last executing test programs: 2m15.262772304s ago: executing program 4 (id=99): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) (fail_nth: 1) 2m14.661312862s ago: executing program 4 (id=102): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2281) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000840)={{0x2, 0x1, 0x1f66717, 0x0, 0xefb}, 0x5, 0xb0, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x4, 0xac, 0x10}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r3 = dup(r2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 2m13.757265849s ago: executing program 4 (id=115): accept$unix(0xffffffffffffffff, &(0x7f0000000340), 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x1000) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) 2m13.367167337s ago: executing program 4 (id=120): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) (fail_nth: 14) 2m12.970675936s ago: executing program 4 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 2m12.125287903s ago: executing program 4 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a"], 0xec}}, 0x0) 2m12.125005783s ago: executing program 32 (id=136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a"], 0xec}}, 0x0) 2.687439189s ago: executing program 3 (id=2334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000c000000000200"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x492b, 0x10100, 0x400}, &(0x7f00000003c0), &(0x7f0000000300)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 2.686530489s ago: executing program 3 (id=2335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socket$inet(0x2, 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (fail_nth: 3) 2.640011189s ago: executing program 5 (id=2338): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 2.379457868s ago: executing program 1 (id=2339): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodioread_nolock}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x20000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x1800, r3, 0xa}) 1.878838177s ago: executing program 5 (id=2340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d0000008500000050000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 1.584130195s ago: executing program 3 (id=2341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0xa, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @local, 0x0}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x6, 0xffffff39, 0x4, 0x861, r6, 0x0, '\x00', r7, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xa, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r8 = socket$unix(0x1, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r10}, 0x10) r11 = semget$private(0x0, 0x2, 0x400) semctl$SEM_STAT_ANY(r11, 0x3, 0x14, &(0x7f0000000000)=""/120) wait4(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d61637365630000", @ANYRES32=r12], 0x3c}}, 0x0) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r13, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f4, r14, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.511346305s ago: executing program 1 (id=2343): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x48000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}, {@nodioread_nolock}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) 1.279154134s ago: executing program 5 (id=2344): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x40000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000d00)={0x0, 0xf3, "65e9e70287f35b741bfc4b34c980088bb06b3548f68c72b10c48c493003573605b3544dc6c1f402787ac1578de5edf820cbcbc313b7b7d4e0a168f7a8671b4637840df7f8e3f570420dc6ff8fad1f2864b7cc6bf2781f6d1203805f89b7e35a57616add30d326f5902d5f240c22ba24e4e4d0aa7badf9cf2dfd273fce7c5cb39b02b474b0d90e935610cf711e62a55fbf2e811cae012fc5db09d5002c3ab16f036b43631259e20dfd38365478e07841d4d0c6c89aa95bbbec5c09f588e0ab59e510a5df05424cc7cb69557e907a67ec61cfcbc750ef19ed8cf8f9db426607aa3321d2f2569ae459d49a21785c560657152829d"}, &(0x7f0000000c00)=0xfb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x5, &(0x7f00000031c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x195, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000049fe41548d89", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) ustat(0x4, &(0x7f0000000080)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808023, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$eJzs3d9rW28ZAPDnpM1st8526sUcuBVRtqFL2tVtxYttgujVQJ33XW3TUpo2pUm3tQzp8FoEERW90StvBP8AQfYniDDQ+yGiDNnmhRdq5CQnW79d0nYsafZtPx94+77nR87zvAk5yXvOaU4Ax9Z4RNyOiIGIuBwRo9n8XFZiu1nS9V6+eDSXliTq9bv/TCLJ5rW2lWT1qexhQxHxnW9GfC9JmjN2qG5uLc+Wy6X1bLpYW1krVje3riytzC6WFkurU1OT16dvTF+bnuhaX29+/W8//dFvvnHzD19+8GzmH5e+n+Y7ki3b2Y9uaj4n+cZz0TIYEeu9CNYHA1l/8gdZOel9PgAA7C39jv+piPh8RLz6Rb+zAQAAAHqhfmsk/pNE1AEAAIAjK9e4BjbJFbJrAUYilysUmtfwfiZuRblSrX1pobKxOt+8VnYs8rmFpXJpIrtWeCzySTo92Wi/mb66a3oqIs5ExE9GhxvThblKeb7fBz8AAADgmEjH+SO5Zjut/jXaHP8DAAAAR8xYvxMAAAAAes74HwAAAI6+t8f/480qGTz8ZAAAAIBu+9adO2mpt+5/PX9/c2O5cv/KfKm6XFjZmCvMVdbXCouVymLjN/tW9tteuVJZ+0qsbjws1krVWrG6uTWzUtlYrc007us9UzrQfaIBAACArjpz4clfkojY/upwo6ROZMuM1eFoy73b6kmv8gAO30C/EwD6xgW+cHwZ4wP7DeyHDikPAACgdy5+9vX5/+HYcf7/9DPHBuCoe8fz/8AR4vw/HF+7zv//ql95AIfPGB/Y7zhAx/P/f+x+LgAAQG+MNEqSK2RjgJHI5QqFiNON2wLkk4WlcmkiIj4ZEX8ezX8inZ7sd9IAAAAAAAAAAAAAAAAAAAAAAAAA8DFTrydRBwAAAI60iNzfk4hIYihi9Asju48PnEj+PdqoI+LBL+/+7OFsLSLupbNez6/9vDG/tn61DwcwAAAAgLe0xumN2o38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyly8ezbXKYcZ9/rWIGGsXfzCGGvVQ5CPi5KskBnc8LomIgS7E334cEWfbxU/StGIsy2J3/FxEDPc5/qkuxIfj7Em6/7nd7v2Xi/FG3f79N5iV9/V8vNP+L/d6/zfQYf93ep9tn8jqc09/V+wY/3HEucH2+59W/OQ997/3vru11WlZ/dcRF9t+/iQfiVWsrawVq5tbV5ZWZhdLi6XVqanJ69M3pq9NTxQXlsql7G/bGD/+3O//t1f/T3aIP9ap/0kzp3q9/TYv7Jr+79OHLz7dbsUk4vkPs3ab1/9sp/jZc//F7HMgXX6x1d5utnc6/9s/nd+r//Md+r/f63+p00Z3ufztH/y12cof8BEAQC9VN7eWZ8vl0vpBG+mg98ArH2Ij7cwHkEYXG+MfRhoax7PR7z0TAADQbW++9Pc7EwAAAAAAAAAAAAAAAAAAADi+Wv//3/ot5178nNjOeEOtRpIcel8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPby/wAAAP//nXrOGw==") r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000ac0)=0x5d, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xfffffffffffffef7, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410072786500140033007663616e30"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.196993264s ago: executing program 0 (id=2345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x85, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r4 = syz_io_uring_setup(0x3bc2, &(0x7f0000000440)={0x0, 0x942e, 0x10100, 0x0, 0x2da}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r3, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = openat$selinux_validatetrans(0xffffff9c, &(0x7f0000000540), 0x1, 0x0) write$selinux_validatetrans(r7, 0x0, 0x71) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) accept$unix(0xffffffffffffffff, &(0x7f0000000540), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000400)={'bridge_slave_0\x00', &(0x7f00000003c0)=@ethtool_ts_info}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2]}}], 0xffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x4c, 0x453, 0x8, 0x70bd27, 0x25dfdbfd, "c0a1402d6b7d5564893b9414a0997b476c07d0011dce2f0ab0a487df74aecd0e6f5f4fbf2558d9882816139889d3a3f8dd551e2a2f7809841f", ["", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4011) lsm_get_self_attr(0x67, &(0x7f0000001500)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000080)=0x1020, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xb, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x10}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10044041}, 0x4c814) 1.028121433s ago: executing program 1 (id=2346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000c000000000200"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 927.828073ms ago: executing program 0 (id=2348): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) unshare(0x2040400) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 927.121963ms ago: executing program 3 (id=2349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 926.345853ms ago: executing program 1 (id=2350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async, rerun: 64) r3 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) getsockopt$inet_int(r3, 0x0, 0x31, 0x0, 0x0) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@gettaction={0x80, 0x32, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xf}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x80}}, 0x0) 893.550673ms ago: executing program 0 (id=2351): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) tee(r1, r3, 0x8000000000081, 0x0) 890.233923ms ago: executing program 3 (id=2352): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodioread_nolock}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x20000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x1800, r3, 0xa}) 849.026773ms ago: executing program 2 (id=2353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 792.948873ms ago: executing program 1 (id=2354): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff10}, [@call={0x85, 0x0, 0x0, 0xa4}, @map_fd={0x18, 0x5, 0x1, 0x0, r9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000700)=""/232, 0x0, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xd, 0x10001, 0xda7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r1, r9], &(0x7f0000000800)=[{0x3, 0x3, 0xf, 0x2}, {0x2, 0x5, 0x3, 0xc}, {0x0, 0x4, 0xe, 0x1}], 0x10, 0x7fffffff, @void, @value}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0x4, 0x0, 0xffff51b8, 0x1800, r1, 0x6, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4ec}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x51bc6c20, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x2e, r1, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x8, &(0x7f0000000980)=[r7, r9, r7, r13, r6, r9, r9], &(0x7f0000000a00)=[{0x0, 0x4, 0x3, 0xb}, {0x2, 0x1, 0xd, 0x8}, {0x3, 0x2, 0x9, 0xc}, {0x4, 0x1, 0xe}, {0x0, 0x2, 0x4, 0x2}, {0x1, 0x1, 0xd, 0x7}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x3, 0x8, 0x5}], 0x10, 0x7f, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r15, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r15, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd97}) fcntl$lock(r15, 0x25, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r14], 0x40}}, 0x0) 756.105782ms ago: executing program 0 (id=2355): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 755.339422ms ago: executing program 2 (id=2356): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) alarm(0x10) 683.657782ms ago: executing program 0 (id=2357): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r11, 0xf505, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff10}, [@call={0x85, 0x0, 0x0, 0xa4}, @map_fd={0x18, 0x5, 0x1, 0x0, r9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xe8, &(0x7f0000000700)=""/232, 0x0, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xd, 0x10001, 0xda7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r1, r9], &(0x7f0000000800)=[{0x3, 0x3, 0xf, 0x2}, {0x2, 0x5, 0x3, 0xc}, {0x0, 0x4, 0xe, 0x1}], 0x10, 0x7fffffff, @void, @value}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x5, 0x4, 0x0, 0xffff51b8, 0x1800, r1, 0x6, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4ec}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x51bc6c20, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x2e, r1, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x8, &(0x7f0000000980)=[r7, r9, r7, r13, r6, r9, r9], &(0x7f0000000a00)=[{0x0, 0x4, 0x3, 0xb}, {0x2, 0x1, 0xd, 0x8}, {0x3, 0x2, 0x9, 0xc}, {0x4, 0x1, 0xe}, {0x0, 0x2, 0x4, 0x2}, {0x1, 0x1, 0xd, 0x7}, {0x3, 0x3, 0x9, 0x3}, {0x5, 0x3, 0x8, 0x5}], 0x10, 0x7f, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r15, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r15, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd97}) fcntl$lock(r15, 0x25, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="08000200", @ANYRES32=r14], 0x40}}, 0x0) 682.976172ms ago: executing program 2 (id=2358): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000400)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup2(r6, r6) faccessat2(r7, &(0x7f0000000880)='\x00', 0x1, 0x1100) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{&(0x7f0000000400)={0xa, 0x4e25, 0x8000b, @loopback, 0x10000}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0x38, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, 0x0}}], 0x2, 0x8d0) 642.541202ms ago: executing program 1 (id=2359): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000003200)='./file0\x00', 0x904624, &(0x7f0000003240)=ANY=[], 0x3, 0x332, &(0x7f0000001300)="$eJzs3M9LI2cYwPEnMYlJRJNDaWmh+NJe2sugac+loSiUBipqSrVQGHXShkwTyQRLSql66rX0vqeFPYhHb8Ku/4CXve1e9rI3Lwt7WA/LzpL5kd+JMUaya74fkLx53/eZmXfmVZ4ZnPfi5//+KOQsLadXJBhVEhARuRRJSlB8Ae8z6JQj0uxAvpx5+eTTtY3NH9KZzNKqUsvp9a9SSqm5+Yd//h3zup1Oy3ny14sXqefnH55/fPFm/fe8pfKWKpYqSldbpWcVfcs01E7eKmhKrZiGbhkqX7SMsttecttzZml3t6r04s5sfLdsWJbSi1VVMKqqUlKVclXpv+n5otI0Tc3GBVfJHq2u6ukhg7dHfDC4JeVyWp8SkVhHS/ZoLAcEAADGqj3/D9ZS+qHyf5nLZMJebT3/P/7srDLz08mcl/+fRrrl/18/daNa8v+oiAyT/9+Ta+T/nRnRZLlR/o93w3ykoyrQ8q2W/8e931/H4S/HC06B/B8AAAAAAAAAAAAAAAAAAAAAgPfBpW0nbNtO+J/+T+MVAu877qRL2451u/7TIhKtXX2b63+XrW1sStRZuKN2jc1/97J7WffT63AmIqYYsiAJee3MB0+t7L95pGqS8sjc9+L397JTTks6J3knflESkmyPt+3l7zNLi8rlxddfU4o3x6ckIR90j0+1xnv7j8gXnzfFa5KQx9tSElN2nHndiP9nUanvfsy0xcecfgAAAAAA3AWaqut6/65pvdrdVUbSOecxUY/nA+799ULX+/NQ4pPQuEcPAAAAAMBksKp/FXTTNMo9C1GvZ78+vQqhAaJCg20w0lYT7td5qmmEgx5zRNyRXmuAXQr3BzqrbQX/HylGduZ10x//DYfTKBw01wRlgKhQ+8HP1yrU4DttWce23uQ/Nor0OM+y0rnBYJ+ZEB7N+TGN8kf/P3g1iu24hW9O/BlwdefDYfcVbZ91TiF8S39uAAAAAIxRI+n3a75tbg6M5aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgwfVYIC45gMbyWlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASfc2AAD//wDV7yc=") io_setup(0x7, &(0x7f0000000100)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 614.500082ms ago: executing program 2 (id=2360): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x48000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}, {@nodioread_nolock}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0) 537.234602ms ago: executing program 5 (id=2361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000c000000000200"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='attr/exec\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x20, r1, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 519.794611ms ago: executing program 2 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 481.673711ms ago: executing program 0 (id=2363): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="10621db25031580300108c", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r5, @ANYBLOB="2b0300000000f9dbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r7 = getpgrp(0x0) fcntl$lock(r6, 0x0, &(0x7f0000000380)={0x1, 0x0, 0x8a, 0xa, r7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x80000005, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mremap(&(0x7f00004f9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f00004fb000/0x3000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x57, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 474.170821ms ago: executing program 5 (id=2364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000800001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close(r2) 391.976671ms ago: executing program 2 (id=2365): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f00000001c0)=0x8) 348.564001ms ago: executing program 5 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r4, &(0x7f0000000000), 0x77000, 0xfff0}]) 