last executing test programs: 57.155101727s ago: executing program 2 (id=216): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)=[{0x200000000006, 0x5, 0x0, 0x7ffc0002}]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) 57.084112128s ago: executing program 2 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200000) 57.081538398s ago: executing program 2 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200000) 56.999705289s ago: executing program 2 (id=220): statfs(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)=""/23) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 56.859481861s ago: executing program 2 (id=221): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x30) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) ioperm(0x0, 0x6, 0x2da3b9f3) rt_sigaction(0xb, 0x0, 0x0, 0x8, &(0x7f0000000700)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) linkat(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) readahead(0xffffffffffffffff, 0xfffffffffffffffa, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) 56.529732086s ago: executing program 2 (id=227): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) unshare(0x22020400) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 56.504124906s ago: executing program 32 (id=227): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) unshare(0x22020400) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 35.175639081s ago: executing program 4 (id=572): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 34.901874194s ago: executing program 4 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x200000) 34.798990836s ago: executing program 4 (id=579): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xd93c) socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x1000000000000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000900000001"], 0x48) 34.203665214s ago: executing program 4 (id=585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 34.063266385s ago: executing program 4 (id=590): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) ioperm(0x284, 0x7f, 0xe3) socket$inet6(0xa, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) ioctl$sock_ifreq(r0, 0x8942, &(0x7f00000002c0)={'bridge0\x00', @ifru_addrs=@rc={0x1f, @none, 0xff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r8, 0x2, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x40, 0x40, 0x80000001, 0x9, {{0x2c, 0x4, 0x0, 0xc, 0xb0, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x81, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x54, 0x10, 0x1, 0x7, [{@rand_addr=0x64010102, 0x400}, {@loopback, 0x9}, {@empty, 0x3}, {@multicast2, 0xfff}, {@multicast1, 0x9}, {@broadcast, 0x8}, {@local, 0x8}, {@broadcast, 0x427e}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x80, 0x0}, 0x8}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x9, 0x1, 0x3, [{@local, 0x2}, {@private=0xa010100, 0x800}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x1ff}]}]}}}}}) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r9, r9) 33.547967523s ago: executing program 4 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0xa000200b}) 33.504669213s ago: executing program 33 (id=596): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0xa000200b}) 3.03934017s ago: executing program 5 (id=1076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 2.983843361s ago: executing program 6 (id=1077): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 2.689702145s ago: executing program 6 (id=1080): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 2.674574105s ago: executing program 6 (id=1081): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') (fail_nth: 2) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08012abd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) 2.622117685s ago: executing program 0 (id=1082): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) fsetxattr$security_selinux(r0, &(0x7f00000005c0), &(0x7f0000000540)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x0) (fail_nth: 10) 2.3145377s ago: executing program 5 (id=1085): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 2.31432023s ago: executing program 0 (id=1086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @ptr]}}, &(0x7f0000000100)=""/4096, 0x32, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 1.841331776s ago: executing program 6 (id=1089): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @ptr]}}, &(0x7f0000000100)=""/4096, 0x32, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 1.785577707s ago: executing program 5 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x28040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000200000000000000804000400000005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc001) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x800004, &(0x7f0000001b40)={[{@dioread_lock}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_err_ignore}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x41}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") 1.685728818s ago: executing program 1 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget$private(0x0, 0x3, 0x8) 1.626867258s ago: executing program 5 (id=1093): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000002c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrlimit(0xc, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x10000}, 0x18) accept(0xffffffffffffffff, &(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0) setrlimit(0x4, &(0x7f00000003c0)={0x0, 0x100203}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7b7, &(0x7f00000007c0)="$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") ioprio_get$uid(0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x20) sendfile(r2, r2, 0x0, 0x7a680000) 1.602561179s ago: executing program 1 (id=1094): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) 1.587476349s ago: executing program 0 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 1.52831477s ago: executing program 1 (id=1096): clock_gettime(0x2, &(0x7f0000000480)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000640)=ANY=[], 0x200002e6) (async) fcntl$setpipe(r3, 0x407, 0x7000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000001000000000000000000000000000005000000000000000000"], 0x50) 1.368771592s ago: executing program 1 (id=1097): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000180)=@ethtool_gstrings={0x1b, 0x1}}) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) ioctl$TIOCGSID(r1, 0x5429, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006440000001e0a0501000000"], 0xc8}}, 0x0) ptrace(0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000010000000a0000000800000000000000c817ce680dfbca2d8b0c5c3b7a2e4df6d6002383b1e42129db1baff8b07576047d8ee45e750485acc8c46b298cb533137272b353fbea77d79bc2cac7bd00fe608c00b6c3e9e0fbc432613c66d347e3f1e64c221943b9e6f8caddf24aa42c219fa8175986c7402ca11190a251d9319a2882121c27a835d7a443e231cda5760b29f8", @ANYRES32=r1, @ANYRESOCT=r4, @ANYRES32=r4, @ANYRESDEC=r4, @ANYRESDEC=r3], 0x48) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d72646d6124706f72743d3078303030303030303030303030346532303573303030303030303030303031303030302c74696df954b8656f75743d3078303030303030303030303030303030332c00"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100df0086dd607428dd00183a00fe80000000bbfc00000000000000000000000000000189009078fd000000fe8000000000000000000000000000bb"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r6, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) gettid() sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x20000090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES16=r7], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket(0x10, 0x803, 0x2) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x4050) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) 1.368447992s ago: executing program 6 (id=1098): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000092426e8000000000950000000000000019"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.137422425s ago: executing program 0 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a00000000000000000c0002", @ANYRES32=r4], 0x20, 0x2400e044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x10040, &(0x7f0000000200), 0xfe, 0x27a, &(0x7f00000002c0)="$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") creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @local}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 972.883288ms ago: executing program 3 (id=1100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 889.051678ms ago: executing program 1 (id=1101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x713, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = signalfd(r2, &(0x7f0000000280)={[0xae9b]}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x369ac89f52bf2160}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="191d25bd7000ffdbdf256300000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x40) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x144, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "69f45d277e81c5d2fa63ae4efe72d2d2173e8f0f0044c50e"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5799727f74c8b41beadea965f84d218c977fff30eb910b56"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, 0x0) ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000380)="721f", 0x2}], 0x1) write$cgroup_pid(r7, &(0x7f0000000240)=r8, 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000880), 0x12) 753.84732ms ago: executing program 5 (id=1102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 753.411771ms ago: executing program 3 (id=1103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@end]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x42) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) chdir(0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 599.267642ms ago: executing program 3 (id=1104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget$private(0x0, 0x3, 0x8) 598.719982ms ago: executing program 5 (id=1105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = gettid() unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r3 = syz_open_procfs(r1, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0xfce) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={r1, r4, r5}, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone3(&(0x7f0000000300)={0x300003000, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0xffffffffffffff4a, 0x0, 0x0, 0xfffffffffffffe77}, 0x58) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4800000009) 573.505583ms ago: executing program 3 (id=1106): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) setresgid(0xee00, 0xee01, 0x0) 524.867543ms ago: executing program 3 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x2000000, 0x0) 348.760616ms ago: executing program 6 (id=1108): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf09000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000340)={0x1, 'bridge_slave_1\x00', 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 271.840847ms ago: executing program 3 (id=1109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) 170.030018ms ago: executing program 0 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r4 = gettid() kcmp(r4, r4, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r6, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) kcmp(r2, r4, 0x2, r8, r9) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r11, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="798e674b04cc7ec1376ef1b01ab29f8710a922245504b266a4998fa9fc288663526aff13261aa5012b9a8b888fcb1237f13022dfb385d71e54b8eeab7951e734fbf18be417710d5ee7045455af953d55856064c1f45dab69432c6983004b7caec7eb565c8ffebb49f523c58cf6d4ff15b9e851de5a7ddd13", @ANYRESHEX=r11, @ANYBLOB=',\x00']) socket$kcm(0xa, 0x2, 0x73) accept4$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x7}}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0xa, 0x3}, {0xa, 0x5}, {0x1, 0x3}, {0x7, 0x2}, {0xb}, {0x800000d, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000700)=""/195, 0x87, 0xc3, 0x0, 0x10, 0x10000, @value}, 0x28) 528.53µs ago: executing program 0 (id=1111): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x1, 0x6000, @fd_index=0x2, 0x8, 0x0, 0x0, 0x1c, 0x1, {0x1}}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) syz_pidfd_open(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x2080, 0x0) socket(0x1a, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xff}}, './cgroup.cpu/cgroup.procs\x00'}) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2, 0x18, 0xe4, 0x9, 0x27, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0xff}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x6e6bb7, 0x7, {0x6, 0x32, 0x6, 0x0, 0x0, 0x9, 0x0, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6, 0x6c, 0x20, 0x0, @in={0x2, 0x4e20, @broadcast}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x54, 0x1, 0x20000000}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb8, 0xffffffff, {0x6, 0x3c, 0x6, 0x40, 0x0, 0x6, 0x0, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x3a}}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0x8, 0xe3, 0x0, 0xa0000000}, @sadb_address={0x5, 0x5, 0x33, 0xa0, 0x0, @in6={0xa, 0x4e21, 0x6, @empty, 0x2}}]}, 0x138}}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 0s ago: executing program 1 (id=1112): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @ptr]}}, &(0x7f0000000100)=""/4096, 0x32, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) kernel console output (not intermixed with test programs): ogle Compute Engine, BIOS Google 05/07/2025 [ 51.928120][ T4408] Call Trace: [ 51.928127][ T4408] [ 51.928135][ T4408] __dump_stack+0x1d/0x30 [ 51.928174][ T4408] dump_stack_lvl+0xe8/0x140 [ 51.928196][ T4408] dump_stack+0x15/0x1b [ 51.928218][ T4408] should_fail_ex+0x265/0x280 [ 51.928328][ T4408] should_failslab+0x8c/0xb0 [ 51.928370][ T4408] __kvmalloc_node_noprof+0x126/0x4d0 [ 51.928398][ T4408] ? xt_alloc_table_info+0x3b/0x80 [ 51.928452][ T4408] ? should_fail_ex+0xdb/0x280 [ 51.928557][ T4408] xt_alloc_table_info+0x3b/0x80 [ 51.928649][ T4408] do_ipt_set_ctl+0x59c/0x820 [ 51.928701][ T4408] nf_setsockopt+0x196/0x1b0 [ 51.928723][ T4408] ip_setsockopt+0x102/0x110 [ 51.928760][ T4408] udp_setsockopt+0x99/0xb0 [ 51.928794][ T4408] sock_common_setsockopt+0x66/0x80 [ 51.928881][ T4408] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 51.928918][ T4408] __sys_setsockopt+0x181/0x200 [ 51.928939][ T4408] __x64_sys_setsockopt+0x64/0x80 [ 51.929017][ T4408] x64_sys_call+0x2bd5/0x2fb0 [ 51.929046][ T4408] do_syscall_64+0xd0/0x1a0 [ 51.929078][ T4408] ? clear_bhb_loop+0x40/0x90 [ 51.929108][ T4408] ? clear_bhb_loop+0x40/0x90 [ 51.929204][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.929232][ T4408] RIP: 0033:0x7fa9565ce969 [ 51.929251][ T4408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.929274][ T4408] RSP: 002b:00007fa954c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 51.929299][ T4408] RAX: ffffffffffffffda RBX: 00007fa9567f5fa0 RCX: 00007fa9565ce969 [ 51.929349][ T4408] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 51.929365][ T4408] RBP: 00007fa954c37090 R08: 0000000000000538 R09: 0000000000000000 [ 51.929381][ T4408] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 51.929411][ T4408] R13: 0000000000000000 R14: 00007fa9567f5fa0 R15: 00007ffeaa6a1988 [ 51.929433][ T4408] [ 51.935255][ T4393] bond0: (slave bond_slave_1): Releasing backup interface [ 51.990388][ T4412] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 52.085440][ T4420] loop3: detected capacity change from 0 to 2048 [ 52.171117][ T4393] team0: Port device team_slave_0 removed [ 52.183934][ T4393] team0: Port device team_slave_1 removed [ 52.196120][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.203672][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.215409][ T4393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.218830][ T4420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.223014][ T4393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.352406][ T4412] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.368405][ T4412] bond0: (slave team0): Enslaving as an active interface with an up link [ 52.384727][ T4418] vlan2: entered allmulticast mode [ 52.390054][ T4418] bond0: entered allmulticast mode [ 52.422329][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.464625][ T4098] veth0_vlan: entered promiscuous mode [ 52.507606][ T4098] veth1_vlan: entered promiscuous mode [ 52.533241][ T4098] veth0_macvtap: entered promiscuous mode [ 52.564728][ T4098] veth1_macvtap: entered promiscuous mode [ 52.630586][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.652725][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 52.652742][ T29] audit: type=1326 audit(1747753070.490:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.705598][ T29] audit: type=1326 audit(1747753070.530:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.729003][ T29] audit: type=1326 audit(1747753070.530:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.752418][ T29] audit: type=1326 audit(1747753070.530:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.776006][ T29] audit: type=1326 audit(1747753070.530:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.799362][ T29] audit: type=1326 audit(1747753070.530:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.823026][ T29] audit: type=1326 audit(1747753070.530:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.846604][ T29] audit: type=1326 audit(1747753070.530:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.872683][ T29] audit: type=1326 audit(1747753070.530:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.896055][ T29] audit: type=1326 audit(1747753070.530:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 52.954569][ T4456] bond3: entered promiscuous mode [ 52.960167][ T4456] bond3: entered allmulticast mode [ 52.967261][ T4456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 52.991009][ T4456] bond3 (unregistering): Released all slaves [ 53.051085][ T4098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.076794][ T4098] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.085686][ T4098] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.094879][ T4098] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.103682][ T4098] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.147962][ T4475] veth1_to_bond: entered allmulticast mode [ 53.179200][ T4475] veth1_to_bond: left allmulticast mode [ 53.188926][ T4477] loop3: detected capacity change from 0 to 2048 [ 53.207224][ T4477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.320470][ T4493] 9pnet_fd: Insufficient options for proto=fd [ 53.417719][ T4499] netlink: 128 bytes leftover after parsing attributes in process `syz.4.316'. [ 53.435096][ T4506] loop0: detected capacity change from 0 to 512 [ 53.447689][ T4506] ip6erspan0: entered promiscuous mode [ 53.490889][ T4499] loop4: detected capacity change from 0 to 2048 [ 53.491052][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.569009][ T4499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.585324][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 53.598315][ T4499] FAULT_INJECTION: forcing a failure. [ 53.598315][ T4499] name failslab, interval 1, probability 0, space 0, times 0 [ 53.611104][ T4499] CPU: 0 UID: 0 PID: 4499 Comm: syz.4.316 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 53.611218][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.611235][ T4499] Call Trace: [ 53.611244][ T4499] [ 53.611254][ T4499] __dump_stack+0x1d/0x30 [ 53.611276][ T4499] dump_stack_lvl+0xe8/0x140 [ 53.611361][ T4499] dump_stack+0x15/0x1b [ 53.611377][ T4499] should_fail_ex+0x265/0x280 [ 53.611415][ T4499] ? __iomap_dio_rw+0x14b/0x1250 [ 53.611444][ T4499] should_failslab+0x8c/0xb0 [ 53.611498][ T4499] __kmalloc_cache_noprof+0x4c/0x320 [ 53.611529][ T4499] __iomap_dio_rw+0x14b/0x1250 [ 53.611566][ T4499] ? __rcu_read_unlock+0x4f/0x70 [ 53.611590][ T4499] ? ext4_xattr_security_get+0x32/0x40 [ 53.611613][ T4499] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 53.611711][ T4499] ? __vfs_getxattr+0x2aa/0x2c0 [ 53.611762][ T4499] ? ext4_journal_check_start+0x11a/0x1b0 [ 53.611788][ T4499] iomap_dio_rw+0x40/0x90 [ 53.611841][ T4499] ext4_file_write_iter+0xad9/0xf00 [ 53.611972][ T4499] do_iter_readv_writev+0x41e/0x4c0 [ 53.612005][ T4499] vfs_writev+0x2c9/0x870 [ 53.612075][ T4499] __se_sys_pwritev2+0xfc/0x1c0 [ 53.612116][ T4499] __x64_sys_pwritev2+0x67/0x80 [ 53.612148][ T4499] x64_sys_call+0x1cea/0x2fb0 [ 53.612169][ T4499] do_syscall_64+0xd0/0x1a0 [ 53.612260][ T4499] ? clear_bhb_loop+0x40/0x90 [ 53.612357][ T4499] ? clear_bhb_loop+0x40/0x90 [ 53.612385][ T4499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.612414][ T4499] RIP: 0033:0x7fb1b5ede969 [ 53.612429][ T4499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.612451][ T4499] RSP: 002b:00007fb1b4547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 53.612474][ T4499] RAX: ffffffffffffffda RBX: 00007fb1b6105fa0 RCX: 00007fb1b5ede969 [ 53.612491][ T4499] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000008 [ 53.612508][ T4499] RBP: 00007fb1b4547090 R08: 0000000000000000 R09: 0000000000000000 [ 53.612562][ T4499] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 53.612579][ T4499] R13: 0000000000000000 R14: 00007fb1b6105fa0 R15: 00007fff0e47f9c8 [ 53.612604][ T4499] [ 53.954401][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.188258][ T4534] 9pnet_fd: Insufficient options for proto=fd [ 54.228257][ T4544] loop4: detected capacity change from 0 to 2048 [ 54.380000][ T4555] loop3: detected capacity change from 0 to 512 [ 54.388675][ T4544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.434884][ T4555] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.470095][ T4560] FAULT_INJECTION: forcing a failure. [ 54.470095][ T4560] name failslab, interval 1, probability 0, space 0, times 0 [ 54.483120][ T4560] CPU: 1 UID: 0 PID: 4560 Comm: syz.5.333 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 54.483150][ T4560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.483163][ T4560] Call Trace: [ 54.483168][ T4560] [ 54.483175][ T4560] __dump_stack+0x1d/0x30 [ 54.483198][ T4560] dump_stack_lvl+0xe8/0x140 [ 54.483322][ T4560] dump_stack+0x15/0x1b [ 54.483343][ T4560] should_fail_ex+0x265/0x280 [ 54.483440][ T4560] should_failslab+0x8c/0xb0 [ 54.483492][ T4560] kmem_cache_alloc_noprof+0x50/0x310 [ 54.483519][ T4560] ? dst_alloc+0xbd/0x100 [ 54.483568][ T4560] dst_alloc+0xbd/0x100 [ 54.483606][ T4560] ip_route_output_key_hash_rcu+0xebb/0x13d0 [ 54.483648][ T4560] ip_route_output_flow+0x7b/0x130 [ 54.483676][ T4560] udp_sendmsg+0x118b/0x13a0 [ 54.483703][ T4560] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 54.483737][ T4560] ? avc_has_perm+0xd3/0x150 [ 54.483787][ T4560] ? __pfx_udp_sendmsg+0x10/0x10 [ 54.483807][ T4560] inet_sendmsg+0xac/0xd0 [ 54.483843][ T4560] __sock_sendmsg+0x102/0x180 [ 54.483896][ T4560] ____sys_sendmsg+0x345/0x4e0 [ 54.483923][ T4560] ___sys_sendmsg+0x17b/0x1d0 [ 54.483968][ T4560] __sys_sendmmsg+0x178/0x300 [ 54.484002][ T4560] __x64_sys_sendmmsg+0x57/0x70 [ 54.484055][ T4560] x64_sys_call+0x2f2f/0x2fb0 [ 54.484083][ T4560] do_syscall_64+0xd0/0x1a0 [ 54.484111][ T4560] ? clear_bhb_loop+0x40/0x90 [ 54.484132][ T4560] ? clear_bhb_loop+0x40/0x90 [ 54.484209][ T4560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.484238][ T4560] RIP: 0033:0x7fc72e99e969 [ 54.484258][ T4560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.484281][ T4560] RSP: 002b:00007fc72d007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 54.484326][ T4560] RAX: ffffffffffffffda RBX: 00007fc72ebc5fa0 RCX: 00007fc72e99e969 [ 54.484339][ T4560] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 54.484397][ T4560] RBP: 00007fc72d007090 R08: 0000000000000000 R09: 0000000000000000 [ 54.484411][ T4560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.484427][ T4560] R13: 0000000000000000 R14: 00007fc72ebc5fa0 R15: 00007ffc41216898 [ 54.484492][ T4560] [ 54.713329][ T4556] bond0: (slave team0): Releasing backup interface [ 54.735251][ T4556] bridge_slave_0: left allmulticast mode [ 54.741234][ T4556] bridge_slave_0: left promiscuous mode [ 54.747280][ T4556] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.759874][ T4560] loop5: detected capacity change from 0 to 512 [ 54.759951][ T4556] bridge_slave_1: left allmulticast mode [ 54.759968][ T4556] bridge_slave_1: left promiscuous mode [ 54.777864][ T4556] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.795179][ T4563] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.332: Failed to acquire dquot type 1 [ 54.821567][ T4560] EXT4-fs (loop5): too many log groups per flexible block group [ 54.829392][ T4560] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 54.836690][ T4560] EXT4-fs (loop5): mount failed [ 54.843772][ T4556] bond0: (slave bond_slave_0): Releasing backup interface [ 54.859617][ T4556] bond0: (slave bond_slave_1): Releasing backup interface [ 54.888967][ T4556] team0: Port device team_slave_0 removed [ 54.902847][ T4567] loop5: detected capacity change from 0 to 2048 [ 54.911508][ T4556] team0: Port device team_slave_1 removed [ 54.918394][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.926023][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.935970][ T4556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.943497][ T4556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.971258][ T3304] loop5: p1 < > p4 [ 54.985856][ T3304] loop5: p4 size 8388608 extends beyond EOD, truncated [ 55.001185][ T4555] ip6erspan0: entered promiscuous mode [ 55.009806][ T4567] loop5: p1 < > p4 [ 55.014407][ T4567] loop5: p4 size 8388608 extends beyond EOD, truncated [ 55.134901][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 55.229240][ T4588] 9pnet_fd: Insufficient options for proto=fd [ 55.293877][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 55.296158][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 55.332006][ T4590] loop4: detected capacity change from 0 to 512 [ 55.388626][ T4590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.450816][ T4590] EXT4-fs (loop4): 1 truncate cleaned up [ 55.510651][ T4611] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 55.557864][ T4603] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 55.638174][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.352'. [ 55.685262][ T4616] loop4: detected capacity change from 0 to 2048 [ 55.876318][ T4631] 9pnet_fd: Insufficient options for proto=fd [ 56.012836][ T4645] loop5: detected capacity change from 0 to 512 [ 56.051342][ T4642] loop4: detected capacity change from 0 to 527 [ 56.053571][ T4645] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.093107][ T4642] EXT4-fs (loop4): failed to parse options in superblock:  [ 56.106283][ T4642] EXT4-fs (loop4): Unsupported encryption level 4 [ 56.153513][ T4645] EXT4-fs (loop5): 1 truncate cleaned up [ 56.244674][ T4655] loop3: detected capacity change from 0 to 2048 [ 56.370435][ T4667] loop4: detected capacity change from 0 to 512 [ 56.486052][ T4667] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.546470][ T4670] bridge_slave_0: left allmulticast mode [ 56.552301][ T4670] bridge_slave_0: left promiscuous mode [ 56.558084][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.588929][ T4667] EXT4-fs (loop4): 1 truncate cleaned up [ 56.608404][ T4670] bridge_slave_1: left allmulticast mode [ 56.614189][ T4670] bridge_slave_1: left promiscuous mode [ 56.619984][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.651696][ T4674] 9pnet_fd: Insufficient options for proto=fd [ 56.664418][ T4670] bond0: (slave bond_slave_0): Releasing backup interface [ 56.681864][ T4670] bond0: (slave bond_slave_1): Releasing backup interface [ 56.701071][ T4670] team0: Port device team_slave_0 removed [ 56.727536][ T4670] team0: Port device team_slave_1 removed [ 56.747277][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.755207][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.782527][ T4670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.790094][ T4670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.797309][ T4681] loop0: detected capacity change from 0 to 512 [ 56.858923][ T4688] loop4: detected capacity change from 0 to 512 [ 56.880823][ T4688] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.922866][ T4687] vlan2: entered allmulticast mode [ 56.928088][ T4687] bond0: entered allmulticast mode [ 56.941523][ T4688] EXT4-fs (loop4): 1 truncate cleaned up [ 57.009154][ T4694] loop3: detected capacity change from 0 to 1024 [ 57.023692][ T4696] loop4: detected capacity change from 0 to 512 [ 57.105892][ T4696] ªªªªªª: renamed from vlan0 (while UP) [ 57.153106][ T4698] loop5: detected capacity change from 0 to 8192 [ 57.261185][ T4705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 57.304883][ T3304] loop5: p1 p3 p4 [ 57.336291][ T3304] loop5: p1 size 8390912 extends beyond EOD, truncated [ 57.368650][ T3304] loop5: p3 size 16318464 extends beyond EOD, truncated [ 57.386852][ T4713] loop4: detected capacity change from 0 to 512 [ 57.515166][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 57.555278][ T4698] loop5: p1 p3 p4 [ 57.560669][ T4698] loop5: p1 size 8390912 extends beyond EOD, truncated [ 57.571274][ T4713] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.592675][ T4698] loop5: p3 size 16318464 extends beyond EOD, truncated [ 57.609148][ T4713] ip6erspan0: entered promiscuous mode [ 57.678107][ T4720] __quota_error: 337 callbacks suppressed [ 57.678122][ T4720] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 57.741359][ T4683] loop1: detected capacity change from 0 to 1024 [ 57.749503][ T29] audit: type=1326 audit(1747753075.590:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 57.778475][ T4720] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 57.822514][ T4726] loop0: detected capacity change from 0 to 1024 [ 57.831445][ T4683] EXT4-fs: Ignoring removed orlov option [ 57.837445][ T29] audit: type=1326 audit(1747753075.590:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 57.860541][ T29] audit: type=1326 audit(1747753075.620:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 57.883608][ T29] audit: type=1326 audit(1747753075.620:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 57.906627][ T29] audit: type=1326 audit(1747753075.620:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 57.924748][ T4720] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.385: Failed to acquire dquot type 1 [ 57.966343][ T29] audit: type=1326 audit(1747753075.810:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 57.989482][ T29] audit: type=1326 audit(1747753075.810:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 58.012511][ T29] audit: type=1326 audit(1747753075.810:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1b5ede969 code=0x7ffc0000 [ 58.164790][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 58.176542][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 58.187853][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 58.214227][ T4735] loop5: detected capacity change from 0 to 512 [ 58.218225][ T4734] loop4: detected capacity change from 0 to 2048 [ 58.233142][ T4735] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.363472][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 58.377068][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 58.413159][ T3600] loop4: p1 < > p4 [ 58.417127][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 58.418331][ T3600] loop4: p4 size 8388608 extends beyond EOD, truncated [ 58.508647][ T4734] loop4: p1 < > p4 [ 58.511430][ T4735] EXT4-fs (loop5): 1 truncate cleaned up [ 58.513091][ T4734] loop4: p4 size 8388608 extends beyond EOD, truncated [ 58.602547][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.650774][ T4748] loop4: detected capacity change from 0 to 1024 [ 58.657804][ T4748] EXT4-fs: Ignoring removed oldalloc option [ 58.663809][ T4748] EXT4-fs: Ignoring removed orlov option [ 58.669678][ T4748] EXT4-fs: Ignoring removed oldalloc option [ 58.675678][ T4748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.679041][ T4750] loop1: detected capacity change from 0 to 2048 [ 58.719752][ T4755] 9pnet_fd: Insufficient options for proto=fd [ 58.803656][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.887354][ T4764] loop0: detected capacity change from 0 to 512 [ 58.960691][ T4764] ip6erspan0: entered promiscuous mode [ 59.166863][ T4777] vlan2: entered allmulticast mode [ 59.172126][ T4777] bond0: entered allmulticast mode [ 59.223079][ T4782] loop1: detected capacity change from 0 to 2048 [ 59.366362][ T3304] loop1: p1 < > p4 [ 59.370850][ T3304] loop1: p4 size 8388608 extends beyond EOD, truncated [ 59.402309][ T4782] loop1: p1 < > p4 [ 59.412231][ T4782] loop1: p4 size 8388608 extends beyond EOD, truncated [ 59.422696][ T4793] 9pnet_fd: Insufficient options for proto=fd [ 59.448996][ T4794] loop5: detected capacity change from 0 to 512 [ 59.471007][ T4794] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.516052][ T4794] EXT4-fs (loop5): 1 truncate cleaned up [ 59.653170][ T4806] loop1: detected capacity change from 0 to 2048 [ 59.759327][ T4815] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 59.933331][ T4829] loop5: detected capacity change from 0 to 2048 [ 59.966644][ T3304] loop5: p1 < > p4 [ 59.971496][ T3304] loop5: p4 size 8388608 extends beyond EOD, truncated [ 60.065663][ T4829] loop5: p1 < > p4 [ 60.076385][ T4829] loop5: p4 size 8388608 extends beyond EOD, truncated [ 60.126485][ T4839] netlink: 'syz.3.425': attribute type 4 has an invalid length. [ 60.134220][ T4839] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.425'. [ 60.211082][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 60.232577][ T4847] loop5: detected capacity change from 0 to 512 [ 60.256995][ T4847] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 60.276958][ T4847] EXT4-fs (loop5): 1 truncate cleaned up [ 60.391560][ T4859] loop5: detected capacity change from 0 to 512 [ 60.412381][ T4859] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.433: casefold flag without casefold feature [ 60.425329][ T4859] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.433: couldn't read orphan inode 15 (err -117) [ 60.475015][ T4866] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 60.523018][ T4872] loop3: detected capacity change from 0 to 2048 [ 60.586700][ T3304] loop3: p1 < > p4 [ 60.591310][ T3304] loop3: p4 size 8388608 extends beyond EOD, truncated [ 60.601608][ T4872] loop3: p1 < > p4 [ 60.607637][ T4872] loop3: p4 size 8388608 extends beyond EOD, truncated [ 60.697904][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 60.709428][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 60.832567][ T4889] vlan2: entered allmulticast mode [ 60.894795][ T4895] loop0: detected capacity change from 0 to 512 [ 61.036614][ T4902] vlan2: entered allmulticast mode [ 61.065355][ T4907] loop0: detected capacity change from 0 to 128 [ 61.107950][ T4907] veth1_to_bond: entered allmulticast mode [ 61.120060][ T4907] veth1_to_bond: left allmulticast mode [ 61.215626][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 61.235196][ T4920] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 61.261686][ T4926] vlan0: entered allmulticast mode [ 61.488830][ T4932] loop4: detected capacity change from 0 to 512 [ 61.520374][ T4932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.544002][ T4932] EXT4-fs (loop4): 1 truncate cleaned up [ 61.748805][ T4953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.467'. [ 61.837956][ T4947] mmap: syz.3.464 (4947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.892754][ T4959] vlan0: entered allmulticast mode [ 61.900116][ T4947] loop3: detected capacity change from 0 to 1024 [ 61.912736][ T4947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.935820][ T4947] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.953154][ T4947] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 61.967043][ T4947] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.464: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.989005][ T4947] EXT4-fs (loop3): Remounting filesystem read-only [ 62.008665][ T4947] EXT4-fs (loop3): 1 orphan inode deleted [ 62.157533][ T4972] loop5: detected capacity change from 0 to 512 [ 62.165347][ T4972] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.178228][ T4972] EXT4-fs (loop5): 1 truncate cleaned up [ 62.337494][ T4994] netlink: 40 bytes leftover after parsing attributes in process `syz.5.478'. [ 62.427293][ T5001] loop1: detected capacity change from 0 to 512 [ 62.438063][ T5003] loop5: detected capacity change from 0 to 512 [ 62.457709][ T4961] loop0: detected capacity change from 0 to 1024 [ 62.465407][ T4961] EXT4-fs: Ignoring removed orlov option [ 62.517400][ T5001] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.553460][ T5001] ip6erspan0: entered promiscuous mode [ 62.610239][ T5011] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.479: Failed to acquire dquot type 1 [ 62.631257][ T5012] loop0: detected capacity change from 0 to 512 [ 62.664054][ T5009] vlan2: entered allmulticast mode [ 62.736125][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 62.736172][ T29] audit: type=1326 audit(1747753080.580:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 62.808012][ T29] audit: type=1326 audit(1747753080.610:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.3.483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 62.914705][ T5028] netlink: 40 bytes leftover after parsing attributes in process `syz.5.490'. [ 62.947703][ T29] audit: type=1326 audit(1747753080.790:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 62.971573][ T29] audit: type=1326 audit(1747753080.790:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 62.995469][ T29] audit: type=1326 audit(1747753080.790:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 63.018904][ T29] audit: type=1326 audit(1747753080.790:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 63.042266][ T29] audit: type=1326 audit(1747753080.790:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 63.066288][ T29] audit: type=1326 audit(1747753080.790:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 63.073154][ T5035] loop5: detected capacity change from 0 to 512 [ 63.089922][ T29] audit: type=1326 audit(1747753080.790:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 63.089979][ T29] audit: type=1326 audit(1747753080.790:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.3.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 63.121294][ T5034] loop3: detected capacity change from 0 to 2048 [ 63.169645][ T3600] loop3: p1 < > p4 [ 63.174329][ T3600] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.193717][ T5034] loop3: p1 < > p4 [ 63.198493][ T5034] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.207490][ T5035] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.223476][ T5032] ip6erspan0: entered promiscuous mode [ 63.236431][ T3005] loop3: p1 < > p4 [ 63.241365][ T3005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 63.274616][ T5035] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 63.292555][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.305324][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.329852][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.340975][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.358044][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.372014][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 63.431407][ T5045] lo speed is unknown, defaulting to 1000 [ 63.447678][ T5047] loop3: detected capacity change from 0 to 512 [ 63.454060][ T5045] lo speed is unknown, defaulting to 1000 [ 63.463679][ T5045] lo speed is unknown, defaulting to 1000 [ 63.471061][ T5045] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.484610][ T5045] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.495720][ T5047] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.497687][ T5045] lo speed is unknown, defaulting to 1000 [ 63.512825][ T5045] lo speed is unknown, defaulting to 1000 [ 63.520233][ T5047] ip6erspan0: entered promiscuous mode [ 63.527782][ T5045] lo speed is unknown, defaulting to 1000 [ 63.533967][ T5045] lo speed is unknown, defaulting to 1000 [ 63.540745][ T5045] lo speed is unknown, defaulting to 1000 [ 63.559474][ T5047] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 63.570485][ T5053] loop4: detected capacity change from 0 to 2048 [ 63.646304][ T5060] netlink: 40 bytes leftover after parsing attributes in process `syz.5.501'. [ 63.689403][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.503'. [ 63.736571][ T5067] loop1: detected capacity change from 0 to 512 [ 63.748553][ T5067] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.767095][ T5067] ip6erspan0: entered promiscuous mode [ 63.845715][ T5071] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.505: Failed to acquire dquot type 1 [ 64.007682][ T5087] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 64.130974][ T5098] loop4: detected capacity change from 0 to 512 [ 64.179286][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 64.194160][ T5107] lo speed is unknown, defaulting to 1000 [ 64.201560][ T5098] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.250193][ T5098] ip6erspan0: entered promiscuous mode [ 64.301521][ T5122] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.518: Failed to acquire dquot type 1 [ 64.612648][ T5107] loop1: detected capacity change from 0 to 1024 [ 64.629295][ T5107] EXT4-fs: Ignoring removed orlov option [ 64.724158][ T5140] loop3: detected capacity change from 0 to 2048 [ 64.767792][ T5142] loop0: detected capacity change from 0 to 2048 [ 64.868195][ T5153] loop5: detected capacity change from 0 to 512 [ 64.984553][ T5153] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 65.010808][ T5155] bond3: entered promiscuous mode [ 65.018279][ T5155] bond3: entered allmulticast mode [ 65.047992][ T5155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.085334][ T5153] EXT4-fs (loop5): 1 truncate cleaned up [ 65.190396][ T5172] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 65.203854][ T5172] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 65.225408][ T5155] bond3 (unregistering): Released all slaves [ 65.363439][ T5170] lo speed is unknown, defaulting to 1000 [ 65.576058][ T5200] loop5: detected capacity change from 0 to 512 [ 65.652303][ T5206] lo speed is unknown, defaulting to 1000 [ 65.705273][ T5209] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 65.719014][ T5209] __nla_validate_parse: 1 callbacks