last executing test programs: 30.072789766s ago: executing program 2 (id=2079): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvbH8gv2xF/AGioGgkGltaUDl4AKOJB01M9IDH2haCLNTQaoQQXT3g0ZB4Nx5N/As86cWoJxOvejckxHAB9TJmdmfa3WV3bcvWAffzSbb73sxs3/v2zdt9b15nAxhY+7IfScS2iPg1IsYa2dYD9jWebly7OPvntYuzSaTpG38k9eOuX7s4WxxavG5rkam1bm+2eP7C6Zlqdf5cnp9cOvPu5OL5C8+cOjNzcv7k/NnpI0cOH5p6/rnpZ/sSZ1an67s/XNiz65W3Lr82e/zy2z9+nRTxt8Txfl/Ka/rVzYaKxBP9KuU2sb0pnQyXWBHWJDshs+Yaqff/sRiKlcYbi5c/KbVywIZK0zTd1H13LQX+x5IouwZAOfLP+SSiNpvNgZvn84Pg6rHGBCiL+0b+aOwZjkp+zEjb/LafstnW8dpfX2SPaLueAgCwEb491nguxn4r449Ky1X8o/na0HhE3BMROyLi3ojYGRH3RcT9EfFARDzY9JpO6z7t2hdJbh7/VK6sK7BVysZ/L+RrW63jv2L0F+NDeW57Pf6R5MSp6vzBiLg7Ig7EyKYsP9WjjO9e+uWzbvv2NY3/skdWfjEWzOtxZbjtAt3czNLMrcTc7OrHEbuHO8WfLK8EZO24KyJ2711fGaee+mpPt33/Hn8PfVhnSr+MeLLR/rVoi7+Q9F6fnLwrqvMHJ4uz4mY//Xzp9W7l31L8fZC1/5aO5/9y/ONJ83rt4trLuPTbp13nNKs8/0ebX5Od/6PJm/V0seODmaWlc1MRo8mr+faj+fbW8urHTa8cn8V/YH/n/r8jVv4SD0VEdhI/HBGPRMTevO6PRsRjEbG/R/w/vPj4O+uPf2Nl8c+tqf27Joq17Zt2DZ3+/pv6nqKxxnvEn0SH9j9cTx3It6zm/a9nTc/dytkMAAAAd55KRGyLpDKxnK5UJiYa/y+/M7ZUqguLS0+fWHjv7FzjHoHxGKkUV7rGlq+HRm0qn9YX10en2/KH8uvGnw9trucnZheqc2UHDwNua5f+n/l9qOzaARvO/VowuNbb/9M0/ajPVQH+Yz7/YXDp/zC4OvT/zW35Ht8RANzJOn3+m9jDYDD+h8Gl/8Pg0v9hcOn/MJDyO+GHV3OD/4Ylsvef8kpfeyJNSyp9tPzYlxNRKa30KDv2NSb+zr9s83apz6oSZb8zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Mc/AQAA//+4C+Qb") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000380)=""/110, 0x6e) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) socket(0x200000000000011, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x4, 0x0, 0xa}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x2000c000) socket$netlink(0x10, 0x3, 0x0) 29.647902161s ago: executing program 2 (id=2086): r0 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010a000000000000000000000070"], 0x20}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote, 0x15, 0x100003, 'wlc\x00', 0x21, 0x4, 0x78}, 0xfffffcda) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0xb, 0x323b, 0x3d}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x2104880, &(0x7f0000000300)=ANY=[@ANYBLOB='transfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,\x00']) 29.572331132s ago: executing program 2 (id=2089): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c) 29.554912182s ago: executing program 2 (id=2090): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000002c0), 0x81, 0x7ae, &(0x7f0000001740)="$eJzs3c9rG1ceAPDvyL9iJ7v2wsJu9mRY2DWEyOusN9mFPWTZQyk0EGjPTYysmNSyFSw5xMaQhFLopdCWHgrtJef+SG+99se1/S96KAlp64Sm9FBURh7Zciw5dmJJbf35wHjemzej975+8+NJM0gBHFrj6Z9cxPGIeD2JGM2WJxExUE/1R5zdWO/h+lohnZKo1Z7/Nqmv82B9rRBN26SOZpk/R8Rnr0ScyO2st7KyOj9TKhWXsvxkdeHKZGVl9eTlhZm54lxx8fTU9PSpM/86c/rgYv3+y9Vjd9945u8fnv3x5T/dfu3zJM7GsaysOY6DMh7j2f9kIP0XbvP/g66sx5JeN4Ankh6afRtHeRyP0eirp9oY7mbLAIBOuR4RNQDgkElc/wHgkGl8DvBgfa3QmHr7iUR33ftfRBzZiL9xf3OjpD+7Z3ekfh905EGy7c5IEhFjB1D/eES8+/GL76dTdOg+JEArN25GxMWx8Z3n/2THMwv79Y/dCmtD9dn4I4ud/6B7PknHP/9uNf7LbY5/osX4Z6jFsfskHn/85+4cQDVtpeO//zY92/awKf7MWF+W+119zDeQXLpcKqbntt9HxEQMDKX5qfqqrZ+Cmrj/0/129TeP/75786X30vrT+dYauTv9Q9u3mZ2pzjxt3A33bkb8pb9V/Mlm/ydtxr/n91jHs/959Z12ZWn8abyNaWf8nVW7FfG3lv2/1ZfJrs8nTtZ3h8nGTtHCR1+9PdKu/q3+H6rP0/ob7wW6Ie3/kd3jH0uan9es7L+OL26NftqurHn/bx1/6/1/MHmhnh7Mll2bqVaXpiIGk+d2Lj+1tW0j31g/jX/ir62P/3b7fy57NvbiZm53/Xe/+SB7qZbx191oF39npfHP7qv/d0nUsm0eKbr9cL6vXf176//pemoiW7KX899jWvoUezMAAAAAAAAAAAAAAAAAAAAAAAAA7F8uIo5FkstvpnO5gfzGb3j/MUZypXKleuJSeXlxNuq/lT0WA7nGV12ONn0f6lT2ffiN/KlH8v+MiD9ExFtDw/V8vlAuzfY6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIHN3++//X01k+v1H29VCvWwcAdMyRXjcAAOg6138AOHz2d/0f7lg7AIDu2ff7/1rSmYYAAF2z5+v/xc62AwDoHvf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LDz586lU+2H9bVCmp+9urI8X756crZYmc8vLBfyhfLSlfxcuTxXKuYL5YW2L3RjY1Yql69Mx+LytclqsVKdrKysXlgoLy9WL1xemJkrXigOdC0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANi7ysrq/EypVFyS2DUx3JlX7s+6ofcB7jPRH7+IZvzmE4M9q735LDHcm5MTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK/AzwEAAP//SAAhnQ==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r2 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) fstat(r3, &(0x7f00000003c0)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r1}}, 0x20) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) listxattr(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000100), 0xffffffffffffff01, 0x100) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 29.544907143s ago: executing program 1 (id=2091): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, 0x0, 0x0, 0x40000121, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x103ff, 0x1}) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000000)="ea1b71107b4abd1cfac67d80acb5e6e3652d08ba7bdbc9fe98396c8b0ed521420d85984587cf5324c5aae7f11f9082e648dcbc2e3faef8574efa5ab032cb8493644b840e92bee9e878f0579c", 0x4c) 29.469953873s ago: executing program 1 (id=2092): r0 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010a000000000000000000000070"], 0x20}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote, 0x15, 0x100003, 'wlc\x00', 0x21, 0x4, 0x78}, 0xfffffcda) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0xb, 0x323b, 0x3d}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000001c0)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x2104880, &(0x7f0000000300)=ANY=[@ANYBLOB='transfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,\x00']) 29.460808484s ago: executing program 1 (id=2093): bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0xf0107ff0780000}, 0x20) io_setup(0x7e, &(0x7f0000000080)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r6 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000380)="36df0d6270057493d94688015b711ac00c98dd1eeb9ac0a5459e0832de87effbd27a5596765ef071471af9c2b961969b870932f87b9cb51eec218be8644a45229373a35db0317c464d4c240d54e508a4a9c1140615c503836556f56eef287905c784b3dc68b36958e917474cf159cfd8251c64aed99f90ddcb6fbbe66f74432110d8896db88bbc025251beb6f70dfcfa27a601f75c2f103509fe911688a4a3712d3a33bddde0e9a3c862e9960a7587037168f6bc64d8ad7aed9c66b18792fc", 0xbf}, {&(0x7f0000000680)="3f9eb712b1fbdf79e57a8b415c9ad4c6424627926406cd0f77702d8b83445522d4d5bb4d45ec4463d4663fdde092f7b3ec6b935bacd1d8187f80f82b99137ce5104959346d618ac9b1ca1805fd0419b9026ce31265da0dd5aacadbc0871b1fa25547ab741bf6fb395872aa550f3c1504728eb5938431b21306a9e068575120a361ae3b6e8ed09323afbca239a7c2922d1214c14bd3c568a7cf90f432d7f0d8d29187b451a8519f83e0a1d3ba2d212b239fa32b2d1f0117bc9f7df2286e2eda32d79673ec0b4a38517215d873f038015004d9eb3f8585", 0xd6}, {&(0x7f0000000dc0)="5ad49c2fc437ddd4fceb3910adb713b59a66b27aa67f738b9978b1d0aaf04c5779ecc11193635142a3790c6a957d2498122583a78b86232dab7bf3fae675aed579fab53ac7739810cd99db0f88ed70418c7cb376502b46190392c2db70d3b52f82dc17e73ebf03aa48c6b075801f53c24d5440acbd333edbedc52749115b27cfbbcbd31b20145f82cc932204b9a48b007c7e84c9c88069af4aa6b071718c119a1889eae3", 0xa4}], 0x3, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd00}}], 0x18}, 0x20008004) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@delalloc}, {@data_err_abort}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10001}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@orlov}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000840)="$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") r8 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105002, 0x1db) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) fallocate(r8, 0x20, 0x0, 0x7000000) 29.450611084s ago: executing program 2 (id=2094): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000740)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r6, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 29.314257005s ago: executing program 1 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() r2 = semget$private(0x0, 0x4, 0x80) semop(r2, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) r3 = open(&(0x7f0000000480)='./bus\x00', 0x101c42, 0xe) fallocate(r3, 0xf, 0x2e9, 0xfffc) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0xb7]) r4 = syz_pidfd_open(r1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) setns(r4, 0x24020000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x82, 0x0, 0x6, 0x40, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x1, 0x1, 0x57}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', r6, 0x4, 0x2, 0x80, 0x50c3, 0x0, @mcast2, @mcast1, 0x7800, 0x10, 0xa4c, 0x10000}}) unshare(0x28020480) umount2(&(0x7f00000001c0)='./file0/file0/file0\x00', 0xd1221ca57387c150) 29.233006206s ago: executing program 1 (id=2096): r0 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010a000000000000000000000070"], 0x20}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote, 0x15, 0x100003, 'wlc\x00', 0x21, 0x4, 0x78}, 0xfffffcda) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0xb, 0x323b, 0x3d}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000001c0)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x2104880, &(0x7f0000000300)=ANY=[@ANYBLOB='transfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,\x00']) 29.161825177s ago: executing program 2 (id=2097): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1b, 0x0, 0x0, 0x0, 0xffffffffffffd273, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10ea01, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000380)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='netfs_read\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="19042c9c7000ffdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000da7b90d92e193009f2e90921dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000000b4001a8004001c0004001c0004001c0004001c00040007009c000a801400070020010000000000000000000000000000050008000900000014000700fe80000000000000000000000000001c14000700fe80000000000000000000000000004114000700000000000000000000000000000000001400070000000000000000000000ffffac141416050008000900000005000800cf000000050008005700000014000700200100000000000000000000000000020a000100aaaaaaaaaabb0000"], 0xe0}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r9) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 29.161236407s ago: executing program 32 (id=2097): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1b, 0x0, 0x0, 0x0, 0xffffffffffffd273, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10ea01, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000380)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='netfs_read\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="19042c9c7000ffdbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000da7b90d92e193009f2e90921dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000000b4001a8004001c0004001c0004001c0004001c00040007009c000a801400070020010000000000000000000000000000050008000900000014000700fe80000000000000000000000000001c14000700fe80000000000000000000000000004114000700000000000000000000000000000000001400070000000000000000000000ffffac141416050008000900000005000800cf000000050008005700000014000700200100000000000000000000000000020a000100aaaaaaaaaabb0000"], 0xe0}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r9) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 29.059271458s ago: executing program 1 (id=2099): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000804000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x26) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x4) ioperm(0x453, 0x7ff, 0x6) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r9, 0x2000, {0x2a00, 0x80010000, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) 29.004191789s ago: executing program 33 (id=2099): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000804000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x26) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x4) ioperm(0x453, 0x7ff, 0x6) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r9, 0x2000, {0x2a00, 0x80010000, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}}) 2.083037025s ago: executing program 6 (id=2552): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000740)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r6, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 2.027939766s ago: executing program 6 (id=2553): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) (fail_nth: 1) 1.973330417s ago: executing program 4 (id=2554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7fff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) sendfile(r0, r3, 0x0, 0x100001) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x1) 1.70679537s ago: executing program 0 (id=2557): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 1.68648294s ago: executing program 0 (id=2559): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000380)=""/110, 0x6e) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e00010077697a6567756172640000000400028008000a00e26d52e32530d479e153d200362daac13fc70cc6cd5fc3ab2fdd41f649b09464bee2b5541580cbc0db212e45acd51a0cf797516e651c4ceb7808804739af3245fa2336d40936d700ffbf915f395f1fa72780fcbda2fb2acb224ebe679e7b91aad96cc1295ee131a6e60934786ae2d6815416a847322ac2ca1060db06a77644932cb7ac2a6dc856e76ec3656a0369bda3339adf1b7e09d8d967c733f45526bb8e1ccbaeafd9456b074e7b87519a2044b6f0e50b562247d638c341f6f9466e022f384512d4ecaaec37e0825e54bc00a77b33af", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 1.589294181s ago: executing program 4 (id=2561): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1220012, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0xcd, 0x2, 0x9924, 0x53, @empty, @local, 0x8, 0x80, 0x623, 0x4}}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x8, 0x8}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r7, @ANYBLOB="000000000000000018100000", @ANYRES32=r8, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c692500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0x14, &(0x7f0000000280)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ldst={0x3, 0x0, 0x3, 0xb, 0xa, 0xffffffffffffffe0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}], &(0x7f0000000380)='syzkaller\x00', 0x61f, 0xcf, &(0x7f00000003c0)=""/207, 0x41000, 0x61, '\x00', r5, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, &(0x7f0000000600)=[r6, r0, r10, r0, r0], 0x0, 0x10, 0x1, @void, @value}, 0x94) 1.471934582s ago: executing program 5 (id=2563): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8660, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x2490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaee}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xb282, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20) (fail_nth: 2) 1.419410923s ago: executing program 4 (id=2564): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x1a400000}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r4 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) pwritev(r5, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000240)={0x5, 0x9, 0x5, {0xffff, 0x4}, 0x6, 0xffffff00}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000027c0)={{r7}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 1.124917547s ago: executing program 6 (id=2566): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x3980070, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESOCT=r0], 0xfe, 0x2a1, &(0x7f0000000f40)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x20600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlockall(0x2) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x80, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_pidfd_open(r3, 0x0) 1.061715597s ago: executing program 4 (id=2568): bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000340)='rpcgss_import_ctx\x00', r2}, 0x18) (async) sigaltstack(0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x6}, 0x18) (rerun: 32) r3 = socket(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='tcp_probe\x00', r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000600), &(0x7f0000000680)=@v3={0x3000000, [{0x2, 0x4}, {0xff, 0x6}]}, 0x18, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000790000009500070000000800"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x10006, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000580)={{0x3a, @loopback, 0x4e21, 0x1, 'fo\x00', 0x7, 0x2150, 0x26}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4e20, 0x0, 0x2, 0x9}}, 0x44) (async) getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 1.012351178s ago: executing program 5 (id=2569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0x402a0f1f, 0x401, 0x6, 0x56, r0, 0x60000000, '\x00', r1, r0, 0x1, 0x2, 0x1, 0x5, @void, @value, @void, @value}, 0x50) socket$kcm(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000), 0xfe, 0x264, &(0x7f0000000700)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2, 0x6e}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 978.806938ms ago: executing program 0 (id=2571): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x539, &(0x7f0000003d80)="$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") 902.88417ms ago: executing program 3 (id=2572): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095", @ANYRESHEX=r2], &(0x7f0000000400)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000300), 0x4) r4 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2'}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = syz_clone(0x83ba3100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_procfs(r5, &(0x7f0000000140)='net/dev_mcast\x00') preadv(r6, &(0x7f0000000340), 0x0, 0x1ff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) fadvise64(r10, 0x9, 0x8, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r8, 0x0, 0x7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x100dae, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x8000, 0x0, r6}) timerfd_settime(r6, 0x2, &(0x7f0000000040)={{0x77359400}}, 0x0) 829.95373ms ago: executing program 3 (id=2573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4041, &(0x7f0000000340), 