0s ago: executing program 3 (id=2367): r0 = open(&(0x7f0000000000)='./file0\x00', 0x50340, 0x0) fcntl$setlease(r0, 0x400, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0xd, 0xa, 0x5) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ T8899] __se_sys_keyctl+0x2aa/0xbb0 [ 142.981549][ T8899] ? putname+0xcf/0xf0 [ 142.985680][ T8899] ? __fget_files+0x17c/0x1c0 [ 142.990386][ T8899] ? fput+0x1c4/0x200 [ 142.994382][ T8899] ? ksys_write+0x176/0x1b0 [ 142.998967][ T8899] __x64_sys_keyctl+0x67/0x80 [ 143.003725][ T8899] x64_sys_call+0x163d/0x2dc0 [ 143.008491][ T8899] do_syscall_64+0xc9/0x1c0 [ 143.013040][ T8899] ? clear_bhb_loop+0x55/0xb0 [ 143.017724][ T8899] ? clear_bhb_loop+0x55/0xb0 [ 143.022436][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.028381][ T8899] RIP: 0033:0x7f7491105d29 [ 143.032850][ T8899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.052534][ T8899] RSP: 002b:00007f748f777038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 143.060969][ T8899] RAX: ffffffffffffffda RBX: 00007f74912f5fa0 RCX: 00007f7491105d29 [ 143.068995][ T8899] RDX: 0000000020000300 RSI: 000000001d6f48af RDI: 000000000000000a [ 143.077173][ T8899] RBP: 00007f748f777090 R08: 0000000000000000 R09: 0000000000000000 [ 143.085147][ T8899] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 143.093127][ T8899] R13: 0000000000000000 R14: 00007f74912f5fa0 R15: 00007ffd7c374678 [ 143.101736][ T8899] [ 143.105880][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 143.124143][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 143.163837][ T8903] loop5: detected capacity change from 0 to 512 [ 143.177211][ T8895] +}[@[8895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.177310][ T8895] +}[@[8895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.189627][ T8895] +}[@[8895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.205409][ T8895] loop3: detected capacity change from 0 to 512 [ 143.263620][ T8903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 143.273531][ T8903] System zones: 0-2, 18-18, 34-34 [ 143.287515][ T8903] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1874: bg 0: block 248: padding at end of block bitmap is not set [ 143.318929][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 143.333992][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 143.342143][ T8903] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1874: Failed to acquire dquot type 1 [ 143.342261][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 143.361290][ T8895] rdma_rxe: rxe_newlink: failed to add vcan0 [ 143.388081][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 143.404623][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 143.413078][ T8903] EXT4-fs (loop5): 1 truncate cleaned up [ 143.426326][ T8903] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.435213][ T8915] loop1: detected capacity change from 0 to 512 [ 143.437770][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 143.460996][ T8915] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1876: corrupted in-inode xattr: invalid ea_ino [ 143.484750][ T8915] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1876: couldn't read orphan inode 15 (err -117) [ 143.527873][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 143.575358][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 143.590966][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 143.662696][ T8923] tls_set_device_offload_rx: netdev not found [ 143.680256][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 143.698839][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 143.708373][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 143.858965][ T8944] loop5: detected capacity change from 0 to 1024 [ 143.955919][ T8944] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 143.982714][ T8944] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 144.004006][ T8944] EXT4-fs (loop5): orphan cleanup on readonly fs [ 144.045289][ T8944] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 144.055625][ T8944] EXT4-fs (loop5): Remounting filesystem read-only [ 144.062615][ T8944] EXT4-fs (loop5): 1 orphan inode deleted [ 144.070005][ T8944] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 144.223947][ T8955] loop5: detected capacity change from 0 to 128 [ 144.330367][ T8963] xt_CT: No such helper "netbios-ns" [ 144.379866][ T8963] loop1: detected capacity change from 0 to 2048 [ 144.513653][ T8968] loop5: detected capacity change from 0 to 128 [ 144.547040][ T8974] syz.0.1891[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.547114][ T8974] syz.0.1891[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.558855][ T8974] syz.0.1891[8974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.574822][ T8974] loop0: detected capacity change from 0 to 512 [ 144.593293][ T2963] IPVS: starting estimator thread 0... [ 144.631842][ T8982] loop1: detected capacity change from 0 to 512 [ 144.638814][ T8979] loop5: detected capacity change from 0 to 512 [ 144.639933][ T8974] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.683781][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 144.691995][ T8979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 144.695904][ T8976] IPVS: using max 2016 ests per chain, 100800 per kthread [ 144.705144][ T8982] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1894: corrupted in-inode xattr: invalid ea_ino [ 144.707192][ T8979] System zones: 0-2, 18-18, 34-34 [ 144.728581][ T8982] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1894: couldn't read orphan inode 15 (err -117) [ 144.736260][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 144.748641][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 144.765298][ T8979] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1893: bg 0: block 248: padding at end of block bitmap is not set [ 144.808733][ T8979] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1893: Failed to acquire dquot type 1 [ 144.842404][ T8979] EXT4-fs (loop5): 1 truncate cleaned up [ 144.852338][ T8979] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.948630][ T9002] loop3: detected capacity change from 0 to 512 [ 144.968373][ T9004] loop1: detected capacity change from 0 to 1024 [ 144.974985][ T36] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 1 [ 144.989753][ T9004] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.008925][ T9002] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.051439][ T9007] loop0: detected capacity change from 0 to 164 [ 145.068652][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.068652][ T9007] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 145.082855][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.082855][ T9007] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.096529][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.096529][ T9007] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.110117][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.110117][ T9007] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.110141][ T9004] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.123667][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.123667][ T9007] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.145011][ T9009] syz.0.1897: attempt to access beyond end of device [ 145.145011][ T9009] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.158486][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.158486][ T9007] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.172098][ T9007] syz.0.1897: attempt to access beyond end of device [ 145.172098][ T9007] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 145.256136][ T9004] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.290004][ T9004] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 145.299713][ T9004] EXT4-fs (loop1): Remounting filesystem read-only [ 145.307810][ T9004] EXT4-fs (loop1): 1 orphan inode deleted [ 145.809967][ T9004] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 145.845834][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 145.852769][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 145.853705][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1904'. [ 145.870383][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 145.933186][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 145.940593][ T9019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1905'. [ 145.951436][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 145.958342][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1905'. [ 146.005895][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 146.008646][ T9021] loop3: detected capacity change from 0 to 512 [ 146.082634][ T9021] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 146.084787][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 146.084806][ T29] audit: type=1400 audit(1735079086.033:6272): avc: denied { create } for pid=9022 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.120521][ T29] audit: type=1400 audit(1735079086.033:6273): avc: denied { setopt } for pid=9022 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.140233][ T29] audit: type=1400 audit(1735079086.033:6274): avc: denied { listen } for pid=9022 comm="syz.2.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.142864][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1906'. [ 146.159774][ T29] audit: type=1326 audit(1735079086.083:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.159823][ T29] audit: type=1326 audit(1735079086.083:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.159856][ T29] audit: type=1326 audit(1735079086.083:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.159889][ T29] audit: type=1326 audit(1735079086.083:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.168962][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1906'. [ 146.192268][ T29] audit: type=1326 audit(1735079086.083:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.222703][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 146.239165][ T29] audit: type=1326 audit(1735079086.083:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.266023][ T3000] loop2: p3 size 131072 extends beyond EOD, [ 146.272143][ T29] audit: type=1326 audit(1735079086.083:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9025 comm="syz.1.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 146.295557][ T3000] truncated [ 146.397609][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 146.461688][ T9032] loop1: detected capacity change from 0 to 512 [ 146.470472][ T9032] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1913: corrupted in-inode xattr: invalid ea_ino [ 146.484662][ T9032] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1913: couldn't read orphan inode 15 (err -117) [ 146.537479][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 146.560361][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 146.564525][ T9042] loop1: detected capacity change from 0 to 512 [ 146.569003][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 146.595401][ T9042] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.621381][ T9047] loop3: detected capacity change from 0 to 512 [ 146.630264][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 146.636587][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 146.645168][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 146.675097][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 146.677922][ T9051] loop5: detected capacity change from 0 to 512 [ 146.682138][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 146.687029][ T9051] EXT4-fs: inline encryption not supported [ 146.694760][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 146.729748][ T9047] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.741721][ T9051] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.772837][ T9055] loop1: detected capacity change from 0 to 128 [ 146.793632][ T9061] syz.2.1920[9061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.793752][ T9061] syz.2.1920[9061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.828741][ T9061] syz.2.1920[9061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.851012][ T9063] FAULT_INJECTION: forcing a failure. [ 146.851012][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.876099][ T9063] CPU: 1 UID: 0 PID: 9063 Comm: syz.1.1921 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 146.886797][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.893187][ T9051] netlink: 'syz.5.1928': attribute type 4 has an invalid length. [ 146.896931][ T9063] Call Trace: [ 146.896940][ T9063] [ 146.896948][ T9063] dump_stack_lvl+0xf2/0x150 [ 146.904676][ T9051] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1928'. [ 146.907943][ T9063] dump_stack+0x15/0x1a [ 146.907982][ T9063] should_fail_ex+0x223/0x230 [ 146.908012][ T9063] should_fail+0xb/0x10 [ 146.937693][ T9063] should_fail_usercopy+0x1a/0x20 [ 146.942735][ T9063] _copy_to_user+0x20/0xa0 [ 146.947170][ T9063] simple_read_from_buffer+0xa0/0x110 [ 146.952592][ T9063] proc_fail_nth_read+0xf9/0x140 [ 146.957558][ T9063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.963125][ T9063] vfs_read+0x1a2/0x700 [ 146.967311][ T9063] ? __rcu_read_unlock+0x4e/0x70 [ 146.972263][ T9063] ? __fget_files+0x17c/0x1c0 [ 146.977107][ T9063] ksys_read+0xe8/0x1b0 [ 146.981278][ T9063] __x64_sys_read+0x42/0x50 [ 146.985799][ T9063] x64_sys_call+0x2874/0x2dc0 [ 146.990548][ T9063] do_syscall_64+0xc9/0x1c0 [ 146.995066][ T9063] ? clear_bhb_loop+0x55/0xb0 [ 146.999777][ T9063] ? clear_bhb_loop+0x55/0xb0 [ 147.004463][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.010496][ T9063] RIP: 0033:0x7f84d708473c [ 147.014940][ T9063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 147.034560][ T9063] RSP: 002b:00007f84d56f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 147.042984][ T9063] RAX: ffffffffffffffda RBX: 00007f84d7275fa0 RCX: 00007f84d708473c [ 147.050958][ T9063] RDX: 000000000000000f RSI: 00007f84d56f10a0 RDI: 0000000000000004 [ 147.058941][ T9063] RBP: 00007f84d56f1090 R08: 0000000000000000 R09: 0000000000000000 [ 147.066924][ T9063] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.074904][ T9063] R13: 0000000000000000 R14: 00007f84d7275fa0 R15: 00007fffd68e97b8 [ 147.082891][ T9063] [ 147.089968][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 147.097593][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 147.105532][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 147.192608][ T9067] macvtap0: entered promiscuous mode [ 147.211878][ T9067] macvtap0: left promiscuous mode [ 147.306209][ T9074] loop5: detected capacity change from 0 to 512 [ 147.311288][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 147.319086][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 147.320926][ T9074] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1926: corrupted in-inode xattr: invalid ea_ino [ 147.327187][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 147.342700][ T9074] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1926: couldn't read orphan inode 15 (err -117) [ 147.567752][ T9098] loop0: detected capacity change from 0 to 512 [ 147.586344][ T9098] EXT4-fs: inline encryption not supported [ 147.611185][ T9103] macvtap0: entered promiscuous mode [ 147.640262][ T9098] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.658289][ T9103] macvtap0: left promiscuous mode [ 147.760713][ T9098] netlink: 'syz.0.1936': attribute type 4 has an