0x190 [ 199.978721][ T9706] ? _parse_integer+0x27/0x40 [ 199.978735][ T9706] ? __rcu_read_unlock+0x4f/0x70 [ 199.978816][ T9706] ? avc_has_perm_noaudit+0xab/0x130 [ 199.978920][ T9706] ? sel_write_load+0x157/0x380 [ 199.978946][ T9706] vmalloc_noprof+0x82/0xc0 [ 199.978970][ T9706] ? sel_write_load+0x157/0x380 [ 199.979040][ T9706] sel_write_load+0x157/0x380 [ 199.979065][ T9706] ? __pfx_sel_write_load+0x10/0x10 [ 199.979090][ T9706] vfs_write+0x269/0x960 [ 199.979109][ T9706] ? __rcu_read_unlock+0x4f/0x70 [ 199.979126][ T9706] ? __fget_files+0x184/0x1c0 [ 199.979144][ T9706] ? mutex_lock+0x58/0x90 [ 199.979166][ T9706] ksys_write+0xda/0x1a0 [ 199.979239][ T9706] __x64_sys_write+0x40/0x50 [ 199.979270][ T9706] x64_sys_call+0x2847/0x3000 [ 199.979312][ T9706] do_syscall_64+0xca/0x2b0 [ 199.979399][ T9706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.979416][ T9706] RIP: 0033:0x7fb1dffef749 [ 199.979429][ T9706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.979515][ T9706] RSP: 002b:00007fb1dea57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 199.979530][ T9706] RAX: ffffffffffffffda RBX: 00007fb1e0245fa0 RCX: 00007fb1dffef749 [ 199.979541][ T9706] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000005 [ 199.979551][ T9706] RBP: 00007fb1dea57090 R08: 0000000000000000 R09: 0000000000000000 [ 199.979561][ T9706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.979571][ T9706] R13: 00007fb1e0246038 R14: 00007fb1e0245fa0 R15: 00007fffbfee7808 [ 199.979586][ T9706] [ 200.190209][ T9706] Mem-Info: [ 200.193357][ T9706] active_anon:27573 inactive_anon:13 isolated_anon:0 [ 200.193357][ T9706] active_file:10379 inactive_file:14762 isolated_file:0 [ 200.193357][ T9706] unevictable:12 dirty:441 writeback:0 [ 200.193357][ T9706] slab_reclaimable:3564 slab_unreclaimable:17816 [ 200.193357][ T9706] mapped:29717 shmem:19702 pagetables:1405 [ 200.193357][ T9706] sec_pagetables:0 bounce:0 [ 200.193357][ T9706] kernel_misc_reclaimable:0 [ 200.193357][ T9706] free:1835008 free_pcp:12468 free_cma:0 [ 200.238740][ T9706] Node 0 active_anon:110408kB inactive_anon:52kB active_file:41516kB inactive_file:59048kB unevictable:48kB isolated(anon):0kB isolated(file):0kB mapped:118868kB dirty:1764kB writeback:0kB shmem:78808kB kernel_stack:4336kB pagetables:5388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.266575][ T9706] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.296195][ T9706] lowmem_reserve[]: 0 2880 7859 7859 [ 200.301529][ T9706] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 200.332887][ T9706] lowmem_reserve[]: 0 0 4978 4978 [ 200.337942][ T9706] Node 0 Normal free:4378552kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110524kB inactive_anon:52kB active_file:41516kB inactive_file:59048kB unevictable:48kB writepending:1764kB zspages:0kB present:5242880kB managed:5098240kB mlocked:48kB bounce:0kB free_pcp:46328kB local_pcp:32916kB free_cma:0kB [ 200.371497][ T9706] lowmem_reserve[]: 0 0 0 0 [ 200.376010][ T9706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.388828][ T9706] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 200.405121][ T9706] Node 0 Normal: 1112*4kB (UM) 579*8kB (UM) 107*16kB (UME) 48*32kB (UM) 74*64kB (UM) 42*128kB (UME) 11*256kB (UME) 14*512kB (UM) 12*1024kB (UME) 8*2048kB (U) 1054*4096kB (M) = 4378280kB [ 200.423774][ T9706] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 200.433112][ T9706] 44904 total pagecache pages [ 200.437789][ T9706] 37 pages in swap cache [ 200.442080][ T9706] Free swap = 124848kB [ 200.446250][ T9706] Total swap = 124996kB [ 200.450462][ T9706] 2097051 pages RAM [ 200.454258][ T9706] 0 pages HighMem/MovableOnly [ 200.458953][ T9706] 81271 pages reserved [ 201.235693][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.322455][ T9734] loop6: detected capacity change from 0 to 512 [ 201.329537][ T9734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 201.409915][ T9734] EXT4-fs (loop6): 1 truncate cleaned up [ 201.416136][ T9734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.651109][ T9748] 9p: Bad value for 'wfdno' [ 201.663465][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 201.663479][ T29] audit: type=1326 audit(1768139857.547:11443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 201.700125][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.709556][ T29] audit: type=1326 audit(1768139857.577:11444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 201.733056][ T29] audit: type=1326 audit(1768139857.577:11445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 201.756656][ T29] audit: type=1326 audit(1768139857.577:11446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 201.780166][ T29] audit: type=1326 audit(1768139857.577:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 201.803871][ T29] audit: type=1326 audit(1768139857.577:11448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.7.