0xf8, 0x47a, &(0x7f0000000ac0)="$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") setxattr$security_capability(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, 0x0, 0x1) 829.76191ms ago: executing program 4 (id=2574): r0 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001600010a000000000000000000000070"], 0x20}}, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x82400, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote, 0x15, 0x100003, 'wlc\x00', 0x21, 0x4, 0x78}, 0xfffffcda) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0xb, 0x323b, 0x3d}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) lsetxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000001c0)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x2104880, &(0x7f0000000300)=ANY=[@ANYBLOB='transfdno', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000,\x00']) 752.446411ms ago: executing program 6 (id=2575): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x3980070, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESOCT=r0], 0xfe, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x20600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlockall(0x2) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x80, 0x0) r5 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 735.109031ms ago: executing program 4 (id=2576): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000740)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r5, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 720.195591ms ago: executing program 3 (id=2577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x38cd, &(0x7f0000000880)={0x0, 0x6c9e, 0x0, 0x0, 0x10000347}) pipe(&(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a68", 0x6c, 0x1, 0x0, 0x0) 683.068742ms ago: executing program 5 (id=2578): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x3980070, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESOCT=r0], 0xfe, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x20600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$eJzs3c9rFGcfAPDvTH6avO+bKC+8rz3UQCkKrYmJWqQUau5F7I9/IDVRxGgkSaFRwQjtsfTSQ6GnHmr/i1borfTQaw+9F0FK8VCL1C2zOxs3m93Nz/3h7ucDa+aZmczznTXfPM88eWY2gJ41kf2TRhyNiJtJxFjFtv7IN06U9nv8x51L2SuJQuH935O4czdZrzxWkn8dzb/577FIfk4jjvRtrXdl7da1ucXFheW8PLV6/ebUytqtk1evz11ZuLJwY+aNmXNnz5w9N31qX+c3UGPdN189Taa//fVCEufjWR5bdl7V+w3tq+bsPZuIQsmTyvXZ+3pun8fuFH+OlX9OnkuqV9CxLud5m+XJ/2Is+ir+N8fi03fbGhzQVIUkym0U0HOSOvn/42yj3wzDTYsHaJVyP6B8bV/rOnirtMm9EqAVHs2WBqRKuT8QEeX87y+NDcZwcWxg5HGyaZwniYj9jcyVZHX89MOFT7JX1BmHA5pj/V55lLu6/U+KuTkew8XSyON0c/6vFwpp3hPI1r+3x/onqsryH1pn/V5E/D9v/wdjx/mf5rlbzv8P91i//AcAAAAAAICD82A2Il6vNf8v3Zj/M1hj/s9oRJw/gPq3//tf+jBfSKp2HTyA6qGnPZqNeKvm/N+NOb7jfXnp38X5ALeTy1cXF05FxH8i4kQMDGXl6arjVs4QPvnZkS/r1V85/y97ZfWX5wLmR3rYX3Uj7vzc6tx+zxuIeHQv4qXi/N9j+ZrN83+y9j+p0f5n+X1zh3UcefX+xXrbts9/oFkKX0ccr9n+P+9uJ42fzzFV7A9MlXsFW718+/Pv6tVfnf9NOEWgjqz9H2mc/0NJ5fN6VnZ3/Owi/fRaf6He9r32/weTD/qiYhDg47nV1eXpiMHkna3rZ3YXM3SrPB+ORZ4vWf6feKXx+N9G/78iDw9FxPoO6hveZrv+P7RPlv/zjdv/8c3t/+4XZu6Pf1+v/os7av/PFNv0E/ka439QaevzOHaaoG0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABecGlE/CuSdHJjOU0nJyNGI+K/MZIuLq2svnZ56aMb89m2iPEYSMuf9DtWKiflz/8fryjPVJVPR8ThiPii71CxPHlpaXG+3ScPAAAAAAAAAAAAAAAAAAAAHWK0eM9/Yaj6/v/Mb33tjg5ouv78q3yH3tO/5+8sDB1oIEDL7T3/gRdYds2/i/wfaGYsQBvUz/8nTwtFLQ0HaCH9f+hde8x/fy6ALqD9h161wzG94WbHAbSD9h8AAAAAALrK4WMPfkkiYv3NQ8VXZjDfZrI/dLe03QEAbWMOL/Su/qV2RwC0i2t8INlY+qvmzf71Z/8nzQkIAAAAAAAAAAAAANji+FH3/0Ovanz/v7n90M0a3P9fK/k9LgC6SP2P/tD2Q7dzjQ9s19q7/x8AAAAAAAAAAAAAOsDwrWtzi4sLyytrL97C250Rxu4W1uc6IoxdLBTuRjTe51lzah+IiE55E5ZXsmhaVVf5ERxtPOU2/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2/BMAAP//cdEbCg==") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlockall(0x2) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x80, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_pidfd_open(r3, 0x0) 681.924612ms ago: executing program 0 (id=2579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 650.479622ms ago: executing program 3 (id=2580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1f}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8048}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000000001000000000000000080000000000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000180000180080005"], 0x34}}, 0x0) 643.850142ms ago: executing program 0 (id=2581): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000380)=""/110, 0x6e) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]}, 0x78) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e00010077697a6567756172640000000400028008000a00e26d52e32530d479e153d200362daac13fc70cc6cd5fc3ab2fdd41f649b09464bee2b5541580cbc0db212e45acd51a0cf797516e651c4ceb7808804739af3245fa2336d40936d700ffbf915f395f1fa72780fcbda2fb2acb224ebe679e7b91aad96cc1295ee131a6e60934786ae2d6815416a847322ac2ca1060db06a77644932cb7ac2a6dc856e76ec3656a0369bda3339adf1b7e09d8d967c733f45526bb8e1ccbaeafd9456b074e7b87519a2044b6f0e50b562247d638c341f6f9466e022f384512d4ecaaec37e0825e54bc00a77b33af", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 619.277522ms ago: executing program 3 (id=2582): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$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") 264.479767ms ago: executing program 6 (id=2583): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 246.199787ms ago: executing program 5 (id=2584): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x200100, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) 102.270309ms ago: executing program 6 (id=2585): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x3980070, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESOCT=r0], 0xfe, 0x2a1, &(0x7f0000000f40)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_clone(0x6000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x20600) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mlockall(0x2) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x80, 0x0) r6 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_pidfd_open(r3, 0x0) 81.978939ms ago: executing program 5 (id=2586): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:hwdata_t:s0', 0x20, 'unconfined', 0x20, 0x81}, 0x3e) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x87, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000780), 0x79d70d7e, 0x400001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x7fffffff, 0x0, 0x10000, 0x40108, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x37, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc1c4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @exit, @alu={0x7, 0x1, 0x4, 0x0, 0x9, 0x40, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xae0}, @exit, @alu={0x4, 0x0, 0xa, 0xa, 0x2, 0xfffffffffffffff0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x81, 0x53, &(0x7f0000000340)=""/83, 0x40f00, 0x1, '\x00', r3, @fallback=0x1e, r4, 0x8, &(0x7f0000000700)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xd, 0xffffff5e, 0xa26}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[r5, 0xffffffffffffffff, r6, 0x1], 0x0, 0x10, 0xf87, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000940)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x10, &(0x7f0000000980)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9c1a, 0x0, 0x0, 0x0, 0x86c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], &(0x7f0000000a00)='syzkaller\x00', 0x3, 0xc3, &(0x7f0000000a40)=""/195, 0x41100, 0x15, '\x00', r3, @fallback=0x35, r8, 0x8, &(0x7f0000000b80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x5, 0x5}, 0x10, 0xffffffffffffffff, r4, 0x1, 0x0, &(0x7f0000000c00)=[{0x1, 0x5, 0xf, 0xb}], 0x10, 0x9, @void, @value}, 0x94) syz_clone(0x15000e40, &(0x7f0000000d00)="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", 0x1000, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)="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") read(r5, &(0x7f0000002d80)=""/4096, 0x1000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000003d80)={0x0, 0x1000, "02fef105c6c9389f610913728819bcc688494f95e6be2f7956cf4daebd55c0f3aadd71120fd9d9ee25d9e037cfd6014a055633609c0ad198ef525262cc4209937d6ad2c39c466f8b6dff14ad953dd74f91b164a95dea1047b973307b1978c02ad4cd92bab430f8cc4b220fef159381265c19d2b481a9cf0b95903f822e8cca3bbf6b7e7b4d2b4b5f91bb089e27269a1a6cab02b58bc2e6226d4c0842e779720b2cfb6e4032883ca3d0337b9c0dd6f820d46e7fd12edf639b14041b9e0be9cf4b2b41abb5d1887684a173dd2bd2751846dff7745401e8c3495a43a8719f5a404b7091a750911ef8a58694576a4f6f81f28a4fce02e8b6daa6eb9f993daeb9a5b7d7b0babf6c01263021def8baf91055fdef214f7261b3b4341dc2a588d958223700c48540da4e775c95c0259da6df91cf59056ba1a0d76dca139731f7a8f43725283296193bb5a8f544e0ef99517c6ee99ffa4f27d9079be083ce5528fb564afc2ddd4cfba3361874d56f898ffd23431b3ec338e610a72f8d6b31a071758965c611aad769f481c8494ac7d62a0c2b99cc1fb8bb27acb76f971dd5dd6aced0284dd831c207627b322bf232531088f2f089f38824767e30542cfa66488a62e1033ca11147264f7f596c247a76759c8f948f2d370eb134ac11bce78aa229b1f283308ee8b51ec100ddc5ac5049b0a4ff16f5db5f137010da0409777118ed7601a7fec7d00c45e0c81afa08dbcb5880dda32cd42b1b8513fac9b3cb9f3ae0610650e4b6271e0bba367fef832958924316e4d8d2a70322a91e5d537f1d9dbcdd8fea54509cff8dabedff713da560f7494d4bbd2270e300d5044ffe758f27caa1f3e971e791ff16f011a6fcea9740dd41b81cd3457c7333bad3af6e43231d47e5bd16eef8b0d647c0e99654674c686f4877d36b1c450b7473c51ab79b9c2aa36d15bf1736f17b576e1c42dc97328372a7a51fbaff3cda20f272c2ec9e23ae6d88491dc5578642d9a776fda04f0a565d1de307605574c6c9cf1f8aeffd63fda40266cb53fbacb35cdc7f0ca378ef28c94f4b0df0dc919d41e1a7224a12b492312a170a43f04aa045f94c7dd43cf20e26c36e227c6d46a23b2544642eff2479d7414f28ce6e7fe0ed0e8a7f6b27a8cb0c56794d30db2b7b20f37e7fd9332b9af8ed836154697af79440a1c4e4e7d688ed2b5f8175a31e9ee8438693ea11d6e20eb1ef04226edd305002fb3571dd6e4a20dbf7f1d992370461c9a445c4be8f201a3563ef1c98cbbd4e82312f452f69c0c426778d70f36451761f2db3a9ec984311637f9cfc9db25e46291bbb5e988a367b20dbfe5f128619545f09fcc6abec5a7fc9f2a24d984c387e560be6985c28b3ab90cc645b898f6d5380d60468d1ef7bcbe782a9190a2dddba4b9768d4b7d48e09d09b33ea0cb6d360134b162a785559f6997899e5229e99ffbc14d3157d65c41b231aa0fecb15c11e764d79783a847c7007c6aac48db56cf2ba7fb088a9759a1567d6df56067d30149a1f4666f5c9d17dfed9aadc18914a3c20d1432b297ddc3ff703783db47dea086f45aa3b5500c3feefd35e4846b0647fb05e819cc5dc2e62ec541cd84d8a63434accaf0011174eab272cdba700b042be974894c8ed172263311a3bc2c39bed666ce084ae62cd259e5311cbdd0cf2f1fd641e9ff14f4d908d5eaf3cbf6d81b3344b791a31eebf55d86f094de6f1129d09660605e65decc99c37e5c6e8ca0b7ff25105792abb7a709869a7ba5c0b5fd72d3c162b6cb5395fc343bbeec65e15a15180664f0371e177fb1e8fb26adc870e417c5628ae5cfcc8019cb9339822fdbf8c727f0072382bd34d6441dff8850eee689573eec88291e299540f270038547f3c11456eaeeca6199c7c322ada02bad90c93a7c3bf551e9321c90bca866eb6d32be4431c56e0bcaf06560146698854c2e355ed1ae72d6426876c114fcb8ee8eb89c3158d80c13eb470b215238a582d7771cdca37d6a9dc24a425745db7d37bd0353d1622c8f4881010e7936fa53cbb302e0830c46c85eaba51fdd4866efbabda3584f708b0c7325b417c62d1aa9c9dd1b62f80eaf89f39e031cf60e2e01df57366aeabcac4767e06ffff27025eb387590224804aa9947c3e970ff717aec15dd5f65bf0c01804f94bc343e0b88b79bc5cca6c3bc5e78ea75d97d71cefc4f0f5dc6d4a781dd49ab67b91f33e06cbe45a7b159758185c9aebd76419c99c6888f2616f3e9adcc0b8fe5dc91cfd28322d160ecbd37a1a25827aafea38af1d3691d61aed58aad13b14af152c9a62f1ec2507b69040b75899bba5d7d321f700127e49733931ce65556ca9d42e4d17d5dd81fbdba608749e36f55b541b46926b2a078842129114302da07b59227ecf5076481db8f10781424b46d1c707145fd0232327c4a073b36c1a6c48e8a9245b1dcc1f5f2a8b930594cd8df6954796983b1f34ffe01c82df81fb0fede4085dab08e3915fb40aaf4274b8dc99e1371a3be9c6faa1eec6e2a92ead76ba1b92a8dbd424a0b25b3914fae210659586a9727f9f250d2cf0a744876cb3a7e480cca12403e0d78dff4274505f7bc06452b277b926d0d6644dcd1b1183d3d70b83410bd326a8c860209e866a0691fa17c2a0840ac48748ce678e31227e8c07f975ce79eb19fabe9f17964481582d37ddb0b1e6cdfa14e9e494280f402990c58ff23c1400ef85206db109ac2097e8e64e43293d75170e310037edec76228add0ff8d14e716c6de4e195d6b954d3864b339c222e4856be2c1c499c3423d72308f5d71d095bc85878e50b198d8e9b997e93d055bb7327acb50ae9eda12085550c4166485cba23934dac71aee6bab62bd833920a7cbb62db5f6295f121d10b6940eca9c8ca89e125822bd0f6f7a715b397310b19672e4ad0cf7be7df311daaa942c1d7030c442a3cc2dfe320282e7f0ced88154f2c840520d54af4adee3e15d6f9c76452d97a18da583066714d65ba185016a293382382e7069d577b8e46820a8b45da05803c963d44a499d4caf60a0c3364914ceb68b00aef9a0d620f6155f3e4b36ea4f0ed98de6f65f92b81279dc47b9df30c05b169787881dcf0a388e04fe64318602766a745243fcc0b67069ca4048df930816ba7fe44feceee808b8fe736606037841f347bc6e3ac89538cbd93c8dfc8f815096d47a2ec1e3de7f3e3074253c11e6c9150a9a791b1f1613f577bb0615caddac8e42a1c8fbe02c217e856a6315610d9cd31abf817539c72641d513a07f4bd289bac044c46cb44aa63c182fc80db2f7484fb6930f9077be5c5ea37a0d7086d9b48635e3ca3fb6600aa2a8ff9d19073fb356796808955a3f063f7f26fdbfe7e8ec240127b46f6491b7c1231d26ca84a6f0c47229a62d76c757056e8a011ee4d852062a46a354bdd5b37aab1f1b4313271ee498797efdd81b36edc16573765e65d16be6f43bc32153c04fb74d0ffdeffe02c5931d8981f635aa91ada67a9e39d6bebedef138bcefd2ee592a39e795b731b9b65669d5b951370d9b9c7c5e61246047f341d5f5a0bbcca7d1d8222bb1cdcf9048f8db553f5cb5d7fdbc956867cfe93849f81a9df7e9d6884c9348aa833aa1f4736c80bb2657856959e338a43548558308b5ec742b387c0498725461225fd19f1f425ea575f59d245fd4016cdd696a39c31b17419e7a89c6b1af779071f6527bedbb00bad51e221b6d502c38cdb0c2e5d10c6f8157b7775fccd37df18a3c90770e8c33e4b3deef13130aa62dd851079b9dd179e82420989201a99a97714fb91af5c24834d56740cdb43973907035eb7760f1ed18b9cccc0c944d5ddbb8a3f6076f1169fa92e7f7af61d4c8a72931622621360cf2f13aea9ddb4a51f41af64da01293193ad6099f338f2c60830c546dbcba55500aabea474c6cc9d7a338a02339d5ea38259858ce46742991f15c7228d637d070f914498533dcec20c6fe6a3643ac9c3c175eae5a40528cdc283d9b416c6457ac6daa0e603e67dd494ea7ad9a58cab514174cb07147ddc50050f0a3a07863996110994474db54c3f93d7eb4327f345d842260b49e7f3e6cb59d6b5fa2d0ce9f840caaf13f9090d7b331a9cb5d9600909dd4cb2eddb924d073fd3d6cc65b4753509098fe752b2b42d2b3d0dfa9575230d11a5fd27ce7458bb71b2e5b043f40e99c77eb4561e366b3d69ca7afe931e0d8fa8272f8d2fb7bbb4b0dc3a1802a1896c5d96f349fc8d28efb833bd02226a85aec3a79b891f00c554b70e8f34843ca69367df8bbbd09eeae37a3a63373525523d44de2c711350dc24d5e019e819f10ca15fb46fc291dfdc1298fd14a84ee795569f2ff49f426e18356cf00c518f5229dd4f907319cb37a8c6471df6f5507b2ce2d65ced10bfbcae42baa6317f58d9aa0bac4d3095843100fe0c22ec043f9614eeea06d5f2c7297ea3c610d67ec7c775efb8c1c473cdb12870748c80d44163d4f5aaa64206a8973c97bf889ff4e565bfd14b91d4723663b7941964d1efbd59d9608c6963612c4ff3cafa01d4b096c6279726f84e9992e96bd1c391170c6f1fa51a461960d50df3382ec945d6a95ca4e506a5239ea489fcee9acc54a64289ea64c7b89a84e47a2d388acd3d4436bc0082233005b025a93a9a6fcbcb0a20e4e16129e1bd539797143524ea7e981aad444324c9e0aaec3a5826badf5f207a5f0a08ab4b8e34e9b9ae2c67852c14370a62486585b3dd9e7cf61338771b54e753b884bc8aaf296751bdfeb1f60d64d2c0f6d02d8d940062d68b5a297645a8641db67c2d6532d914fdc7ca1f14d4447a68bc9d23802e9f293095eb8b12acb43bb8918b3765a3a76878f57eeaf44d41979b86de9bd04a8c46ec256cd1813a61448191b700451798e8f013b4bda4249fd876f6f0eb6921b1b017798f86a2e544fca4dc9f6abd3141368d79b5c5a7788b45185818e5e4f62c5ade1a6f6c4965fab00a65adc25258107a37d7042d6ea2210bf6fe1f6ed14881d7972e5a63c8da37d9acdf0d93c92e2d7f9902f60b21b07c4d14f27a29a8951471ce02519eee657d2c38bbd4ec4bf96edaa4f60cd6961a78221be87765423fd73177e19ee49b422f36a28f100b0c213cfd9f424bcb470650d923f94beb9b166bfa053ca179eb594499f71333150cba0613b2b3b03009902ec1562958dbe2d4f46bf4d9d9631d297c9362fd133d5275cde19748cb587b1efe438ee16edbc7d8bc72a021bcc508eb429113c869b4f7bd5b4c039b682777b2b9b91e2b9d634d76ac1d19f012c0df9029de6f8ae5daf13e1478d9951c559778630cc31acb572b82a50fe7b5ea2951284ccca9ed4dc28b26fcd5f21bb12ef4e85ae016c936f95426cb47deef6b1e924092de65d05eacd835aaae268af955649c8bcea0d377348c18c7c06905d3b99c38bdeb6db90cc042096a216407301be3c50fdad01dc17a0fe99ef7d79391d92b3d5c010d80b02f00c623525eb06c6b22df78eb3724b34111bd46e6373ab21697512734ba84222da9eead020e3a608cf78474f2de3b37fdf6b6a7406cd96d908f290a8dcc5fd5a46a17beae1a20415e8f316186f6aa6299f030144ad7ab814373d00551fb129ef98af13f0d309ed2b3d26dbe0387e4f6f748f72032d85dc4de6c2017d6709a590296278aaae4e4102694240b919b0dae65089068440ec5202e014bb41c9d4f5131fad2eb1e0566a0de7693c0e85387881d0d186ce9fb5eec3368562ddb72cdca7c10ec0fbb5a92ac1043311908d555bbc8ce89e5c127b5119b3aa89930aa3f3d35"}, &(0x7f0000004dc0)=0x1008) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000004e00)={r10, @in={{0x2, 0x4e20, @multicast2}}, [0x9, 0x5, 0x8000000000000001, 0x4, 0xb, 0x9, 0x2, 0x5, 0x4, 0x7fffffff, 0x4ef1, 0x2a, 0x8, 0x58, 0x6]}, &(0x7f0000004f00)=0x100) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000005100)={0x0, @remote, @empty}, &(0x7f0000005140)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005300)={r4, 0x20, &(0x7f00000052c0)={&(0x7f0000005200)=""/66, 0x42, 0x0, &(0x7f0000005280)=""/58, 0x3a}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000053c0)={{r8, 0xffffffffffffffff}, &(0x7f0000005340), &(0x7f0000005380)=r5}, 0x20) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005400)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7ff, '\x00', 0x0, r5, 0x3, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000005500)={0x8, 0x18, &(0x7f0000004f40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x2, 0x4, 0x6, 0x6, 0x50, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x31}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000005000)='syzkaller\x00', 0x2, 0x8d, &(0x7f0000005040)=""/141, 0x40f00, 0x0, '\x00', r11, @cgroup_skb=0x1, r8, 0x8, &(0x7f0000005180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000051c0)={0x3, 0xa, 0x7, 0xa}, 0x10, r12, r7, 0x3, &(0x7f0000005480)=[r13, r6, r14, r8], &(0x7f00000054c0)=[{0x0, 0x1, 0xc, 0x5}, {0x0, 0x2, 0x10, 0xb}, {0x4, 0x4, 0x7, 0x8}], 0x10, 0xffffffff, @void, @value}, 0x94) inotify_init1(0x800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f00000055c0)={{0x1, 0x1, 0x18, r14, {0x9, 