invalid length. [ 147.768573][ T9098] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1936'. [ 147.826610][ T9095] syz.1.1935[9095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.826712][ T9095] syz.1.1935[9095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.844453][ T9095] syz.1.1935[9095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.852014][ T9109] FAULT_INJECTION: forcing a failure. [ 147.852014][ T9109] name failslab, interval 1, probability 0, space 0, times 0 [ 147.879942][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.2.1940 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 147.890646][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.900709][ T9109] Call Trace: [ 147.903994][ T9109] [ 147.906964][ T9109] dump_stack_lvl+0xf2/0x150 [ 147.911647][ T9109] dump_stack+0x15/0x1a [ 147.915934][ T9109] should_fail_ex+0x223/0x230 [ 147.920625][ T9109] should_failslab+0x8f/0xb0 [ 147.925256][ T9109] kmem_cache_alloc_noprof+0x52/0x320 [ 147.930659][ T9109] ? audit_log_start+0x34c/0x6b0 [ 147.935604][ T9109] audit_log_start+0x34c/0x6b0 [ 147.940377][ T9109] audit_seccomp+0x4b/0x130 [ 147.944885][ T9109] __seccomp_filter+0x6fa/0x1180 [ 147.949899][ T9109] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 147.955555][ T9109] ? vfs_write+0x596/0x920 [ 147.960016][ T9109] ? __schedule+0x6fa/0x930 [ 147.964529][ T9109] __secure_computing+0x9f/0x1c0 [ 147.969658][ T9109] syscall_trace_enter+0xd1/0x1f0 [ 147.974702][ T9109] do_syscall_64+0xaa/0x1c0 [ 147.979287][ T9109] ? clear_bhb_loop+0x55/0xb0 [ 147.983966][ T9109] ? clear_bhb_loop+0x55/0xb0 [ 147.988684][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.994604][ T9109] RIP: 0033:0x7f7491105d29 [ 147.999034][ T9109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.018657][ T9109] RSP: 002b:00007f748f777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 148.027138][ T9109] RAX: ffffffffffffffda RBX: 00007f74912f5fa0 RCX: 00007f7491105d29 [ 148.035115][ T9109] RDX: 0400000000000172 RSI: 0000000020003cc0 RDI: 0000000000000004 [ 148.043092][ T9109] RBP: 00007f748f777090 R08: 0000000000000000 R09: 0000000000000000 [ 148.051081][ T9109] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.059058][ T9109] R13: 0000000000000000 R14: 00007f74912f5fa0 R15: 00007ffd7c374678 [ 148.067039][ T9109] [ 148.078595][ T9116] loop3: detected capacity change from 0 to 512 [ 148.091897][ T9095] loop1: detected capacity change from 0 to 512 [ 148.100737][ T9095] syz1: rxe_newlink: already configured on vcan0 [ 148.137987][ T9116] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.184389][ T9119] loop0: detected capacity change from 0 to 512 [ 148.205353][ T9119] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 148.218834][ T9119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1943'. [ 148.227959][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1943'. [ 148.297403][ T9131] loop0: detected capacity change from 0 to 512 [ 148.305880][ T9131] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1945: corrupted in-inode xattr: invalid ea_ino [ 148.331541][ T9131] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1945: couldn't read orphan inode 15 (err -117) [ 148.373546][ T9138] loop0: detected capacity change from 0 to 512 [ 148.381454][ T9138] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1948: corrupted in-inode xattr: invalid ea_ino [ 148.396526][ T9138] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1948: couldn't read orphan inode 15 (err -117) [ 148.433911][ T9142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10067 sclass=netlink_audit_socket pid=9142 comm=syz.1.1949 [ 148.469507][ T9144] loop0: detected capacity change from 0 to 512 [ 148.498834][ T9144] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.597846][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 148.620187][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 148.630387][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 148.637747][ T9156] FAULT_INJECTION: forcing a failure. [ 148.637747][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 148.650507][ T9156] CPU: 1 UID: 0 PID: 9156 Comm: syz.0.1955 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 148.661310][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.671383][ T9156] Call Trace: [ 148.674785][ T9156] [ 148.677730][ T9156] dump_stack_lvl+0xf2/0x150 [ 148.682395][ T9156] dump_stack+0x15/0x1a [ 148.686653][ T9156] should_fail_ex+0x223/0x230 [ 148.691415][ T9156] should_failslab+0x8f/0xb0 [ 148.696018][ T9156] kmem_cache_alloc_noprof+0x52/0x320 [ 148.701442][ T9156] ? getname_flags+0x81/0x3b0 [ 148.706146][ T9156] getname_flags+0x81/0x3b0 [ 148.710678][ T9156] user_path_at+0x26/0x120 [ 148.715202][ T9156] __se_sys_move_mount+0xfd/0x730 [ 148.720246][ T9156] ? fput+0x1c4/0x200 [ 148.724238][ T9156] __x64_sys_move_mount+0x67/0x80 [ 148.729282][ T9156] x64_sys_call+0x2608/0x2dc0 [ 148.733965][ T9156] do_syscall_64+0xc9/0x1c0 [ 148.738474][ T9156] ? clear_bhb_loop+0x55/0xb0 [ 148.743215][ T9156] ? clear_bhb_loop+0x55/0xb0 [ 148.747986][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.753905][ T9156] RIP: 0033:0x7f9acaca5d29 [ 148.758320][ T9156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.778163][ T9156] RSP: 002b:00007f9ac9317038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 148.786581][ T9156] RAX: ffffffffffffffda RBX: 00007f9acae95fa0 RCX: 00007f9acaca5d29 [ 148.794611][ T9156] RDX: ffffffffffffff9c RSI: 0000000020000140 RDI: 0000000000000006 [ 148.802585][ T9156] RBP: 00007f9ac9317090 R08: 0000000000000000 R09: 0000000000000000 [ 148.810628][ T9156] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 148.818604][ T9156] R13: 0000000000000000 R14: 00007f9acae95fa0 R15: 00007ffebbc0ccf8 [ 148.826624][ T9156] [ 148.868916][ T9161] loop3: detected capacity change from 0 to 512 [ 148.884055][ T9163] loop0: detected capacity change from 0 to 512 [ 148.893197][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 148.899831][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 148.908783][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 149.027849][ T9163] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1959: corrupted in-inode xattr: invalid ea_ino [ 149.061476][ T9161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 149.072925][ T9161] System zones: 0-2, 18-18, 34-34 [ 149.079572][ T9161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1956: bg 0: block 248: padding at end of block bitmap is not set [ 149.112974][ T9163] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1959: couldn't read orphan inode 15 (err -117) [ 149.123639][ T9161] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1956: Failed to acquire dquot type 1 [ 149.139939][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 149.146514][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 149.155029][ T9161] EXT4-fs (loop3): 1 truncate cleaned up [ 149.163450][ T9161] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.176812][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 149.271857][ T9180] loop1: detected capacity change from 0 to 512 [ 149.293192][ T9185] macvtap0: entered promiscuous mode [ 149.308293][ T9185] macvtap0: left promiscuous mode [ 149.309448][ T9188] FAULT_INJECTION: forcing a failure. [ 149.309448][ T9188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.326455][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz.2.1966 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 149.337200][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.347271][ T9188] Call Trace: [ 149.350569][ T9188] [ 149.353517][ T9188] dump_stack_lvl+0xf2/0x150 [ 149.358227][ T9188] dump_stack+0x15/0x1a [ 149.362446][ T9188] should_fail_ex+0x223/0x230 [ 149.367229][ T9188] should_fail+0xb/0x10 [ 149.371488][ T9188] should_fail_usercopy+0x1a/0x20 [ 149.376527][ T9188] _copy_from_user+0x1e/0xb0 [ 149.381143][ T9188] set_selection_user+0x48/0xa0 [ 149.386028][ T9188] tioclinux+0x2b0/0x430 [ 149.390302][ T9188] vt_ioctl+0x84f/0x1810 [ 149.394560][ T9188] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 149.399763][ T9188] tty_ioctl+0x815/0xbe0 [ 149.404138][ T9188] ? __pfx_tty_ioctl+0x10/0x10 [ 149.408933][ T9188] __se_sys_ioctl+0xc9/0x140 [ 149.413590][ T9188] __x64_sys_ioctl+0x43/0x50 [ 149.418212][ T9188] x64_sys_call+0x1690/0x2dc0 [ 149.422917][ T9188] do_syscall_64+0xc9/0x1c0 [ 149.427498][ T9188] ? clear_bhb_loop+0x55/0xb0 [ 149.432190][ T9188] ? clear_bhb_loop+0x55/0xb0 [ 149.436886][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.442822][ T9188] RIP: 0033:0x7f7491105d29 [ 149.447314][ T9188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.467050][ T9188] RSP: 002b:00007f748f777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.475542][ T9188] RAX: ffffffffffffffda RBX: 00007f74912f5fa0 RCX: 00007f7491105d29 [ 149.483521][ T9188] RDX: 0000000020001900 RSI: 000000000000541c RDI: 0000000000000003 [ 149.491497][ T9188] RBP: 00007f748f777090 R08: 0000000000000000 R09: 0000000000000000 [ 149.499471][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.507469][ T9188] R13: 0000000000000000 R14: 00007f74912f5fa0 R15: 00007ffd7c374678 [ 149.515504][ T9188] [ 149.521310][ T9180] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 149.529713][ T9180] System zones: 0-2, 18-18, 34-34 [ 149.535704][ T9180] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1964: bg 0: block 248: padding at end of block bitmap is not set [ 149.551109][ T9180] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1964: Failed to acquire dquot type 1 [ 149.568578][ T9199] loop3: detected capacity change from 0 to 512 [ 149.581973][ T9180] EXT4-fs (loop1): 1 truncate cleaned up [ 149.589656][ T9180] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.602920][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 149.616164][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 149.624165][ T50] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 1 [ 149.624815][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 149.657659][ T9199] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.690246][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 149.705274][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 149.714101][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 149.841264][ T9211] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 150.465357][ T9223] loop3: detected capacity change from 0 to 512 [ 150.483940][ T9223] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1975: corrupted in-inode xattr: invalid ea_ino [ 150.511734][ T9223] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1975: couldn't read orphan inode 15 (err -117) [ 150.605251][ T9226] loop1: detected capacity change from 0 to 512 [ 150.613268][ T9228] FAULT_INJECTION: forcing a failure. [ 150.613268][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.626466][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.0.1977 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 150.637152][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.647215][ T9228] Call Trace: [ 150.650500][ T9228] [ 150.653437][ T9228] dump_stack_lvl+0xf2/0x150 [ 150.658082][ T9228] dump_stack+0x15/0x1a [ 150.662419][ T9228] should_fail_ex+0x223/0x230 [ 150.667117][ T9228] should_fail+0xb/0x10 [ 150.671290][ T9228] should_fail_usercopy+0x1a/0x20 [ 150.676448][ T9228] _copy_from_user+0x1e/0xb0 [ 150.681064][ T9228] simple_transaction_get+0xed/0x120 [ 150.686375][ T9228] selinux_transaction_write+0x86/0x100 [ 150.691955][ T9228] ? __pfx_selinux_transaction_write+0x10/0x10 [ 150.698148][ T9228] vfs_write+0x281/0x920 [ 150.702476][ T9228] ? __fget_files+0x17c/0x1c0 [ 150.707275][ T9228] ksys_write+0xe8/0x1b0 [ 150.711692][ T9228] __x64_sys_write+0x42/0x50 [ 150.716300][ T9228] x64_sys_call+0x287e/0x2dc0 [ 150.720999][ T9228] do_syscall_64+0xc9/0x1c0 [ 150.725507][ T9228] ? clear_bhb_loop+0x55/0xb0 [ 150.730261][ T9228] ? clear_bhb_loop+0x55/0xb0 [ 150.735029][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.740961][ T9228] RIP: 0033:0x7f9acaca5d29 [ 150.745381][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.765007][ T9228] RSP: 002b:00007f9ac9317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.773469][ T9228] RAX: ffffffffffffffda RBX: 00007f9acae95fa0 RCX: 00007f9acaca5d29 [ 150.781477][ T9228] RDX: 000000000000002c RSI: 00000000200002c0 RDI: 0000000000000003 [ 150.789497][ T9228] RBP: 00007f9ac9317090 R08: 0000000000000000 R09: 0000000000000000 [ 150.797469][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.805471][ T9228] R13: 0000000000000000 R14: 00007f9acae95fa0 R15: 00007ffebbc0ccf8 [ 150.813456][ T9228] [ 150.858612][ T9226] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 150.891912][ T9231] loop0: detected capacity change from 0 to 512 [ 150.903429][ T9233] loop3: detected capacity change from 0 to 512 [ 150.911906][ T9233] EXT4-fs: Ignoring removed oldalloc option [ 150.931704][ T9231] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 150.937822][ T9233] EXT4-fs error (device loop3): ext4_xattr_inode_iget:436: comm syz.3.1978: Parent and EA inode have the same ino 15 [ 150.939816][ T9231] System zones: 0-2, 18-18, 34-34 [ 150.958059][ T9231] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1979: bg 0: block 248: padding at end of block bitmap is not set [ 150.993232][ T9233] EXT4-fs (loop3): Remounting filesystem read-only [ 150.999893][ T9233] EXT4-fs warning (device loop3): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 151.020443][ T9231] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1979: Failed to acquire dquot type 1 [ 151.052035][ T9233] EXT4-fs (loop3): 1 orphan inode deleted [ 151.059533][ T9233] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 151.060260][ T9246] macvtap0: entered promiscuous mode [ 151.072420][ T9246] macvtap0: left promiscuous mode [ 151.081273][ T9231] EXT4-fs (loop0): 1 truncate cleaned up [ 151.090325][ T9231] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.144178][ T28] __quota_error: 444 callbacks suppressed [ 151.144192][ T28] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 151.159071][ T28] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 1 [ 151.164101][ T9251] loop1: detected capacity change from 0 to 1024 [ 151.193402][ T9251] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.210368][ T9251] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 151.218620][ T9251] EXT4-fs (loop1): orphan cleanup on readonly fs [ 151.240800][ T29] audit: type=1326 audit(1735079091.203:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 151.264381][ T29] audit: type=1326 audit(1735079091.203:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 151.287806][ T29] audit: type=1326 audit(1735079091.203:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.0.1985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 151.311410][ T9251] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 151.327510][ T9251] EXT4-fs (loop1): Remounting filesystem read-only [ 151.336556][ T9251] Quota error (device loop1): write_blk: dquota write failed [ 151.343984][ T9251] Quota error (device loop1): write_blk: dquota write failed [ 151.348814][ T9259] loop0: detected capacity change from 0 to 512 [ 151.351499][ T9251] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 151.383648][ T9251] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 151.395505][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 151.401617][ T9259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 