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 201.830617][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2091'. [ 201.853395][ T29] audit: type=1326 audit(1768139857.727:11449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 201.876964][ T29] audit: type=1326 audit(1768139857.727:11450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 201.900630][ T29] audit: type=1326 audit(1768139857.727:11451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 201.924144][ T29] audit: type=1326 audit(1768139857.727:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f356461f749 code=0x7ffc0000 [ 202.062091][ T9768] 9p: Bad value for 'wfdno' [ 202.148093][ T9771] loop6: detected capacity change from 0 to 512 [ 202.155239][ T9771] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.220916][ T9771] EXT4-fs (loop6): 1 truncate cleaned up [ 202.227206][ T9771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.708201][ T9798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2107'. [ 202.806457][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.927431][ T9817] loop3: detected capacity change from 0 to 1024 [ 202.951601][ T9817] EXT4-fs: Ignoring removed orlov option [ 202.989283][ T9817] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 203.026710][ T9817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.648525][ T9815] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.2114: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 203.908046][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.074867][ T9845] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2124'. [ 204.253902][ T9859] smc: net device bond0 applied user defined pnetid SYZ0 [ 204.276758][ T9859] smc: net device bond0 erased user defined pnetid SYZ0 [ 204.301363][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 204.331157][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 204.791208][ T9873] lo speed is unknown, defaulting to 1000 [ 204.797463][ T9873] lo speed is unknown, defaulting to 1000 [ 205.707211][ T9902] loop6: detected capacity change from 0 to 1024 [ 205.734067][ T9902] EXT4-fs: Ignoring removed orlov option [ 205.760301][ T9902] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 205.829932][ T9902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.873236][ T9902] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.2147: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 205.925039][ T9912] lo speed is unknown, defaulting to 1000 [ 205.931526][ T9912] lo speed is unknown, defaulting to 1000 [ 206.064624][ T9913] loop3: detected capacity change from 0 to 512 [ 206.076796][ T9913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.090326][ T9913] EXT4-fs (loop3): 1 truncate cleaned up [ 206.096369][ T9913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.173126][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.524293][ T9919] loop6: detected capacity change from 0 to 512 [ 206.530888][ T9919] EXT4-fs: Ignoring removed i_version option [ 206.536878][ T9919] EXT4-fs: Ignoring removed bh option [ 206.667873][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.693774][ T9919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.706452][ T9919] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.842358][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 206.842371][ T29] audit: type=1326 audit(1768139862.727:11705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 206.980661][ T29] audit: type=1326 audit(1768139862.757:11706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.004201][ T29] audit: type=1326 audit(1768139862.757:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.027678][ T29] audit: type=1326 audit(1768139862.757:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.051006][ T29] audit: type=1326 audit(1768139862.757:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.074521][ T29] audit: type=1326 audit(1768139862.757:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.098063][ T29] audit: type=1326 audit(1768139862.757:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.121893][ T29] audit: type=1326 audit(1768139862.757:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.145701][ T29] audit: type=1326 audit(1768139862.757:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.169293][ T29] audit: type=1326 audit(1768139862.757:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9924 comm="syz.2.