0x6}}, './file0\x00'}) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000005640), r8) sendmsg$TIPC_CMD_DISABLE_BEARER(r15, &(0x7f0000005700)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000056c0)={&(0x7f0000005680)={0x2c, r16, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x84) r17 = syz_io_uring_complete(0x0) write$binfmt_script(r17, &(0x7f0000005740)={'#! ', './file0', [{0x20, 'batadv0\x00'}, {0x20, '^&'}], 0xa, "f78f0e4642d083161e3fd468b0a866d384ce81c45b17b08d676bf9495d9ce953d2fcebad54ebe4f867198e5ae042fa0fb06eb4eba213c00d820ab85ed6b5b1497f2d6aa4c956cc78d4371603ebcc8abea8f422a23ab5078dcedcbf418bc5e5442b72062f27fdebab95e1a9bc348d2d8b535b3b9c85ff29e7d6c74c4a309e2febee1b975c0dccdc96fdb11fd4dbc13c61a28dda0a9b6012d75a16ff0677e0bc9ebf122e643ef308dc54397d"}, 0xc2) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000005840)) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000005980)={&(0x7f0000005880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005940)={&(0x7f00000058c0)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x91) 81.608339ms ago: executing program 0 (id=2587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4041, &(0x7f0000000340), 0xf8, 0x47a, &(0x7f0000000ac0)="$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") setxattr$security_capability(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, 0x0, 0x1) 13.9101ms ago: executing program 5 (id=2588): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8660, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x2490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaee}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xb282, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5f21df7aec8d40fb, 0x0, 0x0, 0x5, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20) 0s ago: executing program 3 (id=2589): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008020"], 0x24}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) pwritev(r0, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): -00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 206.850476][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.850507][ T9457] Call Trace: [ 206.850515][ T9457] [ 206.850522][ T9457] __dump_stack+0x1d/0x30 [ 206.850542][ T9457] dump_stack_lvl+0xe8/0x140 [ 206.850601][ T9457] dump_stack+0x15/0x1b [ 206.850622][ T9457] should_fail_ex+0x265/0x280 [ 206.850657][ T9457] should_failslab+0x8c/0xb0 [ 206.850687][ T9457] __kmalloc_cache_node_noprof+0x54/0x320 [ 206.850753][ T9457] ? __get_vm_area_node+0x106/0x1c0 [ 206.850858][ T9457] __get_vm_area_node+0x106/0x1c0 [ 206.850906][ T9457] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 206.850942][ T9457] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 206.850969][ T9457] ? avc_has_perm_noaudit+0x1b1/0x200 [ 206.851049][ T9457] ? selinux_capable+0x1f9/0x270 [ 206.851088][ T9457] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 206.851184][ T9457] __vmalloc_noprof+0x5f/0x70 [ 206.851201][ T9457] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 206.851243][ T9457] bpf_prog_alloc_no_stats+0x47/0x390 [ 206.851339][ T9457] ? bpf_prog_alloc+0x2a/0x150 [ 206.851366][ T9457] bpf_prog_alloc+0x3c/0x150 [ 206.851387][ T9457] bpf_prog_load+0x514/0x1070 [ 206.851459][ T9457] ? security_bpf+0x2b/0x90 [ 206.851478][ T9457] __sys_bpf+0x52c/0x790 [ 206.851553][ T9457] __x64_sys_bpf+0x41/0x50 [ 206.851574][ T9457] x64_sys_call+0x2478/0x2fb0 [ 206.851637][ T9457] do_syscall_64+0xd0/0x1a0 [ 206.851667][ T9457] ? clear_bhb_loop+0x25/0x80 [ 206.851699][ T9457] ? clear_bhb_loop+0x25/0x80 [ 206.851723][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.851749][ T9457] RIP: 0033:0x7fd4152fe969 [ 206.851768][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.851792][ T9457] RSP: 002b:00007fd413967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.851815][ T9457] RAX: ffffffffffffffda RBX: 00007fd415525fa0 RCX: 00007fd4152fe969 [ 206.851830][ T9457] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 206.851897][ T9457] RBP: 00007fd413967090 R08: 0000000000000000 R09: 0000000000000000 [ 206.851990][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.852001][ T9457] R13: 0000000000000001 R14: 00007fd415525fa0 R15: 00007ffeb6bf8628 [ 206.852061][ T9457] [ 206.852068][ T9457] warn_alloc: 1 callbacks suppressed [ 206.852195][ T9457] syz.0.2155: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 207.076785][ T9468] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2157'. [ 207.079228][ T9457] ,cpuset=/,mems_allowed=0 [ 207.122921][ T9457] CPU: 1 UID: 0 PID: 9457 Comm: syz.0.2155 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 207.122947][ T9457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.122978][ T9457] Call Trace: [ 207.122984][ T9457] [ 207.122997][ T9457] __dump_stack+0x1d/0x30 [ 207.123016][ T9457] dump_stack_lvl+0xe8/0x140 [ 207.123058][ T9457] dump_stack+0x15/0x1b [ 207.123199][ T9457] warn_alloc+0x12b/0x1a0 [ 207.123271][ T9457] ? __get_vm_area_node+0x106/0x1c0 [ 207.123319][ T9457] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 207.123367][ T9457] ? avc_has_perm_noaudit+0x1b1/0x200 [ 207.123421][ T9457] ? selinux_capable+0x1f9/0x270 [ 207.123449][ T9457] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 207.123470][ T9457] __vmalloc_noprof+0x5f/0x70 [ 207.123515][ T9457] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 207.123535][ T9457] bpf_prog_alloc_no_stats+0x47/0x390 [ 207.123555][ T9457] ? bpf_prog_alloc+0x2a/0x150 [ 207.123574][ T9457] bpf_prog_alloc+0x3c/0x150 [ 207.123661][ T9457] bpf_prog_load+0x514/0x1070 [ 207.123690][ T9457] ? security_bpf+0x2b/0x90 [ 207.123734][ T9457] __sys_bpf+0x52c/0x790 [ 207.123880][ T9457] __x64_sys_bpf+0x41/0x50 [ 207.123897][ T9457] x64_sys_call+0x2478/0x2fb0 [ 207.123960][ T9457] do_syscall_64+0xd0/0x1a0 [ 207.123982][ T9457] ? clear_bhb_loop+0x25/0x80 [ 207.124075][ T9457] ? clear_bhb_loop+0x25/0x80 [ 207.124165][ T9457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.124183][ T9457] RIP: 0033:0x7fd4152fe969 [ 207.124196][ T9457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.124212][ T9457] RSP: 002b:00007fd413967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.124228][ T9457] RAX: ffffffffffffffda RBX: 00007fd415525fa0 RCX: 00007fd4152fe969 [ 207.124239][ T9457] RDX: 0000000000000094 RSI: 0000200000000dc0 RDI: 0000000000000005 [ 207.124278][ T9457] RBP: 00007fd413967090 R08: 0000000000000000 R09: 0000000000000000 [ 207.124289][ T9457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.124299][ T9457] R13: 0000000000000001 R14: 00007fd415525fa0 R15: 00007ffeb6bf8628 [ 207.124316][ T9457] [ 207.124321][ T9457] Mem-Info: [ 207.344151][ T9457] active_anon:3710 inactive_anon:0 isolated_anon:0 [ 207.344151][ T9457] active_file:15443 inactive_file:2128 isolated_file:0 [ 207.344151][ T9457] unevictable:7168 dirty:116 writeback:0 [ 207.344151][ T9457] slab_reclaimable:2942 slab_unreclaimable:15694 [ 207.344151][ T9457] mapped:29098 shmem:7669 pagetables:922 [ 207.344151][ T9457] sec_pagetables:0 bounce:0 [ 207.344151][ T9457] kernel_misc_reclaimable:0 [ 207.344151][ T9457] free:1892284 free_pcp:2095 free_cma:0 [ 207.389224][ T9457] Node 0 active_anon:14840kB inactive_anon:0kB active_file:61772kB inactive_file:8512kB unevictable:28672kB isolated(anon):0kB isolated(file):0kB mapped:116392kB dirty:464kB writeback:0kB shmem:30676kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.418468][ T9457] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.445373][ T9457] lowmem_reserve[]: 0 2884 7863 7863 [ 207.450693][ T9457] Node 0 DMA32 free:2949996kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953628kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 207.479398][ T9457] lowmem_reserve[]: 0 0 4978 4978 [ 207.484472][ T9457] Node 0 Normal free:4603780kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14840kB inactive_anon:0kB active_file:61772kB inactive_file:8512kB unevictable:28672kB writepending:464kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:4744kB local_pcp:3356kB free_cma:0kB [ 207.514803][ T9457] lowmem_reserve[]: 0 0 0 0 [ 207.519375][ T9457] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.532056][ T9457] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949996kB [ 207.548213][ T9457] Node 0 Normal: 438*4kB (ME) 484*8kB (M) 398*16kB (UME) 186*32kB (UM) 142*64kB (UME) 35*128kB (ME) 30*256kB (UME) 15*512kB (UME) 28*1024kB (UME) 13*2048kB (UME) 1099*4096kB (UM) = 4603672kB [ 207.567194][ T9457] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 207.576618][ T9457] 25241 total pagecache pages [ 207.581445][ T9457] 0 pages in swap cache [ 207.585625][ T9457] Free swap = 124996kB [ 207.589785][ T9457] Total swap = 124996kB [ 207.593949][ T9457] 2097051 pages RAM [ 207.597749][ T9457] 0 pages HighMem/MovableOnly [ 207.602445][ T9457] 80243 pages reserved [ 207.658209][ T9476] FAULT_INJECTION: forcing a failure. [ 207.658209][ T9476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.671485][ T9476] CPU: 0 UID: 0 PID: 9476 Comm: syz.6.2161 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 207.671519][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.671531][ T9476] Call Trace: [ 207.671599][ T9476] [ 207.671608][ T9476] __dump_stack+0x1d/0x30 [ 207.671652][ T9476] dump_stack_lvl+0xe8/0x140 [ 207.671670][ T9476] dump_stack+0x15/0x1b [ 207.671685][ T9476] should_fail_ex+0x265/0x280 [ 207.671788][ T9476] should_fail+0xb/0x20 [ 207.671896][ T9476] should_fail_usercopy+0x1a/0x20 [ 207.671933][ T9476] _copy_from_user+0x1c/0xb0 [ 207.672031][ T9476] __copy_msghdr+0x251/0x300 [ 207.672070][ T9476] ___sys_sendmsg+0x109/0x1d0 [ 207.672181][ T9476] __x64_sys_sendmsg+0xd4/0x160 [ 207.672223][ T9476] x64_sys_call+0x2999/0x2fb0 [ 207.672244][ T9476] do_syscall_64+0xd0/0x1a0 [ 207.672321][ T9476] ? clear_bhb_loop+0x25/0x80 [ 207.672343][ T9476] ? clear_bhb_loop+0x25/0x80 [ 207.672363][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.672388][ T9476] RIP: 0033:0x7f504df7e969 [ 207.672425][ T9476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.672447][ T9476] RSP: 002b:00007f504c5e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.672469][ T9476] RAX: ffffffffffffffda RBX: 00007f504e1a5fa0 RCX: 00007f504df7e969 [ 207.672485][ T9476] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 207.672500][ T9476] RBP: 00007f504c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 207.672574][ T9476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.672590][ T9476] R13: 0000000000000000 R14: 00007f504e1a5fa0 R15: 00007fff1e2af6d8 [ 207.672612][ T9476] [ 207.863090][ T9479] loop0: detected capacity change from 0 to 1024 [ 207.870448][ T9479] EXT4-fs: Ignoring removed orlov option [ 207.876147][ T9479] EXT4-fs: Ignoring removed bh option [ 207.908205][ T9482] loop5: detected capacity change from 0 to 512 [ 207.911129][ T9484] loop6: detected capacity change from 0 to 128 [ 207.923801][ T9479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.948518][ T9478] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 207.977116][ T9482] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #4: comm syz.5.2162: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 208.004189][ T9491] loop3: detected capacity change from 0 to 128 [ 208.014105][ T9491] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 208.034258][ T9482] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.2162: Bad quota inode: 4, type: 1 [ 208.046360][ T9482] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 208.102764][ T9492] loop6: detected capacity change from 0 to 1024 [ 208.154408][ T9492] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 208.164235][ T9492] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 208.193514][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.207390][ T9495] loop4: detected capacity change from 0 to 1024 [ 208.214821][ T9482] EXT4-fs (loop5): mount failed [ 208.221679][ T9495] EXT4-fs: Ignoring removed orlov option [ 208.227416][ T9495] EXT4-fs: Ignoring removed bh option [ 208.261963][ T9492] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 208.303462][ T9492] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2164: unexpected bad inode w/o EXT4_IGET_BAD [ 208.321314][ T9495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.336448][ T9492] EXT4-fs (loop6): no journal found [ 208.341821][ T9492] EXT4-fs (loop6): can't get journal size [ 208.380059][ T9495] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 208.399109][ T9492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.419703][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 208.419780][ T29] audit: type=1326 audit(208.456:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f504df7d2d0 code=0x7ffc0000 [ 208.700733][ T9484] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2164: invalid block [ 208.729811][ T29] audit: type=1326 audit(208.496:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f504df7d6b7 code=0x7ffc0000 [ 208.752653][ T29] audit: type=1326 audit(208.496:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f504df7d2d0 code=0x7ffc0000 [ 208.775462][ T29] audit: type=1326 audit(208.496:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504df7e969 code=0x7ffc0000 [ 208.798288][ T29] audit: type=1326 audit(208.496:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9483 comm="syz.6.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f504df7e969 code=0x7ffc0000 [ 208.827371][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.881236][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.965052][ T9508] FAULT_INJECTION: forcing a failure. [ 208.965052][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 208.977805][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.6.2170 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 208.977839][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.977856][ T9508] Call Trace: [ 208.977906][ T9508] [ 208.977922][ T9508] __dump_stack+0x1d/0x30 [ 208.977985][ T9508] dump_stack_lvl+0xe8/0x140 [ 208.978009][ T9508] dump_stack+0x15/0x1b [ 208.978030][ T9508] should_fail_ex+0x265/0x280 [ 208.978067][ T9508] should_failslab+0x8c/0xb0 [ 208.978090][ T9508] kmem_cache_alloc_noprof+0x50/0x310 [ 208.978124][ T9508] ? getname_flags+0x80/0x3b0 [ 208.978215][ T9508] ? fput+0x8f/0xc0 [ 208.978310][ T9508] getname_flags+0x80/0x3b0 [ 208.978334][ T9508] __x64_sys_execve+0x42/0x70 [ 208.978351][ T9508] x64_sys_call+0x13ab/0x2fb0 [ 208.978371][ T9508] do_syscall_64+0xd0/0x1a0 [ 208.978475][ T9508] ? clear_bhb_loop+0x25/0x80 [ 208.978496][ T9508] ? clear_bhb_loop+0x25/0x80 [ 208.978537][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.978565][ T9508] RIP: 0033:0x7f504df7e969 [ 208.978583][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.978606][ T9508] RSP: 002b:00007f504c5e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 208.978637][ T9508] RAX: ffffffffffffffda RBX: 00007f504e1a5fa0 RCX: 00007f504df7e969 [ 208.978649][ T9508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 208.978660][ T9508] RBP: 00007f504c5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.978675][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.978687][ T9508] R13: 0000000000000000 R14: 00007f504e1a5fa0 R15: 00007fff1e2af6d8 [ 208.978704][ T9508] [ 209.172114][ T9505] loop0: detected capacity change from 0 to 512 [ 209.254636][ T29] audit: type=1400 audit(209.266:5241): avc: denied { audit_write } for pid=9515 comm="syz.4.2172" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 209.275377][ T29] audit: type=1107 audit(209.266:5242): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 209.288144][ T29] audit: type=1326 audit(209.266:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b9be969 code=0x7ffc0000 [ 209.310999][ T29] audit: type=1326 audit(209.266:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b9be969 code=0x7ffc0000 [ 209.333894][ T29] audit: type=1326 audit(209.266:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.4.