suppressed [ 65.719033][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.549'. [ 66.169874][ T5246] loop3: detected capacity change from 0 to 2048 [ 66.306369][ T5244] bond1: entered promiscuous mode [ 66.312127][ T5244] bond1: entered allmulticast mode [ 66.323248][ T5244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.359460][ T5260] loop4: detected capacity change from 0 to 512 [ 66.382228][ T5244] bond1 (unregistering): Released all slaves [ 66.455414][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 66.512966][ T5274] loop0: detected capacity change from 0 to 1024 [ 66.529408][ T5274] EXT4-fs: Ignoring removed orlov option [ 66.627422][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'. [ 66.779981][ T5292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 67.038790][ T5319] FAULT_INJECTION: forcing a failure. [ 67.038790][ T5319] name failslab, interval 1, probability 0, space 0, times 0 [ 67.051684][ T5319] CPU: 0 UID: 0 PID: 5319 Comm: syz.5.569 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 67.051722][ T5319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.051766][ T5319] Call Trace: [ 67.051774][ T5319] [ 67.051783][ T5319] __dump_stack+0x1d/0x30 [ 67.051813][ T5319] dump_stack_lvl+0xe8/0x140 [ 67.051840][ T5319] dump_stack+0x15/0x1b [ 67.051863][ T5319] should_fail_ex+0x265/0x280 [ 67.051981][ T5319] should_failslab+0x8c/0xb0 [ 67.052025][ T5319] __kvmalloc_node_noprof+0x126/0x4d0 [ 67.052052][ T5319] ? xt_alloc_table_info+0x3b/0x80 [ 67.052083][ T5319] ? should_fail_ex+0xdb/0x280 [ 67.052150][ T5319] xt_alloc_table_info+0x3b/0x80 [ 67.052192][ T5319] do_ipt_set_ctl+0x59c/0x820 [ 67.052239][ T5319] nf_setsockopt+0x196/0x1b0 [ 67.052268][ T5319] ip_setsockopt+0x102/0x110 [ 67.052359][ T5319] udp_setsockopt+0x99/0xb0 [ 67.052394][ T5319] sock_common_setsockopt+0x66/0x80 [ 67.052433][ T5319] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 67.052476][ T5319] __sys_setsockopt+0x181/0x200 [ 67.052532][ T5319] __x64_sys_setsockopt+0x64/0x80 [ 67.052566][ T5319] x64_sys_call+0x2bd5/0x2fb0 [ 67.052587][ T5319] do_syscall_64+0xd0/0x1a0 [ 67.052618][ T5319] ? clear_bhb_loop+0x40/0x90 [ 67.052734][ T5319] ? clear_bhb_loop+0x40/0x90 [ 67.052820][ T5319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.052849][ T5319] RIP: 0033:0x7fc72e99e969 [ 67.052868][ T5319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.052891][ T5319] RSP: 002b:00007fc72d007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.052914][ T5319] RAX: ffffffffffffffda RBX: 00007fc72ebc5fa0 RCX: 00007fc72e99e969 [ 67.052931][ T5319] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 67.052986][ T5319] RBP: 00007fc72d007090 R08: 0000000000000538 R09: 0000000000000000 [ 67.053004][ T5319] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 67.053018][ T5319] R13: 0000000000000000 R14: 00007fc72ebc5fa0 R15: 00007ffc41216898 [ 67.053040][ T5319] [ 67.319478][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 67.448460][ T5348] loop1: detected capacity change from 0 to 512 [ 67.458674][ T5338] loop5: detected capacity change from 0 to 512 [ 67.594361][ T5338] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.574: casefold flag without casefold feature [ 67.608672][ T5338] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.574: couldn't read orphan inode 15 (err -117) [ 67.623654][ T5352] loop0: detected capacity change from 0 to 2048 [ 67.768470][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 67.768489][ T29] audit: type=1326 audit(1747753085.610:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.799122][ T29] audit: type=1326 audit(1747753085.610:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.822987][ T29] audit: type=1326 audit(1747753085.610:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.846661][ T29] audit: type=1326 audit(1747753085.610:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.870520][ T29] audit: type=1326 audit(1747753085.610:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.893981][ T29] audit: type=1326 audit(1747753085.610:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.905817][ T5367] loop0: detected capacity change from 0 to 512 [ 67.917333][ T29] audit: type=1326 audit(1747753085.610:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.917371][ T29] audit: type=1326 audit(1747753085.610:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.970680][ T29] audit: type=1326 audit(1747753085.610:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 67.994500][ T29] audit: type=1326 audit(1747753085.610:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5361 comm="syz.0.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 68.031602][ T5358] bond2: entered promiscuous mode [ 68.037392][ T5358] bond2: entered allmulticast mode [ 68.043878][ T5358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.069345][ T5358] bond2 (unregistering): Released all slaves [ 68.184336][ T4098] EXT4-fs unmount: 62 callbacks suppressed [ 68.184356][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.232165][ T5383] loop5: detected capacity change from 0 to 2048 [ 68.258058][ T5368] ip6erspan0: entered promiscuous mode [ 68.258320][ T5383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.473494][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.516978][ T5399] loop0: detected capacity change from 0 to 512 [ 68.599178][ T314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.685270][ T314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.753473][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 68.768725][ T314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.948897][ T314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.978988][ T5410] loop3: detected capacity change from 0 to 2048 [ 69.015803][ T5410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.079497][ T5416] loop5: detected capacity change from 0 to 512 [ 69.143565][ T5416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.170044][ T5416] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.194309][ T5427] loop0: detected capacity change from 0 to 527 [ 69.243342][ T5431] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.599: Failed to acquire dquot type 1 [ 69.256835][ T314] bond0 (unregistering): Released all slaves [ 69.270712][ T314] bond1 (unregistering): Released all slaves [ 69.274607][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.293330][ T5416] ip6erspan0: entered promiscuous mode [ 69.334051][ T314] hsr_slave_0: left promiscuous mode [ 69.350210][ T314] hsr_slave_1: left promiscuous mode [ 69.391084][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.391867][ T314] veth1_macvtap: left promiscuous mode [ 69.431916][ T5448] loop3: detected capacity change from 0 to 2048 [ 69.441588][ T314] veth0_macvtap: left promiscuous mode [ 69.457312][ T314] veth1_vlan: left promiscuous mode [ 69.468302][ T5448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.485729][ T314] veth0_vlan: left promiscuous mode [ 69.589316][ T5463] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 69.652457][ T5436] loop1: detected capacity change from 0 to 1024 [ 69.661324][ T5436] EXT4-fs: Ignoring removed orlov option [ 69.673698][ T5436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.758114][ T5434] bond3: entered promiscuous mode [ 69.764252][ T5434] bond3: entered allmulticast mode [ 69.773561][ T5434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.824375][ T5434] bond3 (unregistering): Released all slaves [ 69.892527][ T5432] lo speed is unknown, defaulting to 1000 [ 69.941700][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.958237][ T5459] lo speed is unknown, defaulting to 1000 [ 70.092593][ T5414] lo speed is unknown, defaulting to 1000 [ 70.235167][ T5500] loop3: detected capacity change from 0 to 2048 [ 70.262701][ T5500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.356059][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.464255][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.480028][ T5496] bond3: entered promiscuous mode [ 70.487918][ T5496] bond3: entered allmulticast mode [ 70.500111][ T5496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 70.535370][ T5516] loop3: detected capacity change from 0 to 512 [ 70.650029][ T5496] bond3 (unregistering): Released all slaves [ 70.911689][ T5529] vlan2: entered allmulticast mode [ 70.936189][ T5530] vlan2: entered allmulticast mode [ 70.941383][ T5530] bond0: entered allmulticast mode [ 71.021534][ T5537] loop0: detected capacity change from 0 to 2048 [ 71.087138][ T5547] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 71.112480][ T5414] chnl_net:caif_netlink_parms(): no params data found [ 71.143470][ T5558] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 71.250951][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 71.273037][ T5540] lo speed is unknown, defaulting to 1000 [ 71.375478][ T5583] FAULT_INJECTION: forcing a failure. [ 71.375478][ T5583] name failslab, interval 1, probability 0, space 0, times 0 [ 71.388821][ T5583] CPU: 1 UID: 0 PID: 5583 Comm: syz.0.636 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 71.388977][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.388993][ T5583] Call Trace: [ 71.389002][ T5583] [ 71.389012][ T5583] __dump_stack+0x1d/0x30 [ 71.389039][ T5583] dump_stack_lvl+0xe8/0x140 [ 71.389075][ T5583] dump_stack+0x15/0x1b [ 71.389091][ T5583] should_fail_ex+0x265/0x280 [ 71.389158][ T5583] should_failslab+0x8c/0xb0 [ 71.389256][ T5583] kmem_cache_alloc_noprof+0x50/0x310 [ 71.389281][ T5583] ? getname_flags+0x80/0x3b0 [ 71.389361][ T5583] getname_flags+0x80/0x3b0 [ 71.389498][ T5583] user_path_at+0x28/0x130 [ 71.389520][ T5583] do_faccessat+0x380/0x800 [ 71.389553][ T5583] __x64_sys_faccessat+0x41/0x50 [ 71.389662][ T5583] x64_sys_call+0x2802/0x2fb0 [ 71.389689][ T5583] do_syscall_64+0xd0/0x1a0 [ 71.389717][ T5583] ? clear_bhb_loop+0x40/0x90 [ 71.389738][ T5583] ? clear_bhb_loop+0x40/0x90 [ 71.389762][ T5583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.389821][ T5583] RIP: 0033:0x7fca1073e969 [ 71.389837][ T5583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.389859][ T5583] RSP: 002b:00007fca0ed86038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 71.389880][ T5583] RAX: ffffffffffffffda RBX: 00007fca10966080 RCX: 00007fca1073e969 [ 71.389892][ T5583] RDX: 0000000000000000 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 71.389906][ T5583] RBP: 00007fca0ed86090 R08: 0000000000000000 R09: 0000000000000000 [ 71.389984][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.390000][ T5583] R13: 0000000000000000 R14: 00007fca10966080 R15: 00007ffdc92ecd58 [ 71.390021][ T5583] [ 71.600133][ T5581] bond2: entered promiscuous mode [ 71.606562][ T5581] bond2: entered allmulticast mode [ 71.606761][ T5583] loop0: detected capacity change from 0 to 1024 [ 71.624012][ T5579] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 71.642065][ T5581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.699140][ T5581] bond2 (unregistering): Released all slaves [ 71.789929][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.797094][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.811119][ T5414] bridge_slave_0: entered allmulticast mode [ 71.833505][ T5414] bridge_slave_0: entered promiscuous mode [ 71.850050][ T5595] loop3: detected capacity change from 0 to 1024 [ 71.866183][ T5597] loop0: detected capacity change from 0 to 2048 [ 71.871963][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.879877][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.893313][ T5414] bridge_slave_1: entered allmulticast mode [ 71.914712][ T5414] bridge_slave_1: entered promiscuous mode [ 71.947629][ T5595] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 72.066235][ T5613] loop1: detected capacity change from 0 to 512 [ 72.070631][ T5414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.134470][ T5414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.217047][ T5414] team0: Port device team_slave_0 added [ 72.237286][ T5414] team0: Port device team_slave_1 added [ 72.311211][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.318421][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.344731][ T5414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.356456][ T5414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.363536][ T5414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.389851][ T5414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.463304][ T5414] hsr_slave_0: entered promiscuous mode [ 72.470708][ T5414] hsr_slave_1: entered promiscuous mode [ 72.480534][ T5414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.489241][ T5642] openvswitch: netlink: Message has 6 unknown bytes. [ 72.496276][ T5414] Cannot create hsr debugfs directory [ 72.521544][ T5634] lo speed is unknown, defaulting to 1000 [ 72.676358][ T5660] FAULT_INJECTION: forcing a failure. [ 72.676358][ T5660] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 72.689685][ T5660] CPU: 1 UID: 0 PID: 5660 Comm: syz.3.659 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 72.689724][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.689775][ T5660] Call Trace: [ 72.689783][ T5660] [ 72.689792][ T5660] __dump_stack+0x1d/0x30 [ 72.689817][ T5660] dump_stack_lvl+0xe8/0x140 [ 72.689902][ T5660] dump_stack+0x15/0x1b [ 72.689920][ T5660] should_fail_ex+0x265/0x280 [ 72.689974][ T5660] should_fail_alloc_page+0xf2/0x100 [ 72.690019][ T5660] __alloc_frozen_pages_noprof+0xff/0x360 [ 72.690107][ T5660] alloc_pages_mpol+0xb3/0x250 [ 72.690140][ T5660] vma_alloc_folio_noprof+0x1aa/0x300 [ 72.690196][ T5660] handle_mm_fault+0x1056/0x2ae0 [ 72.690234][ T5660] ? mas_walk+0xf2/0x120 [ 72.690296][ T5660] do_user_addr_fault+0x636/0x1090 [ 72.690334][ T5660] exc_page_fault+0x54/0xc0 [ 72.690381][ T5660] asm_exc_page_fault+0x26/0x30 [ 72.690408][ T5660] RIP: 0033:0x7fa95657bf6b [ 72.690428][ T5660] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 72.690450][ T5660] RSP: 002b:00007fa954c13e10 EFLAGS: 00010246 [ 72.690466][ T5660] RAX: 00007fa954c15f30 RBX: 00007fa9567c3620 RCX: 0000000000000000 [ 72.690478][ T5660] RDX: 00007fa954c15f78 RSI: 00007fa95662dbf8 RDI: 00007fa954c13e30 [ 72.690493][ T5660] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 