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2579f749 code=0x7ffc0000 [ 207.472597][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 207.483769][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 207.560761][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 207.655722][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 207.664638][ T9943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2159'. [ 207.786960][ T9947] smc: net device bond0 applied user defined pnetid SYZ0 [ 207.814194][ T9947] smc: net device bond0 erased user defined pnetid SYZ0 [ 208.180956][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.225998][ T9964] smc: net device bond0 applied user defined pnetid SYZ0 [ 208.271388][ T9964] smc: net device bond0 erased user defined pnetid SYZ0 [ 208.308185][ T9968] loop3: detected capacity change from 0 to 512 [ 208.337052][ T9968] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.391652][ T9968] EXT4-fs (loop3): 1 truncate cleaned up [ 208.397882][ T9968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.473238][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2173'. [ 208.585794][ T9980] smc: net device bond0 applied user defined pnetid SYZ0 [ 208.602409][ T9980] smc: net device bond0 erased user defined pnetid SYZ0 [ 209.763925][ T9993] lo speed is unknown, defaulting to 1000 [ 209.770344][ T9993] lo speed is unknown, defaulting to 1000 [ 210.533466][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.837483][T10014] smc: net device bond0 applied user defined pnetid SYZ0 [ 210.867185][T10014] smc: net device bond0 erased user defined pnetid SYZ0 [ 210.912613][T10021] loop6: detected capacity change from 0 to 1024 [ 210.928720][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2190'. [ 210.929495][T10021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.960409][T10021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.979875][T10021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 210.987961][T10021] System zones: 0-1, 3-36 [ 211.000551][T10021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.060175][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2189'. [ 211.070193][T10021] siw: device registration error -23 [ 211.088654][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.306979][T10049] smc: net device bond0 applied user defined pnetid SYZ0 [ 211.328659][T10049] smc: net device bond0 erased user defined pnetid SYZ0 [ 211.466519][T10055] loop6: detected capacity change from 0 to 1024 [ 211.482429][T10050] lo speed is unknown, defaulting to 1000 [ 211.489782][T10055] EXT4-fs: Ignoring removed orlov option [ 211.499930][T10055] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 211.510235][T10050] lo speed is unknown, defaulting to 1000 [ 211.530614][T10055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.663301][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.752718][T10062] loop6: detected capacity change from 0 to 1024 [ 211.769145][T10062] EXT4-fs: Ignoring removed bh option [ 211.777892][T10062] EXT4-fs: inline encryption not supported [ 211.799452][T10062] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.820410][T10062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 211.839708][T10062] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2205: lblock 2 mapped to illegal pblock 2 (length 1) [ 211.869002][T10062] __quota_error: 219 callbacks suppressed [ 211.869015][T10062] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 211.910516][T10062] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2205: lblock 0 mapped to illegal pblock 48 (length 1) [ 211.939464][T10062] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 211.948250][T10062] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2205: Failed to acquire dquot type 0 [ 212.029124][T10062] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 212.058974][T10062] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2205: mark_inode_dirty error [ 