151.402150][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 151.412882][ T9259] System zones: 0-2, 18-18, 34-34 [ 151.417337][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 151.422097][ T9251] EXT4-fs (loop1): 1 orphan inode deleted [ 151.436672][ T9259] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1988: bg 0: block 248: padding at end of block bitmap is not set [ 151.442935][ T9251] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 151.452643][ T9259] Quota error (device loop0): write_blk: dquota write failed [ 151.464968][ T9259] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 151.474926][ T9259] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1988: Failed to acquire dquot type 1 [ 151.490787][ T9259] EXT4-fs (loop0): 1 truncate cleaned up [ 151.538972][ T9259] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.550419][ T9264] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 151.590187][ T1731] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 1 [ 151.614470][ T9264] loop3: detected capacity change from 0 to 1024 [ 151.651132][ T9264] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1987: Failed to acquire dquot type 0 [ 151.664348][ T9264] EXT4-fs (loop3): 1 truncate cleaned up [ 151.681310][ T3378] kernel write not supported for file /1007/attr/exec (pid: 3378 comm: kworker/0:4) [ 151.768039][ T9275] loop1: detected capacity change from 0 to 512 [ 151.774656][ T9275] EXT4-fs: inline encryption not supported [ 151.828522][ T9275] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.864672][ T9277] loop0: detected capacity change from 0 to 1024 [ 151.880945][ T9277] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.881949][ T9275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1993'. [ 151.905563][ T9277] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 151.949577][ T9277] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1994: couldn't read orphan inode 11 (err -117) [ 151.980640][ T9275] netlink: 'syz.1.1993': attribute type 4 has an invalid length. [ 151.988450][ T9275] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1993'. [ 152.007665][ T9277] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1994: Invalid block bitmap block 0 in block_group 0 [ 152.043574][ T9277] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1994: Failed to acquire dquot type 0 [ 152.256647][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.279695][ T9296] loop1: detected capacity change from 0 to 512 [ 152.287016][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.316080][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.326229][ T9296] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 152.347562][ T9296] System zones: 0-2, 18-18, 34-34 [ 152.367067][ T9296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2000: bg 0: block 248: padding at end of block bitmap is not set [ 152.397387][ T9296] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2000: Failed to acquire dquot type 1 [ 152.417375][ T9288] loop0: detected capacity change from 0 to 32768 [ 152.425867][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.432134][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.432149][ T9296] EXT4-fs (loop1): 1 truncate cleaned up [ 152.432679][ T9296] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.440057][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.462413][ T9288] loop0: p1 p2 p3 < p5 p6 p7 > [ 152.516657][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.523207][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.530683][ T2963] kernel write not supported for file /981/attr/exec (pid: 2963 comm: kworker/0:2) [ 152.562570][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.582965][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2002'. [ 152.591986][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 152.619460][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.631327][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.642889][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.705856][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.714933][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.722589][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.725649][ T9320] loop3: detected capacity change from 0 to 512 [ 152.749466][ T9320] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2010: corrupted in-inode xattr: invalid ea_ino [ 152.769744][ T9320] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2010: couldn't read orphan inode 15 (err -117) [ 152.782446][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.789140][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.796967][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.847099][ T9331] 9pnet_fd: Insufficient options for proto=fd [ 152.855332][ T9329] loop1: detected capacity change from 0 to 512 [ 152.883220][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 152.888497][ T9329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 152.889592][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 152.904448][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 152.911333][ T9329] System zones: 0-2, 18-18, 34-34 [ 152.918194][ T9337] loop3: detected capacity change from 0 to 512 [ 152.928201][ T9329] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2014: bg 0: block 248: padding at end of block bitmap is not set [ 152.931531][ T9332] vcan0 speed is unknown, defaulting to 1000 [ 153.003566][ T9329] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2014: Failed to acquire dquot type 1 [ 153.092590][ T9329] EXT4-fs (loop1): 1 truncate cleaned up [ 153.101241][ T9329] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.159322][ T9337] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.191232][ T9340] loop5: detected capacity change from 0 to 1024 [ 153.280612][ T9340] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.354493][ T9340] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 153.362667][ T9340] EXT4-fs (loop5): orphan cleanup on readonly fs [ 153.382135][ T8945] udevd[8945]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 153.396357][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 153.418633][ T9345] udevd[9345]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 153.425364][ T9347] udevd[9347]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 153.430304][ T9346] udevd[9346]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 153.447309][ T9348] udevd[9348]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 153.471755][ T9340] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 153.518229][ T9340] EXT4-fs (loop5): Remounting filesystem read-only [ 153.525031][ T9340] EXT4-fs (loop5): 1 orphan inode deleted [ 153.536934][ T9340] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 153.552636][ T9350] loop1: detected capacity change from 0 to 512 [ 153.557888][ T9354] loop0: detected capacity change from 0 to 1024 [ 153.573143][ T9354] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.597395][ T9354] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 153.607513][ T9354] EXT4-fs (loop0): orphan cleanup on readonly fs [ 153.674052][ T9350] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 153.692474][ T9357] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10067 sclass=netlink_audit_socket pid=9357 comm=syz.3.2019 [ 153.696522][ T9354] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 153.725378][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2018'. [ 153.734564][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'. [ 153.803016][ T9354] EXT4-fs (loop0): Remounting filesystem read-only [ 153.812847][ T9354] EXT4-fs (loop0): 1 orphan inode deleted [ 153.846117][ T9354] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 153.909056][ T9371] loop5: detected capacity change from 0 to 512 [ 153.958663][ T9371] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.000275][ T9375] netlink: 'syz.1.2027': attribute type 1 has an invalid length. [ 154.012232][ T9382] loop0: detected capacity change from 0 to 512 [ 154.056314][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 154.064892][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 154.073917][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 154.090140][ T9382] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.116051][ T9392] Cannot find del_set index 0 as target [ 154.122468][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2032'. [ 154.186114][ T2963] kernel write not supported for file /1036/attr/exec (pid: 2963 comm: kworker/0:2) [ 154.263663][ T9400] macvtap0: entered promiscuous mode [ 154.270596][ T9400] macvtap0: left promiscuous mode [ 154.274938][ T9404] loop1: detected capacity change from 0 to 512 [ 154.295096][ T9406] loop0: detected capacity change from 0 to 512 [ 154.296391][ T9404] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2038: corrupted in-inode xattr: invalid ea_ino [ 154.317165][ T9404] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2038: couldn't read orphan inode 15 (err -117) [ 154.334690][ T9406] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 154.344187][ T9406] System zones: 0-2, 18-18, 34-34 [ 154.354376][ T9406] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2033: bg 0: block 248: padding at end of block bitmap is not set [ 154.406077][ T9406] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2033: Failed to acquire dquot type 1 [ 154.451856][ T9406] EXT4-fs (loop0): 1 truncate cleaned up [ 154.464580][ T9406] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.525785][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:3: Failed to release dquot type 1 [ 154.613344][ T9421] loop1: detected capacity change from 0 to 2048 [ 154.641751][ T9425] loop3: detected capacity change from 0 to 512 [ 154.667363][ T9425] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.847943][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 154.864309][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 154.882112][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 154.942382][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 154.957302][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 154.973492][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 155.078085][ T9440] macvtap0: entered promiscuous mode [ 155.084125][ T9440] macvtap0: left promiscuous mode [ 155.208363][ T9421] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 155.245532][ T9443] loop5: detected capacity change from 0 to 128 [ 155.252875][ T9421] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 155.258143][ T9445] loop3: detected capacity change from 0 to 512 [ 155.265383][ T9421] EXT4-fs (loop1): This should not happen!! Data will be lost [ 155.265383][ T9421] [ 155.281297][ T9421] EXT4-fs (loop1): Total free blocks count 0 [ 155.287465][ T9421] EXT4-fs (loop1): Free/Dirty block details [ 155.293387][ T9421] EXT4-fs (loop1): free_blocks=2415919104 [ 155.299241][ T9421] EXT4-fs (loop1): dirty_blocks=8192 [ 155.304559][ T9421] EXT4-fs (loop1): Block reservation details [ 155.310689][ T9421] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 155.328322][ T9445] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 155.348577][ T9445] System zones: 0-2, 18-18, 34-34 [ 155.372061][ T28] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 155.384863][ T28] EXT4-fs (loop1): This should not happen!! Data will be lost [ 155.384863][ T28] [ 155.403064][ T9445] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2052: bg 0: block 248: padding at end of block bitmap is not set [ 155.457075][ T9445] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2052: Failed to acquire dquot type 1 [ 155.490258][ T9445] EXT4-fs (loop3): 1 truncate cleaned up [ 155.511511][ T9445] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.649473][ T9455] loop1: detected capacity change from 0 to 512 [ 155.705481][ T9455] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 155.722747][ T9455] System zones: 0-2, 18-18, 34-34 [ 155.731603][ T9465] FAULT_INJECTION: forcing a failure. [ 155.731603][ T9465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.744799][ T9465] CPU: 0 UID: 0 PID: 9465 Comm: syz.0.2057 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 155.755505][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.765595][ T9465] Call Trace: [ 155.768889][ T9465] [ 155.771833][ T9465] dump_stack_lvl+0xf2/0x150 [ 155.776488][ T9465] dump_stack+0x15/0x1a [ 155.780672][ T9465] should_fail_ex+0x223/0x230 [ 155.785380][ T9465] should_fail+0xb/0x10 [ 155.789565][ T9465] should_fail_usercopy+0x1a/0x20 [ 155.794613][ T9465] _copy_from_user+0x1e/0xb0 [ 155.799229][ T9465] kstrtouint_from_user+0x76/0xe0 [ 155.804311][ T9465] ? 0xffffffff81000000 [ 155.808484][ T9465] ? selinux_file_permission+0x22a/0x360 [ 155.814210][ T9465] proc_fail_nth_write+0x4f/0x150 [ 155.819278][ T9465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 155.824937][ T9465] vfs_write+0x281/0x920 [ 155.829198][ T9465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.834772][ T9465] ? __fget_files+0x17c/0x1c0 [ 155.839485][ T9465] ksys_write+0xe8/0x1b0 [ 155.843747][ T9465] __x64_sys_write+0x42/0x50 [ 155.848359][ T9465] x64_sys_call+0x287e/0x2dc0 [ 155.853253][ T9465] do_syscall_64+0xc9/0x1c0 [ 155.857775][ T9465] ? clear_bhb_loop+0x55/0xb0 [ 155.862464][ T9465] ? clear_bhb_loop+0x55/0xb0 [ 155.867165][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.873160][ T9465] RIP: 0033:0x7f9acaca47df [ 155.877676][ T9465] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 155.897334][ T9465] RSP: 002b:00007f9ac9317030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 155.905865][ T9465] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9acaca47df [ 155.913856][ T9465] RDX: 0000000000000001 RSI: 00007f9ac93170a0 RDI: 0000000000000004 [ 155.921918][ T9465] RBP: 00007f9ac9317090 R08: 0000000000000000 R09: 0000000000000000 [ 155.929907][ T9465] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 155.937894][ T9465] R13: 0000000000000000 R14: 00007f9acae95fa0 R15: 00007ffebbc0ccf8 [ 155.945894][ T9465] [ 155.951038][ T9455] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2053: bg 0: block 248: padding at end of block bitmap is not set [ 155.995815][ T9455] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2053: Failed to acquire dquot type 1 [ 156.026754][ T9455] EXT4-fs (loop1): 1 truncate cleaned up [ 156.037341][ T9474] loop0: detected capacity change from 0 to 512 [ 156.045202][ T9455] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.067391][ T9474] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.130113][ T28] EXT4-fs error (device loop1): ext4_release_dquot:6961: comm kworker/u8:1: Failed to release dquot type 1 [ 156.152137][ T9477] macvtap0: entered promiscuous mode [ 156.168598][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 156.175560][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 156.184101][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 156.192566][ T9477] macvtap0: left promiscuous mode [ 156.313609][ T9488] loop5: detected capacity change from 0 to 512 [ 156.323634][ T9486] loop1: detected capacity change from 0 to 1024 [ 156.342176][ T9486] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.342732][ T9488] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.370032][ T9486] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.2065: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 156.389899][ T9486] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2065: couldn't read orphan inode 11 (err -117) [ 156.429261][ T9486] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2065: Invalid block bitmap block 0 in block_group 0 [ 156.431015][ T9493] loop5: detected capacity change from 0 to 512 [ 156.460437][ T9486] __quota_error: 178 callbacks suppressed [ 156.460452][ T9486] Quota error (device loop1): write_blk: dquota write failed [ 156.473633][ T9486] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 156.485280][ T9486] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2065: Failed to acquire dquot type 0 [ 156.497104][ T9493] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2067: corrupted in-inode xattr: invalid ea_ino [ 156.522644][ T9493] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2067: couldn't read orphan inode 15 (err -117) [ 156.537572][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 156.545402][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 156.551446][ T29] audit: type=1326 audit(1735079096.513:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.577306][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 156.577360][ T29] audit: type=1326 audit(1735079096.543:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.611974][ T29] audit: type=1326 audit(1735079096.573:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.635431][ T29] audit: type=1326 audit(1735079096.573:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.658857][ T29] audit: type=1326 audit(1735079096.573:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.710996][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 156.718968][ T29] audit: type=1326 audit(1735079096.643:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.742488][ T29] audit: type=1326 audit(1735079096.643:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.766047][ T29] audit: type=1326 audit(1735079096.643:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.5.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 156.793810][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 156.842412][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 156.883463][ T9507] loop5: detected capacity change from 0 to 512 [ 156.892199][ T9510] loop1: detected capacity change from 0 to 512 [ 156.902550][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'. [ 156.911608][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'. [ 156.924876][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 156.930796][ T9507] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 156.944923][ T9510] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2083: corrupted in-inode xattr: invalid ea_ino [ 156.946795][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2072'. [ 156.967319][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2072'. [ 156.976439][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 156.986026][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 157.040309][ T9510] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2083: couldn't read orphan inode 15 (err -117) [ 157.066874][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 157.073271][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 157.081432][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 157.115306][ T9523] loop3: detected capacity change from 0 to 1024 [ 157.135191][ T9523] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.163745][ T9523] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2078: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 157.240882][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 157.261455][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 157.284142][ T9523] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2078: couldn't read orphan inode 11 (err -117) [ 157.300340][ T9532] loop5: detected capacity change from 0 to 512 [ 157.315297][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 157.328259][ T9534] loop1: detected capacity change from 0 to 512 [ 157.335080][ T9534] EXT4-fs: inline encryption not supported [ 157.350738][ T9532] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2081: corrupted in-inode xattr: invalid ea_ino [ 157.365833][ T9523] EXT4-fs mount: 214 callbacks suppressed [ 157.365852][ T9523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.386090][ T9532] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2081: couldn't read orphan inode 15 (err -117) [ 157.401785][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 157.408341][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 157.415971][ T9532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.431213][ T9534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.444342][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 157.446407][ T9534] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.468044][ T9523] FAULT_INJECTION: forcing a failure. [ 157.468044][ T9523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.481158][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.3.2078 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 157.491899][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.502032][ T9523] Call Trace: [ 157.505338][ T9523] [ 157.508272][ T9523] dump_stack_lvl+0xf2/0x150 [ 157.512956][ T9523] dump_stack+0x15/0x1a [ 157.517161][ T9523] should_fail_ex+0x223/0x230 [ 157.521868][ T9523] should_fail+0xb/0x10 [ 157.526038][ T9523] should_fail_usercopy+0x1a/0x20 [ 157.531072][ T9523] _copy_from_user+0x1e/0xb0 [ 157.535690][ T9523] move_addr_to_kernel+0x82/0x120 [ 157.540788][ T9523] __sys_bind+0x9e/0x190 [ 157.545049][ T9523] __x64_sys_bind+0x41/0x50 [ 157.549569][ T9523] x64_sys_call+0x20ab/0x2dc0 [ 157.554253][ T9523] do_syscall_64+0xc9/0x1c0 [ 157.558829][ T9523] ? clear_bhb_loop+0x55/0xb0 [ 157.563574][ T9523] ? clear_bhb_loop+0x55/0xb0 [ 157.568257][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.574277][ T9523] RIP: 0033:0x7ffbae8c5d29 [ 157.578768][ T9523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.598438][ T9523] RSP: 002b:00007ffbacf31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 157.606859][ T9523] RAX: ffffffffffffffda RBX: 00007ffbaeab5fa0 RCX: 00007ffbae8c5d29 [ 157.614834][ T9523] RDX: 000000000000006e RSI: 0000000020000180 RDI: 0000000000000005 [ 157.622883][ T9523] RBP: 00007ffbacf31090 R08: 0000000000000000 R09: 0000000000000000 [ 157.630957][ T9523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.638932][ T9523] R13: 0000000000000000 R14: 00007ffbaeab5fa0 R15: 00007fff708a0f08 [ 157.646996][ T9523] [ 157.690466][ T9534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.753536][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2082'. [ 157.775011][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.789531][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.829253][ T9534] netlink: 'syz.1.2082': attribute type 4 has an invalid length. [ 157.837093][ T9534] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2082'. [ 157.843593][ T9544] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 157.902065][ T9550] loop5: detected capacity change from 0 to 1024 [ 157.922406][ T9550] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.982641][ T9550] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 158.006088][ T9550] EXT4-fs (loop5): orphan cleanup on readonly fs [ 158.047857][ T9550] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 158.058292][ T9547] macvtap0: entered promiscuous mode [ 158.064783][ T9547] macvtap0: left promiscuous mode [ 158.073897][ T9550] EXT4-fs (loop5): Remounting filesystem read-only [ 158.081387][ T9550] EXT4-fs (loop5): 1 orphan inode deleted [ 158.087856][ T9550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.112466][ T9550] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 158.123447][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.367483][ T9583] loop5: detected capacity change from 0 to 512 [ 158.459732][ T9583] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 158.487168][ T9583] System zones: 0-2, 18-18, 34-34 [ 158.505367][ T9583] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2098: bg 0: block 248: padding at end of block bitmap is not set [ 158.527923][ T9598] 9pnet_fd: Insufficient options for proto=fd [ 158.595830][ T9583] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2098: Failed to acquire dquot type 1 [ 158.693606][ T9583] EXT4-fs (loop5): 1 truncate cleaned up [ 158.708159][ T9583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.722466][ T9583] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.760137][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.781912][ T1731] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:6: Failed to release dquot type 1 [ 158.810581][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 158.823294][ T9619] loop0: detected capacity change from 0 to 512 [ 158.834229][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 158.841185][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 158.850513][ T9619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.860914][ T9621] loop5: detected capacity change from 0 to 512 [ 158.864015][ T9619] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.869654][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 158.882278][ T9621] EXT4-fs: inline encryption not supported [ 158.904763][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.919996][ T9621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.926487][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 158.939723][ T9631] loop0: detected capacity change from 0 to 128 [ 158.950901][ T9621] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.958076][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 158.972405][ T9621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.982625][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 158.995228][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2105'. [ 159.004256][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 159.045681][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2102'. [ 159.045874][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 159.064510][ T9621] netlink: 'syz.5.2102': attribute type 4 has an invalid length. [ 159.072541][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 159.085651][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 159.145004][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 159.151488][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 159.161035][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 159.231617][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 159.240786][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 159.248388][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 159.299038][ T35] kernel write not supported for file /898/attr/exec (pid: 35 comm: kworker/1:1) [ 159.521000][ T9649] macvtap0: entered promiscuous mode [ 159.527174][ T9649] macvtap0: left promiscuous mode [ 160.044234][ T9657] loop5: detected capacity change from 0 to 512 [ 160.065144][ T9657] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2117: corrupted in-inode xattr: invalid ea_ino [ 160.101506][ T9657] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2117: couldn't read orphan inode 15 (err -117) [ 160.114152][ T9657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.148626][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.393855][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 160.401573][ T9676] loop0: detected capacity change from 0 to 512 [ 160.414549][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 160.426595][ T9676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.440134][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 160.480850][ T9676] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 160.504807][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 160.513500][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 160.522969][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 160.524683][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.543550][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 160.557235][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 160.570500][ T9703] loop0: detected capacity change from 0 to 1024 [ 160.577818][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 160.585783][ T9703] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.612464][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 160.621116][ T9703] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 160.630398][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 160.630786][ T9703] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.644529][ T9703] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 160.646010][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 160.655546][ T9703] EXT4-fs (loop0): Remounting filesystem read-only [ 160.668783][ T9703] EXT4-fs (loop0): 1 orphan inode deleted [ 160.679335][ T9703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.704311][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 160.711226][ T9703] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 160.721606][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 160.730055][ T9703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.740733][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 160.858465][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 160.864889][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 160.873578][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 160.995901][ T9719] loop0: detected capacity change from 0 to 512 [ 161.058334][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 161.066145][ T9719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 161.075547][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 161.084512][ T9719] System zones: 0-2, 18-18, 34-34 [ 161.085977][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 161.113425][ T9719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2131: bg 0: block 248: padding at end of block bitmap is not set [ 161.134805][ T9719] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.2131: Failed to acquire dquot type 1 [ 161.156334][ T9719] EXT4-fs (loop0): 1 truncate cleaned up [ 161.166388][ T9719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.198668][ T9719] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.261221][ T9735] loop5: detected capacity change from 0 to 512 [ 161.284272][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 161.300627][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 161.308461][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 161.326033][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.337796][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:0: Failed to release dquot type 1 [ 161.343186][ T9737] bond1: entered promiscuous mode [ 161.354355][ T9737] bond1: entered allmulticast mode [ 161.366724][ T9737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.380664][ T9745] loop3: detected capacity change from 0 to 512 [ 161.405836][ T9735] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 161.413965][ T9735] System zones: 0-2, 18-18, 34-34 [ 161.420787][ T9735] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2138: bg 0: block 248: padding at end of block bitmap is not set [ 161.435767][ T9735] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2138: Failed to acquire dquot type 1 [ 161.447396][ T9745] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2141: corrupted in-inode xattr: invalid ea_ino [ 161.447591][ T9735] EXT4-fs (loop5): 1 truncate cleaned up [ 161.447986][ T9735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.462416][ T9737] bond1 (unregistering): Released all slaves [ 161.467381][ T9735] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.480404][ T9745] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2141: couldn't read orphan inode 15 (err -117) [ 161.543023][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.596121][ T9745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.621119][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 161.621143][ T29] audit: type=1326 audit(1735079101.583:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae8c5d29 code=0x7ffc0000 [ 161.650967][ T29] audit: type=1326 audit(1735079101.583:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae8c5d29 code=0x7ffc0000 [ 161.675294][ T29] audit: type=1326 audit(1735079101.633:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbae8c5d29 code=0x7ffc0000 [ 161.698766][ T29] audit: type=1326 audit(1735079101.633:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae8c5d29 code=0x7ffc0000 [ 161.722415][ T29] audit: type=1326 audit(1735079101.633:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbae8c5d29 code=0x7ffc0000 [ 161.745878][ T29] audit: type=1326 audit(1735079101.663:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 161.769333][ T29] audit: type=1326 audit(1735079101.663:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 161.792926][ T29] audit: type=1326 audit(1735079101.663:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 161.812122][ T9772] loop0: detected capacity change from 0 to 1024 [ 161.816552][ T29] audit: type=1326 audit(1735079101.663:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 161.835121][ T9772] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.846300][ T29] audit: type=1326 audit(1735079101.663:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9767 comm="syz.0.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9acaca5d29 code=0x7ffc0000 [ 161.899778][ T9772] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 161.908017][ T9772] EXT4-fs (loop0): orphan cleanup on readonly fs [ 161.933868][ T9772] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 161.951200][ T9772] EXT4-fs (loop0): Remounting filesystem read-only [ 161.964026][ T9772] EXT4-fs (loop0): 1 orphan inode deleted [ 161.971698][ T9772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 161.984262][ T9772] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 161.991994][ T9772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.010103][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.258490][ T35] kernel write not supported for file /968/attr/exec (pid: 35 comm: kworker/1:1) [ 162.297263][ T9800] loop3: detected capacity change from 0 to 512 [ 162.350398][ T9800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.380500][ T9811] loop0: detected capacity change from 0 to 512 [ 162.405899][ T9800] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 162.420565][ T9811] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2157: corrupted in-inode xattr: invalid ea_ino [ 162.441752][ T9811] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2157: couldn't read orphan inode 15 (err -117) [ 162.446582][ T9800] __nla_validate_parse: 3 callbacks suppressed [ 162.446598][ T9800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2153'. [ 162.457417][ T9811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.459817][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2153'. [ 162.491410][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 162.497775][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 162.506865][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.509412][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 162.518067][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.564001][ T9820] loop0: detected capacity change from 0 to 1024 [ 162.592897][ T9820] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.608521][ T9821] siw: device registration error -23 [ 162.635067][ T9820] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 162.654733][ T9820] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.663840][ T9820] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 162.674246][ T9820] EXT4-fs (loop0): Remounting filesystem read-only [ 162.681062][ T9820] EXT4-fs (loop0): 1 orphan inode deleted [ 162.687453][ T9820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.709446][ T9820] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 162.722880][ T9820] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.772663][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 162.779483][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 162.787408][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 162.830380][ T9836] loop0: detected capacity change from 0 to 512 [ 162.840581][ T9841] loop3: detected capacity change from 0 to 512 [ 162.849481][ T9836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.875333][ T9841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.895907][ T9836] EXT4-fs (loop0): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 162.918886][ T9836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2167'. [ 162.927920][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 162.936983][ T9841] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 162.964240][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 162.970492][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 162.978527][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 162.998586][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.041758][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.132782][ T1049] kernel write not supported for file /976/attr/exec (pid: 1049 comm: kworker/1:2) [ 163.192449][ T9855] syzkaller0: entered allmulticast mode [ 163.320006][ T9862] loop3: detected capacity change from 0 to 1024 [ 163.328275][ T9862] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.339856][ T9862] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 163.348061][ T9862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.363280][ T9862] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 163.385896][ T9862] EXT4-fs (loop3): Remounting filesystem read-only [ 163.392545][ T9862] EXT4-fs (loop3): 1 orphan inode deleted [ 163.400053][ T9862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 163.412089][ T9862] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 163.422797][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.491467][ T9870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2182'. [ 163.508211][ T9870] netlink: 'syz.0.2182': attribute type 4 has an invalid length. [ 163.516021][ T9870] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2182'. [ 163.528683][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 163.535396][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 163.543402][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 163.588610][ T3378] kernel write not supported for file /1068/attr/exec (pid: 3378 comm: kworker/0:4) [ 163.668583][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 163.680356][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 163.692482][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 163.703156][ T9889] loop3: detected capacity change from 0 to 512 [ 163.764595][ T9889] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 163.772728][ T9889] System zones: 0-2, 18-18, 34-34 [ 163.785772][ T9889] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2191: bg 0: block 248: padding at end of block bitmap is not set [ 163.805558][ T9889] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2191: Failed to acquire dquot type 1 [ 163.842725][ T9889] EXT4-fs (loop3): 1 truncate cleaned up [ 163.849683][ T9889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.862735][ T9889] ext4 filesystem being mounted at /449/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.888319][ T9887] +}[@[9887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.888452][ T9887] +}[@[9887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.899733][ T9887] +}[@[9887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.912389][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.934410][ T36] EXT4-fs error (device loop3): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 1 [ 163.943839][ T9887] rdma_rxe: rxe_newlink: failed to add vcan0 [ 163.948595][ T9902] macvtap0: entered promiscuous mode [ 163.957781][ T9902] macvtap0: left promiscuous mode [ 163.969173][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 163.976064][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 163.981617][ T9904] bond1: entered promiscuous mode [ 163.987956][ T9904] bond1: entered allmulticast mode [ 163.994483][ T9904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.005164][ T9904] bond1 (unregistering): Released all slaves [ 164.011845][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.114643][ T9913] macvtap0: entered promiscuous mode [ 164.120962][ T9913] macvtap0: left promiscuous mode [ 164.149781][ T2963] kernel write not supported for file /1085/attr/exec (pid: 2963 comm: kworker/0:2) [ 164.179577][ T9911] loop3: detected capacity change from 0 to 512 [ 164.195509][ T9911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.209958][ T9911] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 164.229602][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 164.237516][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 164.246346][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.257217][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.276577][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 164.283560][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 164.291585][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.326204][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 164.329439][ T9928] loop3: detected capacity change from 0 to 1024 [ 164.341800][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 164.351404][ T9930] macvtap0: entered promiscuous mode [ 164.352495][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.357654][ T9928] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.374530][ T9930] macvtap0: left promiscuous mode [ 164.384539][ T9928] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 164.398681][ T9928] EXT4-fs (loop3): orphan cleanup on readonly fs [ 164.455968][ T9928] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 164.486799][ T9928] EXT4-fs (loop3): Remounting filesystem read-only [ 164.497157][ T9928] EXT4-fs (loop3): 1 orphan inode deleted [ 164.507317][ T9928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 164.508729][ T9926] +}[@[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.519537][ T9926] +}[@[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.521055][ T9928] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 164.530545][ T9926] +}[@[9926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.544271][ T9928] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.585408][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 164.593048][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 164.601409][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.621796][ T9926] rdma_rxe: rxe_newlink: failed to add vcan0 [ 164.648171][ T9939] bond1: entered promiscuous mode [ 164.653240][ T9939] bond1: entered allmulticast mode [ 164.682647][ T9939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.730770][ T9939] bond1 (unregistering): Released all slaves [ 164.751226][ T9950] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2217'. [ 164.830823][ T9957] loop5: detected capacity change from 0 to 512 [ 164.852470][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 164.861990][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 164.869982][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.878465][ T9957] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 164.886667][ T9957] System zones: 0-2, 18-18, 34-34 [ 164.893993][ T9957] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2218: bg 0: block 248: padding at end of block bitmap is not set [ 164.931131][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 164.941644][ T9957] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2218: Failed to acquire dquot type 1 [ 164.954454][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 164.962125][ T9957] EXT4-fs (loop5): 1 truncate cleaned up [ 164.963710][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 164.995050][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 165.000794][ T9957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.013614][ T9957] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.027250][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 165.036939][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 165.047982][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.074454][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 165.082646][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 165.089870][ T9980] loop5: detected capacity change from 0 to 512 [ 165.090492][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 165.119023][ T9980] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2228: corrupted in-inode xattr: invalid ea_ino [ 165.200767][ T9980] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2228: couldn't read orphan inode 15 (err -117) [ 165.213924][ T9980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.255156][ T9983] loop1: detected capacity change from 0 to 512 [ 165.274066][ T9976] +}[@[9976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.274145][ T9976] +}[@[9976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.286161][ T9976] +}[@[9976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.309892][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.316006][ T9976] rdma_rxe: rxe_newlink: failed to add vcan0 [ 165.334111][ T9983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.359013][ T9983] EXT4-fs (loop1): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 165.412737][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.454062][ T9989] bond1: entered promiscuous mode [ 165.459224][ T9989] bond1: entered allmulticast mode [ 165.472140][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 165.475534][ T9989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.482105][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 165.506180][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 165.523876][ T9989] bond1 (unregistering): Released all slaves [ 165.561621][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 165.572203][T10007] loop1: detected capacity change from 0 to 512 [ 165.581564][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 165.589412][T10007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 165.600004][T10007] System zones: 0-2, 18-18, 34-34 [ 165.606284][T10007] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2239: bg 0: block 248: padding at end of block bitmap is not set [ 165.615050][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 165.622846][T10007] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2239: Failed to acquire dquot type 1 [ 165.654792][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 165.661137][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 165.669549][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 165.692803][T10018] loop5: detected capacity change from 0 to 512 [ 165.703698][T10007] EXT4-fs (loop1): 1 truncate cleaned up [ 165.713511][T10007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.737450][T10007] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.782003][ T35] kernel write not supported for file /1031/attr/exec (pid: 35 comm: kworker/1:1) [ 165.791802][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.795394][T10018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.818633][T10018] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.854210][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 165.873970][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 165.887305][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 166.002809][T10048] loop1: detected capacity change from 0 to 512 [ 166.014790][T10048] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2256: corrupted in-inode xattr: invalid ea_ino [ 166.032424][T10048] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2256: couldn't read orphan inode 15 (err -117) [ 166.056131][T10048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.114745][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.266812][T10070] FAULT_INJECTION: forcing a failure. [ 166.266812][T10070] name failslab, interval 1, probability 0, space 0, times 0 [ 166.279504][T10070] CPU: 1 UID: 0 PID: 10070 Comm: syz.1.2262 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 166.290307][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.300456][T10070] Call Trace: [ 166.303739][T10070] [ 166.306672][T10070] dump_stack_lvl+0xf2/0x150 [ 166.311308][T10070] dump_stack+0x15/0x1a [ 166.315552][T10070] should_fail_ex+0x223/0x230 [ 166.320309][T10070] should_failslab+0x8f/0xb0 [ 166.324966][T10070] kmem_cache_alloc_noprof+0x52/0x320 [ 166.330344][T10070] ? audit_log_start+0x34c/0x6b0 [ 166.335291][T10070] audit_log_start+0x34c/0x6b0 [ 166.340152][T10070] audit_seccomp+0x4b/0x130 [ 166.344733][T10070] __seccomp_filter+0x6fa/0x1180 [ 166.349717][T10070] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 166.355444][T10070] ? vfs_write+0x596/0x920 [ 166.359901][T10070] __secure_computing+0x9f/0x1c0 [ 166.364854][T10070] syscall_trace_enter+0xd1/0x1f0 [ 166.369949][T10070] ? fpregs_assert_state_consistent+0x83/0xa0 [ 166.376033][T10070] do_syscall_64+0xaa/0x1c0 [ 166.380584][T10070] ? clear_bhb_loop+0x55/0xb0 [ 166.385333][T10070] ? clear_bhb_loop+0x55/0xb0 [ 166.390107][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.396086][T10070] RIP: 0033:0x7f84d7085d29 [ 166.400504][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.420122][T10070] RSP: 002b:00007f84d56d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 166.428552][T10070] RAX: ffffffffffffffda RBX: 00007f84d7276080 RCX: 00007f84d7085d29 [ 166.436541][T10070] RDX: 00000000ffffffff RSI: 00000000200005c0 RDI: ffffffffffffffff [ 166.444521][T10070] RBP: 00007f84d56d0090 R08: 0000000000000000 R09: 0000000000000000 [ 166.452591][T10070] R10: 0100000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.460570][T10070] R13: 0000000000000000 R14: 00007f84d7276080 R15: 00007fffd68e97b8 [ 166.468557][T10070] [ 166.487446][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.599772][T10084] loop5: detected capacity change from 0 to 512 [ 166.611971][T10084] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2270: corrupted in-inode xattr: invalid ea_ino [ 166.627476][T10084] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2270: couldn't read orphan inode 15 (err -117) [ 166.639911][T10084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.655842][T10087] bond1: entered promiscuous mode [ 166.660937][T10087] bond1: entered allmulticast mode [ 166.666714][T10087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.674376][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.685909][T10087] bond1 (unregistering): Released all slaves [ 166.703261][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 166.703279][ T29] audit: type=1326 audit(1735079106.663:7447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 166.733267][ T29] audit: type=1326 audit(1735079106.663:7448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 166.756912][ T29] audit: type=1326 audit(1735079106.663:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 166.780435][ T29] audit: type=1326 audit(1735079106.663:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 166.803991][ T29] audit: type=1326 audit(1735079106.663:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10089 comm="syz.5.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78045c5d29 code=0x7ffc0000 [ 166.845709][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 166.852103][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 166.860087][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 166.882844][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 166.890892][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 166.899643][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 166.903324][T10100] loop5: detected capacity change from 0 to 512 [ 166.956483][ T29] audit: type=1400 audit(1735079106.923:7452): avc: denied { connect } for pid=10101 comm="syz.0.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.987605][T10100] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 167.006798][T10100] System zones: 0-2, 18-18, 34-34 [ 167.028605][T10100] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2277: bg 0: block 248: padding at end of block bitmap is not set [ 167.052423][ T29] audit: type=1400 audit(1735079107.013:7453): avc: denied { read } for pid=10101 comm="syz.0.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.074852][T10100] Quota error (device loop5): write_blk: dquota write failed [ 167.082358][T10100] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 167.107272][T10113] FAULT_INJECTION: forcing a failure. [ 167.107272][T10113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.116823][T10100] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2277: Failed to acquire dquot type 1 [ 167.120420][T10113] CPU: 1 UID: 0 PID: 10113 Comm: syz.2.2282 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 167.120451][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.120466][T10113] Call Trace: [ 167.120530][T10113] [ 167.120540][T10113] dump_stack_lvl+0xf2/0x150 [ 167.142483][T10113] dump_stack+0x15/0x1a [ 167.142527][T10113] should_fail_ex+0x223/0x230 [ 167.154133][T10100] EXT4-fs (loop5): 1 truncate cleaned up [ 167.156034][T10113] should_fail+0xb/0x10 [ 167.159415][T10100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.163559][T10113] should_fail_usercopy+0x1a/0x20 [ 167.188709][T10100] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.194635][T10113] _copy_to_user+0x20/0xa0 [ 167.214618][T10113] simple_read_from_buffer+0xa0/0x110 [ 167.220105][T10113] proc_fail_nth_read+0xf9/0x140 [ 167.221428][ T29] audit: type=1326 audit(1735079107.143:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10117 comm="syz.1.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84d7085d29 code=0x7ffc0000 [ 167.225056][T10113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.254115][T10113] vfs_read+0x1a2/0x700 [ 167.258414][T10113] ? __rcu_read_unlock+0x4e/0x70 [ 167.263469][T10113] ? __fget_files+0x17c/0x1c0 [ 167.268195][T10113] ksys_read+0xe8/0x1b0 [ 167.272108][T10120] loop1: detected capacity change from 0 to 128 [ 167.272430][T10113] __x64_sys_read+0x42/0x50 [ 167.283209][T10113] x64_sys_call+0x2874/0x2dc0 [ 167.288006][T10113] do_syscall_64+0xc9/0x1c0 [ 167.292580][T10113] ? clear_bhb_loop+0x55/0xb0 [ 167.297292][T10113] ? clear_bhb_loop+0x55/0xb0 [ 167.302002][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.308031][T10113] RIP: 0033:0x7f749110473c [ 167.312463][T10113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.332107][T10113] RSP: 002b:00007f748f777030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.340636][T10113] RAX: ffffffffffffffda RBX: 00007f74912f5fa0 RCX: 00007f749110473c [ 167.348615][T10113] RDX: 000000000000000f RSI: 00007f748f7770a0 RDI: 0000000000000005 [ 167.356705][T10113] RBP: 00007f748f777090 R08: 0000000000000000 R09: 0000000000000000 [ 167.364756][T10113] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 167.372762][T10113] R13: 0000000000000000 R14: 00007f74912f5fa0 R15: 00007ffd7c374678 [ 167.380743][T10113] [ 167.387857][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.398674][ T36] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:2: Failed to release dquot type 1 [ 167.417229][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.432403][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 167.446692][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 167.450148][T10123] loop5: detected capacity change from 0 to 512 [ 167.495136][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.503671][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 167.518279][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 167.527698][T10123] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 167.545941][T10123] System zones: 0-2, 18-18, 34-34 [ 167.552329][T10123] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2284: bg 0: block 248: padding at end of block bitmap is not set [ 167.576099][T10123] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2284: Failed to acquire dquot type 1 [ 167.612292][T10130] bond1: entered promiscuous mode [ 167.617440][T10130] bond1: entered allmulticast mode [ 167.627946][T10130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.638108][T10123] EXT4-fs (loop5): 1 truncate cleaned up [ 167.644781][T10123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.645208][T10130] bond1 (unregistering): Released all slaves [ 167.657356][T10123] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.675164][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.681648][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 167.689520][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 167.734027][ T3883] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.756354][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.762530][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 167.770591][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 167.797200][ T35] kernel write not supported for file /1069/attr/exec (pid: 35 comm: kworker/1:1) [ 167.833369][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.847642][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 167.865381][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 167.901305][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.917822][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 167.928240][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 167.982954][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 167.999120][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 168.014616][T10154] loop3: detected capacity change from 0 to 1024 [ 168.030948][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 168.048029][T10154] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.088872][T10154] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 168.120778][T10162] loop5: detected capacity change from 0 to 512 [ 168.127292][T10154] EXT4-fs (loop3): orphan cleanup on readonly fs [ 168.171216][T10154] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 168.181899][T10154] EXT4-fs (loop3): Remounting filesystem read-only [ 168.188698][T10154] EXT4-fs (loop3): 1 orphan inode deleted [ 168.200634][T10154] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 168.239449][T10162] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 168.259911][T10146] +}[@[10146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.282155][T10162] System zones: 0-2, 18-18, 34-34 [ 168.326164][T10162] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2302: bg 0: block 248: padding at end of block bitmap is not set [ 168.351001][T10146] rdma_rxe: rxe_newlink: failed to add vcan0 [ 168.377337][T10162] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.2302: Failed to acquire dquot type 1 [ 168.410425][T10162] EXT4-fs (loop5): 1 truncate cleaned up [ 168.423321][T10169] macvtap0: entered promiscuous mode [ 168.433330][T10162] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.460434][T10169] macvtap0: left promiscuous mode [ 168.586290][T10176] loop5: detected capacity change from 0 to 512 [ 168.634190][T10176] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.679931][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 168.693434][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 168.710221][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 168.730763][T10190] loop3: detected capacity change from 0 to 512 [ 168.745541][T10190] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 168.801447][T10199] loop1: detected capacity change from 0 to 512 [ 168.917578][T10199] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 168.929966][T10199] System zones: 0-2, 18-18, 34-34 [ 168.952415][T10199] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2316: bg 0: block 248: padding at end of block bitmap is not set [ 169.037987][T10206] macvtap0: entered promiscuous mode [ 169.043678][T10199] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2316: Failed to acquire dquot type 1 [ 169.055804][T10206] macvtap0: left promiscuous mode [ 169.061064][T10199] EXT4-fs (loop1): 1 truncate cleaned up [ 169.067293][T10199] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.139442][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 169.210167][T10220] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2324'. [ 169.283671][T10226] loop3: detected capacity change from 0 to 1024 [ 169.293028][T10226] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.316495][T10226] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 169.324956][T10226] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.332011][T10226] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 169.343060][T10226] EXT4-fs (loop3): Remounting filesystem read-only [ 169.349847][T10226] EXT4-fs (loop3): 1 orphan inode deleted [ 169.357375][T10226] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 169.500727][T10236] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 169.525079][ T35] kernel write not supported for file /1114/attr/exec (pid: 35 comm: kworker/1:1) [ 169.605918][T10249] FAULT_INJECTION: forcing a failure. [ 169.605918][T10249] name failslab, interval 1, probability 0, space 0, times 0 [ 169.618634][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.3.2335 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 169.629447][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.639574][T10249] Call Trace: [ 169.642868][T10249] [ 169.645817][T10249] dump_stack_lvl+0xf2/0x150 [ 169.650444][T10249] dump_stack+0x15/0x1a [ 169.654675][T10249] should_fail_ex+0x223/0x230 [ 169.659384][T10249] should_failslab+0x8f/0xb0 [ 169.664020][T10249] __kmalloc_node_noprof+0xad/0x410 [ 169.669243][T10249] ? __vmalloc_node_range_noprof+0x3dc/0xe80 [ 169.675254][T10249] __vmalloc_node_range_noprof+0x3dc/0xe80 [ 169.681130][T10249] ? mntput_no_expire+0x70/0x3c0 [ 169.686117][T10249] ? selinux_capable+0x1f2/0x260 [ 169.691175][T10249] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 169.696740][T10249] __vmalloc_noprof+0x5e/0x70 [ 169.701446][T10249] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 169.707020][T10249] bpf_prog_alloc_no_stats+0x49/0x380 [ 169.712473][T10249] ? bpf_prog_alloc+0x28/0x150 [ 169.717328][T10249] bpf_prog_alloc+0x3a/0x150 [ 169.721945][T10249] bpf_prog_load+0x4d1/0x1070 [ 169.726654][T10249] ? __rcu_read_unlock+0x4e/0x70 [ 169.731726][T10249] __sys_bpf+0x463/0x7a0 [ 169.736002][T10249] __x64_sys_bpf+0x43/0x50 [ 169.740450][T10249] x64_sys_call+0x2914/0x2dc0 [ 169.745144][T10249] do_syscall_64+0xc9/0x1c0 [ 169.749783][T10249] ? clear_bhb_loop+0x55/0xb0 [ 169.754494][T10249] ? clear_bhb_loop+0x55/0xb0 [ 169.759181][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.765120][T10249] RIP: 0033:0x7ffbae8c5d29 [ 169.769593][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.789241][T10249] RSP: 002b:00007ffbacf31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 169.797726][T10249] RAX: ffffffffffffffda RBX: 00007ffbaeab5fa0 RCX: 00007ffbae8c5d29 [ 169.805750][T10249] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 169.813768][T10249] RBP: 00007ffbacf31090 R08: 0000000000000000 R09: 0000000000000000 [ 169.821783][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.829844][T10249] R13: 0000000000000000 R14: 00007ffbaeab5fa0 R15: 00007fff708a0f08 [ 169.837846][T10249] [ 169.841005][T10249] syz.3.2335: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 169.858508][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.3.2335 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 169.869370][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.879443][T10249] Call Trace: [ 169.882739][T10249] [ 169.882737][T10256] loop1: detected capacity change from 0 to 512 [ 169.891944][T10249] dump_stack_lvl+0xf2/0x150 [ 169.896640][T10249] dump_stack+0x15/0x1a [ 169.900820][T10249] warn_alloc+0x145/0x1b0 [ 169.905174][T10249] __vmalloc_node_range_noprof+0x473/0xe80 [ 169.911014][T10249] ? selinux_capable+0x1f2/0x260 [ 169.916064][T10249] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 169.921625][T10249] __vmalloc_noprof+0x5e/0x70 [ 169.926319][T10249] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 169.931869][T10249] bpf_prog_alloc_no_stats+0x49/0x380 [ 169.937323][T10249] ? bpf_prog_alloc+0x28/0x150 [ 169.942091][T10249] bpf_prog_alloc+0x3a/0x150 [ 169.946682][T10249] bpf_prog_load+0x4d1/0x1070 [ 169.951475][T10249] ? __rcu_read_unlock+0x4e/0x70 [ 169.956464][T10249] __sys_bpf+0x463/0x7a0 [ 169.960799][T10249] __x64_sys_bpf+0x43/0x50 [ 169.965230][T10249] x64_sys_call+0x2914/0x2dc0 [ 169.969982][T10249] do_syscall_64+0xc9/0x1c0 [ 169.974492][T10249] ? clear_bhb_loop+0x55/0xb0 [ 169.979296][T10249] ? clear_bhb_loop+0x55/0xb0 [ 169.983978][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.989967][T10249] RIP: 0033:0x7ffbae8c5d29 [ 169.994423][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.014033][T10249] RSP: 002b:00007ffbacf31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.022578][T10249] RAX: ffffffffffffffda RBX: 00007ffbaeab5fa0 RCX: 00007ffbae8c5d29 [ 170.030548][T10249] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 170.038572][T10249] RBP: 00007ffbacf31090 R08: 0000000000000000 R09: 0000000000000000 [ 170.046566][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.054612][T10249] R13: 0000000000000000 R14: 00007ffbaeab5fa0 R15: 00007fff708a0f08 [ 170.062599][T10249] [ 170.065815][T10249] Mem-Info: [ 170.068929][T10249] active_anon:6441 inactive_anon:25 isolated_anon:0 [ 170.068929][T10249] active_file:4283 inactive_file:11373 isolated_file:0 [ 170.068929][T10249] unevictable:0 dirty:58 writeback:0 [ 170.068929][T10249] slab_reclaimable:3653 slab_unreclaimable:15810 [ 170.068929][T10249] mapped:28844 shmem:501 pagetables:1048 [ 170.068929][T10249] sec_pagetables:0 bounce:0 [ 170.068929][T10249] kernel_misc_reclaimable:0 [ 170.068929][T10249] free:1844974 free_pcp:5401 free_cma:0 [ 170.113973][T10249] Node 0 active_anon:25764kB inactive_anon:100kB active_file:17132kB inactive_file:45492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115376kB dirty:232kB writeback:0kB shmem:2004kB writeback_tmp:0kB kernel_stack:3200kB pagetables:4192kB sec_pagetables:0kB all_unreclaimable? no [ 170.118128][T10256] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.142038][T10249] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 170.179353][T10249] lowmem_reserve[]: 0 2866 7844 0 [ 170.184457][T10249] Node 0 DMA32 free:2950384kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 170.213192][T10249] lowmem_reserve[]: 0 0 4978 0 [ 170.218185][T10249] Node 0 Normal free:4355456kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:25880kB inactive_anon:100kB active_file:17132kB inactive_file:45492kB unevictable:0kB writepending:232kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:16368kB local_pcp:2972kB free_cma:0kB [ 170.248580][T10249] lowmem_reserve[]: 0 0 0 0 [ 170.253156][T10249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 170.265939][T10249] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 6*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950384kB [ 170.282128][T10249] Node 0 Normal: 1555*4kB (UM) 931*8kB (ME) 441*16kB (UME) 300*32kB (ME) 170*64kB (M) 97*128kB (M) 52*256kB (UME) 217*512kB (UME) 270*1024kB (UME) 109*2048kB (UME) 888*4096kB (UM) = 4314996kB [ 170.301256][T10249] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 170.310594][T10249] 16176 total pagecache pages [ 170.315277][T10249] 19 pages in swap cache [ 170.319658][T10249] Free swap = 119836kB [ 170.323885][T10249] Total swap = 124996kB [ 170.328062][T10249] 2097051 pages RAM [ 170.331869][T10249] 0 pages HighMem/MovableOnly [ 170.336588][T10249] 80180 pages reserved [ 170.372847][T10197] syz.2.2317 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 170.383865][T10197] CPU: 0 UID: 0 PID: 10197 Comm: syz.2.2317 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 170.394674][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.404749][T10197] Call Trace: [ 170.408045][T10197] [ 170.410989][T10197] dump_stack_lvl+0xf2/0x150 [ 170.412200][T10261] loop5: detected capacity change from 0 to 1024 [ 170.415670][T10197] dump_stack+0x15/0x1a [ 170.426254][T10197] dump_header+0x83/0x2d0 [ 170.430669][T10197] oom_kill_process+0x341/0x4c0 [ 170.435595][T10197] out_of_memory+0x9af/0xbe0 [ 170.440220][T10197] ? css_next_descendant_pre+0x11c/0x140 [ 170.443124][T10261] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.445921][T10197] mem_cgroup_out_of_memory+0x13e/0x190 [ 170.445967][T10197] try_charge_memcg+0x508/0x7f0 [ 170.466647][T10197] charge_memcg+0x50/0xc0 [ 170.471003][T10197] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 170.477086][T10197] __read_swap_cache_async+0x236/0x480 [ 170.477815][T10261] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 170.482580][T10197] swap_cluster_readahead+0x279/0x3f0 [ 170.492884][T10261] EXT4-fs (loop5): orphan cleanup on readonly fs [ 170.495841][T10197] swapin_readahead+0xe4/0x6f0 [ 170.495877][T10197] ? call_rcu+0x2fb/0x430 [ 170.504541][T10261] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 170.506955][T10197] ? swap_cache_get_folio+0x77/0x210 [ 170.506993][T10197] do_swap_page+0x31b/0x2550 [ 170.513526][T10261] EXT4-fs (loop5): Remounting filesystem read-only [ 170.520658][T10197] ? __rcu_read_unlock+0x4e/0x70 [ 170.527841][T10261] EXT4-fs (loop5): 1 orphan inode deleted [ 170.530543][T10197] ? __rcu_read_lock+0x36/0x50 [ 170.552550][T10197] ? __pfx_default_wake_function+0x10/0x10 [ 170.558399][T10197] handle_mm_fault+0x8e4/0x2ac0 [ 170.563408][T10197] exc_page_fault+0x3b9/0x650 [ 170.568092][T10197] asm_exc_page_fault+0x26/0x30 [ 170.572967][T10197] RIP: 0033:0x7f7491105d31 [ 170.577451][T10197] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 170.597078][T10197] RSP: 002b:00007ffd7c3747d8 EFLAGS: 00010217 [ 170.603139][T10197] RAX: 0000000000000000 RBX: 00007f74912f7ba0 RCX: 00007f7491105d29 [ 170.611255][T10197] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 170.619224][T10197] RBP: 00007f74912f7ba0 R08: 0000000000005b6c R09: 00007ffd7c374acf [ 170.627256][T10197] R10: 00007f74912f7ac0 R11: 0000000000000246 R12: 000000000002968b [ 170.635224][T10197] R13: 00007f74912f6080 R14: 0000000000000032 R15: ffffffffffffffff [ 170.643207][T10197] [ 170.646346][T10197] memory: usage 307200kB, limit 307200kB, failcnt 491 [ 170.653282][T10197] memory+swap: usage 311692kB, limit 9007199254740988kB, failcnt 0 [ 170.661345][T10197] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 170.668706][T10197] Memory cgroup stats for /syz2: [ 170.672082][T10197] cache 4096 [ 170.680374][T10197] rss 0 [ 170.683171][T10197] shmem 0 [ 170.686150][T10197] mapped_file 0 [ 170.689629][T10197] dirty 0 [ 170.690736][T10261] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 170.692559][T10197] writeback 0 [ 170.692567][T10197] workingset_refault_anon 982 [ 170.692579][T10197] workingset_refault_file 3705 [ 170.692586][T10197] swap 4599808 [ 170.692593][T10197] swapcached 4096 [ 170.718963][T10197] pgpgin 187289 [ 170.722430][T10197] pgpgout 187287 [ 170.726061][T10197] pgfault 208233 [ 170.729675][T10197] pgmajfault 359 [ 170.733300][T10197] inactive_anon 4096 [ 170.737290][T10197] active_anon 0 [ 170.740777][T10197] inactive_file 4096 [ 170.744672][T10197] active_file 0 [ 170.748197][T10197] unevictable 0 [ 170.751685][T10197] hierarchical_memory_limit 314572800 [ 170.757108][T10197] hierarchical_memsw_limit 9223372036854771712 [ 170.763278][T10197] total_cache 4096 [ 170.767094][T10197] total_rss 0 [ 170.770392][T10197] total_shmem 0 [ 170.773945][T10197] total_mapped_file 0 [ 170.777991][T10197] total_dirty 0 [ 170.781449][T10197] total_writeback 0 [ 170.785295][T10197] total_workingset_refault_anon 982 [ 170.790549][T10197] total_workingset_refault_file 3705 [ 170.795930][T10197] total_swap 4599808 [ 170.799827][T10197] total_swapcached 4096 [ 170.803982][T10197] total_pgpgin 187289 [ 170.808066][T10197] total_pgpgout 187287 [ 170.812146][T10197] total_pgfault 208233 [ 170.816237][T10197] total_pgmajfault 359 [ 170.820307][T10197] total_inactive_anon 4096 [ 170.824725][T10197] total_active_anon 0 [ 170.828755][T10197] total_inactive_file 4096 [ 170.833179][T10197] total_active_file 0 [ 170.837232][T10197] total_unevictable 0 [ 170.841222][T10197] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2317,pid=10197,uid=0 [ 170.847149][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'. [ 170.856041][T10197] Memory cgroup out of memory: Killed process 10197 (syz.2.2317) total-vm:93520kB, anon-rss:912kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 170.864887][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 171.071663][T10276] loop1: detected capacity change from 0 to 512 [ 171.147564][T10276] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.2343: corrupted in-inode xattr: invalid ea_ino [ 171.171422][T10276] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2343: couldn't read orphan inode 15 (err -117) [ 171.193902][T10274] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2345'. [ 171.243178][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 171.249573][ T3373] kernel write not supported for file /1131/attr/exec (pid: 3373 comm: kworker/1:4) [ 171.263851][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 171.286984][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 171.427443][T10272] bpf_get_probe_write_proto: 2 callbacks suppressed [ 171.427474][T10272] syz.5.2344[10272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.450328][T10272] syz.5.2344[10272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.454271][T10298] macvtap0: entered promiscuous mode [ 171.464932][T10272] syz.5.2344[10272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.482223][T10299] loop3: detected capacity change from 0 to 512 [ 171.504154][T10298] macvtap0: left promiscuous mode [ 171.543284][T10299] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.566040][T10272] loop5: detected capacity change from 0 to 512 [ 171.574922][T10272] rdma_rxe: rxe_newlink: failed to add vcan0 [ 171.635575][T10311] loop1: detected capacity change from 0 to 128 [ 171.641465][T10308] macvtap0: entered promiscuous mode [ 171.659829][T10308] macvtap0: left promiscuous mode [ 171.763909][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 171.763924][ T29] audit: type=1326 audit(1735079111.723:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.2.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491105d29 code=0x7ffc0000 [ 171.811715][ T29] audit: type=1326 audit(1735079111.753:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.2.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f7491105d29 code=0x7ffc0000 [ 171.835458][ T29] audit: type=1326 audit(1735079111.753:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.2.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7491105d29 code=0x7ffc0000 [ 171.863626][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 171.882062][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 171.892706][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 171.925597][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 171.949310][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 171.964560][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated [ 172.006086][T10329] loop5: detected capacity change from 0 to 128 [ 172.048821][T10329] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 172.141132][T10329] bio_check_eod: 26523 callbacks suppressed [ 172.141182][T10329] syz.5.2366: attempt to access beyond end of device [ 172.141182][T10329] loop5: rw=0, sector=216, nr_sectors = 1 limit=128 [ 172.249923][ T3000] ================================================================== [ 172.258057][ T3000] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 172.266416][ T3000] [ 172.268750][ T3000] write to 0xffff88814c094f70 of 8 bytes by task 3453 on cpu 0: [ 172.276388][ T3000] inode_set_ctime_current+0x4ea/0x7a0 [ 172.281863][ T3000] shmem_unlink+0x114/0x170 [ 172.286385][ T3000] vfs_unlink+0x275/0x430 [ 172.290730][ T3000] do_unlinkat+0x237/0x4d0 [ 172.295159][ T3000] __x64_sys_unlink+0x2e/0x40 [ 172.299862][ T3000] x64_sys_call+0x2329/0x2dc0 [ 172.304553][ T3000] do_syscall_64+0xc9/0x1c0 [ 172.309081][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.315005][ T3000] [ 172.317344][ T3000] read to 0xffff88814c094f70 of 8 bytes by task 3000 on cpu 1: [ 172.324890][ T3000] atime_needs_update+0x2ed/0x3e0 [ 172.329924][ T3000] touch_atime+0x4a/0x350 [ 172.334268][ T3000] do_readlinkat+0x12b/0x210 [ 172.338869][ T3000] __x64_sys_readlink+0x47/0x60 [ 172.343725][ T3000] x64_sys_call+0x28ba/0x2dc0 [ 172.348410][ T3000] do_syscall_64+0xc9/0x1c0 [ 172.352919][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.358830][ T3000] [ 172.361151][ T3000] value changed: 0x00000000676b34c7 -> 0x00000000676b34c8 [ 172.368259][ T3000] [ 172.370603][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 172.376749][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 172.387001][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.397078][ T3000] ================================================================== [ 172.490697][ T3401] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 172.595615][ T3000] loop2: p1 < > p2 < p5 > p3 p4 < > [ 172.601735][ T3000] loop2: p3 size 131072 extends beyond EOD, truncated [ 172.609544][ T3000] loop2: p5 size 131072 extends beyond EOD, truncated