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff27b9be969 code=0x7ffc0000 [ 209.421834][ T9505] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.2166: bad orphan inode 15 [ 209.444817][ T9505] ext4_test_bit(bit=14, block=18) = 1 [ 209.450282][ T9505] is_bad_inode(inode)=0 [ 209.454445][ T9505] NEXT_ORPHAN(inode)=1023 [ 209.458861][ T9505] max_ino=32 [ 209.462102][ T9505] i_nlink=0 [ 209.470779][ T9524] 9pnet_fd: Insufficient options for proto=fd [ 209.496844][ T9530] loop4: detected capacity change from 0 to 128 [ 209.509300][ T9505] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.2166: corrupted xattr block 19: invalid header [ 209.524699][ T9505] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 209.534401][ T9505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 209.569091][ T9532] loop4: detected capacity change from 0 to 1024 [ 209.582141][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 209.593106][ T9532] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 209.603090][ T9532] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 209.614402][ T9532] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 209.625098][ T9532] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2177: unexpected bad inode w/o EXT4_IGET_BAD [ 209.639739][ T9532] EXT4-fs (loop4): no journal found [ 209.644988][ T9532] EXT4-fs (loop4): can't get journal size [ 209.659152][ T37] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.691414][ T9539] 9pnet_fd: Insufficient options for proto=fd [ 209.715611][ T9532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 209.741224][ T9544] mmap: syz.3.2182 (9544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 209.810309][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.822043][ T9546] syzkaller0: entered promiscuous mode [ 209.827643][ T9546] syzkaller0: entered allmulticast mode [ 209.880687][ T9550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.919047][ T9554] loop4: detected capacity change from 0 to 128 [ 209.925923][ T9554] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 209.938009][ T9554] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.967399][ T111] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 209.995700][ T9560] loop4: detected capacity change from 0 to 512 [ 210.018224][ T9560] EXT4-fs (loop4): orphan cleanup on readonly fs [ 210.024726][ T9550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.039669][ T9560] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2189: bg 0: block 248: padding at end of block bitmap is not set [ 210.058210][ T9560] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2189: Failed to acquire dquot type 1 [ 210.076276][ T9560] EXT4-fs (loop4): 1 truncate cleaned up [ 210.084272][ T9560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.104454][ T9560] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 210.154361][ T9560] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 210.164055][ T9550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.175290][ T9560] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2189: Failed to acquire dquot type 1 [ 210.207483][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.219663][ T9569] 9pnet_fd: Insufficient options for proto=fd [ 210.266916][ T9577] loop5: detected capacity change from 0 to 1024 [ 210.290900][ T9577] EXT4-fs: Ignoring removed orlov option [ 210.296625][ T9577] EXT4-fs: Ignoring removed bh option [ 210.355856][ T9550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.378620][ T9577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.419042][ T9577] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 210.462508][ T9588] tipc: Can't bind to reserved service type 0 [ 210.519217][ T9591] loop6: detected capacity change from 0 to 128 [ 210.563032][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.596313][ T9594] loop6: detected capacity change from 0 to 1024 [ 210.627668][ T9594] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 210.637567][ T9594] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 210.652113][ T9597] 9pnet_fd: Insufficient options for proto=fd [ 210.673455][ T9550] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.706110][ T9599] FAULT_INJECTION: forcing a failure. [ 210.706110][ T9599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.719326][ T9599] CPU: 0 UID: 0 PID: 9599 Comm: syz.5.2201 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 210.719345][ T9594] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 210.719362][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 210.719378][ T9599] Call Trace: [ 210.719385][ T9599] [ 210.719468][ T9599] __dump_stack+0x1d/0x30 [ 210.719497][ T9599] dump_stack_lvl+0xe8/0x140 [ 210.719538][ T9599] dump_stack+0x15/0x1b [ 210.719559][ T9599] should_fail_ex+0x265/0x280 [ 210.719660][ T9599] should_fail+0xb/0x20 [ 210.719694][ T9599] should_fail_usercopy+0x1a/0x20 [ 210.719735][ T9599] _copy_from_user+0x1c/0xb0 [ 210.719760][ T9599] __copy_msghdr+0x251/0x300 [ 210.719843][ T9599] ___sys_sendmsg+0x109/0x1d0 [ 210.719899][ T9599] __x64_sys_sendmsg+0xd4/0x160 [ 210.719945][ T9599] x64_sys_call+0x2999/0x2fb0 [ 210.719973][ T9599] do_syscall_64+0xd0/0x1a0 [ 210.720075][ T9599] ? clear_bhb_loop+0x25/0x80 [ 210.720104][ T9599] ? clear_bhb_loop+0x25/0x80 [ 210.720131][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.720158][ T9599] RIP: 0033:0x7f3d3406e969 [ 210.720177][ T9599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.720217][ T9599] RSP: 002b:00007f3d326d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.720308][ T9599] RAX: ffffffffffffffda RBX: 00007f3d34295fa0 RCX: 00007f3d3406e969 [ 210.720324][ T9599] RDX: 0000000000040810 RSI: 0000200000000580 RDI: 0000000000000003 [ 210.720341][ T9599] RBP: 00007f3d326d7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.720364][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.720388][ T9599] R13: 0000000000000000 R14: 00007f3d34295fa0 R15: 00007ffd1ea21a28 [ 210.720412][ T9599] [ 210.730607][ T9550] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.803343][ T9594] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2199: unexpected bad inode w/o EXT4_IGET_BAD [ 210.929302][ T9594] EXT4-fs (loop6): no journal found [ 210.934753][ T9594] EXT4-fs (loop6): can't get journal size [ 210.944630][ T9594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.962106][ T9591] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2199: invalid block [ 210.985533][ T9550] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.997756][ T9550] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.027349][ T9604] 9pnet_fd: Insufficient options for proto=fd [ 211.052257][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.072925][ T9608] loop5: detected capacity change from 0 to 128 [ 211.132207][ T9613] loop6: detected capacity change from 0 to 512 [ 211.147465][ T9613] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 211.158781][ T9613] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 211.175085][ T9613] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #11: comm syz.6.2207: corrupted inode contents [ 211.190792][ T9619] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 211.234494][ T9624] loop5: detected capacity change from 0 to 512 [ 211.241188][ T9613] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #11: comm syz.6.2207: mark_inode_dirty error [ 211.262916][ T9626] loop3: detected capacity change from 0 to 512 [ 211.276876][ T9613] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2207: invalid indirect mapped block 1 (level 1) [ 211.295306][ T9613] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #11: comm syz.6.2207: corrupted inode contents [ 211.308314][ T9613] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 211.317514][ T9613] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #11: comm syz.6.2207: corrupted inode contents [ 211.332664][ T9624] EXT4-fs (loop5): 1 orphan inode deleted [ 211.336660][ T9613] EXT4-fs error (device loop6): ext4_truncate:4255: inode #11: comm syz.6.2207: mark_inode_dirty error [ 211.341285][ T9626] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #4: comm syz.3.2212: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 211.349779][ T9613] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 211.367628][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 211.376823][ T9624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.401436][ T9626] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.2212: Bad quota inode: 4, type: 1 [ 211.413985][ T9626] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 211.420334][ T9613] EXT4-fs (loop6): 1 truncate cleaned up [ 211.429490][ T9626] EXT4-fs (loop3): mount failed [ 211.451614][ T9613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.466529][ T9637] 9pnet_fd: Insufficient options for proto=fd [ 211.494677][ T9624] syzkaller0: entered promiscuous mode [ 211.500589][ T9624] syzkaller0: entered allmulticast mode [ 211.588980][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.613584][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.683992][ T9653] loop3: detected capacity change from 0 to 512 [ 211.698059][ T9648] syzkaller0: entered promiscuous mode [ 211.703651][ T9648] syzkaller0: entered allmulticast mode [ 211.818021][ T9653] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 212.023589][ T9669] 9pnet_fd: Insufficient options for proto=fd [ 212.050428][ T3379] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 60 sec [ 212.083386][ T9673] loop5: detected capacity change from 0 to 512 [ 212.090475][ T9673] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 212.134186][ T9673] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 212.258777][ T9673] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.2230: corrupted inode contents [ 212.323845][ T9673] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.2230: mark_inode_dirty error [ 212.365991][ T9673] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2230: invalid indirect mapped block 1 (level 1) [ 212.390268][ T9683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9683 comm=syz.4.2235 [ 212.409319][ T9673] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.2230: corrupted inode contents [ 212.425878][ T9673] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 212.450929][ T9683] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2235'. [ 212.472781][ T9673] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.2230: corrupted inode contents [ 212.496166][ T9673] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.2230: mark_inode_dirty error [ 212.507682][ T9673] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 212.530935][ T9673] EXT4-fs (loop5): 1 truncate cleaned up [ 212.537002][ T9673] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.663371][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.684277][ T9689] loop4: detected capacity change from 0 to 512 [ 212.692845][ T9691] loop3: detected capacity change from 0 to 1024 [ 212.699953][ T9691] EXT4-fs: Ignoring removed orlov option [ 212.705912][ T9691] EXT4-fs: Ignoring removed bh option [ 212.716486][ T9693] loop5: detected capacity change from 0 to 512 [ 212.731055][ T9689] EXT4-fs (loop4): orphan cleanup on readonly fs [ 212.743069][ T9689] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2238: bg 0: block 248: padding at end of block bitmap is not set [ 212.759444][ T9689] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2238: Failed to acquire dquot type 1 [ 212.777853][ T9693] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #4: comm syz.5.2240: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 212.798247][ T9691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.812782][ T9689] EXT4-fs (loop4): 1 truncate cleaned up [ 212.819198][ T9689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.835967][ T9693] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.2240: Bad quota inode: 4, type: 1 [ 212.846890][ T9691] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 212.883300][ T9693] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 212.899658][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.931599][ T9693] EXT4-fs (loop5): mount failed [ 213.028972][ T9709] loop5: detected capacity change from 0 to 4096 [ 213.043750][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.056937][ T9709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.078358][ T9720] loop6: detected capacity change from 0 to 164 [ 213.095870][ T9709] program syz.5.2244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.109768][ T9720] Unable to read rock-ridge attributes [ 213.121436][ T9725] loop0: detected capacity change from 0 to 512 [ 213.129362][ T9725] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 213.139587][ T9723] loop3: detected capacity change from 0 to 512 [ 213.158600][ T9725] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 213.174041][ T9725] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2250: corrupted inode contents [ 213.174628][ T9723] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #4: comm syz.3.2248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 213.187724][ T9725] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.2250: mark_inode_dirty error [ 213.208482][ T9723] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.2248: Bad quota inode: 4, type: 1 [ 213.216545][ T9725] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2250: invalid indirect mapped block 1 (level 1) [ 213.242187][ T9723] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.243069][ T9725] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2250: corrupted inode contents [ 213.274441][ T9725] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 213.274493][ T9723] EXT4-fs (loop3): mount failed [ 213.289581][ T9725] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2250: corrupted inode contents [ 213.303144][ T9725] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.2250: mark_inode_dirty error [ 213.314754][ T9725] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 213.332384][ T9725] EXT4-fs (loop0): 1 truncate cleaned up [ 213.338612][ T9725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.416204][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.429915][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.445775][ T9737] loop3: detected capacity change from 0 to 512 [ 213.472903][ T9737] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #4: comm syz.3.2255: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 213.503252][ T9737] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.2255: Bad quota inode: 4, type: 1 [ 213.514441][ T9742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2253'. [ 213.523541][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 213.523601][ T29] audit: type=1326 audit(213.556:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.527366][ T9737] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 213.529801][ T29] audit: type=1326 audit(213.556:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.590327][ T29] audit: type=1326 audit(213.556:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.590363][ T29] audit: type=1326 audit(213.556:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.590431][ T29] audit: type=1326 audit(213.556:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.600037][ T9737] EXT4-fs (loop3): mount failed [ 213.638131][ T29] audit: type=1326 audit(213.566:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.665492][ T9747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2256'. [ 213.686904][ T29] audit: type=1326 audit(213.566:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.686939][ T29] audit: type=1326 audit(213.566:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.741622][ T29] audit: type=1326 audit(213.566:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.764508][ T29] audit: type=1326 audit(213.566:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9743 comm="syz.5.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 213.899138][ T9752] loop6: detected capacity change from 0 to 164 [ 213.905920][ T9752] iso9660: Unknown parameter '' [ 214.309868][ T9759] loop0: detected capacity change from 0 to 512 [ 214.328330][ T9765] loop4: detected capacity change from 0 to 512 [ 214.335458][ T9765] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 214.348775][ T9759] EXT4-fs error (device loop0): ext4_orphan_get:1416: comm syz.0.2261: bad orphan inode 15 [ 214.349685][ T9765] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 214.378754][ T9759] ext4_test_bit(bit=14, block=18) = 1 [ 214.385656][ T9759] is_bad_inode(inode)=0 [ 214.390686][ T9759] NEXT_ORPHAN(inode)=1023 [ 214.395433][ T9759] max_ino=32 [ 214.398913][ T9759] i_nlink=0 [ 214.408218][ T9765] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.2263: corrupted inode contents [ 214.427485][ T9765] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #11: comm syz.4.2263: mark_inode_dirty error [ 214.463601][ T9765] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2263: invalid indirect mapped block 1 (level 1) [ 214.477069][ T9759] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #15: comm syz.0.2261: corrupted xattr block 19: invalid header [ 214.504489][ T9765] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.2263: corrupted inode contents [ 214.530144][ T9759] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 214.545781][ T9765] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 214.559713][ T9772] syzkaller0: entered promiscuous mode [ 214.565275][ T9772] syzkaller0: entered allmulticast mode [ 214.574549][ T9765] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #11: comm syz.4.2263: corrupted inode contents [ 214.589691][ T9759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 214.604889][ T9765] EXT4-fs error (device loop4): ext4_truncate:4255: inode #11: comm syz.4.2263: mark_inode_dirty error [ 214.650554][ T9765] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 214.660121][ T9765] EXT4-fs (loop4): 1 truncate cleaned up [ 214.795973][ T9788] loop5: detected capacity change from 0 to 128 [ 214.818852][ T9792] loop3: detected capacity change from 0 to 128 [ 214.867715][ T9794] loop5: detected capacity change from 0 to 1024 [ 214.874314][ T9796] loop4: detected capacity change from 0 to 1024 [ 214.881884][ T9796] EXT4-fs: Ignoring removed orlov option [ 214.887568][ T9796] EXT4-fs: Ignoring removed bh option [ 214.887659][ T9794] EXT4-fs error (device loop5): __ext4_fill_super:5502: comm syz.5.2275: inode #2: comm syz.5.2275: iget: illegal inode # [ 214.906349][ T9794] EXT4-fs (loop5): get root inode failed [ 214.912114][ T9794] EXT4-fs (loop5): mount failed [ 214.917138][ T9804] loop3: detected capacity change from 0 to 1024 [ 214.924610][ T9804] EXT4-fs: Ignoring removed orlov option [ 214.930428][ T9804] EXT4-fs: Ignoring removed bh option [ 214.952995][ T9796] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 214.990968][ T9804] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 215.019286][ T9814] loop0: detected capacity change from 0 to 512 [ 215.026272][ T9814] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 215.046055][ T9814] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 215.060679][ T9814] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2282: corrupted inode contents [ 215.072913][ T9814] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.2282: mark_inode_dirty error [ 215.085248][ T9814] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2282: invalid indirect mapped block 1 (level 1) [ 215.098840][ T9814] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2282: corrupted