212.088932][T10062] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 212.106142][ T29] audit: type=1326 audit(1768139867.987:11934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.113795][T10062] EXT4-fs (loop6): 1 orphan inode deleted [ 212.139385][ T5615] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.173954][ T5615] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 212.179244][T10062] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.182476][ T5615] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0 [ 212.211081][ T29] audit: type=1326 audit(1768139867.987:11935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.234718][ T29] audit: type=1326 audit(1768139868.027:11936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.258393][ T29] audit: type=1326 audit(1768139868.027:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.277874][T10071] loop3: detected capacity change from 0 to 512 [ 212.282117][ T29] audit: type=1326 audit(1768139868.027:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.311900][ T29] audit: type=1326 audit(1768139868.047:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.335494][ T29] audit: type=1326 audit(1768139868.047:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10064 comm="syz.7.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1dffef749 code=0x7ffc0000 [ 212.360537][T10062] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.372080][T10062] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.2205: Invalid inode table block 1 in block_group 0 [ 212.391214][T10071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.413995][T10071] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.429000][T10062] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 212.435175][T10071] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.451171][T10062] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.2205: mark_inode_dirty error [ 212.550416][T10085] 9p: Bad value for 'wfdno' [ 212.574673][T10087] smc: net device bond0 applied user defined pnetid SYZ0 [ 212.590730][T10087] smc: net device bond0 erased user defined pnetid SYZ0 [ 212.674956][T10093] loop6: detected capacity change from 0 to 1024 [ 212.689849][T10093] EXT4-fs: Ignoring removed orlov option [ 212.703298][T10093] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 212.735554][T10093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.776454][T10093] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.2218: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 212.867049][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.078147][T10102] loop6: detected capacity change from 0 to 128 [ 213.144462][T10108] FAULT_INJECTION: forcing a failure. [ 213.144462][T10108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.157622][T10108] CPU: 0 UID: 0 PID: 10108 Comm: syz.6.2221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.157679][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.157689][T10108] Call Trace: [ 213.157694][T10108] [ 213.157761][T10108] __dump_stack+0x1d/0x30 [ 213.157781][T10108] dump_stack_lvl+0x95/0xd0 [ 213.157799][T10108] dump_stack+0x15/0x1b [ 213.157817][T10108] should_fail_ex+0x265/0x280 [ 213.157842][T10108] should_fail+0xb/0x20 [ 213.157902][T10108] should_fail_usercopy+0x1a/0x20 [ 213.157922][T10108] _copy_from_user+0x1c/0xb0 [ 213.158002][T10108] __sys_bpf+0x183/0x7c0 [ 213.158095][T10108] __x64_sys_bpf+0x41/0x50 [ 213.158132][T10108] x64_sys_call+0x28e1/0x3000 [ 213.158206][T10108] do_syscall_64+0xca/0x2b0 [ 213.158301][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.158319][T10108] RIP: 0033:0x7efeed39f749 [ 213.158332][T10108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.158428][T10108] RSP: 002b:00007efeebe07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.158445][T10108] RAX: ffffffffffffffda RBX: 00007efeed5f5fa0 RCX: 00007efeed39f749 [ 213.158456][T10108] RDX: 0000000000000094 RSI: 0000200000000900 RDI: 0000000000000005 [ 213.158469][T10108] RBP: 00007efeebe07090 R08: 0000000000000000 R09: 0000000000000000 [ 213.158508][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.158521][T10108] R13: 00007efeed5f6038 R14: 00007efeed5f5fa0 R15: 00007ffd338c8318 [ 213.158540][T10108] [ 213.465518][T10112] loop6: detected capacity change from 0 to 512 [ 213.472703][T10112] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 213.488107][T10112] EXT4-fs (loop6): 1 truncate cleaned up [ 