72.690531][ T5660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.690544][ T5660] R13: 0000000000000000 R14: 00007fa9567f6080 R15: 00007ffeaa6a1988 [ 72.690635][ T5660] [ 72.690656][ T5660] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 72.767589][ T5634] loop0: detected capacity change from 0 to 1024 [ 72.876794][ T5634] EXT4-fs: Ignoring removed orlov option [ 73.078073][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 73.078091][ T29] audit: type=1326 audit(1747753090.920:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.124974][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.664'. [ 73.133308][ T5673] bond3: entered promiscuous mode [ 73.142367][ T5673] bond3: entered allmulticast mode [ 73.152170][ T5673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.178701][ T29] audit: type=1326 audit(1747753090.920:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.202314][ T29] audit: type=1326 audit(1747753090.990:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.225739][ T29] audit: type=1326 audit(1747753090.990:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.249548][ T29] audit: type=1326 audit(1747753090.990:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.273169][ T29] audit: type=1326 audit(1747753090.990:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.296679][ T29] audit: type=1326 audit(1747753090.990:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.304483][ T5691] loop1: detected capacity change from 0 to 128 [ 73.320107][ T29] audit: type=1326 audit(1747753090.990:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.320205][ T29] audit: type=1326 audit(1747753090.990:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.330597][ T5691] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 73.349827][ T29] audit: type=1326 audit(1747753090.990:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5680 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 73.388983][ T5691] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.418954][ T5691] ext2 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.444752][ T5691] EXT4-fs error (device loop1): make_indexed_dir:2271: inode #2: block 63: comm syz.1.667: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 73.456496][ T5673] bond3 (unregistering): Released all slaves [ 73.521270][ T5414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.543718][ T5414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.553318][ T5697] loop5: detected capacity change from 0 to 1024 [ 73.560476][ T5697] EXT4-fs: Ignoring removed orlov option [ 73.571962][ T5414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.617610][ T5697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.627941][ T5414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.675706][ T5703] lo speed is unknown, defaulting to 1000 [ 73.756346][ T5414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.769103][ T5414] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.779003][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.786201][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.794098][ T5706] loop0: detected capacity change from 0 to 512 [ 73.807017][ T5713] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 73.837683][ T5713] netlink: 'syz.3.671': attribute type 1 has an invalid length. [ 73.840925][ T5414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.856152][ T5414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.870139][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.877306][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.925232][ T5706] ip6erspan0: entered promiscuous mode [ 74.094100][ T5414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.108662][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.165968][ T5743] loop3: detected capacity change from 0 to 512 [ 74.173209][ T5743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.206500][ T5743] EXT4-fs (loop3): 1 truncate cleaned up [ 74.219584][ T5743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.328397][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.429221][ T5414] veth0_vlan: entered promiscuous mode [ 74.456842][ T5414] veth1_vlan: entered promiscuous mode [ 74.472652][ T5766] lo speed is unknown, defaulting to 1000 [ 74.504489][ T5414] veth0_macvtap: entered promiscuous mode [ 74.520543][ T5414] veth1_macvtap: entered promiscuous mode [ 74.541611][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.565276][ T5414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.574487][ T5733] lo speed is unknown, defaulting to 1000 [ 74.593498][ T5414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.602442][ T5414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.611576][ T5414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.620491][ T5414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.681002][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.948388][ T5766] loop3: detected capacity change from 0 to 1024 [ 75.037239][ T5766] EXT4-fs: Ignoring removed orlov option [ 75.057598][ T5766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.212419][ T5789] bond2: entered promiscuous mode [ 75.219991][ T5789] bond2: entered allmulticast mode [ 75.286745][ T5808] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 75.409756][ T5789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.511675][ T5806] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 75.577977][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.657477][ T5789] bond2 (unregistering): Released all slaves [ 75.823557][ T5821] loop3: detected capacity change from 0 to 512 [ 75.831070][ T5821] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.852491][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 75.943375][ T5804] lo speed is unknown, defaulting to 1000 [ 75.954304][ T5821] EXT4-fs (loop3): 1 truncate cleaned up [ 75.967416][ T5821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.116132][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.352910][ T5857] loop3: detected capacity change from 0 to 512 [ 76.392772][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.420261][ T5857] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.527370][ T5857] ip6erspan0: entered promiscuous mode [ 76.572306][ T5863] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.701: Failed to acquire dquot type 1 [ 76.638251][ T5862] lo speed is unknown, defaulting to 1000 [ 76.686208][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.795093][ T5872] loop1: detected capacity change from 0 to 512 [ 76.815933][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.829699][ T5872] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.896772][ T5872] ip6erspan0: entered promiscuous mode [ 76.938803][ T5882] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.703: Failed to acquire dquot type 1 [ 76.968863][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 76.989383][ T5885] loop3: detected capacity change from 0 to 512 [ 76.998040][ T5885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.010706][ T5885] EXT4-fs (loop3): 1 truncate cleaned up [ 77.017096][ T5885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.044210][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.068939][ T5888] 9pnet_fd: Insufficient options for proto=fd [ 77.079157][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.100882][ T5884] loop5: detected capacity change from 0 to 512 [ 77.168701][ T5884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.181705][ T5894] loop0: detected capacity change from 0 to 512 [ 77.223098][ T5884] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.259024][ T5894] ip6erspan0: entered promiscuous mode [ 77.423508][ T5912] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.707: Failed to acquire dquot type 1 [ 77.460497][ T5908] bond4: entered promiscuous mode [ 77.467177][ T5908] bond4: entered allmulticast mode [ 77.476042][ T5908] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.483459][ T5920] loop6: detected capacity change from 0 to 512 [ 77.498018][ T5920] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 77.544643][ T5920] EXT4-fs (loop6): 1 truncate cleaned up [ 77.565472][ T5920] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.598069][ T5925] 9pnet_fd: Insufficient options for proto=fd [ 77.630586][ T5908] bond4 (unregistering): Released all slaves [ 77.673107][ T5414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.708648][ T5884] ip6erspan0: entered promiscuous mode [ 77.757561][ T5932] loop6: detected capacity change from 0 to 527 [ 77.764816][ T5932] EXT4-fs (loop6): failed to parse options in superblock:  [ 77.777819][ T5932] EXT4-fs (loop6): Unsupported encryption level 4 [ 78.031264][ T5941] loop6: detected capacity change from 0 to 512 [ 78.065202][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.092003][ T5941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.138673][ T5952] 9pnet_fd: Insufficient options for proto=fd [ 78.155622][ T5941] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.166365][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 78.166377][ T29] audit: type=1326 audit(1747753096.010:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2febebd2d0 code=0x7ffc0000 [ 78.205035][ T5928] lo speed is unknown, defaulting to 1000 [ 78.214913][ T29] audit: type=1326 audit(1747753096.060:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2febebd6b7 code=0x7ffc0000 [ 78.265322][ T29] audit: type=1326 audit(1747753096.060:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2febebd2d0 code=0x7ffc0000 [ 78.266131][ T5941] ip6erspan0: entered promiscuous mode [ 78.288861][ T29] audit: type=1326 audit(1747753096.060:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2febebe969 code=0x7ffc0000 [ 78.317485][ T29] audit: type=1326 audit(1747753096.060:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2febebe969 code=0x7ffc0000 [ 78.340625][ T29] audit: type=1326 audit(1747753096.100:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2febebe969 code=0x7ffc0000 [ 78.363994][ T29] audit: type=1326 audit(1747753096.100:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2febebe969 code=0x7ffc0000 [ 78.379683][ T5944] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 78.387214][ T29] audit: type=1326 audit(1747753096.100:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2febebe969 code=0x7ffc0000 [ 78.398951][ T5944] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 78.448231][ T5963] loop0: detected capacity change from 0 to 2048 [ 78.456804][ T5956] loop3: detected capacity change from 0 to 512 [ 78.482230][ T5956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.495812][ T5944] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.730: Failed to acquire dquot type 1 [ 78.526871][ T5956] EXT4-fs (loop3): 1 truncate cleaned up [ 78.533759][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.621401][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.663900][ T5414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.754076][ T5974] loop0: detected capacity change from 0 to 527 [ 78.766986][ T5976] loop3: detected capacity change from 0 to 512 [ 78.790306][ T5979] loop5: detected capacity change from 0 to 128 [ 78.818810][ T5979] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 78.837943][ T5979] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.855344][ T5979] ext2 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.880262][ T5976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.924154][ T5976] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.970801][ T5976] ip6erspan0: entered promiscuous mode [ 78.977776][ T5979] EXT4-fs error (device loop5): make_indexed_dir:2271: inode #2: block 63: comm syz.5.739: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 79.006933][ T5996] loop1: detected capacity change from 0 to 2048 [ 79.023141][ T5999] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.741: Failed to acquire dquot type 1 [ 79.039291][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.043053][ T5998] loop0: detected capacity change from 0 to 512 [ 79.084634][ T6000] loop6: detected capacity change from 0 to 512 [ 79.111484][ T6000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.125851][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.162565][ T6000] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.205315][ T6000] ip6erspan0: entered promiscuous mode [ 79.218253][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.292603][ T6011] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.749: Failed to acquire dquot type 1 [ 79.471030][ T6014] bond4: entered promiscuous mode [ 79.477877][ T6014] bond4: entered allmulticast mode [ 79.490190][ T6014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 79.603890][ T5414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.613890][ T4098] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.651346][ T6014] bond4 (unregistering): Released all slaves [ 79.700486][ T6034] loop0: detected capacity change from 0 to 2048 [ 79.743076][ T6037] loop5: detected capacity change from 0 to 512 [ 79.773934][ T6037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.789613][ T6037] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.940833][ T6049] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.762: Failed to acquire dquot type 1 [ 79.949184][ T6037] ip6erspan0: entered promiscuous mode [ 79.961007][ T6052] loop0: detected capacity change from 0 to 512 [ 80.034695][ T6052] ip6erspan0: entered promiscuous mode [ 80.060139][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.242511][ T6071] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 80.423810][ T6087] loop0: detected capacity change from 0 to 512 [ 80.550687][ T6084] bond2: entered promiscuous mode [ 80.556965][ T6084] bond2: entered allmulticast mode [ 80.565122][ T6084] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.620773][ T6084] bond2 (unregistering): Released all slaves [ 80.660566][ T6093] loop6: detected capacity change from 0 to 512 [ 80.692526][ T6093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.719787][ T6093] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.757369][ T6087] ip6erspan0: entered promiscuous mode [ 80.768377][ T6093] ip6erspan0: entered promiscuous mode [ 80.811008][ T6103] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.785: Failed to acquire dquot type 1 [ 81.007841][ T5414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.023034][ T6117] lo speed is unknown, defaulting to 1000 [ 81.115487][ T6118] lo speed is unknown, defaulting to 1000 [ 81.137127][ T6119] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 81.215932][ T6119] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 81.314534][ T6118] loop0: detected capacity change from 0 to 1024 [ 81.321610][ T6118] EXT4-fs: Ignoring removed orlov option [ 81.422403][ T6143] loop0: detected capacity change from 0 to 512 [ 81.553484][ T6138] bond1: entered promiscuous mode [ 81.559624][ T6138] bond1: entered allmulticast mode [ 81.571858][ T6138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.658109][ T6150] loop1: detected capacity change from 0 to 512 [ 81.702860][ T6150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.714841][ T6138] bond1 (unregistering): Released all slaves [ 81.723131][ T6152] loop3: detected capacity change from 0 to 512 [ 81.731386][ T6150] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.782232][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.811809][ T6162] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.803: Failed to acquire dquot type 1 [ 81.842514][ T6152] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.859780][ T6143] ip6erspan0: entered promiscuous mode [ 81.873970][ T6150] ip6erspan0: entered promiscuous mode [ 81.900565][ T6152] ip6erspan0: entered promiscuous mode [ 81.910572][ T6165] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.802: Failed to acquire dquot type 1 [ 82.165241][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.177717][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.313532][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.809'. [ 82.322582][ T6176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.809'. [ 82.423106][ T6178] lo speed is unknown, defaulting to 1000 [ 82.621925][ T6188] lo speed is unknown, defaulting to 1000 [ 82.741328][ T6190] lo speed is unknown, defaulting to 1000 [ 82.774995][ T6178] loop3: detected capacity change from 0 to 1024 [ 82.794843][ T6178] EXT4-fs: Ignoring removed orlov option [ 82.821108][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.973205][ T6198] loop0: detected capacity change from 0 to 2048 [ 83.172803][ T6203] loop1: detected capacity change from 0 to 527 [ 83.188191][ T6203] EXT4-fs (loop1): failed to parse options in superblock:  [ 83.201096][ T6203] EXT4-fs (loop1): Unsupported encryption level 4 [ 83.335144][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.405572][ T29] kauditd_printk_skb: 633 callbacks suppressed [ 83.405591][ T29] audit: type=1326 audit(1747753101.240:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.434818][ T29] audit: type=1326 audit(1747753101.240:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.444095][ T6216] lo speed is unknown, defaulting to 1000 [ 83.457778][ T29] audit: type=1326 audit(1747753101.240:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.486359][ T29] audit: type=1326 audit(1747753101.240:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.497510][ T6218] loop0: detected capacity change from 0 to 512 [ 83.509522][ T29] audit: type=1326 audit(1747753101.240:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.539101][ T29] audit: type=1326 audit(1747753101.240:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.562303][ T29] audit: type=1326 audit(1747753101.240:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.585318][ T29] audit: type=1326 audit(1747753101.240:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.608219][ T6212] ip6erspan0: entered promiscuous mode [ 83.613967][ T29] audit: type=1326 audit(1747753101.240:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.637161][ T29] audit: type=1326 audit(1747753101.240:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6211 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1073e969 code=0x7ffc0000 [ 83.702913][ T6219] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 83.807001][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.826'. [ 83.816071][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.826'. [ 83.846321][ T6221] netlink: 'syz.6.824': attribute type 1 has an invalid length. [ 84.076987][ T6232] loop3: detected capacity change from 0 to 2048 [ 84.116308][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.280998][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.286262][ T6244] loop5: detected capacity change from 0 to 527 [ 84.316938][ T6244] EXT4-fs (loop5): failed to parse options in superblock:  [ 84.329829][ T6244] EXT4-fs (loop5): Unsupported encryption level 4 [ 84.546420][ T6256] loop3: detected capacity change from 0 to 512 [ 84.555022][ T6255] loop5: detected capacity change from 0 to 512 [ 84.563092][ T6256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.616172][ T6256] EXT4-fs (loop3): 1 truncate cleaned up [ 84.625483][ T6256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.638960][ T6255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.648699][ T6241] bond5: entered promiscuous mode [ 84.659515][ T6241] bond5: entered allmulticast mode [ 84.675718][ T6255] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.701757][ T6265] loop0: detected capacity change from 0 to 512 [ 84.711203][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.727019][ T6241] 8021q: adding VLAN 0 to HW filter on device bond5 [ 84.765896][ T6267] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.836: Failed to acquire dquot type 1 [ 84.798049][ T6269] loop3: detected capacity change from 0 to 2048 [ 84.839723][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.875674][ T6241] bond5 (unregistering): Released all slaves [ 84.924767][ T6279] loop6: detected capacity change from 0 to 1024 [ 84.931740][ T6279] EXT4-fs: Ignoring removed orlov option [ 84.982213][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 84.993265][ T6279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.069036][ T6255] ip6erspan0: entered promiscuous mode [ 85.181875][ T6286] loop0: detected capacity change from 0 to 2048 [ 85.202406][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.283869][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.368777][ T6292] loop3: detected capacity change from 0 to 527 [ 85.381906][ T6292] EXT4-fs (loop3): failed to parse options in superblock:  [ 85.395952][ T6292] EXT4-fs (loop3): Unsupported encryption level 4 [ 85.451038][ T6284] bond5: entered promiscuous mode [ 85.471218][ T6284] bond5: entered allmulticast mode [ 85.487828][ T6284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 85.541493][ T6284] bond5 (unregistering): Released all slaves [ 85.596050][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 85.605088][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 85.719136][ T6302] loop0: detected capacity change from 0 to 512 [ 85.727983][ T6306] loop1: detected capacity change from 0 to 128 [ 85.738468][ T6306] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 85.773737][ T6306] ext2 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.814827][ T6306] EXT4-fs error (device loop1): make_indexed_dir:2271: inode #2: block 63: comm syz.1.851: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 85.848218][ T6306] veth1_to_bond: entered allmulticast mode [ 85.868092][ T6306] veth1_to_bond: left allmulticast mode [ 86.290885][ T6338] loop6: detected capacity change from 0 to 527 [ 86.421750][ T6338] EXT4-fs (loop6): failed to parse options in superblock:  [ 86.435016][ T6338] EXT4-fs (loop6): Unsupported encryption level 4 [ 86.449468][ T6344] loop3: detected capacity change from 0 to 2048 [ 86.654322][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 86.780507][ T6389] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 86.801368][ T6389] netlink: 'syz.6.868': attribute type 1 has an invalid length. [ 86.813865][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 86.836205][ T6392] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 86.847841][ T6392] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 86.866638][ T6360] bond2: entered promiscuous mode [ 86.872105][ T6360] bond2: entered allmulticast mode [ 86.879297][ T6360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 86.902522][ T6360] bond2 (unregistering): Released all slaves [ 86.926104][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 86.935192][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.870'. [ 86.982662][ T6376] lo speed is unknown, defaulting to 1000 [ 87.019623][ T6380] lo speed is unknown, defaulting to 1000 [ 87.176533][ T6425] loop0: detected capacity change from 0 to 128 [ 87.199593][ T6418] lo speed is unknown, defaulting to 1000 [ 87.234576][ T6425] veth1_to_bond: entered allmulticast mode [ 87.306495][ T6425] veth1_to_bond: left allmulticast mode [ 87.465412][ T6452] loop1: detected capacity change from 0 to 512 [ 87.514406][ T6452] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.542541][ T6461] loop6: detected capacity change from 0 to 2048 [ 87.565392][ T6452] ip6erspan0: entered promiscuous mode [ 87.629498][ T6471] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.880: Failed to acquire dquot type 1 [ 87.801539][ T6478] lo speed is unknown, defaulting to 1000 [ 87.814639][ T6487] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 87.825399][ T6490] loop3: detected capacity change from 0 to 128 [ 87.838477][ T6490] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 87.854720][ T6487] bond0: (slave bond_slave_0): Releasing backup interface [ 87.865134][ T6490] ext2 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.883911][ T6489] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 87.897111][ T6490] EXT4-fs error (device loop3): make_indexed_dir:2271: inode #2: block 63: comm syz.3.884: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 87.936542][ T6489] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 88.031337][ T6490] veth1_to_bond: entered allmulticast mode [ 88.071194][ T6490] veth1_to_bond: left allmulticast mode [ 88.159929][ T6514] loop0: detected capacity change from 0 to 512 [ 88.211670][ T6505] lo speed is unknown, defaulting to 1000 [ 88.401565][ T6522] netlink: 'syz.5.887': attribute type 1 has an invalid length. [ 88.426835][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 88.426849][ T29] audit: type=1326 audit(1747753106.270:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6283e969 code=0x7ffc0000 [ 88.446780][ T6518] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 88.471388][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.892'. [ 88.480417][ T6535] netlink: 28 bytes leftover after parsing attributes in process `syz.6.892'. [ 88.493252][ T29] audit: type=1326 audit(1747753106.330:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6525 comm="syz.1.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6283e969 code=0x7ffc0000 [ 88.503795][ T6534] lo speed is unknown, defaulting to 1000 [ 88.560872][ T6538] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 88.595302][ T6542] lo speed is unknown, defaulting to 1000 [ 88.688195][ T6547] loop3: detected capacity change from 0 to 2048 [ 88.834074][ T6542] loop1: detected capacity change from 0 to 1024 [ 88.871480][ T6542] EXT4-fs: Ignoring removed orlov option [ 89.003436][ T6564] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 89.166467][ T6574] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 89.211014][ T29] audit: type=1326 audit(1747753107.050:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.253593][ T29] audit: type=1326 audit(1747753107.050:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.276835][ T6589] loop3: detected capacity change from 0 to 2048 [ 89.277013][ T29] audit: type=1326 audit(1747753107.050:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.307782][ T29] audit: type=1326 audit(1747753107.050:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.331438][ T29] audit: type=1326 audit(1747753107.050:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.354950][ T29] audit: type=1326 audit(1747753107.050:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.378320][ T29] audit: type=1326 audit(1747753107.050:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.401982][ T29] audit: type=1326 audit(1747753107.050:4746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6584 comm="syz.3.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 89.433976][ T6587] lo speed is unknown, defaulting to 1000 [ 89.533026][ T6594] lo speed is unknown, defaulting to 1000 [ 89.550438][ T6596] loop5: detected capacity change from 0 to 2048 [ 89.590256][ T6597] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 89.619580][ T6597] netlink: 'syz.6.907': attribute type 1 has an invalid length. [ 89.718501][ T6609] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 89.755598][ T6601] lo speed is unknown, defaulting to 1000 [ 89.794939][ T6613] lo speed is unknown, defaulting to 1000 [ 89.840845][ T6617] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 89.859988][ T6620] loop5: detected capacity change from 0 to 512 [ 89.868107][ T6587] loop0: detected capacity change from 0 to 1024 [ 89.874888][ T6587] EXT4-fs: Ignoring removed orlov option [ 89.883726][ T6620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 89.904855][ T6620] EXT4-fs (loop5): 1 truncate cleaned up [ 89.931955][ T6617] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 90.060673][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.6.917'. [ 90.069720][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.6.917'. [ 90.167190][ T6642] loop1: detected capacity change from 0 to 2048 [ 90.423259][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 90.455672][ T6663] SELinux: syz.1.928 (6663) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 90.629744][ T6672] lo speed is unknown, defaulting to 1000 [ 90.682083][ T6678] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 90.721413][ T6685] netlink: 'syz.5.932': attribute type 1 has an invalid length. [ 90.991951][ T6694] loop1: detected capacity change from 0 to 2048 [ 91.098610][ T6699] loop6: detected capacity change from 0 to 512 [ 91.099484][ T6703] loop0: detected capacity change from 0 to 512 [ 91.133549][ T6703] ip6erspan0: entered promiscuous mode [ 91.147042][ T6699] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.171035][ T6699] ip6erspan0: entered promiscuous mode [ 91.225108][ T6707] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.943: Failed to acquire dquot type 1 [ 91.295492][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 91.369846][ T6708] lo speed is unknown, defaulting to 1000 [ 91.385167][ T6719] loop1: detected capacity change from 0 to 527 [ 91.439565][ T6722] lo speed is unknown, defaulting to 1000 [ 91.446386][ T6719] EXT4-fs (loop1): failed to parse options in superblock:  [ 91.459400][ T6719] EXT4-fs (loop1): Unsupported encryption level 4 [ 91.484652][ T6720] loop6: detected capacity change from 0 to 527 [ 91.515694][ T6720] EXT4-fs (loop6): failed to parse options in superblock:  [ 91.528709][ T6720] EXT4-fs (loop6): Unsupported encryption level 4 [ 91.541264][ T6724] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 91.589584][ T6724] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 91.748567][ T6733] bond7: entered promiscuous mode [ 91.754819][ T6733] bond7: entered allmulticast mode [ 91.763565][ T6733] 8021q: adding VLAN 0 to HW filter on device bond7 [ 91.812025][ T6739] 9pnet_fd: Insufficient options for proto=fd [ 91.840430][ T6733] bond7 (unregistering): Released all slaves [ 92.011348][ T6734] lo speed is unknown, defaulting to 1000 [ 92.131379][ T6756] loop6: detected capacity change from 0 to 2048 [ 92.265704][ T6761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.305224][ T6761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.341612][ T6761] tipc: Enabling of bearer rejected, failed to enable media [ 92.440684][ T6770] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 92.467530][ T6767] lo speed is unknown, defaulting to 1000 [ 92.477994][ T6774] FAULT_INJECTION: forcing a failure. [ 92.477994][ T6774] name failslab, interval 1, probability 0, space 0, times 0 [ 92.491274][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.0.967 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 92.491377][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.491390][ T6774] Call Trace: [ 92.491395][ T6774] [ 92.491405][ T6774] __dump_stack+0x1d/0x30 [ 92.491451][ T6774] dump_stack_lvl+0xe8/0x140 [ 92.491477][ T6774] dump_stack+0x15/0x1b [ 92.491500][ T6774] should_fail_ex+0x265/0x280 [ 92.491616][ T6774] should_failslab+0x8c/0xb0 [ 92.491661][ T6774] kmem_cache_alloc_noprof+0x50/0x310 [ 92.491718][ T6774] ? dup_fd+0x3a/0x540 [ 92.491748][ T6774] dup_fd+0x3a/0x540 [ 92.491818][ T6774] ? _raw_spin_unlock+0x26/0x50 [ 92.491899][ T6774] ksys_unshare+0x346/0x6d0 [ 92.492000][ T6774] ? ksys_write+0x16e/0x1a0 [ 92.492075][ T6774] __x64_sys_unshare+0x1f/0x30 [ 92.492113][ T6774] x64_sys_call+0x2d4b/0x2fb0 [ 92.492142][ T6774] do_syscall_64+0xd0/0x1a0 [ 92.492171][ T6774] ? clear_bhb_loop+0x40/0x90 [ 92.492246][ T6774] ? clear_bhb_loop+0x40/0x90 [ 92.492276][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.492305][ T6774] RIP: 0033:0x7fca1073e969 [ 92.492325][ T6774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.492395][ T6774] RSP: 002b:00007fca0eda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.492434][ T6774] RAX: ffffffffffffffda RBX: 00007fca10965fa0 RCX: 00007fca1073e969 [ 92.492447][ T6774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 92.492459][ T6774] RBP: 00007fca0eda7090 R08: 0000000000000000 R09: 0000000000000000 [ 92.492532][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.492605][ T6774] R13: 0000000000000000 R14: 00007fca10965fa0 R15: 00007ffdc92ecd58 [ 92.492628][ T6774] [ 92.959036][ T6791] loop0: detected capacity change from 0 to 527 [ 93.036079][ T6788] lo speed is unknown, defaulting to 1000 [ 93.214170][ T6806] loop0: detected capacity change from 0 to 128 [ 93.347084][ T6812] lo speed is unknown, defaulting to 1000 [ 93.423202][ T6815] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 93.485849][ T6823] loop6: detected capacity change from 0 to 512 [ 93.503415][ T6823] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.533290][ T6823] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 93.564274][ T6823] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 93.576462][ T6823] EXT4-fs (loop6): orphan cleanup on readonly fs [ 93.586818][ T6823] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.984: Invalid block bitmap block 0 in block_group 0 [ 93.607471][ T6788] loop3: detected capacity change from 0 to 1024 [ 93.626580][ T6823] EXT4-fs (loop6): Remounting filesystem read-only [ 93.637452][ T6788] EXT4-fs: Ignoring removed orlov option [ 93.647705][ T6823] __quota_error: 334 callbacks suppressed [ 93.647724][ T6823] Quota error (device loop6): write_blk: dquota write failed [ 93.698022][ T6823] Quota error (device loop6): write_blk: dquota write failed [ 93.705562][ T6823] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 93.715707][ T6823] EXT4-fs (loop6): 1 orphan inode deleted [ 93.730746][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.984'. [ 93.788863][ T29] audit: type=1326 audit(1747753111.630:5079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 93.814624][ T6823] bond_slave_1: entered promiscuous mode [ 93.945667][ T6823] macvlan2: entered promiscuous mode [ 93.951201][ T6823] bond0: entered promiscuous mode [ 93.960809][ T6823] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.967896][ T29] audit: type=1326 audit(1747753111.630:5080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 93.991348][ T29] audit: type=1326 audit(1747753111.630:5081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 94.015144][ T29] audit: type=1326 audit(1747753111.630:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 94.038712][ T29] audit: type=1326 audit(1747753111.630:5083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 94.062389][ T29] audit: type=1326 audit(1747753111.630:5084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 94.085767][ T29] audit: type=1326 audit(1747753111.630:5085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6826 comm="syz.5.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72e99e969 code=0x7ffc0000 [ 94.132815][ T6832] loop5: detected capacity change from 0 to 1024 [ 94.141773][ T6833] loop0: detected capacity change from 0 to 512 [ 94.150018][ T6823] syz.6.984 (6823) used greatest stack depth: 9656 bytes left [ 94.156826][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 94.176304][ T6832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.194585][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.216976][ T6832] EXT4-fs: Mount option(s) incompatible with ext2 [ 94.282475][ T6838] lo speed is unknown, defaulting to 1000 [ 94.381243][ T6839] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 94.787526][ T6842] bond1: entered promiscuous mode [ 94.793462][ T6842] bond1: entered allmulticast mode [ 94.810598][ T6842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.888910][ T6842] bond1 (unregistering): Released all slaves [ 94.947592][ T6832] netlink: 52 bytes leftover after parsing attributes in process `syz.5.986'. [ 94.997412][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 95.081395][ T6867] loop3: detected capacity change from 0 to 512 [ 95.115997][ T6867] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.137586][ T6867] ip6erspan0: entered promiscuous mode [ 95.198511][ T6867] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 1 [ 95.280521][ T6869] lo speed is unknown, defaulting to 1000 [ 95.438105][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 95.462780][ T6902] loop1: detected capacity change from 0 to 1024 [ 95.513016][ T6889] bond3: entered promiscuous mode [ 95.519636][ T6889] bond3: entered allmulticast mode [ 95.527551][ T6889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.527661][ T6902] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.611485][ T6889] bond3 (unregistering): Released all slaves [ 95.630806][ T6869] loop6: detected capacity change from 0 to 1024 [ 95.662920][ T6869] EXT4-fs: Ignoring removed orlov option [ 95.689555][ T6913] loop1: detected capacity change from 0 to 2048 [ 95.878130][ T6904] bond4: entered promiscuous mode [ 95.884598][ T6904] bond4: entered allmulticast mode [ 95.894034][ T6904] 8021q: adding VLAN 0 to HW filter on device bond4 [ 95.980437][ T6904] bond4 (unregistering): Released all slaves [ 96.100963][ T6928] loop0: detected capacity change from 0 to 512 [ 96.158076][ T6928] ip6erspan0: entered promiscuous mode [ 96.257384][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 96.271997][ T6933] lo speed is unknown, defaulting to 1000 [ 96.346201][ T6938] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 96.387571][ T6938] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 96.544952][ T6951] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 96.555432][ T6951] SELinux: failed to load policy [ 96.591975][ T6952] loop5: detected capacity change from 0 to 128 [ 96.598905][ T6952] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 96.654436][ T6952] ext2 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.683695][ T6952] EXT4-fs error (device loop5): make_indexed_dir:2271: inode #2: block 63: comm syz.5.1026: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 96.710788][ T6959] loop3: detected capacity change from 0 to 512 [ 96.719421][ T6960] loop1: detected capacity change from 0 to 2048 [ 96.726711][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1024'. [ 96.742631][ T6959] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.1029: corrupted in-inode xattr: e_name out of bounds [ 96.782156][ T6959] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1029: couldn't read orphan inode 15 (err -117) [ 96.842457][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1032'. [ 96.864714][ T6972] loop0: detected capacity change from 0 to 512 [ 96.912685][ T6976] FAULT_INJECTION: forcing a failure. [ 96.912685][ T6976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.918823][ T6975] lo speed is unknown, defaulting to 1000 [ 96.925917][ T6976] CPU: 1 UID: 0 PID: 6976 Comm: +}[@ Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 96.925948][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.926028][ T6976] Call Trace: [ 96.926037][ T6976] [ 96.926049][ T6976] __dump_stack+0x1d/0x30 [ 96.926086][ T6976] dump_stack_lvl+0xe8/0x140 [ 96.926114][ T6976] dump_stack+0x15/0x1b [ 96.926224][ T6976] should_fail_ex+0x265/0x280 [ 96.926273][ T6976] should_fail+0xb/0x20 [ 96.926315][ T6976] should_fail_usercopy+0x1a/0x20 [ 96.926343][ T6976] _copy_from_user+0x1c/0xb0 [ 96.926431][ T6976] bpf_test_init+0xdf/0x160 [ 96.926476][ T6976] bpf_prog_test_run_xdp+0x274/0x8f0 [ 96.926562][ T6976] ? kstrtouint+0x76/0xc0 [ 96.926601][ T6976] ? __rcu_read_unlock+0x4f/0x70 [ 96.926641][ T6976] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.926752][ T6976] bpf_prog_test_run+0x207/0x390 [ 96.926801][ T6976] __sys_bpf+0x3dc/0x790 [ 96.926850][ T6976] __x64_sys_bpf+0x41/0x50 [ 96.926935][ T6976] x64_sys_call+0x2478/0x2fb0 [ 96.926966][ T6976] do_syscall_64+0xd0/0x1a0 [ 96.926999][ T6976] ? clear_bhb_loop+0x40/0x90 [ 96.927082][ T6976] ? clear_bhb_loop+0x40/0x90 [ 96.927113][ T6976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.927142][ T6976] RIP: 0033:0x7fa9565ce969 [ 96.927164][ T6976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.927189][ T6976] RSP: 002b:00007fa954c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.927292][ T6976] RAX: ffffffffffffffda RBX: 00007fa9567f5fa0 RCX: 00007fa9565ce969 [ 96.927309][ T6976] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 96.927401][ T6976] RBP: 00007fa954c37090 R08: 0000000000000000 R09: 0000000000000000 [ 96.927419][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.927436][ T6976] R13: 0000000000000000 R14: 00007fa9567f5fa0 R15: 00007ffeaa6a1988 [ 96.927463][ T6976] [ 96.979498][ T6980] loop3: detected capacity change from 0 to 512 [ 97.059827][ T6972] ip6erspan0: entered promiscuous mode [ 97.159284][ T6980] EXT4-fs (loop3): orphan cleanup on readonly fs [ 97.170361][ T6980] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1035: bad orphan inode 13 [ 97.181056][ T6980] ext4_test_bit(bit=12, block=18) = 1 [ 97.186537][ T6980] is_bad_inode(inode)=0 [ 97.190730][ T6980] NEXT_ORPHAN(inode)=2130706432 [ 97.195664][ T6980] max_ino=32 [ 97.198938][ T6980] i_nlink=1 [ 97.258003][ T6992] 9pnet_fd: Insufficient options for proto=fd [ 97.277640][ T6975] loop1: detected capacity change from 0 to 1024 [ 97.304585][ T6975] EXT4-fs: Ignoring removed orlov option [ 97.317262][ T6994] lo speed is unknown, defaulting to 1000 [ 97.382107][ T6996] loop0: detected capacity change from 0 to 527 [ 97.453442][ T6999] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 97.459554][ T7004] loop1: detected capacity change from 0 to 2048 [ 97.476565][ T6999] netlink: 'syz.6.1040': attribute type 1 has an invalid length. [ 97.657716][ T7000] bond2: entered promiscuous mode [ 97.662238][ T6981] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1035'. [ 97.663468][ T7000] bond2: entered allmulticast mode [ 97.679755][ T7000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.704839][ T7000] bond2 (unregistering): Released all slaves [ 97.766123][ T6981] gretap0: entered promiscuous mode [ 97.863175][ T7020] lo speed is unknown, defaulting to 1000 [ 98.084036][ T7022] loop1: detected capacity change from 0 to 1024 [ 98.091092][ T7022] EXT4-fs: Ignoring removed orlov option [ 98.099856][ T7039] cgroup: Invalid name [ 98.140332][ T7043] loop5: detected capacity change from 0 to 128 [ 98.191341][ T7043] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 98.248288][ T7043] EXT4-fs mount: 54 callbacks suppressed [ 98.248444][ T7043] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.337549][ T7043] ext2 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.380145][ T7050] loop3: detected capacity change from 0 to 2048 [ 98.404322][ T7043] EXT4-fs error (device loop5): make_indexed_dir:2271: inode #2: block 63: comm syz.5.1052: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 98.444515][ T7050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.487053][ T7026] bond3: entered promiscuous mode [ 98.494763][ T7026] bond3: entered allmulticast mode [ 98.514623][ T7026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.565560][ T7026] bond3 (unregistering): Released all slaves [ 98.706570][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.776736][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.803725][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 98.914864][ T4098] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.981900][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 98.981943][ T29] audit: type=1400 audit(1747753116.820:5494): avc: denied { connect } for pid=7070 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.037544][ T7071] lo speed is unknown, defaulting to 1000 [ 99.082878][ T7082] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.096549][ T29] audit: type=1400 audit(1747753116.920:5495): avc: denied { connect } for pid=7068 comm="syz.1.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.116804][ T29] audit: type=1400 audit(1747753116.920:5496): avc: denied { write } for pid=7068 comm="syz.1.1063" path="socket:[15346]" dev="sockfs" ino=15346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.162979][ T7084] loop0: detected capacity change from 0 to 527 [ 99.363827][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1072'. [ 99.528127][ T7111] loop1: detected capacity change from 0 to 128 [ 99.556431][ T1093] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 99.564849][ T29] audit: type=1326 audit(1747753117.390:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.572353][ T7114] loop3: detected capacity change from 0 to 1024 [ 99.588365][ T29] audit: type=1326 audit(1747753117.390:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.615831][ T1093] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.618822][ T29] audit: type=1326 audit(1747753117.390:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.633193][ T7111] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 99.651829][ T29] audit: type=1326 audit(1747753117.390:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.683549][ T29] audit: type=1326 audit(1747753117.390:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.705128][ T7114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.707224][ T29] audit: type=1326 audit(1747753117.390:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.737377][ T29] audit: type=1326 audit(1747753117.390:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7112 comm="syz.3.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa9565ce969 code=0x7ffc0000 [ 99.787636][ T7114] EXT4-fs: Mount option(s) incompatible with ext2 [ 99.818930][ T7111] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.844563][ T7114] FAULT_INJECTION: forcing a failure. [ 99.844563][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 99.857270][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.3.1078 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 99.857337][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.857354][ T7114] Call Trace: [ 99.857362][ T7114] [ 99.857372][ T7114] __dump_stack+0x1d/0x30 [ 99.857399][ T7114] dump_stack_lvl+0xe8/0x140 [ 99.857425][ T7114] dump_stack+0x15/0x1b [ 99.857447][ T7114] should_fail_ex+0x265/0x280 [ 99.857525][ T7114] should_failslab+0x8c/0xb0 [ 99.857566][ T7114] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 99.857598][ T7114] ? sidtab_sid2str_get+0xa0/0x130 [ 99.857640][ T7114] kmemdup_noprof+0x2b/0x70 [ 99.857740][ T7114] sidtab_sid2str_get+0xa0/0x130 [ 99.857789][ T7114] security_sid_to_context_core+0x1eb/0x2e0 [ 99.857865][ T7114] security_sid_to_context+0x27/0x40 [ 99.857903][ T7114] selinux_lsmprop_to_secctx+0x67/0xf0 [ 99.857945][ T7114] security_lsmprop_to_secctx+0x43/0x80 [ 99.858045][ T7114] audit_log_task_context+0x77/0x190 [ 99.858137][ T7114] audit_log_task+0xf4/0x250 [ 99.858176][ T7114] audit_seccomp+0x61/0x100 [ 99.858210][ T7114] ? __seccomp_filter+0x68c/0x10d0 [ 99.858240][ T7114] __seccomp_filter+0x69d/0x10d0 [ 99.858361][ T7114] ? do_vfs_ioctl+0x993/0x15b0 [ 99.858391][ T7114] ? should_fail_ex+0xdb/0x280 [ 99.858440][ T7114] __secure_computing+0x82/0x150 [ 99.858466][ T7114] syscall_trace_enter+0xcf/0x1e0 [ 99.858559][ T7114] do_syscall_64+0xaa/0x1a0 [ 99.858610][ T7114] ? clear_bhb_loop+0x40/0x90 [ 99.858632][ T7114] ? clear_bhb_loop+0x40/0x90 [ 99.858670][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.858699][ T7114] RIP: 0033:0x7fa9565cd37c [ 99.858718][ T7114] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.858744][ T7114] RSP: 002b:00007fa954c37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.858821][ T7114] RAX: ffffffffffffffda RBX: 00007fa9567f5fa0 RCX: 00007fa9565cd37c [ 99.858834][ T7114] RDX: 000000000000000f RSI: 00007fa954c370a0 RDI: 0000000000000009 [ 99.858850][ T7114] RBP: 00007fa954c37090 R08: 0000000000000000 R09: 0000000000000000 [ 99.858866][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.858882][ T7114] R13: 0000000000000000 R14: 00007fa9567f5fa0 R15: 00007ffeaa6a1988 [ 99.858907][ T7114] [ 99.926529][ T7111] ext2 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.934970][ T7124] FAULT_INJECTION: forcing a failure. [ 99.934970][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 99.978405][ T7111] EXT4-fs error (device loop1): make_indexed_dir:2271: inode #2: block 63: comm syz.1.1075: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=0, rec_len=5, size=1000 fake=1 [ 99.978876][ T7124] CPU: 1 UID: 0 PID: 7124 Comm: syz.0.1082 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 99.978915][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.978933][ T7124] Call Trace: [ 99.978943][ T7124] [ 99.978954][ T7124] __dump_stack+0x1d/0x30 [ 99.979066][ T7124] dump_stack_lvl+0xe8/0x140 [ 99.979101][ T7124] dump_stack+0x15/0x1b [ 99.979171][ T7124] should_fail_ex+0x265/0x280 [ 99.979218][ T7124] should_failslab+0x8c/0xb0 [ 99.979261][ T7124] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 99.979307][ T7124] ? security_context_to_sid_core+0x69/0x3b0 [ 99.979423][ T7124] ? avc_denied+0xe4/0x100 [ 99.979520][ T7124] kmemdup_nul+0x36/0xc0 [ 99.979548][ T7124] security_context_to_sid_core+0x69/0x3b0 [ 99.979602][ T7124] security_context_to_sid+0x2e/0x40 [ 99.979642][ T7124] selinux_inode_setxattr+0x4d3/0x710 [ 99.979706][ T7124] ? mntput+0x4b/0x80 [ 99.979732][ T7124] security_inode_setxattr+0x13a/0x1b0 [ 99.979769][ T7124] __vfs_setxattr_locked+0x83/0x1d0 [ 99.979809][ T7124] vfs_setxattr+0x132/0x270 [ 99.979914][ T7124] file_setxattr+0x139/0x1b0 [ 99.979952][ T7124] path_setxattrat+0x290/0x310 [ 99.980061][ T7124] __x64_sys_fsetxattr+0x6b/0x80 [ 99.980109][ T7124] x64_sys_call+0x2f7c/0x2fb0 [ 99.980154][ T7124] do_syscall_64+0xd0/0x1a0 [ 99.980187][ T7124] ? clear_bhb_loop+0x40/0x90 [ 99.980210][ T7124] ? clear_bhb_loop+0x40/0x90 [ 99.980231][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.980318][ T7124] RIP: 0033:0x7fca1073e969 [ 99.980339][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.980366][ T7124] RSP: 002b:00007fca0eda7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 99.980394][ T7124] RAX: ffffffffffffffda RBX: 00007fca10965fa0 RCX: 00007fca1073e969 [ 99.980413][ T7124] RDX: 0000200000000540 RSI: 00002000000005c0 RDI: 0000000000000000 [ 99.980430][ T7124] RBP: 00007fca0eda7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.980446][ T7124] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000002 [ 99.980506][ T7124] R13: 0000000000000000 R14: 00007fca10965fa0 R15: 00007ffdc92ecd58 [ 99.980531][ T7124] [ 100.104319][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 100.164081][ T7132] FAULT_INJECTION: forcing a failure. [ 100.164081][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 100.393899][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.6.1081 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 100.394008][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 100.394027][ T7132] Call Trace: [ 100.394044][ T7132] [ 100.394053][ T7132] __dump_stack+0x1d/0x30 [ 100.394075][ T7132] dump_stack_lvl+0xe8/0x140 [ 100.394095][ T7132] dump_stack+0x15/0x1b [ 100.394115][ T7132] should_fail_ex+0x265/0x280 [ 100.394158][ T7132] should_failslab+0x8c/0xb0 [ 100.394221][ T7132] kmem_cache_alloc_node_noprof+0x57/0x320 [ 100.394244][ T7132] ? __alloc_skb+0x101/0x320 [ 100.394284][ T7132] __alloc_skb+0x101/0x320 [ 100.394381][ T7132] ? audit_log_start+0x365/0x6c0 [ 100.394489][ T7132] audit_log_start+0x380/0x6c0 [ 100.394535][ T7132] audit_seccomp+0x48/0x100 [ 100.394568][ T7132] ? __seccomp_filter+0x68c/0x10d0 [ 100.394675][ T7132] __seccomp_filter+0x69d/0x10d0 [ 100.394741][ T7132] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.394768][ T7132] ? vfs_write+0x75e/0x8d0 [ 100.394811][ T7132] ? __rcu_read_unlock+0x4f/0x70 [ 100.394840][ T7132] ? __fget_files+0x184/0x1c0 [ 100.394880][ T7132] __secure_computing+0x82/0x150 [ 100.394973][ T7132] syscall_trace_enter+0xcf/0x1e0 [ 100.395005][ T7132] do_syscall_64+0xaa/0x1a0 [ 100.395045][ T7132] ? clear_bhb_loop+0x40/0x90 [ 100.395072][ T7132] ? clear_bhb_loop+0x40/0x90 [ 100.395098][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.395145][ T7132] RIP: 0033:0x7f2febebe969 [ 100.395159][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.395178][ T7132] RSP: 002b:00007f2fea506038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 100.395197][ T7132] RAX: ffffffffffffffda RBX: 00007f2fec0e6080 RCX: 00007f2febebe969 [ 100.395239][ T7132] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 100.395251][ T7132] RBP: 00007f2fea506090 R08: 0000000000000000 R09: 0000000000000000 [ 100.395263][ T7132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.395276][ T7132] R13: 0000000000000000 R14: 00007f2fec0e6080 R15: 00007ffc9c957fd8 [ 100.395299][ T7132] [ 100.667273][ T3320] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.736448][ T7146] 9pnet_fd: Insufficient options for proto=fd [ 100.753200][ T7147] loop5: detected capacity change from 0 to 527 [ 100.762094][ T7150] lo speed is unknown, defaulting to 1000 [ 100.770794][ T7147] EXT4-fs (loop5): failed to parse options in superblock:  [ 100.783760][ T7147] EXT4-fs (loop5): Unsupported encryption level 4 [ 100.930635][ T7156] loop5: detected capacity change from 0 to 2048 [ 101.000670][ T7156] EXT4-fs (loop5): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.168895][ T7168] lo speed is unknown, defaulting to 1000 [ 101.223749][ T7171] 9pnet: Could not find request transport: rdma$port=0x0000000000004e205s0000000000010000 [ 101.268905][ T7171] netlink: 'syz.1.1097': attribute type 1 has an invalid length. [ 101.381956][ T7150] loop3: detected capacity change from 0 to 1024 [ 101.389285][ T7150] EXT4-fs: Ignoring removed orlov option [ 101.405886][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.493937][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.527258][ T7181] loop0: detected capacity change from 0 to 128 [ 101.584515][ T7178] lo speed is unknown, defaulting to 1000 [ 101.746450][ T7191] syzkaller1: entered promiscuous mode [ 101.751993][ T7191] syzkaller1: entered allmulticast mode [ 101.810930][ T4098] EXT4-fs (loop5): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 101.840593][ T7193] 9pnet_fd: Insufficient options for proto=fd [ 101.904243][ T7197] lo speed is unknown, defaulting to 1000 [ 102.002992][ T7201] loop3: detected capacity change from 0 to 1024 [ 102.031137][ T7201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.080172][ T7197] loop5: detected capacity change from 0 to 1024 [ 102.087692][ T7197] EXT4-fs: Ignoring removed orlov option [ 102.115286][ T7197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.161057][ T7207] siw: device registration error -23 [ 102.169021][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.242162][ T7207] 9pnet: Could not find request transport: 0xffffffffffffffff [ 102.400914][ T7214] netlink: 'syz.0.1110': attribute type 3 has an invalid length. [ 102.408780][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 102.453399][ T7216] 9pnet_fd: Insufficient options for proto=fd [ 102.529992][ T51] ================================================================== [ 102.538249][ T51] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 102.547587][ T51] [ 102.549933][ T51] write to 0xffff88813d52d644 of 1 bytes by task 7204 on cpu 1: [ 102.557586][ T51] copy_page_from_iter_atomic+0x77f/0xff0 [ 102.563330][ T51] generic_perform_write+0x2c2/0x490 [ 102.568658][ T51] ext4_buffered_write_iter+0x1ee/0x3c0 [ 102.574224][ T51] ext4_file_write_iter+0x383/0xf00 [ 102.579526][ T51] iter_file_splice_write+0x5f2/0x970 [ 102.584912][ T51] direct_splice_actor+0x153/0x2a0 [ 102.590033][ T51] splice_direct_to_actor+0x30f/0x680 [ 102.595421][ T51] do_splice_direct+0xda/0x150 [ 102.600203][ T51] do_sendfile+0x380/0x640 [ 102.604624][ T51] __x64_sys_sendfile64+0x105/0x150 [ 102.609847][ T51] x64_sys_call+0xb39/0x2fb0 [ 102.614582][ T51] do_syscall_64+0xd0/0x1a0 [ 102.619101][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.625005][ T51] [ 102.627337][ T51] read to 0xffff88813d52d400 of 1024 bytes by task 51 on cpu 0: [ 102.634970][ T51] copy_page_from_iter_atomic+0x77f/0xff0 [ 102.640803][ T51] generic_perform_write+0x2c2/0x490 [ 102.646480][ T51] shmem_file_write_iter+0xc5/0xf0 [ 102.651626][ T51] lo_rw_aio+0x5fa/0x7c0 [ 102.655893][ T51] loop_process_work+0x52d/0xa60 [ 102.660853][ T51] loop_workfn+0x31/0x40 [ 102.665121][ T51] process_scheduled_works+0x4cb/0x9d0 [ 102.670599][ T51] worker_thread+0x582/0x770 [ 102.675212][ T51] kthread+0x486/0x510 [ 102.679459][ T51] ret_from_fork+0x4b/0x60 [ 102.683889][ T51] ret_from_fork_asm+0x1a/0x30 [ 102.688669][ T51] [ 102.690994][ T51] Reported by Kernel Concurrency Sanitizer on: [ 102.697326][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 102.708120][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.718202][ T51] Workqueue: loop5 loop_workfn [ 102.722998][ T51] ================================================================== [ 102.799345][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 102.900853][ T4098] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.