inode contents [ 215.112239][ T9814] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 215.121358][ T9814] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2282: corrupted inode contents [ 215.133938][ T9814] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.2282: mark_inode_dirty error [ 215.146005][ T9814] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 215.157376][ T9814] EXT4-fs (loop0): 1 truncate cleaned up [ 215.239125][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2287'. [ 215.257481][ T9832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.302681][ T9836] loop0: detected capacity change from 0 to 1024 [ 215.310600][ T9832] loop4: detected capacity change from 0 to 128 [ 215.320433][ T9836] EXT4-fs error (device loop0): __ext4_fill_super:5502: comm syz.0.2291: inode #2: comm syz.0.2291: iget: illegal inode # [ 215.333381][ T9832] loop4: detected capacity change from 0 to 128 [ 215.338040][ T9836] EXT4-fs (loop0): get root inode failed [ 215.345388][ T9836] EXT4-fs (loop0): mount failed [ 215.438660][ T9850] loop0: detected capacity change from 0 to 512 [ 215.452904][ T9850] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 215.455074][ T9852] loop3: detected capacity change from 0 to 512 [ 215.468042][ T9852] EXT4-fs: Ignoring removed oldalloc option [ 215.469665][ T9850] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 215.489038][ T9850] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2296: corrupted inode contents [ 215.491574][ T9852] EXT4-fs: Mount option(s) incompatible with ext3 [ 215.503892][ T9850] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.2296: mark_inode_dirty error [ 215.520143][ T9850] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2296: invalid indirect mapped block 1 (level 1) [ 215.533716][ T9850] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2296: corrupted inode contents [ 215.549912][ T9850] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 215.567081][ T9850] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2296: corrupted inode contents [ 215.579544][ T9850] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.2296: mark_inode_dirty error [ 215.593658][ T9850] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 215.602804][ T9850] EXT4-fs (loop0): 1 truncate cleaned up [ 215.609914][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2300'. [ 215.669745][ T9869] loop3: detected capacity change from 0 to 1024 [ 215.677092][ T9869] EXT4-fs: Ignoring removed bh option [ 215.683561][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2304'. [ 215.685818][ T9869] EXT4-fs: inline encryption not supported [ 215.700115][ T9869] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.713081][ T9869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 215.722272][ T9869] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2305: lblock 2 mapped to illegal pblock 2 (length 1) [ 215.739604][ T9869] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.2305: lblock 0 mapped to illegal pblock 48 (length 1) [ 215.754276][ T9869] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2305: Failed to acquire dquot type 0 [ 215.767565][ T9869] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 215.775659][ T9878] loop4: detected capacity change from 0 to 128 [ 215.778000][ T9869] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.2305: mark_inode_dirty error [ 215.796370][ T9869] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 215.807146][ T9869] EXT4-fs (loop3): 1 orphan inode deleted [ 215.833375][ T9882] FAULT_INJECTION: forcing a failure. [ 215.833375][ T9882] name failslab, interval 1, probability 0, space 0, times 0 [ 215.846128][ T382] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 215.846168][ T9882] CPU: 0 UID: 0 PID: 9882 Comm: syz.5.2309 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 215.846282][ T9882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.846299][ T9882] Call Trace: [ 215.846308][ T9882] [ 215.846319][ T9882] __dump_stack+0x1d/0x30 [ 215.846346][ T9882] dump_stack_lvl+0xe8/0x140 [ 215.846373][ T9882] dump_stack+0x15/0x1b [ 215.846397][ T9882] should_fail_ex+0x265/0x280 [ 215.846511][ T9882] should_failslab+0x8c/0xb0 [ 215.846543][ T9882] __kmalloc_cache_node_noprof+0x54/0x320 [ 215.846583][ T9882] ? __get_vm_area_node+0x106/0x1c0 [ 215.846674][ T9882] __get_vm_area_node+0x106/0x1c0 [ 215.846717][ T9882] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 215.846814][ T9882] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 215.846852][ T9882] ? avc_has_perm_noaudit+0x1b1/0x200 [ 215.846892][ T9882] ? selinux_capable+0x1f9/0x270 [ 215.846945][ T9882] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 215.846993][ T9882] __vmalloc_noprof+0x5f/0x70 [ 215.847087][ T9882] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 215.847117][ T9882] bpf_prog_alloc_no_stats+0x47/0x390 [ 215.847178][ T9882] ? bpf_prog_alloc+0x2a/0x150 [ 215.847207][ T9882] bpf_prog_alloc+0x3c/0x150 [ 215.847254][ T9882] bpf_prog_load+0x514/0x1070 [ 215.847298][ T9882] ? security_bpf+0x2b/0x90 [ 215.847325][ T9882] __sys_bpf+0x52c/0x790 [ 215.847365][ T9882] __x64_sys_bpf+0x41/0x50 [ 215.847496][ T9882] x64_sys_call+0x2478/0x2fb0 [ 215.847522][ T9882] do_syscall_64+0xd0/0x1a0 [ 215.847607][ T9882] ? clear_bhb_loop+0x25/0x80 [ 215.847636][ T9882] ? clear_bhb_loop+0x25/0x80 [ 215.847664][ T9882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.847692][ T9882] RIP: 0033:0x7f3d3406e969 [ 215.847741][ T9882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.847765][ T9882] RSP: 002b:00007f3d326d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.847790][ T9882] RAX: ffffffffffffffda RBX: 00007f3d34295fa0 RCX: 00007f3d3406e969 [ 215.847805][ T9882] RDX: 0000000000000090 RSI: 0000200000000700 RDI: 0000000000000005 [ 215.847821][ T9882] RBP: 00007f3d326d7090 R08: 0000000000000000 R09: 0000000000000000 [ 215.847836][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.847885][ T9882] R13: 0000000000000000 R14: 00007f3d34295fa0 R15: 00007ffd1ea21a28 [ 215.847909][ T9882] [ 215.895621][ T9887] loop4: detected capacity change from 0 to 1024 [ 215.918499][ T382] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 0 [ 215.951305][ T9887] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 215.958279][ T9869] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 215.960353][ T9887] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 216.018677][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2313'. [ 216.024299][ T9887] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 216.032894][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 216.062615][ T9887] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2308: unexpected bad inode w/o EXT4_IGET_BAD [ 216.187418][ T9869] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 216.197548][ T9887] EXT4-fs (loop4): no journal found [ 216.202937][ T9887] EXT4-fs (loop4): can't get journal size [ 216.203294][ T9869] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 216.216866][ T9869] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.2305: lblock 0 mapped to illegal pblock 48 (length 1) [ 216.236912][ T9869] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 216.279926][ T9878] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.2308: invalid block [ 216.318379][ T9901] syzkaller0: entered promiscuous mode [ 216.324014][ T9901] syzkaller0: entered allmulticast mode [ 216.449422][ T9907] FAULT_INJECTION: forcing a failure. [ 216.449422][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.462615][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.4.2320 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 216.462652][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.462669][ T9907] Call Trace: [ 216.462724][ T9907] [ 216.462734][ T9907] __dump_stack+0x1d/0x30 [ 216.462761][ T9907] dump_stack_lvl+0xe8/0x140 [ 216.462785][ T9907] dump_stack+0x15/0x1b [ 216.462811][ T9907] should_fail_ex+0x265/0x280 [ 216.462856][ T9907] should_fail+0xb/0x20 [ 216.462888][ T9907] should_fail_usercopy+0x1a/0x20 [ 216.462927][ T9907] _copy_from_user+0x1c/0xb0 [ 216.462995][ T9907] __sys_bpf+0x187/0x790 [ 216.463032][ T9907] __x64_sys_bpf+0x41/0x50 [ 216.463074][ T9907] x64_sys_call+0x2478/0x2fb0 [ 216.463137][ T9907] do_syscall_64+0xd0/0x1a0 [ 216.463227][ T9907] ? clear_bhb_loop+0x25/0x80 [ 216.463252][ T9907] ? clear_bhb_loop+0x25/0x80 [ 216.463278][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.463303][ T9907] RIP: 0033:0x7ff27b9be969 [ 216.463321][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.463345][ T9907] RSP: 002b:00007ff27a027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.463364][ T9907] RAX: ffffffffffffffda RBX: 00007ff27bbe5fa0 RCX: 00007ff27b9be969 [ 216.463435][ T9907] RDX: 0000000000000020 RSI: 0000200000000b00 RDI: 0000000000000008 [ 216.463449][ T9907] RBP: 00007ff27a027090 R08: 0000000000000000 R09: 0000000000000000 [ 216.463463][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.463477][ T9907] R13: 0000000000000000 R14: 00007ff27bbe5fa0 R15: 00007fff925af218 [ 216.463563][ T9907] [ 216.647167][ T9921] loop5: detected capacity change from 0 to 128 [ 216.685803][ T9926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2328'. [ 216.730092][ T9929] loop5: detected capacity change from 0 to 1024 [ 216.737770][ T9929] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 216.747616][ T9929] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 216.757610][ T9929] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 216.764597][ T9928] hub 2-0:1.0: USB hub found [ 216.769789][ T9929] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.2325: unexpected bad inode w/o EXT4_IGET_BAD [ 216.774011][ T9928] hub 2-0:1.0: 8 ports detected [ 216.795924][ T9929] EXT4-fs (loop5): no journal found [ 216.801297][ T9929] EXT4-fs (loop5): can't get journal size [ 216.818197][ T9921] EXT4-fs error (device loop5): __ext4_iget:5025: inode #15: block 1803188595: comm syz.5.2325: invalid block [ 216.941936][ T9947] loop5: detected capacity change from 0 to 512 [ 216.959279][ T9947] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.2336: bad orphan inode 15 [ 216.971551][ T9947] ext4_test_bit(bit=14, block=18) = 1 [ 216.977273][ T9947] is_bad_inode(inode)=0 [ 216.981891][ T9947] NEXT_ORPHAN(inode)=1023 [ 216.986543][ T9947] max_ino=32 [ 216.989911][ T9947] i_nlink=0 [ 216.994523][ T9947] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.2336: corrupted xattr block 19: invalid header [ 217.010306][ T9947] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 217.127969][ T9950] loop6: detected capacity change from 0 to 164 [ 217.134700][ T9950] iso9660: Unknown parameter '' [ 217.257019][ T9952] loop0: detected capacity change from 0 to 128 [ 217.324293][ T9954] FAULT_INJECTION: forcing a failure. [ 217.324293][ T9954] name failslab, interval 1, probability 0, space 0, times 0 [ 217.337251][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.0.2339 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 217.337315][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.337398][ T9954] Call Trace: [ 217.337405][ T9954] [ 217.337415][ T9954] __dump_stack+0x1d/0x30 [ 217.337441][ T9954] dump_stack_lvl+0xe8/0x140 [ 217.337465][ T9954] dump_stack+0x15/0x1b [ 217.337486][ T9954] should_fail_ex+0x265/0x280 [ 217.337558][ T9954] should_failslab+0x8c/0xb0 [ 217.337632][ T9954] __kmalloc_noprof+0xa5/0x3e0 [ 217.337659][ T9954] ? bpf_test_init+0xa9/0x160 [ 217.337685][ T9954] bpf_test_init+0xa9/0x160 [ 217.337717][ T9954] bpf_prog_test_run_skb+0x144/0xbd0 [ 217.337817][ T9954] ? __rcu_read_unlock+0x4f/0x70 [ 217.337846][ T9954] ? __fget_files+0x184/0x1c0 [ 217.337870][ T9954] ? __rcu_read_unlock+0x4f/0x70 [ 217.337939][ T9954] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 217.337971][ T9954] bpf_prog_test_run+0x207/0x390 [ 217.338016][ T9954] __sys_bpf+0x3eb/0x790 [ 217.338071][ T9954] __x64_sys_bpf+0x41/0x50 [ 217.338097][ T9954] x64_sys_call+0x2478/0x2fb0 [ 217.338123][ T9954] do_syscall_64+0xd0/0x1a0 [ 217.338153][ T9954] ? clear_bhb_loop+0x25/0x80 [ 217.338173][ T9954] ? clear_bhb_loop+0x25/0x80 [ 217.338208][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.338235][ T9954] RIP: 0033:0x7fd4152fe969 [ 217.338254][ T9954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.338276][ T9954] RSP: 002b:00007fd413967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.338297][ T9954] RAX: ffffffffffffffda RBX: 00007fd415525fa0 RCX: 00007fd4152fe969 [ 217.338309][ T9954] RDX: 0000000000000031 RSI: 0000200000000080 RDI: 000000000000000a [ 217.338320][ T9954] RBP: 00007fd413967090 R08: 0000000000000000 R09: 0000000000000000 [ 217.338444][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.338459][ T9954] R13: 0000000000000000 R14: 00007fd415525fa0 R15: 00007ffeb6bf8628 [ 217.338478][ T9954] [ 217.621975][ T9965] wireguard0: entered promiscuous mode [ 217.627698][ T9965] wireguard0: entered allmulticast mode [ 217.637901][ T9971] loop4: detected capacity change from 0 to 128 [ 217.645821][ T9973] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2345'. [ 217.686595][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 217.709636][ T9982] loop4: detected capacity change from 0 to 1024 [ 217.709962][ T9985] loop5: detected capacity change from 0 to 128 [ 217.717631][ T9982] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 217.732293][ T9982] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 217.742481][ T9982] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 217.753668][ T9982] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2344: unexpected bad inode w/o EXT4_IGET_BAD [ 217.771269][ T9982] EXT4-fs (loop4): no journal found [ 217.776513][ T9982] EXT4-fs (loop4): can't get journal size [ 217.797780][ T9982] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.2344: invalid block [ 217.814751][ T9989] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 217.827715][ T9985] bio_check_eod: 214 callbacks suppressed [ 217.827731][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.827731][ T9985] loop5: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 217.847773][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.847773][ T9985] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 217.864488][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.864488][ T9985] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 217.879871][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.879871][ T9985] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 217.894294][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.894294][ T9985] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 217.908400][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.908400][ T9985] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 217.922235][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.922235][ T9985] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 217.936076][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.936076][ T9985] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 217.949723][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.949723][ T9985] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 217.963415][ T9985] syz.5.2349: attempt to access beyond end of device [ 217.963415][ T9985] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 218.035675][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.044344][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.057676][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2354'. [ 218.075472][T10003] loop5: detected capacity change from 0 to 256 [ 218.366611][T10012] SELinux: failed to load policy [ 218.497697][T10015] FAULT_INJECTION: forcing a failure. [ 218.497697][T10015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.510964][T10015] CPU: 0 UID: 0 PID: 10015 Comm: syz.0.2358 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 218.511000][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.511016][T10015] Call Trace: [ 218.511024][T10015] [ 218.511033][T10015] __dump_stack+0x1d/0x30 [ 218.511059][T10015] dump_stack_lvl+0xe8/0x140 [ 218.511083][T10015] dump_stack+0x15/0x1b [ 218.511103][T10015] should_fail_ex+0x265/0x280 [ 218.511220][T10015] should_fail+0xb/0x20 [ 218.511245][T10015] should_fail_usercopy+0x1a/0x20 [ 218.511303][T10015] _copy_from_user+0x1c/0xb0 [ 218.511322][T10015] ___sys_recvmsg+0xaa/0x370 [ 218.511446][T10015] do_recvmmsg+0x1ef/0x540 [ 218.511485][T10015] ? fput+0x8f/0xc0 [ 218.511559][T10015] __x64_sys_recvmmsg+0xe5/0x170 [ 218.511595][T10015] x64_sys_call+0x1c6a/0x2fb0 [ 218.511615][T10015] do_syscall_64+0xd0/0x1a0 [ 218.511709][T10015] ? clear_bhb_loop+0x25/0x80 [ 218.511730][T10015] ? clear_bhb_loop+0x25/0x80 [ 218.511750][T10015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.511771][T10015] RIP: 0033:0x7fd4152fe969 [ 218.511790][T10015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.511813][T10015] RSP: 002b:00007fd413967038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 218.511890][T10015] RAX: ffffffffffffffda RBX: 00007fd415525fa0 RCX: 00007fd4152fe969 [ 218.511905][T10015] RDX: 0000000000000004 RSI: 0000200000003e40 RDI: 0000000000000003 [ 218.511917][T10015] RBP: 00007fd413967090 R08: 0000000000000000 R09: 0000000000000000 [ 218.511928][T10015] R10: 0000000040000121 R11: 0000000000000246 R12: 0000000000000001 [ 218.511941][T10015] R13: 0000000000000000 R14: 00007fd415525fa0 R15: 00007ffeb6bf8628 [ 218.511960][T10015] [ 218.723901][T10018] 9pnet_fd: Insufficient options for proto=fd [ 218.756873][T10020] loop0: detected capacity change from 0 to 1024 [ 218.769853][T10020] EXT4-fs: Ignoring removed orlov option [ 218.775691][T10020] EXT4-fs: Ignoring removed bh option [ 218.825694][T10028] FAULT_INJECTION: forcing a