213.494161][T10112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.550758][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.594785][T10123] loop6: detected capacity change from 0 to 1024 [ 213.599789][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2227'. [ 213.616629][T10123] EXT4-fs: Ignoring removed bh option [ 213.644588][T10123] EXT4-fs: inline encryption not supported [ 213.652198][T10123] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.664243][T10123] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 213.676295][T10123] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2226: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.694505][T10131] smc: net device bond0 applied user defined pnetid SYZ0 [ 213.701814][T10123] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2226: lblock 0 mapped to illegal pblock 48 (length 1) [ 213.716556][T10131] smc: net device bond0 erased user defined pnetid SYZ0 [ 213.717203][T10132] 9p: Bad value for 'wfdno' [ 213.732726][T10123] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2226: Failed to acquire dquot type 0 [ 213.770791][T10123] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 213.797575][T10123] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2226: mark_inode_dirty error [ 213.812183][T10123] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 213.823022][T10123] EXT4-fs (loop6): 1 orphan inode deleted [ 213.833772][T10123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.846313][ T5615] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.861852][T10136] loop3: detected capacity change from 0 to 512 [ 213.868194][ T5615] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 0 [ 213.883736][T10123] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.902584][T10136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.915496][T10123] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.2226: Invalid inode table block 1 in block_group 0 [ 213.918517][T10136] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.940791][T10123] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 213.959466][T10136] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.970741][T10123] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.2226: mark_inode_dirty error [ 214.064054][T10145] 9p: Bad value for 'wfdno' [ 214.372284][T10160] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2238'. [ 214.430287][T10162] loop6: detected capacity change from 0 to 1024 [ 214.437750][T10162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.444777][T10162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.453209][T10162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 214.461395][T10162] System zones: 0-1, 3-36 [ 214.471605][T10162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.489663][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2239'. [ 214.500642][T10168] lo speed is unknown, defaulting to 1000 [ 214.506574][T10168] lo speed is unknown, defaulting to 1000 [ 214.543886][T10172] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'. [ 214.561101][T10162] siw: device registration error -23 [ 214.583781][ T3667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.672552][T10202] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2245'. [ 214.758422][T10209] FAULT_INJECTION: forcing a failure. [ 214.758422][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 214.771239][T10209] CPU: 1 UID: 0 PID: 10209 Comm: syz.3.2248 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.771310][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.771322][T10209] Call Trace: [ 214.771328][T10209] [ 214.771335][T10209] __dump_stack+0x1d/0x30 [ 214.771359][T10209] dump_stack_lvl+0x95/0xd0 [ 214.771380][T10209] dump_stack+0x15/0x1b [ 214.771473][T10209] should_fail_ex+0x265/0x280 [ 214.771495][T10209] should_failslab+0x8c/0xb0 [ 214.771581][T10209] kmem_cache_alloc_noprof+0x69/0x4b0 [ 214.771609][T10209] ? audit_log_start+0x342/0x720 [ 214.771630][T10209] audit_log_start+0x342/0x720 [ 214.771650][T10209] ? kstrtouint+0x76/0xc0 [ 214.771721][T10209] audit_seccomp+0x48/0x100 [ 214.771749][T10209] ? __seccomp_filter+0x832/0x1260 [ 214.771777][T10209] __seccomp_filter+0x843/0x1260 [ 214.771852][T10209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 214.771879][T10209] ? vfs_write+0x7e8/0x960 [ 214.771896][T10209] ? __rcu_read_unlock+0x4f/0x70 [ 214.772031][T10209] ? __fget_files+0x184/0x1c0 [ 214.772056][T10209] __secure_computing+0x82/0x150 [ 214.772137][T10209] syscall_trace_enter+0xcf/0x1e0 [ 214.772200][T10209] do_syscall_64+0xa4/0x2b0 [ 214.772232][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.772253][T10209] RIP: 0033:0x7f9e22b6f749 [ 214.772268][T10209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.772306][T10209] RSP: 002b:00007f9e215cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 214.772325][T10209] RAX: ffffffffffffffda RBX: 00007f9e22dc5fa0 RCX: 00007f9e22b6f749 [ 214.772338][T10209] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000f [ 214.772350][T10209] RBP: 00007f9e215cf090 R08: 0000000000000000 R09: 0000000000000000 [ 214.772362][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.772374][T10209] R13: 00007f9e22dc6038 R14: 00007f9e22dc5fa0 R15: 00007fffafeddd58 [ 214.772393][T10209] [ 214.976549][T10211] loop6: detected capacity change from 0 to 1024 [ 215.248164][T10218] loop3: detected capacity change from 0 to 1024 [ 215.307721][T10218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.361664][T10218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.368517][T10231] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2257'. [ 215.440364][T10218] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 215.448794][T10211] EXT4-fs: Ignoring removed bh option [ 215.521459][T10218] System zones: 0-1, 3-36 [ 215.526759][T10218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.548065][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2252'. [ 215.558519][T10218] siw: device registration error -23 [ 215.579216][T10241] usb usb1: usbfs: process 10241 (syz.7.2260) did not claim interface 0 before use [ 215.589025][T10241] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 215.599215][T10211] EXT4-fs: inline encryption not supported [ 215.605772][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.609900][T10243] FAULT_INJECTION: forcing a failure. [ 215.609900][T10243] name failslab, interval 1, probability 0, space 0, times 0 [ 215.627348][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.2.2262 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.627443][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.627454][T10243] Call Trace: [ 215.627460][T10243] [ 215.627466][T10243] __dump_stack+0x1d/0x30 [ 215.627500][T10243] dump_stack_lvl+0x95/0xd0 [ 215.627522][T10243] dump_stack+0x15/0x1b [ 215.627561][T10243] should_fail_ex+0x265/0x280 [ 215.627584][T10243] should_failslab+0x8c/0xb0 [ 215.627606][T10243] __kvmalloc_node_noprof+0x149/0x6b0 [ 215.627626][T10243] ? vmemdup_user+0x2b/0xd0 [ 215.627653][T10243] ? should_fail_usercopy+0x1a/0x20 [ 215.627688][T10243] vmemdup_user+0x2b/0xd0 [ 215.627724][T10243] path_setxattrat+0x1b6/0x310 [ 215.627763][T10243] __x64_sys_fsetxattr+0x6b/0x80 [ 215.627830][T10243] x64_sys_call+0x23c4/0x3000 [ 215.627853][T10243] do_syscall_64+0xca/0x2b0 [ 215.627881][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.627902][T10243] RIP: 0033:0x7f1e2579f749 [ 215.627917][T10243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.628008][T10243] RSP: 002b:00007f1e241ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 215.628028][T10243] RAX: ffffffffffffffda RBX: 00007f1e259f5fa0 RCX: 00007f1e2579f749 [ 215.628063][T10243] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000005 [ 215.628076][T10243] RBP: 00007f1e241ff090 R08: 0000000000000000 R09: 0000000000000000 [ 215.628089][T10243] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 215.628099][T10243] R13: 00007f1e259f6038 R14: 00007f1e259f5fa0 R15: 00007fffab9448e8 [ 215.628114][T10243] [ 215.628654][T10211] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.739448][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2263'. [ 215.769191][T10211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 215.809096][T10250] siw: device registration error -23 [ 215.839421][T10211] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2249: lblock 2 mapped to illegal pblock 2 (length 1) [ 215.876719][T10211] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2249: lblock 0 mapped to illegal pblock 48 (length 1) [ 215.959095][T10211] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2249: Failed to acquire dquot type 0 [ 216.001939][T10211] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 216.029093][T10211] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2249: mark_inode_dirty error [ 