failure. [ 218.825694][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.843275][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.4.2364 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 218.843312][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.843329][T10028] Call Trace: [ 218.843338][T10028] [ 218.843346][T10028] __dump_stack+0x1d/0x30 [ 218.843367][T10028] dump_stack_lvl+0xe8/0x140 [ 218.843448][T10028] dump_stack+0x15/0x1b [ 218.843468][T10028] should_fail_ex+0x265/0x280 [ 218.843578][T10028] should_fail+0xb/0x20 [ 218.843612][T10028] should_fail_usercopy+0x1a/0x20 [ 218.843648][T10028] _copy_from_user+0x1c/0xb0 [ 218.843675][T10028] __sys_bpf+0x187/0x790 [ 218.843732][T10028] __x64_sys_bpf+0x41/0x50 [ 218.843758][T10028] x64_sys_call+0x2478/0x2fb0 [ 218.843785][T10028] do_syscall_64+0xd0/0x1a0 [ 218.843864][T10028] ? clear_bhb_loop+0x25/0x80 [ 218.843892][T10028] ? clear_bhb_loop+0x25/0x80 [ 218.843919][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.843945][T10028] RIP: 0033:0x7ff27b9be969 [ 218.843963][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.844003][T10028] RSP: 002b:00007ff27a027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.844107][T10028] RAX: ffffffffffffffda RBX: 00007ff27bbe5fa0 RCX: 00007ff27b9be969 [ 218.844123][T10028] RDX: 0000000000000020 RSI: 0000200000000b00 RDI: 0000000000000008 [ 218.844139][T10028] RBP: 00007ff27a027090 R08: 0000000000000000 R09: 0000000000000000 [ 218.844154][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.844170][T10028] R13: 0000000000000000 R14: 00007ff27bbe5fa0 R15: 00007fff925af218 [ 218.844191][T10028] [ 218.847420][T10020] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, [ 218.861675][ T29] kauditd_printk_skb: 859 callbacks suppressed [ 218.861693][ T29] audit: type=1326 audit(218.886:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 218.870433][T10020] inode 15: [ 218.873752][ T29] audit: type=1326 audit(218.886:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 218.876724][T10020] block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 219.088660][ T29] audit: type=1326 audit(218.886:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.111585][ T29] audit: type=1326 audit(218.886:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.134565][ T29] audit: type=1326 audit(218.886:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.157507][ T29] audit: type=1326 audit(218.886:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.180529][ T29] audit: type=1326 audit(218.886:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.203429][ T29] audit: type=1326 audit(218.886:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.226312][ T29] audit: type=1326 audit(218.886:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.249205][ T29] audit: type=1326 audit(218.886:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10033 comm="syz.3.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb74e55e969 code=0x7ffc0000 [ 219.379333][T10046] 9pnet_fd: Insufficient options for proto=fd [ 219.445073][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2377'. [ 219.458684][T10061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2377'. [ 219.497627][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 219.507304][T10071] loop3: detected capacity change from 0 to 512 [ 219.510465][T10069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2381'. [ 219.560377][T10071] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #4: comm syz.3.2382: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 219.583469][T10081] 9pnet_fd: Insufficient options for proto=fd [ 219.593336][T10071] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.2382: Bad quota inode: 4, type: 1 [ 219.619373][T10071] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.622805][T10085] FAULT_INJECTION: forcing a failure. [ 219.622805][T10085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.642151][T10071] EXT4-fs (loop3): mount failed [ 219.647278][T10085] CPU: 0 UID: 0 PID: 10085 Comm: syz.0.2388 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 219.647370][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 219.647387][T10085] Call Trace: [ 219.647394][T10085] [ 219.647404][T10085] __dump_stack+0x1d/0x30 [ 219.647464][T10085] dump_stack_lvl+0xe8/0x140 [ 219.647488][T10085] dump_stack+0x15/0x1b [ 219.647509][T10085] should_fail_ex+0x265/0x280 [ 219.647612][T10085] should_fail+0xb/0x20 [ 219.647675][T10085] should_fail_usercopy+0x1a/0x20 [ 219.647743][T10085] _copy_from_user+0x1c/0xb0 [ 219.647794][T10085] __sys_sendto+0x1ad/0x330 [ 219.647841][T10085] __x64_sys_sendto+0x76/0x90 [ 219.647884][T10085] x64_sys_call+0x2eb6/0x2fb0 [ 219.647912][T10085] do_syscall_64+0xd0/0x1a0 [ 219.647984][T10085] ? clear_bhb_loop+0x25/0x80 [ 219.648011][T10085] ? clear_bhb_loop+0x25/0x80 [ 219.648039][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.648065][T10085] RIP: 0033:0x7fd4152fe969 [ 219.648107][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.648130][T10085] RSP: 002b:00007fd413967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 219.648153][T10085] RAX: ffffffffffffffda RBX: 00007fd415525fa0 RCX: 00007fd4152fe969 [ 219.648169][T10085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 219.648180][T10085] RBP: 00007fd413967090 R08: 0000200000e68000 R09: 0000000000000010 [ 219.648191][T10085] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 219.648255][T10085] R13: 0000000000000000 R14: 00007fd415525fa0 R15: 00007ffeb6bf8628 [ 219.648278][T10085] [ 219.843881][T10100] loop4: detected capacity change from 0 to 128 [ 219.853357][T10100] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 219.920017][T10103] loop3: detected capacity change from 0 to 512 [ 219.954814][T10103] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.2395: bad orphan inode 15 [ 219.975461][T10103] ext4_test_bit(bit=14, block=18) = 1 [ 219.981789][T10103] is_bad_inode(inode)=0 [ 219.986802][T10103] NEXT_ORPHAN(inode)=1023 [ 219.995340][T10103] max_ino=32 [ 219.999223][T10103] i_nlink=0 [ 220.007869][T10103] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2395: corrupted xattr block 19: invalid header [ 220.024791][T10103] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 220.342463][T10130] loop0: detected capacity change from 0 to 164 [ 220.349044][T10130] iso9660: Unknown parameter '' [ 220.362324][T10128] loop6: detected capacity change from 0 to 1024 [ 220.401434][T10128] EXT4-fs: Ignoring removed oldalloc option [ 220.453993][T10128] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 220.476426][T10133] FAULT_INJECTION: forcing a failure. [ 220.476426][T10133] name failslab, interval 1, probability 0, space 0, times 0 [ 220.489118][T10133] CPU: 1 UID: 0 PID: 10133 Comm: syz.3.2407 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 220.489178][T10133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 220.489190][T10133] Call Trace: [ 220.489196][T10133] [ 220.489203][T10133] __dump_stack+0x1d/0x30 [ 220.489228][T10133] dump_stack_lvl+0xe8/0x140 [ 220.489252][T10133] dump_stack+0x15/0x1b [ 220.489272][T10133] should_fail_ex+0x265/0x280 [ 220.489335][T10133] ? __request_module+0x1c4/0x3e0 [ 220.489375][T10133] should_failslab+0x8c/0xb0 [ 220.489403][T10133] ? dev_load+0x61/0xc0 [ 220.489491][T10133] __kmalloc_cache_noprof+0x4c/0x320 [ 220.489531][T10133] ? dev_load+0x61/0xc0 [ 220.489579][T10133] __request_module+0x1c4/0x3e0 [ 220.489617][T10133] ? capable+0x7c/0xb0 [ 220.489720][T10133] dev_load+0x61/0xc0 [ 220.489823][T10133] dev_ioctl+0x473/0x960 [ 220.489869][T10133] sock_do_ioctl+0x197/0x220 [ 220.489891][T10133] sock_ioctl+0x41b/0x610 [ 220.489934][T10133] ? __pfx_sock_ioctl+0x10/0x10 [ 220.489959][T10133] __se_sys_ioctl+0xcb/0x140 [ 220.490055][T10133] __x64_sys_ioctl+0x43/0x50 [ 220.490121][T10133] x64_sys_call+0x19a8/0x2fb0 [ 220.490205][T10133] do_syscall_64+0xd0/0x1a0 [ 220.490231][T10133] ? clear_bhb_loop+0x25/0x80 [ 220.490257][T10133] ? clear_bhb_loop+0x25/0x80 [ 220.490284][T10133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.490321][T10133] RIP: 0033:0x7fb74e55e969 [ 220.490340][T10133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.490363][T10133] RSP: 002b:00007fb74cbc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.490381][T10133] RAX: ffffffffffffffda RBX: 00007fb74e785fa0 RCX: 00007fb74e55e969 [ 220.490393][T10133] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 220.490406][T10133] RBP: 00007fb74cbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.490421][T10133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.490436][T10133] R13: 0000000000000000 R14: 00007fb74e785fa0 R15: 00007ffc977f90e8 [ 220.490512][T10133] [ 220.910255][T10145] loop3: detected capacity change from 0 to 1024 [ 220.928314][T10145] EXT4-fs error (device loop3): __ext4_fill_super:5502: comm syz.3.2410: inode #2: comm syz.3.2410: iget: illegal inode # [ 220.945400][T10148] loop6: detected capacity change from 0 to 128 [ 221.057331][T10149] loop5: detected capacity change from 0 to 164 [ 221.064051][T10149] iso9660: Unknown parameter '' [ 221.144848][T10145] EXT4-fs (loop3): get root inode failed [ 221.150579][T10145] EXT4-fs (loop3): mount failed [ 221.315699][T10163] loop4: detected capacity change from 0 to 128 [ 221.378919][T10169] loop3: detected capacity change from 0 to 1024 [ 221.387975][T10169] EXT4-fs error (device loop3): __ext4_fill_super:5502: comm syz.3.2417: inode #2: comm syz.3.2417: iget: illegal inode # [ 221.401250][T10170] loop4: detected capacity change from 0 to 1024 [ 221.402920][T10169] EXT4-fs (loop3): get root inode failed [ 221.408616][T10170] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 221.413443][T10169] EXT4-fs (loop3): mount failed [ 221.423282][T10170] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 221.437999][T10170] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 221.448752][T10170] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2414: unexpected bad inode w/o EXT4_IGET_BAD [ 221.463257][T10170] EXT4-fs (loop4): no journal found [ 221.468522][T10170] EXT4-fs (loop4): can't get journal size [ 221.478756][T10170] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.2414: invalid block [ 221.545195][T10183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2420'. [ 221.557655][T10183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2420'. [ 221.592725][T10187] loop4: detected capacity change from 0 to 128 [ 221.609185][T10189] loop3: detected capacity change from 0 to 128 [ 221.629733][T10191] FAULT_INJECTION: forcing a failure. [ 221.629733][T10191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.643339][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.4.2425 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 221.643365][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.643428][T10191] Call Trace: [ 221.643433][T10191] [ 221.643440][T10191] __dump_stack+0x1d/0x30 [ 221.643460][T10191] dump_stack_lvl+0xe8/0x140 [ 221.643477][T10191] dump_stack+0x15/0x1b [ 221.643491][T10191] should_fail_ex+0x265/0x280 [ 221.643615][T10191] should_fail+0xb/0x20 [ 221.643653][T10191] should_fail_usercopy+0x1a/0x20 [ 221.643680][T10191] _copy_to_user+0x20/0xa0 [ 221.643697][T10191] simple_read_from_buffer+0xcb/0x140 [ 221.643773][T10191] proc_fail_nth_read+0x100/0x140 [ 221.643793][T10191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.643821][T10191] vfs_read+0x19d/0x6f0 [ 221.643856][T10191] ? __rcu_read_unlock+0x4f/0x70 [ 221.643885][T10191] ? __fget_files+0x184/0x1c0 [ 221.643947][T10191] ksys_read+0xda/0x1a0 [ 221.643966][T10191] __x64_sys_read+0x40/0x50 [ 221.643984][T10191] x64_sys_call+0x2d77/0x2fb0 [ 221.644002][T10191] do_syscall_64+0xd0/0x1a0 [ 221.644024][T10191] ? clear_bhb_loop+0x25/0x80 [ 221.644069][T10191] ? clear_bhb_loop+0x25/0x80 [ 221.644088][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.644107][T10191] RIP: 0033:0x7ff27b9bd37c [ 221.644120][T10191] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 221.644202][T10191] RSP: 002b:00007ff27a027030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.644218][T10191] RAX: ffffffffffffffda RBX: 00007ff27bbe5fa0 RCX: 00007ff27b9bd37c [ 221.644229][T10191] RDX: 000000000000000f RSI: 00007ff27a0270a0 RDI: 0000000000000018 [ 221.644240][T10191] RBP: 00007ff27a027090 R08: 0000000000000000 R09: 0000000000000000 [ 221.644250][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.644309][T10191] R13: 0000000000000000 R14: 00007ff27bbe5fa0 R15: 00007fff925af218 [ 221.644325][T10191] [ 221.687381][T10193] loop3: detected capacity change from 0 to 1024 [ 221.851178][T10193] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 221.860987][T10193] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 221.870687][T10193] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 221.881297][T10193] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.2424: unexpected bad inode w/o EXT4_IGET_BAD [ 221.894787][T10193] EXT4-fs (loop3): no journal found [ 221.900065][T10193] EXT4-fs (loop3): can't get journal size [ 221.915843][T10189] EXT4-fs error (device loop3): __ext4_iget:5025: inode #15: block 1803188595: comm syz.3.2424: invalid block [ 222.039613][T10206] loop4: detected capacity change from 0 to 256 [ 222.047376][T10206] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.158219][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2433'. [ 222.169375][T10217] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2433'. [ 222.364100][T10240] loop6: detected capacity change from 0 to 128 [ 222.974507][T10246] loop3: detected capacity change from 0 to 1024 [ 222.981665][T10246] EXT4-fs: Ignoring removed i_version option [ 222.987792][T10246] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.995618][T10246] EXT4-fs: Ignoring removed nobh option [ 223.001305][T10246] EXT4-fs: Ignoring removed bh option [ 223.038371][T10250] __nla_validate_parse: 1 callbacks suppressed [ 223.038387][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2445'. [ 223.048969][T10246] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.2444: Allocating blocks 385-513 which overlap fs metadata [ 223.058178][T10250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2445'. [ 223.070363][T10246] EXT4-fs (loop3): pa ffff88810490cc40: logic 16, phys. 129, len 24 [ 223.085119][T10246] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 223.281723][T10278] loop0: detected capacity change from 0 to 128 [ 223.413319][T10289] Invalid ELF header magic: != ELF [ 223.427802][T10291] FAULT_INJECTION: forcing a failure. [ 223.427802][T10291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.441696][T10291] CPU: 0 UID: 0 PID: 10291 Comm: syz.0.2460 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 223.441730][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 223.441743][T10291] Call Trace: [ 223.441750][T10291] [ 223.441788][T10291] __dump_stack+0x1d/0x30 [ 223.441886][T10291] dump_stack_lvl+0xe8/0x140 [ 223.441948][T10291] dump_stack+0x15/0x1b [ 223.441965][T10291] should_fail_ex+0x265/0x280 [ 223.442068][T10291] should_fail+0xb/0x20 [ 223.442095][T10291] should_fail_usercopy+0x1a/0x20 [ 223.442184][T10291] _copy_from_user+0x1c/0xb0 [ 223.442209][T10291] __sys_bpf+0x187/0x790 [ 223.442244][T10291] __x64_sys_bpf+0x41/0x50 [ 223.442268][T10291] x64_sys_call+0x2478/0x2fb0 [ 223.442303][T10291] do_syscall_64+0xd0/0x1a0 [ 223.442399][T10291] ? clear_bhb_loop+0x25/0x80 [ 223.442426][T10291] ? clear_bhb_loop+0x25/0x80 [ 223.442453][T10291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.442475][T10291] RIP: 0033:0x7fd4152fe969 [ 223.442493][T10291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.442532][T10291] RSP: 002b:00007fd413967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.442555][T10291] RAX: ffffffffffffffda RBX: 00007fd415525fa0 RCX: 00007fd4152fe969 [ 223.442571][T10291] RDX: 0000000000000020 RSI: 0000200000000b00 RDI: 0000000000000008 [ 223.442585][T10291] RBP: 00007fd413967090 R08: 0000000000000000 R09: 0000000000000000 [ 223.442601][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.442630][T10291] R13: 0000000000000000 R14: 00007fd415525fa0 R15: 00007ffeb6bf8628 [ 223.442654][T10291] [ 223.445424][T10289] vlan0: entered allmulticast mode [ 223.687913][T10298] loop6: detected capacity change from 0 to 512 [ 223.713180][T10298] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.729756][T10298] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #18: comm syz.6.2461: corrupted inode contents [ 223.748012][T10298] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #18: comm syz.6.2461: mark_inode_dirty error [ 223.854325][T10303] SELinux: ebitmap: truncated map [ 223.860310][T10303] SELinux: failed to load policy [ 223.908876][T10298] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #18: comm syz.6.2461: corrupted inode contents [ 223.928632][T10298] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.2461: mark_inode_dirty error [ 223.973258][T10298] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.2461: mark inode dirty (error -117) [ 223.999480][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 223.999499][ T29] audit: type=1326 audit(2000000001.920:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.029307][ T29] audit: type=1326 audit(2000000001.920:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.053091][ T29] audit: type=1326 audit(2000000001.920:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.076812][ T29] audit: type=1326 audit(2000000001.920:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.100500][ T29] audit: type=1326 audit(2000000001.920:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.114753][T10298] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 224.124156][ T29] audit: type=1326 audit(2000000001.920:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.124187][ T29] audit: type=1326 audit(2000000001.920:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.180428][ T29] audit: type=1326 audit(2000000001.920:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.203977][ T29] audit: type=1326 audit(2000000001.920:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.227631][ T29] audit: type=1326 audit(2000000001.920:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10310 comm="syz.0.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4152fe969 code=0x7ffc0000 [ 224.281641][T10313] loop0: detected capacity change from 0 to 128 [ 224.373942][T10317] loop0: detected capacity change from 0 to 1024 [ 224.382811][T10317] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 224.392818][T10317] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 224.404790][T10317] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 224.416110][T10317] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.2467: unexpected bad inode w/o EXT4_IGET_BAD [ 224.447392][T10317] EXT4-fs (loop0): no journal found [ 224.452806][T10317] EXT4-fs (loop0): can't get journal size [ 224.485962][T10324] loop4: detected capacity change from 0 to 512 [ 224.499621][T10313] EXT4-fs error (device loop0): __ext4_iget:5025: inode #15: block 1803188595: comm syz.0.2467: invalid block [ 224.535085][T10324] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 224.849000][T10350] loop5: detected capacity change from 0 to 164 [ 224.855543][T10350] iso9660: Unknown parameter '' [ 224.891121][T10348] loop0: detected capacity change from 0 to 1024 [ 224.958572][T10348] EXT4-fs: Ignoring removed orlov option [ 224.964320][T10348] EXT4-fs: Ignoring removed bh option [ 225.116120][T10356] loop4: detected capacity change from 0 to 128 [ 225.276897][T10358] loop4: detected capacity change from 0 to 1024 [ 225.558449][T10362] loop6: detected capacity change from 0 to 128 [ 225.581388][T10358] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 225.591284][T10358] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 225.609252][T10358] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.624771][T10348] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 225.641873][T10358] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2482: unexpected bad inode w/o EXT4_IGET_BAD [ 225.658188][T10358] EXT4-fs (loop4): no journal found [ 225.663487][T10358] EXT4-fs (loop4): can't get journal size [ 225.677659][T10367] loop6: detected capacity change from 0 to 1024 [ 225.678776][T10356] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.2482: invalid block [ 225.698348][T10367] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 225.708280][T10367] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 225.733868][T10367] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.764074][T10367] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2483: unexpected bad inode w/o EXT4_IGET_BAD [ 225.782603][ T3310] EXT4-fs unmount: 39 callbacks suppressed [ 225.782621][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.809750][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.821945][T10367] EXT4-fs (loop6): no journal found [ 225.827203][T10367] EXT4-fs (loop6): can't get journal size [ 225.863154][T10367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.952035][T10362] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2483: invalid block [ 226.007958][T10387] loop0: detected capacity change from 0 to 1024 [ 226.040380][T10387] EXT4-fs error (device loop0): __ext4_fill_super:5502: comm syz.0.2489: inode #2: comm syz.0.2489: iget: illegal inode # [ 226.072186][T10387] EXT4-fs (loop0): get root inode failed [ 226.077914][T10387] EXT4-fs (loop0): mount failed [ 226.106867][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.178594][T10396] loop6: detected capacity change from 0 to 2048 [ 226.227873][T10401] loop0: detected capacity change from 0 to 1024 [ 226.249038][T10401] EXT4-fs: Ignoring removed orlov option [ 226.254821][T10401] EXT4-fs: Ignoring removed bh option [ 226.277553][T10403] loop4: detected capacity change from 0 to 512 [ 226.285126][T10396] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.286137][T10405] loop3: detected capacity change from 0 to 1024 [ 226.306303][T10403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.320406][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.327689][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.335438][T10396] bridge0: entered allmulticast mode [ 226.337224][T10401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.347747][T10396] bridge_slave_1: left allmulticast mode [ 226.355369][T10405] EXT4-fs error (device loop3): __ext4_fill_super:5502: comm syz.3.2496: inode #2: comm syz.3.2496: iget: illegal inode # [ 226.359026][T10396] bridge_slave_1: left promiscuous mode [ 226.377593][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.389636][T10396] bridge_slave_0: left allmulticast mode [ 226.395364][T10396] bridge_slave_0: left promiscuous mode [ 226.401359][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.403357][T10401] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 226.428673][T10405] EXT4-fs (loop3): get root inode failed [ 226.434588][T10405] EXT4-fs (loop3): mount failed [ 226.440030][T10403] EXT4-fs (loop4): 1 truncate cleaned up [ 226.443868][T10411] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 226.459785][T10403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.493829][T10403] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.505085][T10411] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 129 with error 28 [ 226.517604][T10411] EXT4-fs (loop6): This should not happen!! Data will be lost [ 226.517604][T10411] [ 226.527380][T10411] EXT4-fs (loop6): Total free blocks count 0 [ 226.533473][T10411] EXT4-fs (loop6): Free/Dirty block details [ 226.539385][T10411] EXT4-fs (loop6): free_blocks=2415919504 [ 226.545171][T10411] EXT4-fs (loop6): dirty_blocks=144 [ 226.550517][T10411] EXT4-fs (loop6): Block reservation details [ 226.556627][T10411] EXT4-fs (loop6): i_reserved_data_blocks=9 [ 226.612057][T10420] loop3: detected capacity change from 0 to 512 [ 226.625718][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.665097][T10420] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #4: comm syz.3.2498: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 226.685329][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.695071][T10420] EXT4-fs error (device loop3): ext4_quota_enable:7129: comm syz.3.2498: Bad quota inode: 4, type: 1 [ 226.715211][T10420] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 226.740647][T10420] EXT4-fs (loop3): mount failed [ 226.887656][T10433] FAULT_INJECTION: forcing a failure. [ 226.887656][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 226.900462][T10433] CPU: 0 UID: 0 PID: 10433 Comm: syz.3.2502 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 226.900490][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.900522][T10433] Call Trace: [ 226.900530][T10433] [ 226.900538][T10433] __dump_stack+0x1d/0x30 [ 226.900565][T10433] dump_stack_lvl+0xe8/0x140 [ 226.900650][T10433] dump_stack+0x15/0x1b [ 226.900671][T10433] should_fail_ex+0x265/0x280 [ 226.900734][T10433] should_failslab+0x8c/0xb0 [ 226.900758][T10433] kmem_cache_alloc_node_noprof+0x57/0x320 [ 226.900788][T10433] ? __alloc_skb+0x101/0x320 [ 226.900865][T10433] __alloc_skb+0x101/0x320 [ 226.900891][T10433] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 226.900945][T10433] ? __rcu_read_unlock+0x4f/0x70 [ 226.900980][T10433] ? __pfx_rtnetlink_event+0x10/0x10 [ 226.901065][T10433] rtnetlink_event+0x18c/0x200 [ 226.901089][T10433] raw_notifier_call_chain+0x6c/0x1b0 [ 226.901117][T10433] ? call_netdevice_notifiers_info+0x9c/0x100 [ 226.901198][T10433] call_netdevice_notifiers_info+0xae/0x100 [ 226.901227][T10433] netif_set_mac_address+0x204/0x260 [ 226.901322][T10433] dev_set_mac_address_user+0xd7/0x190 [ 226.901433][T10433] dev_ifsioc+0x9b3/0xaa0 [ 226.901470][T10433] ? __rcu_read_unlock+0x4f/0x70 [ 226.901508][T10433] dev_ioctl+0x70a/0x960 [ 226.901624][T10433] sock_do_ioctl+0x197/0x220 [ 226.901652][T10433] sock_ioctl+0x41b/0x610 [ 226.901671][T10433] ? __pfx_sock_ioctl+0x10/0x10 [ 226.901690][T10433] __se_sys_ioctl+0xcb/0x140 [ 226.901781][T10433] __x64_sys_ioctl+0x43/0x50 [ 226.901817][T10433] x64_sys_call+0x19a8/0x2fb0 [ 226.901842][T10433] do_syscall_64+0xd0/0x1a0 [ 226.901894][T10433] ? clear_bhb_loop+0x25/0x80 [ 226.901972][T10433] ? clear_bhb_loop+0x25/0x80 [ 226.902044][T10433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.902066][T10433] RIP: 0033:0x7fb74e55e969 [ 226.902081][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.902098][T10433] RSP: 002b:00007fb74cbc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.902116][T10433] RAX: ffffffffffffffda RBX: 00007fb74e785fa0 RCX: 00007fb74e55e969 [ 226.902216][T10433] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000008 [ 226.902262][T10433] RBP: 00007fb74cbc7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.902277][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.902288][T10433] R13: 0000000000000000 R14: 00007fb74e785fa0 R15: 00007ffc977f90e8 [ 226.902307][T10433] [ 227.345053][T10449] loop6: detected capacity change from 0 to 1024 [ 227.388057][T10449] EXT4-fs error (device loop6): __ext4_fill_super:5502: comm syz.6.2507: inode #2: comm syz.6.2507: iget: illegal inode # [ 227.409763][T10449] EXT4-fs (loop6): get root inode failed [ 227.415696][T10449] EXT4-fs (loop6): mount failed [ 227.427932][T10453] loop4: detected capacity change from 0 to 128 [ 227.436941][T10457] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 227.448441][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 227.569651][T10459] loop4: detected capacity change from 0 to 1024 [ 227.631425][T10459] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 227.641942][T10459] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 227.729998][T10459] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 227.761522][T10459] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2509: unexpected bad inode w/o EXT4_IGET_BAD [ 227.840691][T10459] EXT4-fs (loop4): no journal found [ 227.845992][T10459] EXT4-fs (loop4): can't get journal size [ 227.882810][T10475] loop6: detected capacity change from 0 to 1024 [ 227.902332][T10459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.921982][T10475] EXT4-fs error (device loop6): __ext4_fill_super:5502: comm syz.6.2515: inode #2: comm syz.6.2515: iget: illegal inode # [ 227.941114][T10475] EXT4-fs (loop6): get root inode failed [ 227.946897][T10475] EXT4-fs (loop6): mount failed [ 228.001695][T10453] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.2509: invalid block [ 228.082174][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.272503][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2523'. [ 228.284284][T10496] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2523'. [ 228.313658][T10500] loop0: detected capacity change from 0 to 128 [ 228.332683][T10505] FAULT_INJECTION: forcing a failure. [ 228.332683][T10505] name fail_futex, interval 1, probability 0, space 0, times 1 [ 228.346399][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.3.2526 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 228.346429][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.346443][T10505] Call Trace: [ 228.346450][T10505] [ 228.346458][T10505] __dump_stack+0x1d/0x30 [ 228.346484][T10505] dump_stack_lvl+0xe8/0x140 [ 228.346551][T10505] dump_stack+0x15/0x1b [ 228.346567][T10505] should_fail_ex+0x265/0x280 [ 228.346623][T10505] should_fail+0xb/0x20 [ 228.346650][T10505] get_futex_key+0xff/0x750 [ 228.346682][T10505] futex_wake_op+0x12a/0xa20 [ 228.346758][T10505] ? __rcu_read_unlock+0x4f/0x70 [ 228.346821][T10505] do_futex+0x348/0x380 [ 228.346919][T10505] __se_sys_futex+0x2ed/0x360 [ 228.346945][T10505] __x64_sys_futex+0x78/0x90 [ 228.346968][T10505] x64_sys_call+0x1331/0x2fb0 [ 228.346995][T10505] do_syscall_64+0xd0/0x1a0 [ 228.347079][T10505] ? clear_bhb_loop+0x25/0x80 [ 228.347105][T10505] ? clear_bhb_loop+0x25/0x80 [ 228.347225][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.347322][T10505] RIP: 0033:0x7fb74e55e969 [ 228.347386][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.347409][T10505] RSP: 002b:00007fb74cbc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 228.347432][T10505] RAX: ffffffffffffffda RBX: 00007fb74e785fa0 RCX: 00007fb74e55e969 [ 228.347448][T10505] RDX: 0000000000000000 RSI: 0000000000000085 RDI: 0000000000000000 [ 228.347476][T10505] RBP: 00007fb74cbc7090 R08: 0000000000000000 R09: 00000000c5fffffd [ 228.347491][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.347533][T10505] R13: 0000000000000001 R14: 00007fb74e785fa0 R15: 00007ffc977f90e8 [ 228.347550][T10505] [ 228.352012][T10502] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2525'. [ 228.393999][T10506] loop0: detected capacity change from 0 to 1024 [ 228.568795][T10506] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 228.572056][T10514] loop4: detected capacity change from 0 to 128 [ 228.578786][T10506] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 228.606783][T10506] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 228.620246][T10506] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.2527: unexpected bad inode w/o EXT4_IGET_BAD [ 228.652270][T10506] EXT4-fs (loop0): no journal found [ 228.657565][T10506] EXT4-fs (loop0): can't get journal size [ 228.671933][T10506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.739659][T10500] EXT4-fs error (device loop0): __ext4_iget:5025: inode #15: block 1803188595: comm syz.0.2527: invalid block [ 228.764697][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.776227][T10525] loop4: detected capacity change from 0 to 128 [ 228.805208][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 228.822049][T10530] loop6: detected capacity change from 0 to 512 [ 228.830943][T10528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2535'. [ 228.886312][T10530] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 228.900254][T10537] Driver unsupported XDP return value 0 on prog (id 1871) dev N/A, expect packet loss! [ 228.906369][T10534] loop4: detected capacity change from 0 to 1024 [ 228.963817][T10539] loop6: detected capacity change from 0 to 128 [ 228.970137][T10534] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 228.980597][T10534] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 228.990360][T10534] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.001796][T10534] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2534: unexpected bad inode w/o EXT4_IGET_BAD [ 229.022591][T10534] EXT4-fs (loop4): no journal found [ 229.027851][T10534] EXT4-fs (loop4): can't get journal size [ 229.036599][T10534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.081695][T10545] loop6: detected capacity change from 0 to 1024 [ 229.090727][T10545] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.101197][T10545] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.129206][T10545] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.140871][T10545] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2538: unexpected bad inode w/o EXT4_IGET_BAD [ 229.141010][T10545] EXT4-fs (loop6): no journal found [ 229.141026][T10545] EXT4-fs (loop6): can't get journal size [ 229.207202][T10525] EXT4-fs error (device loop4): __ext4_iget:5025: inode #15: block 1803188595: comm syz.4.2534: invalid block [ 229.220419][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.221148][T10545] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.256483][T10550] loop0: detected capacity change from 0 to 8192 [ 229.301943][T10539] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2538: invalid block [ 229.423383][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 229.423475][ T29] audit: type=1400 audit(2000000007.350:7289): avc: denied { getopt } for pid=10554 comm="syz.4.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.468628][T10562] loop5: detected capacity change from 0 to 128 [ 229.477870][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.492016][T10555] wireguard0: entered promiscuous mode [ 229.497591][T10555] wireguard0: entered allmulticast mode [ 229.543633][T10567] loop5: detected capacity change from 0 to 1024 [ 229.550949][T10567] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.560810][T10567] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.570464][ T29] audit: type=1326 audit(2000000007.460:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 229.594097][ T29] audit: type=1326 audit(2000000007.460:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d3406e969 code=0x7ffc0000 [ 229.617891][ T29] audit: type=1326 audit(2000000007.460:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d3406e9a3 code=0x7ffc0000 [ 229.641608][ T29] audit: type=1326 audit(2000000007.470:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d3406d41f code=0x7ffc0000 [ 229.644800][T10570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2547'. [ 229.665118][ T29] audit: type=1326 audit(2000000007.470:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3d3406e9f7 code=0x7ffc0000 [ 229.665158][ T29] audit: type=1326 audit(2000000007.470:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d3406d2d0 code=0x7ffc0000 [ 229.665191][ T29] audit: type=1326 audit(2000000007.470:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d3406e56b code=0x7ffc0000 [ 229.665301][ T29] audit: type=1326 audit(2000000007.470:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3d3406d5ca code=0x7ffc0000 [ 229.665333][ T29] audit: type=1326 audit(2000000007.470:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10561 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3d3406d5ca code=0x7ffc0000 [ 229.698403][T10567] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.794851][T10573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2547'. [ 229.813552][T10567] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.2545: unexpected bad inode w/o EXT4_IGET_BAD [ 229.827310][T10567] EXT4-fs (loop5): no journal found [ 229.832712][T10567] EXT4-fs (loop5): can't get journal size [ 229.838630][T10572] loop6: detected capacity change from 0 to 512 [ 229.847605][T10567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.869095][T10562] EXT4-fs error (device loop5): __ext4_iget:5025: inode #15: block 1803188595: comm syz.5.2545: invalid block [ 229.872110][T10578] loop3: detected capacity change from 0 to 128 [ 229.895646][T10572] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 229.905915][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.954707][T10586] loop3: detected capacity change from 0 to 1024 [ 229.962355][T10586] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 229.972320][T10586] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 229.983665][T10586] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 229.997983][T10586] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.2549: unexpected bad inode w/o EXT4_IGET_BAD [ 230.012388][T10586] EXT4-fs (loop3): no journal found [ 230.017720][T10586] EXT4-fs (loop3): can't get journal size [ 230.025142][T10586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.041071][T10586] EXT4-fs error (device loop3): __ext4_iget:5025: inode #15: block 1803188595: comm syz.3.2549: invalid block [ 230.060616][T10595] FAULT_INJECTION: forcing a failure. [ 230.060616][T10595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.068146][T10596] loop4: detected capacity change from 0 to 1024 [ 230.074465][T10595] CPU: 1 UID: 0 PID: 10595 Comm: syz.6.2553 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 230.074513][T10595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.074530][T10595] Call Trace: [ 230.074540][T10595] [ 230.074550][T10595] __dump_stack+0x1d/0x30 [ 230.074577][T10595] dump_stack_lvl+0xe8/0x140 [ 230.074601][T10595] dump_stack+0x15/0x1b [ 230.074622][T10595] should_fail_ex+0x265/0x280 [ 230.074731][T10595] should_fail+0xb/0x20 [ 230.074765][T10595] should_fail_usercopy+0x1a/0x20 [ 230.074883][T10595] _copy_from_user+0x1c/0xb0 [ 230.074906][T10595] ___sys_recvmsg+0xaa/0x370 [ 230.074948][T10595] ? _parse_integer+0x27/0x40 [ 230.074991][T10595] do_recvmmsg+0x1ef/0x540 [ 230.075114][T10595] ? fput+0x8f/0xc0 [ 230.075151][T10595] __x64_sys_recvmmsg+0xe5/0x170 [ 230.075195][T10595] x64_sys_call+0x1c6a/0x2fb0 [ 230.075288][T10595] do_syscall_64+0xd0/0x1a0 [ 230.075320][T10595] ? clear_bhb_loop+0x25/0x80 [ 230.075348][T10595] ? clear_bhb_loop+0x25/0x80 [ 230.075376][T10595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.075442][T10595] RIP: 0033:0x7f504df7e969 [ 230.075462][T10595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.075485][T10595] RSP: 002b:00007f504c5c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 230.075509][T10595] RAX: ffffffffffffffda RBX: 00007f504e1a6080 RCX: 00007f504df7e969 [ 230.075525][T10595] RDX: 0000000000000001 RSI: 0000200000008840 RDI: 0000000000000003 [ 230.075541][T10595] RBP: 00007f504c5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.075557][T10595] R10: 0000000040000001 R11: 0000000000000246 R12: 0000000000000001 [ 230.075633][T10595] R13: 0000000000000000 R14: 00007f504e1a6080 R15: 00007fff1e2af6d8 [ 230.075656][T10595] [ 230.270024][T10596] EXT4-fs: Ignoring removed oldalloc option [ 230.277113][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.306893][T10596] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 230.337403][T10607] loop0: detected capacity change from 0 to 512 [ 230.345884][T10607] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 230.354574][T10596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.366684][T10612] loop3: detected capacity change from 0 to 128 [ 230.384151][T10607] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 230.398912][T10607] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2559: corrupted inode contents [ 230.411333][T10607] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.2559: mark_inode_dirty error [ 230.425905][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.441239][T10618] loop5: detected capacity change from 0 to 512 [ 230.445924][T10616] loop3: detected capacity change from 0 to 1024 [ 230.454244][T10607] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2559: invalid indirect mapped block 1 (level 1) [ 230.462863][T10616] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 230.477188][T10616] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 230.478066][T10618] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 230.486996][T10616] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 230.488548][T10616] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #5: comm syz.3.2560: unexpected bad inode w/o EXT4_IGET_BAD [ 230.518881][T10607] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2559: corrupted inode contents [ 230.543115][T10607] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 230.553268][T10607] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2559: corrupted inode contents [ 230.565401][T10616] EXT4-fs (loop3): no journal found [ 230.570676][T10616] EXT4-fs (loop3): can't get journal size [ 230.578229][T10607] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.2559: mark_inode_dirty error [ 230.580155][T10616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.606584][T10625] FAULT_INJECTION: forcing a failure. [ 230.606584][T10625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.619795][T10607] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 230.629057][T10625] CPU: 0 UID: 0 PID: 10625 Comm: syz.5.2563 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 230.629112][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.629126][T10625] Call Trace: [ 230.629132][T10625] [ 230.629140][T10625] __dump_stack+0x1d/0x30 [ 230.629199][T10625] dump_stack_lvl+0xe8/0x140 [ 230.629219][T10625] dump_stack+0x15/0x1b [ 230.629236][T10625] should_fail_ex+0x265/0x280 [ 230.629267][T10625] should_fail+0xb/0x20 [ 230.629294][T10625] should_fail_usercopy+0x1a/0x20 [ 230.629393][T10625] _copy_to_user+0x20/0xa0 [ 230.629413][T10625] simple_read_from_buffer+0xcb/0x140 [ 230.629450][T10625] proc_fail_nth_read+0x100/0x140 [ 230.629521][T10625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.629542][T10625] vfs_read+0x19d/0x6f0 [ 230.629563][T10625] ? __rcu_read_unlock+0x4f/0x70 [ 230.629660][T10625] ? __fget_files+0x184/0x1c0 [ 230.629687][T10625] ksys_read+0xda/0x1a0 [ 230.629753][T10625] __x64_sys_read+0x40/0x50 [ 230.629776][T10625] x64_sys_call+0x2d77/0x2fb0 [ 230.629875][T10625] do_syscall_64+0xd0/0x1a0 [ 230.629903][T10625] ? clear_bhb_loop+0x25/0x80 [ 230.629938][T10625] ? clear_bhb_loop+0x25/0x80 [ 230.629964][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.629988][T10625] RIP: 0033:0x7f3d3406d37c [ 230.630031][T10625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.630052][T10625] RSP: 002b:00007f3d326d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.630072][T10625] RAX: ffffffffffffffda RBX: 00007f3d34295fa0 RCX: 00007f3d3406d37c [ 230.630106][T10625] RDX: 000000000000000f RSI: 00007f3d326d70a0 RDI: 0000000000000016 [ 230.630120][T10625] RBP: 00007f3d326d7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.630135][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.630151][T10625] R13: 0000000000000000 R14: 00007f3d34295fa0 R15: 00007ffd1ea21a28 [ 230.630175][T10625] [ 230.632687][T10607] EXT4-fs (loop0): 1 truncate cleaned up [ 230.656230][T10629] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 230.659592][T10607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.680701][T10612] EXT4-fs error (device loop3): __ext4_iget:5025: inode #15: block 1803188595: comm syz.3.2560: invalid block [ 230.725884][T10628] loop4: detected capacity change from 0 to 2048 [ 230.867989][T10631] loop6: detected capacity change from 0 to 128 [ 230.888005][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.915432][T10628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.939487][T10638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2567'. [ 230.957765][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.971704][T10642] loop5: detected capacity change from 0 to 128 [ 230.980568][T10642] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.993140][T10639] loop6: detected capacity change from 0 to 1024 [ 231.001116][T10639] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 231.011000][T10639] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 231.022109][T10639] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 231.033189][T10642] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 231.033444][T10639] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2566: unexpected bad inode w/o EXT4_IGET_BAD [ 231.082573][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.092623][T10639] EXT4-fs (loop6): no journal found [ 231.097863][T10639] EXT4-fs (loop6): can't get journal size [ 231.125462][T10652] loop0: detected capacity change from 0 to 512 [ 231.141792][T10639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.152309][T10657] loop3: detected capacity change from 0 to 512 [ 231.156148][T10642] EXT4-fs error (device loop5): dx_make_map:1298: inode #2: block 20: comm syz.5.2569: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 231.179177][T10631] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2566: invalid block [ 231.192323][T10642] EXT4-fs error (device loop5) in do_split:2031: Corrupt filesystem [ 231.211926][T10652] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #4: comm syz.0.2571: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 231.239521][T10657] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 231.248443][T10652] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.2571: Bad quota inode: 4, type: 1 [ 231.261602][T10652] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.277049][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.281018][T10652] EXT4-fs (loop0): mount failed [ 231.307963][T10665] loop6: detected capacity change from 0 to 128 [ 231.316891][ T9257] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.350968][T10674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 231.361645][T10676] loop5: detected capacity change from 0 to 128 [ 231.377035][T10678] loop0: detected capacity change from 0 to 512 [ 231.384353][T10678] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 231.396154][T10678] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 231.413919][T10678] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2581: corrupted inode contents [ 231.429350][T10683] loop6: detected capacity change from 0 to 1024 [ 231.437958][T10678] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #11: comm syz.0.2581: mark_inode_dirty error [ 231.456130][T10681] loop3: detected capacity change from 0 to 512 [ 231.480169][T10683] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 231.484352][T10678] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2581: invalid indirect mapped block 1 (level 1) [ 231.490238][T10683] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 231.506809][T10687] loop5: detected capacity change from 0 to 1024 [ 231.513755][T10683] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 231.534168][T10683] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2575: unexpected bad inode w/o EXT4_IGET_BAD [ 231.534338][T10678] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2581: corrupted inode contents [ 231.549373][T10681] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.2582: bad orphan inode 15 [ 231.579771][T10683] EXT4-fs (loop6): no journal found [ 231.579798][T10683] EXT4-fs (loop6): can't get journal size [ 231.579937][T10687] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 231.579966][T10687] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 231.580006][T10687] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 231.581265][T10687] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #5: comm syz.5.2578: unexpected bad inode w/o EXT4_IGET_BAD [ 231.581471][T10687] EXT4-fs (loop5): no journal found [ 231.581486][T10687] EXT4-fs (loop5): can't get journal size [ 231.581915][T10678] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 231.582632][T10678] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.2581: corrupted inode contents [ 231.583240][T10678] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.2581: mark_inode_dirty error [ 231.583439][T10678] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 231.583631][T10678] EXT4-fs (loop0): 1 truncate cleaned up [ 231.584065][T10678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.595126][T10683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.598489][T10681] ext4_test_bit(bit=14, block=18) = 1 [ 231.614032][T10665] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2575: invalid block [ 231.625739][T10681] is_bad_inode(inode)=0 [ 231.632232][T10687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.639740][T10681] NEXT_ORPHAN(inode)=1023 [ 231.671756][T10676] EXT4-fs error (device loop5): __ext4_iget:5025: inode #15: block 1803188595: comm syz.5.2578: invalid block [ 231.673409][T10681] max_ino=32 [ 231.829918][T10681] i_nlink=0 [ 231.839275][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.841482][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.849362][T10681] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2582: corrupted xattr block 19: invalid header [ 231.879115][T10681] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 231.917509][T10697] loop6: detected capacity change from 0 to 128 [ 231.932107][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.943690][T10681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 231.961040][T10681] ext4 filesystem being mounted at /564/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 231.996166][T10704] loop6: detected capacity change from 0 to 1024 [ 232.005582][T10705] loop0: detected capacity change from 0 to 512 [ 232.013257][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 232.023150][T10704] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 232.030008][T10705] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 232.032972][T10704] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 232.041345][T10704] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 232.062552][ T3303] ================================================================== [ 232.064424][T10704] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #5: comm syz.6.2585: unexpected bad inode w/o EXT4_IGET_BAD [ 232.070657][ T3303] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 232.070697][ T3303] [ 232.070704][ T3303] read-write to 0xffff888237d26b30 of 8 bytes by task 10704 on cpu 1: [ 232.089610][T10704] EXT4-fs (loop6): no journal found [ 232.091112][ T3303] __find_get_block+0x432/0x880 [ 232.091150][ T3303] bdev_getblk+0x33/0x3b0 [ 232.093480][T10704] EXT4-fs (loop6): can't get journal size [ 232.101711][ T3303] ext4_sb_breadahead_unmovable+0x45/0x180 [ 232.101744][ T3303] __ext4_get_inode_loc+0x709/0x930 [ 232.132986][ T3303] __ext4_iget+0x2ea/0x1fe0 [ 232.137510][ T3303] ext4_get_journal_inode+0x2a/0x130 [ 232.142812][ T3303] ext4_calculate_overhead+0x905/0x9e0 [ 232.148296][ T3303] ext4_fill_super+0x2649/0x34e0 [ 232.153255][ T3303] get_tree_bdev_flags+0x28e/0x300 [ 232.158380][ T3303] get_tree_bdev+0x1f/0x30 [ 232.162805][ T3303] ext4_get_tree+0x1c/0x30 [ 232.167228][ T3303] vfs_get_tree+0x54/0x1d0 [ 232.171651][ T3303] do_new_mount+0x207/0x680 [ 232.176162][ T3303] path_mount+0x4a4/0xb20 [ 232.180502][ T3303] __se_sys_mount+0x28f/0x2e0 [ 232.185185][ T3303] __x64_sys_mount+0x67/0x80 [ 232.189781][ T3303] x64_sys_call+0xd36/0x2fb0 [ 232.194380][ T3303] do_syscall_64+0xd0/0x1a0 [ 232.198893][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.204794][ T3303] [ 232.207119][ T3303] read to 0xffff888237d26b30 of 8 bytes by task 3303 on cpu 0: [ 232.214666][ T3303] has_bh_in_lru+0x35/0x1f0 [ 232.219177][ T3303] smp_call_function_many_cond+0x394/0xb20 [ 232.225000][ T3303] on_each_cpu_cond_mask+0x3c/0x80 [ 232.230128][ T3303] invalidate_bh_lrus+0x2a/0x30 [ 232.234983][ T3303] invalidate_bdev+0x42/0x70 [ 232.239580][ T3303] ext4_put_super+0x624/0x7d0 [ 232.244269][ T3303] generic_shutdown_super+0xe3/0x210 [ 232.249573][ T3303] kill_block_super+0x2a/0x70 [ 232.254258][ T3303] ext4_kill_sb+0x42/0x80 [ 232.258598][ T3303] deactivate_locked_super+0x72/0x1c0 [ 232.263995][ T3303] deactivate_super+0x97/0xa0 [ 232.268706][ T3303] cleanup_mnt+0x269/0x2e0 [ 232.273139][ T3303] __cleanup_mnt+0x19/0x20 [ 232.277570][ T3303] task_work_run+0x12e/0x1a0 [ 232.282167][ T3303] resume_user_mode_work+0x6a/0x70 [ 232.287318][ T3303] syscall_exit_to_user_mode+0x77/0xb0 [ 232.292810][ T3303] do_syscall_64+0xdd/0x1a0 [ 232.297326][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.303227][ T3303] [ 232.305552][ T3303] value changed: 0xffff888104e49138 -> 0xffff888104aeea90 [ 232.312660][ T3303] [ 232.314979][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 232.321134][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 232.333727][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.343810][ T3303] ================================================================== [ 232.362666][T10704] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 232.380885][T10697] EXT4-fs error (device loop6): __ext4_iget:5025: inode #15: block 1803188595: comm syz.6.2585: invalid block [ 232.433521][ T9276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.