216.059167][T10211] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 216.099232][T10283] smc: net device bond0 applied user defined pnetid SYZ0 [ 216.106414][T10211] EXT4-fs (loop6): 1 orphan inode deleted [ 216.123415][T10211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.124726][T10284] lo speed is unknown, defaulting to 1000 [ 216.136165][ T5618] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.156296][T10284] lo speed is unknown, defaulting to 1000 [ 216.170077][ T5618] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:26: Failed to release dquot type 0 [ 216.188294][T10288] 9p: Bad value for 'wfdno' [ 216.195364][T10211] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.214786][T10211] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.2249: Invalid inode table block 1 in block_group 0 [ 216.243985][T10211] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 216.263519][T10211] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.2249: mark_inode_dirty error [ 216.281187][T10290] 9p: Bad value for 'wfdno' [ 216.322757][T10296] __nla_validate_parse: 1 callbacks suppressed [ 216.322769][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 216.341545][ T5615] ================================================================== [ 216.349624][ T5615] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 216.356209][ T5615] [ 216.358527][ T5615] write to 0xffff88810b2b0eb8 of 192 bytes by task 10284 on cpu 1: [ 216.366413][ T5615] __bpf_get_stackid+0x737/0x7d0 [ 216.371354][ T5615] bpf_get_stackid+0xf3/0x130 [ 216.376024][ T5615] bpf_get_stackid_raw_tp+0xf6/0x120 [ 216.381576][ T5615] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 216.387027][ T5615] bpf_trace_run2+0x107/0x1d0 [ 216.391709][ T5615] __traceiter_kfree+0x2e/0x50 [ 216.396471][ T5615] kfree+0x353/0x3c0 [ 216.399386][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 216.400356][ T5615] kfree_const+0x3e/0x50 [ 216.400385][ T5615] kobject_set_name_vargs+0xb8/0xe0 [ 216.400404][ T5615] kobject_set_name+0x83/0xb0 [ 216.423257][ T5615] kset_create_and_add+0x5c/0x1a0 [ 216.428273][ T5615] netdev_register_kobject+0x128/0x220 [ 216.433723][ T5615] register_netdevice+0x8cf/0xdd0 [ 216.438737][ T5615] __ip_tunnel_create+0x30c/0x420 [ 216.443751][ T5615] ip_tunnel_init_net+0x1ff/0x480 [ 216.448764][ T5615] vti_init_net+0x39/0xf0 [ 216.453077][ T5615] ops_init+0x22a/0x2e0 [ 216.457218][ T5615] setup_net+0x95/0x220 [ 216.461354][ T5615] copy_net_ns+0x309/0x460 [ 216.465750][ T5615] create_new_namespaces+0x20e/0x400 [ 216.471021][ T5615] copy_namespaces+0x1ad/0x210 [ 216.475857][ T5615] copy_process+0xce4/0x1ef0 [ 216.480429][ T5615] kernel_clone+0x16c/0x5c0 [ 216.484914][ T5615] __x64_sys_clone+0xe6/0x120 [ 216.489573][ T5615] x64_sys_call+0x12d0/0x3000 [ 216.494237][ T5615] do_syscall_64+0xca/0x2b0 [ 216.498817][ T5615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.504700][ T5615] [ 216.507006][ T5615] read to 0xffff88810b2b0ee0 of 8 bytes by task 5615 on cpu 0: [ 216.514539][ T5615] bcmp+0x23/0x90 [ 216.518157][ T5615] __bpf_get_stackid+0x382/0x7d0 [ 216.523091][ T5615] bpf_get_stackid+0xf3/0x130 [ 216.527752][ T5615] bpf_get_stackid_raw_tp+0xf6/0x120 [ 216.533027][ T5615] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 216.538469][ T5615] bpf_trace_run2+0x107/0x1d0 [ 216.543136][ T5615] __traceiter_kfree+0x2e/0x50 [ 216.547888][ T5615] kfree+0x353/0x3c0 [ 216.551762][ T5615] skb_free_head+0xb8/0x150 [ 216.556251][ T5615] skb_release_data+0x33b/0x370 [ 216.561088][ T5615] __kfree_skb+0x44/0x150 [ 216.565401][ T5615] consume_skb+0x49/0x150 [ 216.569715][ T5615] nsim_dev_trap_report_work+0x533/0x630 [ 216.575344][ T5615] process_scheduled_works+0x4ce/0x9d0 [ 216.580786][ T5615] worker_thread+0x582/0x770 [ 216.585360][ T5615] kthread+0x489/0x510 [ 216.589415][ T5615] ret_from_fork+0x149/0x290 [ 216.593994][ T5615] ret_from_fork_asm+0x1a/0x30 [ 216.598742][ T5615] [ 216.601045][ T5615] value changed: 0xffffffff8455030b -> 0xffffffff85709048 [ 216.608133][ T5615] [ 216.610434][ T5615] Reported by Kernel Concurrency Sanitizer on: [ 216.616650][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.626607][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.636645][ T5615] Workqueue: events_unbound nsim_dev_trap_report_work [ 216.643399][ T5615] ================================================================== [ 216.699439][T10296] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported