last executing test programs: 2.152659076s ago: executing program 1 (id=648): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) accept(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 7) 1.985937266s ago: executing program 1 (id=649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f5, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r2, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r4, 0x0, 0x100000002}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x210000, 0x129) open_by_handle_at(r6, &(0x7f0000000080)=@shmem={0x7, 0x1, {0x20, 0x9}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r6) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x164, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x488a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d4}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8008011}, 0x4c004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000480)="1f806c55356775ac497ecbd7361c054815094fe790ceb97cf5ad85e106e3aec6f5677d9a27485094bb30d69173e31c6ad7bc529c814afc20ad941b1a121e5f500eb5e8c361f654f16ae570e6c059558b269b1322acbecffd24097f9aeb6f4a0b1b30a17ef43f72784a245f07f2a296c7558dd7c6779dd99c165422bbdf41549c31dff246d7b4a4d6c5befa10aa816c45b9e0fe4f0f3652f6b1d1a4c88783c91764f5a7a4128506f7fc17a90f2ef1ac3a39fc4b0a41b821b0b31a756987943ed9e12271eb491ef7e6c8f9709a21531bf706e9c0096ff2e6146f6bcdcf26a892", &(0x7f0000001880)=""/4096, &(0x7f0000000180)="9932d1484e4708761da6a5d9d8", &(0x7f0000000240)="e2eaedea433999420deba03536e06f9de1198c90e20d3f91ed7ce74c3bc128d21668d0e2229f609d316b64e2e0367ef1f4a1e5dfd975860a98b10383770b71c673954a4457f2104f844ad1ecd0602a985b08d78d21fbf7d58b5ec85e0f53e0b7", 0x6, r0, 0x4}, 0x38) kexec_load(0x3e00, 0x0, 0x0, 0x0) 1.714594828s ago: executing program 1 (id=652): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 1.714319599s ago: executing program 1 (id=653): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 1.676354979s ago: executing program 1 (id=657): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000000)=@sg0, r2, &(0x7f0000000140)) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x8000, &(0x7f0000000580)={'trans=unix,', {[{@uname={'uname', 0x3d, '[-([)$}][,&'}}, {@loose}, {@mmap}], [{@uid_lt={'uid<', r2}}, {@smackfsdef={'smackfsdef', 0x3d, '(\'%!*'}}, {@dont_appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@subj_role={'subj_role', 0x3d, '-%^$),'}}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0b9547e2db80000000000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.55577498s ago: executing program 1 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="eee8d8791d702dd9d30672e3cb2d1630e7c2937d377dd0b4083f41f08494cdb4ac47ca08a341b98de19d1c8bf89a2e7a0abb5a5af41f3322ba019a1af1cef76739ec6ea379e6c43795c997f7f001341531cbb81ef2ad3ea89bb7c8446855af6fdea8ea5ba6e63e7aa4f473abdd8e3e", 0x6f, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) lseek(r0, 0xfffffffffffffffa, 0x4) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0xdc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000093d11fc1ce5000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x808) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.356920381s ago: executing program 0 (id=669): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.356650711s ago: executing program 4 (id=670): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = socket$netlink(0x10, 0x3, 0xb) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xb7) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000180)='u', 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) sendto$packet(r4, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2bfffdffd}, 0xc) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) 1.028902703s ago: executing program 0 (id=676): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xb10000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) (fail_nth: 14) 776.998575ms ago: executing program 0 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="11050000400000000000090000003000038006fc"], 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 773.491415ms ago: executing program 0 (id=678): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f5, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r2, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r4, 0x0, 0x100000002}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x210000, 0x129) open_by_handle_at(r6, &(0x7f0000000080)=@shmem={0x7, 0x1, {0x20, 0x9}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r6) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x164, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x488a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d4}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8008011}, 0x4c004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000480)="1f806c55356775ac497ecbd7361c054815094fe790ceb97cf5ad85e106e3aec6f5677d9a27485094bb30d69173e31c6ad7bc529c814afc20ad941b1a121e5f500eb5e8c361f654f16ae570e6c059558b269b1322acbecffd24097f9aeb6f4a0b1b30a17ef43f72784a245f07f2a296c7558dd7c6779dd99c165422bbdf41549c31dff246d7b4a4d6c5befa10aa816c45b9e0fe4f0f3652f6b1d1a4c88783c91764f5a7a4128506f7fc17a90f2ef1ac3a39fc4b0a41b821b0b31a756987943ed9e12271eb491ef7e6c8f9709a21531bf706e9c0096ff2e6146f6bcdcf26a892", &(0x7f0000001880)=""/4096, &(0x7f0000000180)="9932d1484e4708761da6a5d9d8", &(0x7f0000000240)="e2eaedea433999420deba03536e06f9de1198c90e20d3f91ed7ce74c3bc128d21668d0e2229f609d316b64e2e0367ef1f4a1e5dfd975860a98b10383770b71c673954a4457f2104f844ad1ecd0602a985b08d78d21fbf7d58b5ec85e0f53e0b7", 0x6, r0, 0x4}, 0x38) kexec_load(0x3e00, 0x0, 0x0, 0x0) 559.913497ms ago: executing program 0 (id=683): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x5660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xacd42, 0x108) fallocate(r4, 0x0, 0xbf5, 0x2000402) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x3, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3418}]}, 0x30}, 0x1, 0x0, 0x0, 0x40a0}, 0x4000000) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r4, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 543.827837ms ago: executing program 3 (id=684): syz_open_dev$vcsn(&(0x7f0000000380), 0xe2, 0x121000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) unshare(0x40400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0xa6, 0x9}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x30, 0x26, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {0xffff, 0xa}, {0xd, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x8}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) vmsplice(r1, &(0x7f0000000880)=[{&(0x7f0000000200)='xn', 0x2}, {&(0x7f0000000280)="c0db6dd8105fa4e4b5a1f126f19e0b53fb5f", 0x12}, {&(0x7f00000004c0)="bd51b42524a6fbc511669c3e97e3e8b7ef71913c5d0670b9e030da24012bc2257d551a2c0e0b2865d6db3718f0d990da7933ba479f02bd4361de919417a6b404c02f624d2b29e2b1d1abcfb9e74844363ffc5e223b844c98a3a8d7395224b2e67cd0", 0x62}, {&(0x7f0000000540)="f938fac202ea2857a39b0c13081f90c5e00348e0ce59d989ecc5d22b7d04495653fdbd6e7c742025d2e82bc2cb99886334c2083c996040cd03cbc29c9a81a3928bd9a9c4abf3db721964ea73c1e46f398e83ea265c788a4cd9d9477e9ead14989ca99c9b1a006019f4bf8fcfdf47b553c106285b25", 0x75}, {&(0x7f00000005c0)="e1601e4aa431c27edd0618e9b05927e0e47435f330920a8184ee27f726dd7a6d2d32cac9384b8cd88fc6da0a0942f9592aa07f2abb29711a0a42fc90a2161ce534140f21776f2de1ccf0ccb6a1c489a84170ceb88f73d304e783967cbd9b9ed98452a07c3738b16aa41ec3eaa8980d7a88", 0x71}, {&(0x7f00000002c0)="32ecc568055f7e36c7", 0x9}, {&(0x7f0000000640)="ff5fd023069d92e438470e9fe6cf583099484c9a6de6e00558658d8169e407d352909ce21e07fed2b40ab3cdaf54117f59dd8f222b944b782a6710669b8a462cae7a454c96d7e41676a16b4924911d303ae8349df7c18a57b53c736f061fec454ababcafed86f7765bff3bae19739795caea", 0x72}, {&(0x7f0000000740)="eed67c5646a98e7e760bb294b24461edd9a29196bdce3da3f8bcbdea4dafbe58106c64ca70e4d305734cccb74e41b543fb9954f1273e7a0ad083f2bec5a2", 0x3e}, {&(0x7f0000000780)="eb2dbd3b68b882d4e0632c09cf9d66a60190f86b915f446bb7335d9ebf8578bf755bdc38bc3554718e70e4ba41abb81269620f4414215ee342e3206505e847378390b0fe76592e778fe057cdc5ce7e4cd87aa3df0a07f3fd835b9c1554264a4d7590d13450f4cd212e43cc4aeed260c874090c6f62a7e5b4e1c244739c89ba09106c48b601ca333ef14eeab2445a85b22137d92dfffe526723fdd323d6fb9e9834fcba9f81860ba8d53a1f75037e44b4202fec02c9a898f105db6ae0d69c9e787728801ae40355e481fd691897f766c073c4a44d6c86", 0xd6}], 0x9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 460.856647ms ago: executing program 4 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x60, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 450.018567ms ago: executing program 3 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0xa, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 374.091588ms ago: executing program 3 (id=689): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r0, 0x0, 0x7f}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xae, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYRES16=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) open_by_handle_at(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000008100000002000000d3000000382f09508af19e48e3242fffffffff"], 0x242000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffe3b702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r12, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r9, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 319.825978ms ago: executing program 2 (id=690): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r3, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 260.872829ms ago: executing program 4 (id=691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20000000000200}, 0x18) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 260.254469ms ago: executing program 0 (id=692): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200080, &(0x7f0000000940)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@discard}, {@barrier}, {@noauto_da_alloc}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0xfb, 0x59e, &(0x7f0000001480)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x1, 0x2}, {0x2}, {0x2, 0x2}, {0x3}]}, @enum, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @fwd={0xf}, @enum={0xf}]}, {0x0, [0x30, 0x5f, 0xfcdb08892e9ad7a1, 0x2e]}}, &(0x7f0000000180)=""/17, 0x82, 0x11, 0x1, 0x80000001}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000540)={[&(0x7f00000002c0)='noauto_da_alloc', &(0x7f00000004c0)='discard', &(0x7f0000000500)='\x00']}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x780f, 0x3, 0x0, 0x3ff, 0xd, 0xfffffffd, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122a2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) lsm_get_self_attr(0x66, &(0x7f0000000000)={0x0, 0x0, 0xff, 0xdf, ""/223}, &(0x7f0000000100)=0xff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474203, 0x408}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") openat(0xffffffffffffffff, 0x0, 0x60002, 0x0) 223.197869ms ago: executing program 3 (id=693): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 218.040149ms ago: executing program 2 (id=694): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2f5, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r2, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r4, 0x0, 0x100000002}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x210000, 0x129) open_by_handle_at(r6, &(0x7f0000000080)=@shmem={0x7, 0x1, {0x20, 0x9}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r6) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x164, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x488a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d4}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8008011}, 0x4c004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000480)="1f806c55356775ac497ecbd7361c054815094fe790ceb97cf5ad85e106e3aec6f5677d9a27485094bb30d69173e31c6ad7bc529c814afc20ad941b1a121e5f500eb5e8c361f654f16ae570e6c059558b269b1322acbecffd24097f9aeb6f4a0b1b30a17ef43f72784a245f07f2a296c7558dd7c6779dd99c165422bbdf41549c31dff246d7b4a4d6c5befa10aa816c45b9e0fe4f0f3652f6b1d1a4c88783c91764f5a7a4128506f7fc17a90f2ef1ac3a39fc4b0a41b821b0b31a756987943ed9e12271eb491ef7e6c8f9709a21531bf706e9c0096ff2e6146f6bcdcf26a892", &(0x7f0000001880)=""/4096, &(0x7f0000000180)="9932d1484e4708761da6a5d9d8", &(0x7f0000000240)="e2eaedea433999420deba03536e06f9de1198c90e20d3f91ed7ce74c3bc128d21668d0e2229f609d316b64e2e0367ef1f4a1e5dfd975860a98b10383770b71c673954a4457f2104f844ad1ecd0602a985b08d78d21fbf7d58b5ec85e0f53e0b7", 0x6, r0, 0x4}, 0x38) kexec_load(0x3e00, 0x0, 0x0, 0x0) 217.843059ms ago: executing program 4 (id=695): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x1018}, './file1\x00'}) 171.60797ms ago: executing program 3 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007665"], 0xfc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x1c00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18050000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000580)="390000001300034700bb60dd330597c9d6b60000010000005600008de3cfb7d411efc42800c600000000000000", 0x2d}], 0x1) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r11, @ANYRES16=r13], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc0) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="204000fc", @ANYRES16=r13, @ANYBLOB="000126bd7000fbdbdf25050000000c0006000100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf25020000000800010000000000c029dd03"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) 142.10432ms ago: executing program 4 (id=697): syz_open_dev$vcsn(&(0x7f0000000380), 0xe2, 0x121000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) unshare(0x40400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0xa6, 0x9}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@getqdisc={0x30, 0x26, 0x8, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x7}, {0xffff, 0xa}, {0xd, 0xfff1}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x8}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) vmsplice(r1, &(0x7f0000000880)=[{&(0x7f0000000200)='xn', 0x2}, {&(0x7f0000000280)="c0db6dd8105fa4e4b5a1f126f19e0b53fb5f", 0x12}, {&(0x7f00000004c0)="bd51b42524a6fbc511669c3e97e3e8b7ef71913c5d0670b9e030da24012bc2257d551a2c0e0b2865d6db3718f0d990da7933ba479f02bd4361de919417a6b404c02f624d2b29e2b1d1abcfb9e74844363ffc5e223b844c98a3a8d7395224b2e67cd0", 0x62}, {&(0x7f0000000540)="f938fac202ea2857a39b0c13081f90c5e00348e0ce59d989ecc5d22b7d04495653fdbd6e7c742025d2e82bc2cb99886334c2083c996040cd03cbc29c9a81a3928bd9a9c4abf3db721964ea73c1e46f398e83ea265c788a4cd9d9477e9ead14989ca99c9b1a006019f4bf8fcfdf47b553c106285b25", 0x75}, {&(0x7f00000005c0)="e1601e4aa431c27edd0618e9b05927e0e47435f330920a8184ee27f726dd7a6d2d32cac9384b8cd88fc6da0a0942f9592aa07f2abb29711a0a42fc90a2161ce534140f21776f2de1ccf0ccb6a1c489a84170ceb88f73d304e783967cbd9b9ed98452a07c3738b16aa41ec3eaa8980d7a88", 0x71}, {&(0x7f00000002c0)="32ecc568055f7e36c7", 0x9}, {&(0x7f0000000640)="ff5fd023069d92e438470e9fe6cf583099484c9a6de6e00558658d8169e407d352909ce21e07fed2b40ab3cdaf54117f59dd8f222b944b782a6710669b8a462cae7a454c96d7e41676a16b4924911d303ae8349df7c18a57b53c736f061fec454ababcafed86f7765bff3bae19739795caea", 0x72}, {&(0x7f0000000740)="eed67c5646a98e7e760bb294b24461edd9a29196bdce3da3f8bcbdea4dafbe58106c64ca70e4d305734cccb74e41b543fb9954f1273e7a0ad083f2bec5a2", 0x3e}, {&(0x7f0000000780)="eb2dbd3b68b882d4e0632c09cf9d66a60190f86b915f446bb7335d9ebf8578bf755bdc38bc3554718e70e4ba41abb81269620f4414215ee342e3206505e847378390b0fe76592e778fe057cdc5ce7e4cd87aa3df0a07f3fd835b9c1554264a4d7590d13450f4cd212e43cc4aeed260c874090c6f62a7e5b4e1c244739c89ba09106c48b601ca333ef14eeab2445a85b22137d92dfffe526723fdd323d6fb9e9834fcba9f81860ba8d53a1f75037e44b4202fec02c9a898f105db6ae0d69c9e787728801ae40355e481fd691897f766c073c4a44d6c86", 0xd6}], 0x9, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 141.86299ms ago: executing program 2 (id=698): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 141.7359ms ago: executing program 2 (id=699): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) removexattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00') 120.60113ms ago: executing program 2 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x6, 0x7, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0xa, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 99.96256ms ago: executing program 2 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @generic={0x1, 0x3, 0xc, 0x7, 0x6e}, @call={0x85, 0x0, 0x0, 0x4d}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @func, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x5b, &(0x7f00000004c0)=""/91, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)=[{0x3, 0x5, 0xb, 0x1}], 0x10, 0x5}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x1000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r10}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}, 0x1, 0x200000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vxcan1\x00'}) 29.70378ms ago: executing program 4 (id=702): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000020000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 0s ago: executing program 3 (id=703): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a40)='kfree\x00', r0, 0x0, 0x7f}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xae, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYRES16=r3], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) open_by_handle_at(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0c0000008100000002000000d3000000382f09508af19e48e3242fffffffff"], 0x242000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001800000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffe3b702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r7}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r9, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 0s ago: executing program 2 (id=705): socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f00020056b200ba37b906210d844a6e"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) (async) close(r2) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x4004) (async) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0xc) (async) listen(r9, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f00000010c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) kernel console output (not intermixed with test programs): t(1762408074.329:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 55.470529][ T29] audit: type=1326 audit(1762408074.329:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 55.499253][ T29] audit: type=1326 audit(1762408074.329:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 55.502497][ T3809] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.107: error while reading EA inode 32 err=-116 [ 55.525275][ T29] audit: type=1326 audit(1762408074.329:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 55.572233][ T29] audit: type=1326 audit(1762408074.329:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 55.575338][ T3809] EXT4-fs (loop0): Remounting filesystem read-only [ 55.606980][ T3804] can0 (unregistered): slcan off ptm0. [ 55.655296][ T3809] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 55.668088][ T3809] EXT4-fs (loop0): 1 orphan inode deleted [ 55.682773][ T3813] vlan2: entered allmulticast mode [ 55.700181][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.854621][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.069844][ T3832] netlink: 'syz.4.114': attribute type 4 has an invalid length. [ 56.079677][ T3832] __nla_validate_parse: 5 callbacks suppressed [ 56.079695][ T3832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.114'. [ 56.302169][ T3842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 56.438815][ T3841] loop1: detected capacity change from 0 to 128 [ 56.445935][ T3849] loop4: detected capacity change from 0 to 512 [ 56.454932][ T3841] FAT-fs (loop1): Directory bread(block 162) failed [ 56.462554][ T3841] FAT-fs (loop1): Directory bread(block 163) failed [ 56.494683][ T3849] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.513052][ T3841] FAT-fs (loop1): Directory bread(block 164) failed [ 56.557842][ T3849] EXT4-fs (loop4): mount failed [ 56.605809][ T3841] FAT-fs (loop1): Directory bread(block 165) failed [ 56.626205][ T3841] FAT-fs (loop1): Directory bread(block 166) failed [ 56.632894][ T3841] FAT-fs (loop1): Directory bread(block 167) failed [ 56.640420][ T3841] FAT-fs (loop1): Directory bread(block 168) failed [ 56.648512][ T3841] FAT-fs (loop1): Directory bread(block 169) failed [ 56.682120][ T3841] FAT-fs (loop1): Directory bread(block 162) failed [ 56.689677][ T3841] FAT-fs (loop1): Directory bread(block 163) failed [ 56.702853][ T3855] loop4: detected capacity change from 0 to 512 [ 56.712760][ T3841] syz.1.120: attempt to access beyond end of device [ 56.712760][ T3841] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 56.728151][ T3841] syz.1.120: attempt to access beyond end of device [ 56.728151][ T3841] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 56.743815][ T3855] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.122: error while reading EA inode 32 err=-116 [ 56.762805][ T3855] EXT4-fs (loop4): Remounting filesystem read-only [ 56.770643][ T3855] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 56.781525][ T3855] EXT4-fs (loop4): 1 orphan inode deleted [ 56.787962][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.954416][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.052608][ T3870] netlink: 'syz.4.125': attribute type 10 has an invalid length. [ 57.060665][ T3870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.125'. [ 57.125433][ T3872] netlink: 'syz.0.129': attribute type 4 has an invalid length. [ 57.708890][ T3900] loop1: detected capacity change from 0 to 2048 [ 57.890441][ T3900] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 57.902536][ T3900] FAT-fs (loop1): Filesystem has been set read-only [ 58.057774][ T3905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 58.114050][ T3908] loop4: detected capacity change from 0 to 512 [ 58.140808][ T3908] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.136: error while reading EA inode 32 err=-116 [ 58.167017][ T3908] EXT4-fs (loop4): Remounting filesystem read-only [ 58.178028][ T3908] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.190768][ T3908] EXT4-fs (loop4): 1 orphan inode deleted [ 58.198205][ T3908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.204170][ T3906] loop0: detected capacity change from 0 to 2048 [ 58.211715][ T3888] netlink: 'syz.1.126': attribute type 64 has an invalid length. [ 58.293114][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.361510][ T3906] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 58.371255][ T3906] FAT-fs (loop0): Filesystem has been set read-only [ 58.483002][ T3920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 58.499873][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 58.591192][ T3912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'. [ 58.601129][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 58.938796][ T3933] netlink: 'syz.3.144': attribute type 4 has an invalid length. [ 60.394886][ T3945] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 60.429808][ T3945] loop0: detected capacity change from 0 to 2048 [ 60.540952][ T3945] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 60.551871][ T3945] FAT-fs (loop0): Filesystem has been set read-only [ 60.573728][ T3943] netlink: 'syz.0.147': attribute type 64 has an invalid length. [ 60.594866][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 60.594885][ T29] audit: type=1400 audit(1762408079.689:1458): avc: denied { connect } for pid=3949 comm="syz.3.148" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.644261][ T3952] loop4: detected capacity change from 0 to 512 [ 60.683469][ T3954] pim6reg1: entered promiscuous mode [ 60.690726][ T3954] pim6reg1: entered allmulticast mode [ 60.709218][ T3952] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.149: error while reading EA inode 32 err=-116 [ 60.734674][ T3952] EXT4-fs (loop4): Remounting filesystem read-only [ 60.750989][ T3952] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 60.766267][ T3952] EXT4-fs (loop4): 1 orphan inode deleted [ 60.776717][ T3952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.800244][ T3950] loop3: detected capacity change from 0 to 512 [ 60.810760][ T3950] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.850365][ T3950] EXT4-fs (loop3): 1 orphan inode deleted [ 60.860176][ T3950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.882777][ T3950] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.901329][ T3957] FAULT_INJECTION: forcing a failure. [ 60.901329][ T3957] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.918678][ T3957] CPU: 1 UID: 0 PID: 3957 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.918714][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.918727][ T3957] Call Trace: [ 60.918736][ T3957] [ 60.918745][ T3957] __dump_stack+0x1d/0x30 [ 60.918840][ T3957] dump_stack_lvl+0xe8/0x140 [ 60.918925][ T3957] dump_stack+0x15/0x1b [ 60.918949][ T3957] should_fail_ex+0x265/0x280 [ 60.919048][ T3957] should_fail+0xb/0x20 [ 60.919065][ T3957] should_fail_usercopy+0x1a/0x20 [ 60.919093][ T3957] _copy_to_user+0x20/0xa0 [ 60.919179][ T3957] simple_read_from_buffer+0xb5/0x130 [ 60.919208][ T3957] proc_fail_nth_read+0x10e/0x150 [ 60.919250][ T3957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.919344][ T3957] vfs_read+0x1a8/0x770 [ 60.919368][ T3957] ? __rcu_read_unlock+0x4f/0x70 [ 60.919421][ T3957] ? __fget_files+0x184/0x1c0 [ 60.919452][ T3957] ksys_read+0xda/0x1a0 [ 60.919480][ T3957] __x64_sys_read+0x40/0x50 [ 60.919512][ T3957] x64_sys_call+0x27c0/0x3000 [ 60.919543][ T3957] do_syscall_64+0xd2/0x200 [ 60.919564][ T3957] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.920017][ T3957] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.920125][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.920148][ T3957] RIP: 0033:0x7f3e606ae0dc [ 60.920167][ T3957] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.920185][ T3957] RSP: 002b:00007f3e5f10f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.920274][ T3957] RAX: ffffffffffffffda RBX: 00007f3e60905fa0 RCX: 00007f3e606ae0dc [ 60.920292][ T3957] RDX: 000000000000000f RSI: 00007f3e5f10f0a0 RDI: 0000000000000009 [ 60.920347][ T3957] RBP: 00007f3e5f10f090 R08: 0000000000000000 R09: 0000000000000000 [ 60.920365][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.920379][ T3957] R13: 00007f3e60906038 R14: 00007f3e60905fa0 R15: 00007ffe302f3478 [ 60.920398][ T3957] [ 61.162492][ T3968] netlink: 'syz.1.150': attribute type 10 has an invalid length. [ 61.170755][ T3968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.150'. [ 61.182444][ T3950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.201244][ T3968] dummy0: entered promiscuous mode [ 61.228187][ T3968] bridge0: port 3(dummy0) entered blocking state [ 61.242062][ T3968] bridge0: port 3(dummy0) entered disabled state [ 61.269229][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.288468][ T3968] dummy0: entered allmulticast mode [ 61.295187][ T3968] bridge0: port 3(dummy0) entered blocking state [ 61.303520][ T3968] bridge0: port 3(dummy0) entered forwarding state [ 61.342052][ T29] audit: type=1326 audit(1762408080.409:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3974 comm="syz.0.156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f03a881f6c9 code=0x0 [ 61.369145][ T29] audit: type=1400 audit(1762408080.409:1460): avc: denied { create } for pid=3974 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.431260][ T3985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 61.443203][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 61.492921][ T3985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.158'. [ 61.504095][ T3985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 61.523249][ T3990] loop3: detected capacity change from 0 to 1024 [ 61.533303][ T3990] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.547266][ T3990] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 61.560372][ T3990] JBD2: no valid journal superblock found [ 61.567379][ T3990] EXT4-fs (loop3): Could not load journal inode [ 61.590724][ T29] audit: type=1326 audit(1762408080.659:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.615955][ T29] audit: type=1326 audit(1762408080.659:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.643150][ T29] audit: type=1326 audit(1762408080.659:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.669593][ T29] audit: type=1326 audit(1762408080.659:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.695637][ T29] audit: type=1326 audit(1762408080.659:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.722237][ T29] audit: type=1326 audit(1762408080.669:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.749158][ T29] audit: type=1326 audit(1762408080.669:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3994 comm="syz.0.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 61.834284][ T3992] loop1: detected capacity change from 0 to 1024 [ 61.850353][ T3998] loop4: detected capacity change from 0 to 2048 [ 61.863447][ T3992] EXT4-fs: Ignoring removed orlov option [ 61.916010][ T3998] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 61.926806][ T3998] FAT-fs (loop4): Filesystem has been set read-only [ 61.936705][ T3992] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.960140][ T3998] netlink: 'syz.4.155': attribute type 64 has an invalid length. [ 61.972500][ T3992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e018, mo2=0000] [ 61.999092][ T3992] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.161: lblock 2 mapped to illegal pblock 2 (length 1) [ 62.046430][ T3992] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.161: lblock 0 mapped to illegal pblock 48 (length 1) [ 62.147568][ T3992] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.161: Failed to acquire dquot type 0 [ 62.212516][ T3992] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 62.280274][ T3992] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.161: mark_inode_dirty error [ 62.301852][ T3992] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 62.331590][ T3992] EXT4-fs (loop1): 1 orphan inode deleted [ 62.341811][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.350285][ T3992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.361391][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 62.422280][ T3992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.463449][ T3992] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.161: Invalid inode table block 1 in block_group 0 [ 62.489433][ T3992] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 62.519001][ T3992] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.161: mark_inode_dirty error [ 62.649161][ T4017] loop0: detected capacity change from 0 to 128 [ 62.658264][ T4017] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.731901][ T4017] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.789644][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 62.837832][ T159] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.878776][ T4021] FAULT_INJECTION: forcing a failure. [ 62.878776][ T4021] name failslab, interval 1, probability 0, space 0, times 0 [ 62.895016][ T4021] CPU: 0 UID: 0 PID: 4021 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.895062][ T4021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.895079][ T4021] Call Trace: [ 62.895089][ T4021] [ 62.895105][ T4021] __dump_stack+0x1d/0x30 [ 62.895129][ T4021] dump_stack_lvl+0xe8/0x140 [ 62.895228][ T4021] dump_stack+0x15/0x1b [ 62.895247][ T4021] should_fail_ex+0x265/0x280 [ 62.895282][ T4021] should_failslab+0x8c/0xb0 [ 62.895312][ T4021] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 62.895353][ T4021] ? __alloc_skb+0x101/0x320 [ 62.895435][ T4021] __alloc_skb+0x101/0x320 [ 62.895482][ T4021] alloc_uevent_skb+0x5c/0x120 [ 62.895548][ T4021] kobject_uevent_net_broadcast+0xfb/0x410 [ 62.895600][ T4021] kobject_uevent_env+0x43d/0x570 [ 62.895678][ T4021] kobject_uevent+0x1d/0x30 [ 62.895712][ T4021] __kobject_del+0x88/0x190 [ 62.895859][ T4021] kobject_put+0x127/0x190 [ 62.895891][ T4021] net_rx_queue_update_kobjects+0x49b/0x540 [ 62.895934][ T4021] netdev_unregister_kobject+0xbf/0x270 [ 62.895993][ T4021] unregister_netdevice_many_notify+0x1299/0x1690 [ 62.896109][ T4021] unregister_netdevice_queue+0x1f5/0x220 [ 62.896233][ T4021] __tun_detach+0x82c/0xb30 [ 62.896282][ T4021] ? __pfx_tun_chr_close+0x10/0x10 [ 62.896315][ T4021] tun_chr_close+0x5a/0x100 [ 62.896409][ T4021] __fput+0x29b/0x650 [ 62.896455][ T4021] fput_close_sync+0x6e/0x120 [ 62.897047][ T4021] __x64_sys_close+0x56/0xf0 [ 62.897080][ T4021] x64_sys_call+0x273c/0x3000 [ 62.897111][ T4021] do_syscall_64+0xd2/0x200 [ 62.897136][ T4021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.897234][ T4021] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.897336][ T4021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.897409][ T4021] RIP: 0033:0x7fd1b815f6c9 [ 62.897429][ T4021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.897452][ T4021] RSP: 002b:00007fd1b6bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 62.897471][ T4021] RAX: ffffffffffffffda RBX: 00007fd1b83b5fa0 RCX: 00007fd1b815f6c9 [ 62.897484][ T4021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.897498][ T4021] RBP: 00007fd1b6bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.897522][ T4021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.897533][ T4021] R13: 00007fd1b83b6038 R14: 00007fd1b83b5fa0 R15: 00007ffd90fb38f8 [ 62.897551][ T4021] [ 63.244851][ T4027] capability: warning: `syz.0.173' uses deprecated v2 capabilities in a way that may be insecure [ 63.257159][ T4019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.272638][ T4019] futex_wake_op: syz.2.170 tries to shift op by 36; fix this program [ 63.347050][ T4030] netlink: 'syz.1.174': attribute type 4 has an invalid length. [ 63.595892][ T4050] loop1: detected capacity change from 0 to 1024 [ 63.620864][ T4043] loop0: detected capacity change from 0 to 512 [ 63.634256][ T4043] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.181: EA inode hash validation failed [ 63.651085][ T4050] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 63.652100][ T4043] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.181: corrupted inode contents [ 63.692051][ T4043] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.181: mark_inode_dirty error [ 63.705637][ T4043] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.181: corrupted inode contents [ 63.723353][ T4043] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.181: mark_inode_dirty error [ 63.736886][ T4050] JBD2: no valid journal superblock found [ 63.742670][ T4050] EXT4-fs (loop1): Could not load journal inode [ 63.784822][ T4043] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.181: mark inode dirty (error -117) [ 63.821891][ T4046] netlink: 'syz.1.182': attribute type 3 has an invalid length. [ 63.843745][ T4043] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 63.861722][ T4043] EXT4-fs (loop0): 1 orphan inode deleted [ 63.868171][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.926573][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.057102][ T4071] loop2: detected capacity change from 0 to 2048 [ 64.134211][ T4071] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 64.144889][ T4071] FAT-fs (loop2): Filesystem has been set read-only [ 64.183881][ T4074] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 64.260287][ T4079] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 64.268413][ T4079] netlink: 152 bytes leftover after parsing attributes in process `syz.1.199'. [ 64.360973][ T4078] loop0: detected capacity change from 0 to 2048 [ 64.495261][ T4078] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 64.505443][ T4078] FAT-fs (loop0): Filesystem has been set read-only [ 64.520722][ T4078] netlink: 'syz.0.187': attribute type 64 has an invalid length. [ 64.929083][ T4098] loop2: detected capacity change from 0 to 1024 [ 64.936465][ T4098] ext4: Unknown parameter 'uid<00000000000000000000' [ 64.950944][ T4098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.196'. [ 64.991168][ T4098] loop2: detected capacity change from 0 to 512 [ 64.998386][ T4107] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 65.012121][ T4107] netlink: 44 bytes leftover after parsing attributes in process `syz.4.194'. [ 65.073559][ T4098] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.196: Failed to acquire dquot type 1 [ 65.120001][ T4098] EXT4-fs (loop2): 1 truncate cleaned up [ 65.132746][ T4098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.158294][ T4098] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.180860][ T4098] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.265993][ T4119] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.291850][ T4119] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 65.366591][ T4119] loop2: detected capacity change from 0 to 2048 [ 65.431924][ T4119] loop2: p2 p3 p7 [ 65.532768][ T4127] FAULT_INJECTION: forcing a failure. [ 65.532768][ T4127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.546355][ T4127] CPU: 0 UID: 0 PID: 4127 Comm: syz.2.206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.546393][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.546410][ T4127] Call Trace: [ 65.546419][ T4127] [ 65.546428][ T4127] __dump_stack+0x1d/0x30 [ 65.546476][ T4127] dump_stack_lvl+0xe8/0x140 [ 65.546500][ T4127] dump_stack+0x15/0x1b [ 65.546524][ T4127] should_fail_ex+0x265/0x280 [ 65.546584][ T4127] should_fail+0xb/0x20 [ 65.546616][ T4127] should_fail_usercopy+0x1a/0x20 [ 65.546643][ T4127] _copy_to_user+0x20/0xa0 [ 65.546738][ T4127] simple_read_from_buffer+0xb5/0x130 [ 65.546950][ T4127] proc_fail_nth_read+0x10e/0x150 [ 65.547021][ T4127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.547053][ T4127] vfs_read+0x1a8/0x770 [ 65.547135][ T4127] ? __rcu_read_unlock+0x4f/0x70 [ 65.547172][ T4127] ? __fget_files+0x184/0x1c0 [ 65.547213][ T4127] ksys_read+0xda/0x1a0 [ 65.547248][ T4127] __x64_sys_read+0x40/0x50 [ 65.547293][ T4127] x64_sys_call+0x27c0/0x3000 [ 65.547397][ T4127] do_syscall_64+0xd2/0x200 [ 65.547473][ T4127] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.547506][ T4127] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.547538][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.547637][ T4127] RIP: 0033:0x7f3e606ae0dc [ 65.547671][ T4127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.547763][ T4127] RSP: 002b:00007f3e5f10f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.547788][ T4127] RAX: ffffffffffffffda RBX: 00007f3e60905fa0 RCX: 00007f3e606ae0dc [ 65.547804][ T4127] RDX: 000000000000000f RSI: 00007f3e5f10f0a0 RDI: 0000000000000004 [ 65.547820][ T4127] RBP: 00007f3e5f10f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.547835][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 65.547856][ T4127] R13: 00007f3e60906038 R14: 00007f3e60905fa0 R15: 00007ffe302f3478 [ 65.547881][ T4127] [ 65.834251][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 65.834270][ T29] audit: type=1400 audit(1762408084.929:1700): avc: denied { ioctl } for pid=4134 comm="syz.2.209" path="socket:[7291]" dev="sockfs" ino=7291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.888399][ T4136] syzkaller1: entered promiscuous mode [ 65.889005][ T4138] loop4: detected capacity change from 0 to 512 [ 65.894220][ T4136] syzkaller1: entered allmulticast mode [ 65.901461][ T4138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.906411][ T29] audit: type=1400 audit(1762408084.979:1701): avc: denied { bind } for pid=4134 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.919702][ T4138] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.210: corrupted xattr entries [ 65.954932][ T4138] EXT4-fs (loop4): Remounting filesystem read-only [ 65.964444][ T4138] EXT4-fs (loop4): 1 truncate cleaned up [ 65.983192][ T4138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.018357][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.041318][ T4144] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 66.050043][ T29] audit: type=1326 audit(1762408085.139:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.050397][ T29] audit: type=1326 audit(1762408085.139:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.108209][ T29] audit: type=1326 audit(1762408085.199:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.137816][ T29] audit: type=1326 audit(1762408085.199:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.162830][ T29] audit: type=1326 audit(1762408085.229:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.196040][ T29] audit: type=1326 audit(1762408085.289:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.221465][ T29] audit: type=1326 audit(1762408085.289:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.248014][ T29] audit: type=1326 audit(1762408085.289:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fd1b815f6c9 code=0x7ffc0000 [ 66.438335][ T4158] loop0: detected capacity change from 0 to 764 [ 66.472059][ T4158] iso9660: Unknown parameter 'overrideRockperm' [ 66.506388][ T4165] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 66.515687][ T4161] loop4: detected capacity change from 0 to 2048 [ 66.515830][ T4165] netlink: 44 bytes leftover after parsing attributes in process `syz.1.218'. [ 66.610262][ T4161] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 66.620045][ T4161] FAT-fs (loop4): Filesystem has been set read-only [ 66.695701][ T4171] loop2: detected capacity change from 0 to 2048 [ 66.755615][ T4171] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 66.766728][ T4171] FAT-fs (loop2): Filesystem has been set read-only [ 66.786594][ T4154] netlink: 'syz.4.213': attribute type 64 has an invalid length. [ 66.825029][ T4176] loop0: detected capacity change from 0 to 1024 [ 66.836133][ T4176] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.848741][ T4176] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.864081][ T4176] JBD2: no valid journal superblock found [ 66.870822][ T4176] EXT4-fs (loop0): Could not load journal inode [ 67.344999][ T4180] loop1: detected capacity change from 0 to 1764 [ 67.469628][ T4186] netlink: 'syz.3.226': attribute type 4 has an invalid length. [ 67.582775][ T4195] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 67.716738][ T4201] loop3: detected capacity change from 0 to 1024 [ 67.742193][ T4201] ext4: Unknown parameter 'uid<00000000000000000000' [ 67.774709][ T4201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 67.818794][ T4201] loop3: detected capacity change from 0 to 512 [ 67.843025][ T4201] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.232: Failed to acquire dquot type 1 [ 67.862384][ T4201] EXT4-fs (loop3): 1 truncate cleaned up [ 67.880486][ T4201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.000051][ T4201] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.032332][ T4201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.269646][ T4216] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 68.304844][ T4216] loop4: detected capacity change from 0 to 2048 [ 68.367988][ T4216] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 68.377662][ T4216] FAT-fs (loop4): Filesystem has been set read-only [ 68.461062][ T4216] netlink: 'syz.4.234': attribute type 64 has an invalid length. [ 68.600819][ T4215] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 68.608837][ T4215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.235'. [ 68.982509][ T4228] loop2: detected capacity change from 0 to 2048 [ 68.997579][ T4228] journal_path: Non-blockdev passed as './file2' [ 69.004205][ T4228] EXT4-fs: error: could not find journal device path [ 69.040286][ T4235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 69.053201][ T4228] SELinux: policydb magic number 0xffff does not match expected magic number 0xf97cff8c [ 69.067787][ T4228] SELinux: failed to load policy [ 69.232981][ T4251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 69.247128][ T4252] loop2: detected capacity change from 0 to 512 [ 69.273288][ T4244] netlink: 'syz.3.244': attribute type 21 has an invalid length. [ 69.281237][ T4244] netlink: 'syz.3.244': attribute type 15 has an invalid length. [ 69.289086][ T4244] netlink: 156 bytes leftover after parsing attributes in process `syz.3.244'. [ 69.298251][ T4244] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.333275][ T4252] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.245: error while reading EA inode 32 err=-116 [ 69.358381][ T4252] EXT4-fs (loop2): Remounting filesystem read-only [ 69.370420][ T4244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.371763][ T4252] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 69.379253][ T4244] IPv6: NLM_F_CREATE should be set when creating new route [ 69.397575][ T4244] IPv6: NLM_F_CREATE should be set when creating new route [ 69.405349][ T4244] IPv6: NLM_F_CREATE should be set when creating new route [ 69.413834][ T4252] EXT4-fs (loop2): 1 orphan inode deleted [ 69.420510][ T4252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.451555][ T4255] loop4: detected capacity change from 0 to 2048 [ 69.510482][ T4255] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 69.520258][ T4255] FAT-fs (loop4): Filesystem has been set read-only [ 69.533549][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.538680][ T4255] netlink: 'syz.4.243': attribute type 64 has an invalid length. [ 69.621338][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 69.660790][ T4266] team0: Port device team_slave_1 removed [ 70.265409][ T4281] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 70.271797][ T4281] syzkaller0: linktype set to 280 [ 70.367984][ T4291] loop0: detected capacity change from 0 to 512 [ 70.386136][ T4291] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.258: error while reading EA inode 32 err=-116 [ 70.404302][ T4295] loop1: detected capacity change from 0 to 512 [ 70.411042][ T4296] netlink: 'syz.4.256': attribute type 10 has an invalid length. [ 70.419164][ T4296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'. [ 70.429220][ T4295] EXT4-fs: Ignoring removed oldalloc option [ 70.452104][ T4295] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.259: Parent and EA inode have the same ino 15 [ 70.465333][ T4291] EXT4-fs (loop0): Remounting filesystem read-only [ 70.472398][ T4295] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.259: Parent and EA inode have the same ino 15 [ 70.484802][ T4291] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.495703][ T4295] EXT4-fs (loop1): 1 orphan inode deleted [ 70.501584][ T4291] EXT4-fs (loop0): 1 orphan inode deleted [ 70.502316][ T4295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.508348][ T4291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.604046][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.613761][ T4311] loop4: detected capacity change from 0 to 1024 [ 70.614454][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.631447][ T4311] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.642711][ T4311] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.663612][ T4311] JBD2: no valid journal superblock found [ 70.669561][ T4311] EXT4-fs (loop4): Could not load journal inode [ 70.682992][ T4313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.264'. [ 70.691949][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 71.059644][ T4331] loop1: detected capacity change from 0 to 2048 [ 71.138524][ T4331] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 71.148154][ T4331] FAT-fs (loop1): Filesystem has been set read-only [ 71.188960][ T4329] netlink: 'syz.1.265': attribute type 64 has an invalid length. [ 71.704762][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 71.704780][ T29] audit: type=1400 audit(1762408090.799:1855): avc: denied { create } for pid=4336 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.739278][ T29] audit: type=1400 audit(1762408090.829:1856): avc: denied { getopt } for pid=4336 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.779310][ T29] audit: type=1400 audit(1762408090.829:1857): avc: denied { name_connect } for pid=4340 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 71.800160][ T29] audit: type=1400 audit(1762408090.869:1858): avc: denied { ioctl } for pid=4336 comm="syz.2.272" path="socket:[7683]" dev="sockfs" ino=7683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.835755][ T4343] xt_SECMARK: invalid mode: 2 [ 71.866294][ T4343] loop3: detected capacity change from 0 to 1024 [ 71.871742][ T29] audit: type=1400 audit(1762408090.889:1859): avc: denied { ioctl } for pid=4342 comm="syz.3.274" path="socket:[7708]" dev="sockfs" ino=7708 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.902448][ T4347] loop2: detected capacity change from 0 to 512 [ 71.932180][ T4343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.932479][ T4347] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.275: error while reading EA inode 32 err=-116 [ 71.951811][ T4343] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.971683][ T29] audit: type=1326 audit(1762408091.059:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 71.995662][ T29] audit: type=1326 audit(1762408091.059:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 72.019693][ T29] audit: type=1326 audit(1762408091.059:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 72.043811][ T29] audit: type=1326 audit(1762408091.059:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 72.069980][ T29] audit: type=1326 audit(1762408091.059:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4350 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 72.070336][ T4347] EXT4-fs (loop2): Remounting filesystem read-only [ 72.103225][ T4347] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 72.145085][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.161725][ T4347] EXT4-fs (loop2): 1 orphan inode deleted [ 72.167923][ T4347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.239848][ T4362] loop1: detected capacity change from 0 to 2048 [ 72.300195][ T4362] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 72.310191][ T4362] FAT-fs (loop1): Filesystem has been set read-only [ 72.353560][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.631438][ T4376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.285'. [ 72.640631][ T4376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 72.840601][ T4380] loop2: detected capacity change from 0 to 2048 [ 72.944520][ T4380] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 72.954330][ T4380] FAT-fs (loop2): Filesystem has been set read-only [ 73.008355][ T4386] FAULT_INJECTION: forcing a failure. [ 73.008355][ T4386] name failslab, interval 1, probability 0, space 0, times 0 [ 73.021510][ T4386] CPU: 1 UID: 0 PID: 4386 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.021621][ T4386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.021637][ T4386] Call Trace: [ 73.021644][ T4386] [ 73.021652][ T4386] __dump_stack+0x1d/0x30 [ 73.021681][ T4386] dump_stack_lvl+0xe8/0x140 [ 73.021732][ T4386] dump_stack+0x15/0x1b [ 73.021753][ T4386] should_fail_ex+0x265/0x280 [ 73.021784][ T4386] should_failslab+0x8c/0xb0 [ 73.021816][ T4386] kmem_cache_alloc_noprof+0x50/0x480 [ 73.021928][ T4386] ? security_inode_alloc+0x37/0x100 [ 73.021954][ T4386] security_inode_alloc+0x37/0x100 [ 73.021977][ T4386] inode_init_always_gfp+0x4b7/0x500 [ 73.022079][ T4386] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 73.022107][ T4386] alloc_inode+0x58/0x170 [ 73.022136][ T4386] new_inode+0x1d/0xe0 [ 73.022168][ T4386] __debugfs_create_file+0x109/0x330 [ 73.022193][ T4386] debugfs_create_file_full+0x3f/0x60 [ 73.022263][ T4386] ? __pfx_veth_setup+0x10/0x10 [ 73.022293][ T4386] ref_tracker_dir_debugfs+0x100/0x1e0 [ 73.022347][ T4386] alloc_netdev_mqs+0x1a7/0xa50 [ 73.022385][ T4386] rtnl_create_link+0x239/0x710 [ 73.022428][ T4386] rtnl_newlink_create+0x14c/0x620 [ 73.022464][ T4386] ? security_capable+0x83/0x90 [ 73.022569][ T4386] ? netlink_ns_capable+0x86/0xa0 [ 73.022606][ T4386] rtnl_newlink+0xf29/0x12d0 [ 73.022665][ T4386] ? __pfx_rtnl_newlink+0x10/0x10 [ 73.022694][ T4386] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 73.022779][ T4386] netlink_rcv_skb+0x123/0x220 [ 73.022822][ T4386] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 73.022861][ T4386] rtnetlink_rcv+0x1c/0x30 [ 73.022893][ T4386] netlink_unicast+0x5c0/0x690 [ 73.023004][ T4386] netlink_sendmsg+0x58b/0x6b0 [ 73.023026][ T4386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.023052][ T4386] __sock_sendmsg+0x145/0x180 [ 73.023084][ T4386] ____sys_sendmsg+0x31e/0x4e0 [ 73.023128][ T4386] ___sys_sendmsg+0x17b/0x1d0 [ 73.023229][ T4386] __x64_sys_sendmsg+0xd4/0x160 [ 73.023257][ T4386] x64_sys_call+0x191e/0x3000 [ 73.023282][ T4386] do_syscall_64+0xd2/0x200 [ 73.023303][ T4386] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.023339][ T4386] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.023397][ T4386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.023419][ T4386] RIP: 0033:0x7f03a881f6c9 [ 73.023439][ T4386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.023461][ T4386] RSP: 002b:00007f03a727f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.023480][ T4386] RAX: ffffffffffffffda RBX: 00007f03a8a75fa0 RCX: 00007f03a881f6c9 [ 73.023492][ T4386] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 73.023519][ T4386] RBP: 00007f03a727f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.023535][ T4386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.023551][ T4386] R13: 00007f03a8a76038 R14: 00007f03a8a75fa0 R15: 00007ffe05bd8918 [ 73.023575][ T4386] [ 73.092927][ T4377] netlink: 'syz.2.282': attribute type 64 has an invalid length. [ 73.094096][ T4386] debugfs: out of free dentries, can not create file 'netdev@ffff888119c7b558' [ 73.493705][ T4393] loop1: detected capacity change from 0 to 512 [ 73.513804][ T4393] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.290: error while reading EA inode 32 err=-116 [ 73.556021][ T4393] EXT4-fs (loop1): Remounting filesystem read-only [ 73.576400][ T4393] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 73.621678][ T4393] EXT4-fs (loop1): 1 orphan inode deleted [ 73.640070][ T4393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.709364][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.782370][ T4405] loop3: detected capacity change from 0 to 512 [ 73.812587][ T4405] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.296: couldn't read orphan inode 26 (err -116) [ 73.825165][ T4409] xt_SECMARK: invalid mode: 2 [ 73.825285][ T4405] EXT4-fs (loop3): Remounting filesystem read-only [ 73.833481][ T4412] netlink: 'syz.0.299': attribute type 4 has an invalid length. [ 73.837142][ T4405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.844648][ T4412] netlink: 152 bytes leftover after parsing attributes in process `syz.0.299'. [ 73.857578][ T4405] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.896861][ T4409] loop1: detected capacity change from 0 to 1024 [ 73.920058][ T4409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.936206][ T4409] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.959402][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.983500][ T4431] loop2: detected capacity change from 0 to 512 [ 73.998956][ T4431] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.305: error while reading EA inode 32 err=-116 [ 74.012203][ T4431] EXT4-fs (loop2): Remounting filesystem read-only [ 74.122777][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.133411][ T4431] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 74.144332][ T4431] EXT4-fs (loop2): 1 orphan inode deleted [ 74.162780][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.227234][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.340048][ T4455] xt_SECMARK: invalid mode: 2 [ 74.392209][ T4457] loop0: detected capacity change from 0 to 2048 [ 74.404780][ T4455] loop3: detected capacity change from 0 to 1024 [ 74.468511][ T4457] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 74.478088][ T4457] FAT-fs (loop0): Filesystem has been set read-only [ 74.496530][ T4447] netlink: 'syz.0.306': attribute type 64 has an invalid length. [ 74.499429][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.535229][ T4455] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.560667][ T4455] FAULT_INJECTION: forcing a failure. [ 74.560667][ T4455] name failslab, interval 1, probability 0, space 0, times 0 [ 74.573604][ T4455] CPU: 1 UID: 0 PID: 4455 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.573652][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.573669][ T4455] Call Trace: [ 74.573676][ T4455] [ 74.573684][ T4455] __dump_stack+0x1d/0x30 [ 74.573781][ T4455] dump_stack_lvl+0xe8/0x140 [ 74.573802][ T4455] dump_stack+0x15/0x1b [ 74.573903][ T4455] should_fail_ex+0x265/0x280 [ 74.573927][ T4455] should_failslab+0x8c/0xb0 [ 74.573966][ T4455] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 74.574038][ T4455] ? alloc_vmap_area+0x236/0xe80 [ 74.574072][ T4455] alloc_vmap_area+0x236/0xe80 [ 74.574114][ T4455] ? should_failslab+0x8c/0xb0 [ 74.574191][ T4455] ? __kmalloc_cache_node_noprof+0x2b2/0x4a0 [ 74.574224][ T4455] __get_vm_area_node+0x173/0x1d0 [ 74.574336][ T4455] __vmalloc_node_range_noprof+0x28c/0xed0 [ 74.574371][ T4455] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.574468][ T4455] ? __rcu_read_unlock+0x34/0x70 [ 74.574497][ T4455] ? cred_has_capability+0x210/0x280 [ 74.574595][ T4455] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.574687][ T4455] __vmalloc_noprof+0x83/0xc0 [ 74.574718][ T4455] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.574804][ T4455] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.574845][ T4455] ? bpf_prog_alloc+0x2a/0x150 [ 74.574889][ T4455] bpf_prog_alloc+0x3c/0x150 [ 74.574982][ T4455] bpf_prog_load+0x506/0x1100 [ 74.575151][ T4455] ? security_bpf+0x2b/0x90 [ 74.575188][ T4455] __sys_bpf+0x469/0x7c0 [ 74.575221][ T4455] __x64_sys_bpf+0x41/0x50 [ 74.575279][ T4455] x64_sys_call+0x2aee/0x3000 [ 74.575345][ T4455] do_syscall_64+0xd2/0x200 [ 74.575364][ T4455] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.575392][ T4455] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.575480][ T4455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.575502][ T4455] RIP: 0033:0x7f12ed91f6c9 [ 74.575522][ T4455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.575568][ T4455] RSP: 002b:00007f12ec387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.575593][ T4455] RAX: ffffffffffffffda RBX: 00007f12edb75fa0 RCX: 00007f12ed91f6c9 [ 74.575654][ T4455] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000005 [ 74.575670][ T4455] RBP: 00007f12ec387090 R08: 0000000000000000 R09: 0000000000000000 [ 74.575682][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.575694][ T4455] R13: 00007f12edb76038 R14: 00007f12edb75fa0 R15: 00007ffe890eb7f8 [ 74.575711][ T4455] [ 74.575720][ T4455] syz.3.310: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 74.855026][ T4455] CPU: 1 UID: 0 PID: 4455 Comm: syz.3.310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.855062][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.855112][ T4455] Call Trace: [ 74.855119][ T4455] [ 74.855127][ T4455] __dump_stack+0x1d/0x30 [ 74.855149][ T4455] dump_stack_lvl+0xe8/0x140 [ 74.855170][ T4455] dump_stack+0x15/0x1b [ 74.855193][ T4455] warn_alloc+0x12b/0x1a0 [ 74.855249][ T4455] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 74.855415][ T4455] ? __rcu_read_unlock+0x34/0x70 [ 74.855454][ T4455] ? cred_has_capability+0x210/0x280 [ 74.855492][ T4455] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.855533][ T4455] __vmalloc_noprof+0x83/0xc0 [ 74.855620][ T4455] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.855707][ T4455] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 74.855740][ T4455] ? bpf_prog_alloc+0x2a/0x150 [ 74.855847][ T4455] bpf_prog_alloc+0x3c/0x150 [ 74.855902][ T4455] bpf_prog_load+0x506/0x1100 [ 74.855938][ T4455] ? security_bpf+0x2b/0x90 [ 74.855975][ T4455] __sys_bpf+0x469/0x7c0 [ 74.856011][ T4455] __x64_sys_bpf+0x41/0x50 [ 74.856051][ T4455] x64_sys_call+0x2aee/0x3000 [ 74.856074][ T4455] do_syscall_64+0xd2/0x200 [ 74.856094][ T4455] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.856186][ T4455] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.856240][ T4455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.856261][ T4455] RIP: 0033:0x7f12ed91f6c9 [ 74.856275][ T4455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.856299][ T4455] RSP: 002b:00007f12ec387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.856323][ T4455] RAX: ffffffffffffffda RBX: 00007f12edb75fa0 RCX: 00007f12ed91f6c9 [ 74.856340][ T4455] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000005 [ 74.856407][ T4455] RBP: 00007f12ec387090 R08: 0000000000000000 R09: 0000000000000000 [ 74.856423][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.856439][ T4455] R13: 00007f12edb76038 R14: 00007f12edb75fa0 R15: 00007ffe890eb7f8 [ 74.856505][ T4455] [ 74.856522][ T4455] Mem-Info: [ 75.087350][ T4455] active_anon:7075 inactive_anon:1 isolated_anon:0 [ 75.087350][ T4455] active_file:8834 inactive_file:2341 isolated_file:0 [ 75.087350][ T4455] unevictable:9 dirty:392 writeback:0 [ 75.087350][ T4455] slab_reclaimable:3129 slab_unreclaimable:14596 [ 75.087350][ T4455] mapped:33202 shmem:3170 pagetables:1071 [ 75.087350][ T4455] sec_pagetables:0 bounce:0 [ 75.087350][ T4455] kernel_misc_reclaimable:0 [ 75.087350][ T4455] free:1893030 free_pcp:10717 free_cma:0 [ 75.133105][ T4455] Node 0 active_anon:28300kB inactive_anon:4kB active_file:35336kB inactive_file:9364kB unevictable:36kB isolated(anon):0kB isolated(file):0kB mapped:132808kB dirty:1568kB writeback:0kB shmem:12680kB kernel_stack:3312kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 75.161894][ T4455] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 75.192049][ T4455] lowmem_reserve[]: 0 2881 7859 7859 [ 75.197489][ T4455] Node 0 DMA32 free:2946732kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950260kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 75.229511][ T4455] lowmem_reserve[]: 0 0 4978 4978 [ 75.234950][ T4455] Node 0 Normal free:4610028kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28416kB inactive_anon:4kB active_file:35336kB inactive_file:9364kB unevictable:36kB writepending:1568kB zspages:0kB present:5242880kB managed:5098240kB mlocked:36kB bounce:0kB free_pcp:39164kB local_pcp:1172kB free_cma:0kB [ 75.269414][ T4455] lowmem_reserve[]: 0 0 0 0 [ 75.274304][ T4455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 75.287392][ T4455] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946732kB [ 75.304001][ T4455] Node 0 Normal: 532*4kB (UME) 463*8kB (UM) 303*16kB (UM) 213*32kB (UME) 137*64kB (UME) 84*128kB (UME) 51*256kB (UM) 46*512kB (UM) 16*1024kB (UME) 5*2048kB (UME) 1101*4096kB (UM) = 4609944kB [ 75.323750][ T4455] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB [ 75.333684][ T4455] 14339 total pagecache pages [ 75.339522][ T4455] 1 pages in swap cache [ 75.343725][ T4455] Free swap = 124992kB [ 75.348060][ T4455] Total swap = 124996kB [ 75.352373][ T4455] 2097051 pages RAM [ 75.356280][ T4455] 0 pages HighMem/MovableOnly [ 75.361152][ T4455] 81086 pages reserved [ 75.413507][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.452512][ T4477] loop3: detected capacity change from 0 to 512 [ 75.467029][ T4477] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.316: iget: bad i_size value: 38620345925642 [ 75.509948][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.317'. [ 75.520678][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 75.567582][ T4477] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.316: couldn't read orphan inode 15 (err -117) [ 75.596654][ T4477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.622681][ T4477] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.316: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 75.923332][ T4496] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 75.958568][ T4496] loop4: detected capacity change from 0 to 2048 [ 76.338960][ T4504] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 76.471148][ T4504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4504 comm=syz.0.324 [ 76.642725][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 76.656950][ T4507] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 76.664794][ T4507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'. [ 76.695577][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.721426][ T4496] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 76.730976][ T4496] FAT-fs (loop4): Filesystem has been set read-only [ 76.759128][ T4490] netlink: 'syz.4.319': attribute type 64 has an invalid length. [ 76.822876][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 76.822897][ T29] audit: type=1326 audit(1762408095.909:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12ed916567 code=0x7ffc0000 [ 76.854861][ T29] audit: type=1326 audit(1762408095.909:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12ed8bb779 code=0x7ffc0000 [ 76.881883][ T29] audit: type=1326 audit(1762408095.909:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12ed916567 code=0x7ffc0000 [ 76.907337][ T29] audit: type=1326 audit(1762408095.909:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12ed8bb779 code=0x7ffc0000 [ 76.931160][ T29] audit: type=1326 audit(1762408095.909:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12ed916567 code=0x7ffc0000 [ 76.956011][ T29] audit: type=1326 audit(1762408095.909:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12ed8bb779 code=0x7ffc0000 [ 76.980092][ T29] audit: type=1326 audit(1762408095.909:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12ed916567 code=0x7ffc0000 [ 77.003504][ T29] audit: type=1326 audit(1762408095.909:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12ed8bb779 code=0x7ffc0000 [ 77.027151][ T29] audit: type=1326 audit(1762408095.909:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12ed916567 code=0x7ffc0000 [ 77.051285][ T29] audit: type=1326 audit(1762408095.909:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12ed8bb779 code=0x7ffc0000 [ 77.137279][ T4517] loop1: detected capacity change from 0 to 512 [ 77.151383][ T4517] journal_path: Non-blockdev passed as './bus' [ 77.158649][ T4517] EXT4-fs: error: could not find journal device path [ 77.313807][ T4524] loop3: detected capacity change from 0 to 512 [ 77.325764][ T4524] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.330: error while reading EA inode 32 err=-116 [ 77.361790][ T4524] EXT4-fs (loop3): Remounting filesystem read-only [ 77.381677][ T4524] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 77.412070][ T4524] EXT4-fs (loop3): 1 orphan inode deleted [ 77.425157][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.545136][ T4542] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 77.554539][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.1.336'. [ 77.563697][ T4544] netlink: 'syz.2.337': attribute type 10 has an invalid length. [ 77.573078][ T4544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 77.590807][ T4544] dummy0: entered promiscuous mode [ 77.601194][ T4544] bridge0: port 3(dummy0) entered blocking state [ 77.608274][ T4544] bridge0: port 3(dummy0) entered disabled state [ 77.633129][ T4544] dummy0: entered allmulticast mode [ 77.641060][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.656791][ T4544] bridge0: port 3(dummy0) entered blocking state [ 77.664717][ T4544] bridge0: port 3(dummy0) entered forwarding state [ 77.712260][ T4552] sit0: entered promiscuous mode [ 77.720111][ T4553] netlink: 3 bytes leftover after parsing attributes in process `syz.4.341'. [ 77.732280][ T4552] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 77.741544][ T4552] netlink: 1 bytes leftover after parsing attributes in process `syz.4.341'. [ 77.767046][ T4553] 0X: renamed from caif0 [ 77.784510][ T4553] 0X: entered allmulticast mode [ 77.790184][ T4553] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 78.021094][ T4571] netlink: 'syz.1.348': attribute type 4 has an invalid length. [ 78.029236][ T4571] netlink: 152 bytes leftover after parsing attributes in process `syz.1.348'. [ 78.106440][ T4579] loop3: detected capacity change from 0 to 2048 [ 78.165006][ T4579] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 78.176412][ T4579] FAT-fs (loop3): Filesystem has been set read-only [ 78.281441][ T4586] loop0: detected capacity change from 0 to 2048 [ 78.337749][ T4586] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 78.347451][ T4586] FAT-fs (loop0): Filesystem has been set read-only [ 78.493981][ T4600] loop2: detected capacity change from 0 to 1024 [ 78.508008][ T4600] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 78.519721][ T4600] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 78.589817][ T4600] JBD2: no valid journal superblock found [ 78.595921][ T4600] EXT4-fs (loop2): Could not load journal inode [ 78.626127][ T4593] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 78.734182][ T4611] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 78.742123][ T4611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.359'. [ 78.884845][ T4629] loop2: detected capacity change from 0 to 512 [ 78.892558][ T4629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.916422][ T4629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 78.926459][ T4629] System zones: 1-2, 4-12, 8-8 [ 78.947168][ T4629] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.368: iget: bad i_size value: 38620345925642 [ 78.987960][ T4629] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.368: couldn't read orphan inode 15 (err -117) [ 79.054935][ T4641] loop1: detected capacity change from 0 to 1024 [ 79.063591][ T4629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.100854][ T4641] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 79.112172][ T4641] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 79.127683][ T4642] loop0: detected capacity change from 0 to 1024 [ 79.171914][ T4641] JBD2: no valid journal superblock found [ 79.177842][ T4641] EXT4-fs (loop1): Could not load journal inode [ 79.213257][ T4642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.243559][ T4640] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.369: corrupted xattr block 113: invalid header [ 79.295387][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.873274][ T4656] loop4: detected capacity change from 0 to 2048 [ 79.955907][ T4656] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 79.965443][ T4656] FAT-fs (loop4): Filesystem has been set read-only [ 79.975121][ T4636] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 80.041801][ T4658] loop2: detected capacity change from 0 to 1024 [ 80.060394][ T4658] EXT4-fs: Ignoring removed orlov option [ 80.081789][ T4658] ext4: Unknown parameter 'smackfshat' [ 80.183055][ T4661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.339151][ T4665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 80.390732][ T4668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.423612][ T4668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.448516][ T4667] loop1: detected capacity change from 0 to 2048 [ 80.516734][ T4667] Alternate GPT is invalid, using primary GPT. [ 80.523313][ T4667] loop1: p2 p3 p7 [ 80.529414][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.594744][ T4667] netlink: 'syz.1.377': attribute type 3 has an invalid length. [ 80.924069][ T4673] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 80.959052][ T4673] loop0: detected capacity change from 0 to 2048 [ 81.026021][ T4673] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 81.035493][ T4673] FAT-fs (loop0): Filesystem has been set read-only [ 81.117902][ T4673] netlink: 'syz.0.378': attribute type 64 has an invalid length. [ 81.769678][ T4682] netlink: 'syz.0.382': attribute type 4 has an invalid length. [ 81.777775][ T4682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.382'. [ 81.909200][ T4707] loop3: detected capacity change from 0 to 128 [ 81.917677][ T4708] netlink: 'syz.4.392': attribute type 4 has an invalid length. [ 81.925331][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 81.925355][ T29] audit: type=1400 audit(1762408100.999:2528): avc: denied { setopt } for pid=4706 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.925654][ T4708] netlink: 152 bytes leftover after parsing attributes in process `syz.4.392'. [ 81.964623][ T4707] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.979726][ T4707] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.036950][ T4707] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.266294][ T4721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 82.298478][ T4721] loop1: detected capacity change from 0 to 2048 [ 82.398172][ T4721] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 82.408622][ T4721] FAT-fs (loop1): Filesystem has been set read-only [ 82.449891][ T4721] netlink: 'syz.1.395': attribute type 64 has an invalid length. [ 82.896709][ T4717] loop0: detected capacity change from 0 to 2048 [ 83.004679][ T4717] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 83.014475][ T4717] FAT-fs (loop0): Filesystem has been set read-only [ 83.211800][ T4717] netlink: 'syz.0.391': attribute type 64 has an invalid length. [ 83.302960][ T4749] loop4: detected capacity change from 0 to 2048 [ 83.358984][ T4749] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 83.369154][ T4749] FAT-fs (loop4): Filesystem has been set read-only [ 83.385406][ T29] audit: type=1400 audit(1762408102.379:2529): avc: denied { setopt } for pid=4743 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.405727][ T29] audit: type=1400 audit(1762408102.379:2530): avc: denied { setopt } for pid=4743 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.583486][ T4754] netlink: 'syz.2.408': attribute type 4 has an invalid length. [ 83.591998][ T4754] netlink: 152 bytes leftover after parsing attributes in process `syz.2.408'. [ 83.633080][ T4756] loop1: detected capacity change from 0 to 512 [ 83.651433][ T4756] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.409: error while reading EA inode 32 err=-116 [ 83.664653][ T4756] EXT4-fs (loop1): Remounting filesystem read-only [ 83.671196][ T4756] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 83.691791][ T4756] EXT4-fs (loop1): 1 orphan inode deleted [ 83.698571][ T4756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.761006][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.805821][ T29] audit: type=1326 audit(1762408102.899:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 83.853599][ T29] audit: type=1326 audit(1762408102.899:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 83.877648][ T29] audit: type=1326 audit(1762408102.899:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 83.901736][ T29] audit: type=1326 audit(1762408102.899:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 83.925531][ T29] audit: type=1326 audit(1762408102.899:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 83.951521][ T29] audit: type=1326 audit(1762408102.929:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 83.976274][ T29] audit: type=1326 audit(1762408102.929:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4764 comm="syz.2.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e606af6c9 code=0x7ffc0000 [ 84.061126][ T4780] program syz.2.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.150613][ T4787] netlink: 'syz.0.421': attribute type 4 has an invalid length. [ 84.158428][ T4787] netlink: 152 bytes leftover after parsing attributes in process `syz.0.421'. [ 84.307984][ T4803] netlink: 190864 bytes leftover after parsing attributes in process `syz.4.429'. [ 84.395361][ T4809] loop1: detected capacity change from 0 to 2048 [ 84.461089][ T4809] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 84.470866][ T4809] FAT-fs (loop1): Filesystem has been set read-only [ 84.563544][ T4818] loop0: detected capacity change from 0 to 2048 [ 84.720923][ T4818] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 84.730956][ T4818] FAT-fs (loop0): Filesystem has been set read-only [ 84.731365][ T4828] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 84.747668][ T4828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.435'. [ 84.760144][ T4826] loop4: detected capacity change from 0 to 2048 [ 84.767719][ T4826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.775275][ T4826] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) [ 84.848139][ T4812] netlink: 'syz.0.427': attribute type 64 has an invalid length. [ 85.418956][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.428016][ T4848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.448799][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.458731][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.468573][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.477805][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 85.582592][ T4849] loop4: detected capacity change from 0 to 2048 [ 85.639143][ T4849] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 85.648611][ T4849] FAT-fs (loop4): Filesystem has been set read-only [ 85.787903][ T4863] validate_nla: 1 callbacks suppressed [ 85.787917][ T4863] netlink: 'syz.0.451': attribute type 10 has an invalid length. [ 85.801816][ T4863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.451'. [ 85.886098][ T4865] loop2: detected capacity change from 0 to 512 [ 85.926414][ T4865] EXT4-fs (loop2): too many log groups per flexible block group [ 85.940892][ T4865] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 85.951411][ T4865] EXT4-fs (loop2): mount failed [ 86.013340][ T4870] loop2: detected capacity change from 0 to 512 [ 86.023921][ T4870] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.455: error while reading EA inode 32 err=-116 [ 86.039533][ T4870] EXT4-fs (loop2): Remounting filesystem read-only [ 86.046726][ T4870] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 86.058758][ T4873] loop0: detected capacity change from 0 to 512 [ 86.065951][ T4870] EXT4-fs (loop2): 1 orphan inode deleted [ 86.072928][ T4870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.088434][ T4873] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.454: error while reading EA inode 32 err=-116 [ 86.117467][ T4873] EXT4-fs (loop0): Remounting filesystem read-only [ 86.124608][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.136884][ T4873] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 86.154246][ T4873] EXT4-fs (loop0): 1 orphan inode deleted [ 86.160752][ T4873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.544432][ T4890] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 86.581393][ T4890] loop3: detected capacity change from 0 to 2048 [ 86.718540][ T4890] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 86.729424][ T4890] FAT-fs (loop3): Filesystem has been set read-only [ 86.811374][ T4890] netlink: 'syz.3.456': attribute type 64 has an invalid length. [ 86.975293][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.519286][ T4908] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 87.565264][ T4911] loop1: detected capacity change from 0 to 2048 [ 87.641922][ T4911] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 87.652826][ T4911] FAT-fs (loop1): Filesystem has been set read-only [ 87.754420][ T4895] netlink: 'syz.1.457': attribute type 64 has an invalid length. [ 88.173637][ T4935] loop4: detected capacity change from 0 to 2048 [ 88.229932][ T4935] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 88.240719][ T4935] FAT-fs (loop4): Filesystem has been set read-only [ 88.653067][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 88.653085][ T29] audit: type=1326 audit(1762408107.749:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.685179][ T29] audit: type=1326 audit(1762408107.749:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.710597][ T29] audit: type=1326 audit(1762408107.749:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.734405][ T29] audit: type=1326 audit(1762408107.749:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.759206][ T29] audit: type=1326 audit(1762408107.749:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.784782][ T29] audit: type=1326 audit(1762408107.749:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.809216][ T29] audit: type=1326 audit(1762408107.749:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.834020][ T29] audit: type=1326 audit(1762408107.749:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.858151][ T29] audit: type=1326 audit(1762408107.749:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.882725][ T29] audit: type=1326 audit(1762408107.749:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 88.986850][ T4956] netlink: 'syz.4.480': attribute type 4 has an invalid length. [ 89.027972][ T4967] loop1: detected capacity change from 0 to 512 [ 89.035092][ T4967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.053086][ T4967] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 89.061186][ T4967] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 89.070093][ T4967] System zones: 0-1, 15-15, 18-18, 34-34 [ 89.076152][ T4967] EXT4-fs (loop1): orphan cleanup on readonly fs [ 89.082991][ T4967] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 89.097840][ T4967] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 89.105975][ T4967] EXT4-fs (loop1): 1 truncate cleaned up [ 89.112124][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.151575][ T4972] __nla_validate_parse: 5 callbacks suppressed [ 89.151592][ T4972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'. [ 89.167904][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 89.178283][ T4972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.485'. [ 89.187344][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 89.380360][ T4981] loop0: detected capacity change from 0 to 2048 [ 89.494096][ T4981] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 89.504607][ T4981] FAT-fs (loop0): Filesystem has been set read-only [ 89.506134][ T4983] bridge0: entered promiscuous mode [ 89.518542][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.533111][ T4983] bridge0: port 4(macsec1) entered blocking state [ 89.539622][ T4983] bridge0: port 4(macsec1) entered disabled state [ 89.547232][ T4983] macsec1: entered allmulticast mode [ 89.552961][ T4983] bridge0: entered allmulticast mode [ 89.568005][ T4983] macsec1: left allmulticast mode [ 89.573338][ T4983] bridge0: left allmulticast mode [ 89.582290][ T4983] bridge0: left promiscuous mode [ 89.660892][ T4978] netlink: 'syz.0.483': attribute type 64 has an invalid length. [ 89.701240][ T4993] loop3: detected capacity change from 0 to 2048 [ 89.930420][ T4993] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 89.941213][ T4993] FAT-fs (loop3): Filesystem has been set read-only [ 90.021837][ T5002] loop2: detected capacity change from 0 to 512 [ 90.039433][ T5002] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.496: error while reading EA inode 32 err=-116 [ 90.389582][ T5002] EXT4-fs (loop2): Remounting filesystem read-only [ 90.405116][ T5002] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.434994][ T5002] EXT4-fs (loop2): 1 orphan inode deleted [ 90.452771][ T5002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.561284][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.572157][ T5029] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 90.580449][ T5029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.505'. [ 90.599259][ T5031] loop0: detected capacity change from 0 to 512 [ 90.629200][ T5031] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.516: error while reading EA inode 32 err=-116 [ 90.649723][ T5031] EXT4-fs (loop0): Remounting filesystem read-only [ 90.665613][ T5031] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 90.701440][ T5031] EXT4-fs (loop0): 1 orphan inode deleted [ 90.720767][ T5031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.759647][ T5047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 90.769111][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 90.802868][ T5047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.509'. [ 90.812052][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 90.839437][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.859439][ T5051] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 90.953945][ T5058] loop0: detected capacity change from 0 to 1024 [ 90.961444][ T5058] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.972585][ T5058] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.984847][ T5058] JBD2: no valid journal superblock found [ 90.991088][ T5058] EXT4-fs (loop0): Could not load journal inode [ 91.092039][ T5067] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 91.099879][ T5067] netlink: 152 bytes leftover after parsing attributes in process `syz.2.517'. [ 91.110464][ T5065] loop3: detected capacity change from 0 to 2048 [ 91.166928][ T5065] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 91.176674][ T5065] FAT-fs (loop3): Filesystem has been set read-only [ 91.224316][ T5065] netlink: 'syz.3.511': attribute type 64 has an invalid length. [ 91.624664][ T5074] pimreg: entered allmulticast mode [ 92.009422][ T5093] netlink: 'syz.4.526': attribute type 4 has an invalid length. [ 92.121320][ T5094] loop3: detected capacity change from 0 to 2048 [ 92.200011][ T5094] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 92.209535][ T5094] FAT-fs (loop3): Filesystem has been set read-only [ 92.365912][ T5098] loop4: detected capacity change from 0 to 1024 [ 92.394245][ T5098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.416055][ T5098] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.528: bg 0: block 232: padding at end of block bitmap is not set [ 92.475399][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.804639][ T5110] FAULT_INJECTION: forcing a failure. [ 92.804639][ T5110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.818476][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.3.534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.818508][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.818524][ T5110] Call Trace: [ 92.818533][ T5110] [ 92.818543][ T5110] __dump_stack+0x1d/0x30 [ 92.818644][ T5110] dump_stack_lvl+0xe8/0x140 [ 92.818672][ T5110] dump_stack+0x15/0x1b [ 92.818695][ T5110] should_fail_ex+0x265/0x280 [ 92.818752][ T5110] should_fail+0xb/0x20 [ 92.818767][ T5110] should_fail_usercopy+0x1a/0x20 [ 92.818794][ T5110] _copy_from_user+0x1c/0xb0 [ 92.818820][ T5110] proc_submiturb+0x43/0xa0 [ 92.818919][ T5110] usbdev_ioctl+0xcb6/0x1700 [ 92.818954][ T5110] ? __pfx_usbdev_ioctl+0x10/0x10 [ 92.818989][ T5110] __se_sys_ioctl+0xce/0x140 [ 92.819019][ T5110] __x64_sys_ioctl+0x43/0x50 [ 92.819077][ T5110] x64_sys_call+0x1816/0x3000 [ 92.819099][ T5110] do_syscall_64+0xd2/0x200 [ 92.819125][ T5110] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.819192][ T5110] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.819236][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.819264][ T5110] RIP: 0033:0x7f12ed91f6c9 [ 92.819281][ T5110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.819298][ T5110] RSP: 002b:00007f12ec387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.819317][ T5110] RAX: ffffffffffffffda RBX: 00007f12edb75fa0 RCX: 00007f12ed91f6c9 [ 92.819360][ T5110] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000004 [ 92.819383][ T5110] RBP: 00007f12ec387090 R08: 0000000000000000 R09: 0000000000000000 [ 92.819398][ T5110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.819410][ T5110] R13: 00007f12edb76038 R14: 00007f12edb75fa0 R15: 00007ffe890eb7f8 [ 92.819429][ T5110] [ 93.168057][ T5123] loop4: detected capacity change from 0 to 2048 [ 93.216117][ T5125] netlink: 'syz.1.540': attribute type 4 has an invalid length. [ 93.292188][ T5123] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 93.302303][ T5123] FAT-fs (loop4): Filesystem has been set read-only [ 93.362103][ T5116] netlink: 'syz.4.533': attribute type 64 has an invalid length. [ 93.383098][ T5139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.392442][ T5139] netlink: 'syz.0.543': attribute type 2 has an invalid length. [ 93.407546][ T5139] bond0: (slave bond_slave_0): Releasing backup interface [ 94.195823][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 94.195844][ T29] audit: type=1326 audit(1762408113.289:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.287404][ T29] audit: type=1326 audit(1762408113.319:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.312150][ T29] audit: type=1326 audit(1762408113.319:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.336378][ T29] audit: type=1326 audit(1762408113.319:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.361216][ T29] audit: type=1326 audit(1762408113.319:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.385928][ T29] audit: type=1326 audit(1762408113.329:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.412678][ T29] audit: type=1326 audit(1762408113.329:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.440107][ T29] audit: type=1326 audit(1762408113.329:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.464335][ T29] audit: type=1326 audit(1762408113.329:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.489700][ T29] audit: type=1326 audit(1762408113.329:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12ed91f6c9 code=0x7ffc0000 [ 94.551404][ T5163] loop1: detected capacity change from 0 to 2048 [ 94.586530][ T5165] loop2: detected capacity change from 0 to 512 [ 94.649047][ T5163] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 94.658795][ T5163] FAT-fs (loop1): Filesystem has been set read-only [ 94.677448][ T5165] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.552: error while reading EA inode 32 err=-116 [ 94.696236][ T5165] EXT4-fs (loop2): Remounting filesystem read-only [ 94.717919][ T5165] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 94.754652][ T5165] EXT4-fs (loop2): 1 orphan inode deleted [ 94.775584][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.852386][ T5170] __nla_validate_parse: 7 callbacks suppressed [ 94.852406][ T5170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 94.868275][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 94.883312][ T5170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.553'. [ 94.883312][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.908154][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 94.938994][ T5172] loop2: detected capacity change from 0 to 2048 [ 94.985577][ T5172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.999147][ T5172] EXT4-fs (loop2): fragment/cluster size (65536) != block size (4096) [ 95.025464][ T5174] netlink: 'syz.3.555': attribute type 4 has an invalid length. [ 95.110754][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 95.158613][ T5180] loop3: detected capacity change from 0 to 512 [ 95.220228][ T5189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 95.229533][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 95.254800][ T5189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.561'. [ 95.264002][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 95.279731][ T5192] netlink: 'syz.3.562': attribute type 10 has an invalid length. [ 95.288129][ T5192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.562'. [ 95.304034][ T5194] loop1: detected capacity change from 0 to 512 [ 95.313356][ T5194] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.564: error while reading EA inode 32 err=-116 [ 95.326861][ T5194] EXT4-fs (loop1): Remounting filesystem read-only [ 95.334589][ T5194] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 95.345217][ T5194] EXT4-fs (loop1): 1 orphan inode deleted [ 95.351711][ T5194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.393307][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.403054][ T5198] loop3: detected capacity change from 0 to 1024 [ 95.413589][ T5198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.436860][ T5202] loop1: detected capacity change from 0 to 512 [ 95.449009][ T5198] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.565: Allocating blocks 449-513 which overlap fs metadata [ 95.464663][ T5202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.474380][ T5197] EXT4-fs (loop3): pa ffff8881054f5070: logic 48, phys. 177, len 21 [ 95.485724][ T5197] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 95.507491][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.519809][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.553704][ T5208] loop3: detected capacity change from 0 to 2048 [ 95.560485][ T5208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.567894][ T5208] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 95.719674][ T5220] tmpfs: Unknown parameter '?3BO' [ 95.726370][ T5220] loop9: detected capacity change from 0 to 7 [ 95.733401][ T5220] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.741865][ T5220] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.749970][ T5220] loop9: unable to read partition table [ 95.756665][ T5220] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 95.756665][ T5220] ) failed (rc=-5) [ 95.770904][ T5215] veth1_macvtap: left promiscuous mode [ 95.918362][ T5227] loop3: detected capacity change from 0 to 512 [ 95.933988][ T5227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.947917][ T5227] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.969064][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.031955][ T5230] loop4: detected capacity change from 0 to 2048 [ 96.089525][ T5230] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 96.100230][ T5230] FAT-fs (loop4): Filesystem has been set read-only [ 96.381825][ T5244] loop3: detected capacity change from 0 to 2048 [ 96.388644][ T5244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.398772][ T5244] EXT4-fs (loop3): fragment/cluster size (65536) != block size (4096) [ 96.530531][ T5250] loop3: detected capacity change from 0 to 128 [ 96.615975][ T5250] syz.3.584: attempt to access beyond end of device [ 96.615975][ T5250] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 96.630269][ T5250] syz.3.584: attempt to access beyond end of device [ 96.630269][ T5250] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 96.646122][ T5250] syz.3.584: attempt to access beyond end of device [ 96.646122][ T5250] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 96.663137][ T5250] syz.3.584: attempt to access beyond end of device [ 96.663137][ T5250] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 96.692615][ T5250] syz.3.584: attempt to access beyond end of device [ 96.692615][ T5250] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 96.707854][ T5250] syz.3.584: attempt to access beyond end of device [ 96.707854][ T5250] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 96.730052][ T5259] loop0: detected capacity change from 0 to 128 [ 96.737988][ T5259] EXT4-fs: Ignoring removed nobh option [ 96.739295][ T5250] syz.3.584: attempt to access beyond end of device [ 96.739295][ T5250] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 96.760042][ T5259] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.767533][ T5250] syz.3.584: attempt to access beyond end of device [ 96.767533][ T5250] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 96.779363][ T5259] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.799682][ T5250] syz.3.584: attempt to access beyond end of device [ 96.799682][ T5250] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 96.813792][ T5250] syz.3.584: attempt to access beyond end of device [ 96.813792][ T5250] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 96.977307][ T5275] loop4: detected capacity change from 0 to 2048 [ 96.984119][ T5275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.992241][ T5275] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) [ 97.063190][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.115580][ T5285] loop0: detected capacity change from 0 to 512 [ 97.159626][ T5290] loop4: detected capacity change from 0 to 1024 [ 97.167627][ T5290] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.179056][ T5290] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.190629][ T5285] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.597: error while reading EA inode 32 err=-116 [ 97.204924][ T5285] EXT4-fs (loop0): Remounting filesystem read-only [ 97.212396][ T5285] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 97.223877][ T5285] EXT4-fs (loop0): 1 orphan inode deleted [ 97.230491][ T5285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.248104][ T5290] JBD2: no valid journal superblock found [ 97.254305][ T5290] EXT4-fs (loop4): Could not load journal inode [ 97.380667][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.526893][ T5305] netlink: 'syz.4.605': attribute type 4 has an invalid length. [ 97.652508][ T5314] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 97.787172][ T5322] loop4: detected capacity change from 0 to 512 [ 97.804080][ T5322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.610: error while reading EA inode 32 err=-116 [ 97.817597][ T5322] EXT4-fs (loop4): Remounting filesystem read-only [ 97.825030][ T5322] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 97.835751][ T5322] EXT4-fs (loop4): 1 orphan inode deleted [ 97.843874][ T5322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.861375][ T5327] FAULT_INJECTION: forcing a failure. [ 97.861375][ T5327] name failslab, interval 1, probability 0, space 0, times 0 [ 97.874992][ T5327] CPU: 0 UID: 0 PID: 5327 Comm: syz.1.613 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.875048][ T5327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.875065][ T5327] Call Trace: [ 97.875074][ T5327] [ 97.875084][ T5327] __dump_stack+0x1d/0x30 [ 97.875114][ T5327] dump_stack_lvl+0xe8/0x140 [ 97.875140][ T5327] dump_stack+0x15/0x1b [ 97.875163][ T5327] should_fail_ex+0x265/0x280 [ 97.875221][ T5327] should_failslab+0x8c/0xb0 [ 97.875259][ T5327] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 97.875312][ T5327] ? __alloc_skb+0x101/0x320 [ 97.875347][ T5327] ? __rtnl_unlock+0x95/0xb0 [ 97.875385][ T5327] __alloc_skb+0x101/0x320 [ 97.875424][ T5327] netlink_ack+0xfd/0x500 [ 97.875476][ T5327] netlink_rcv_skb+0x192/0x220 [ 97.875507][ T5327] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 97.875540][ T5327] rtnetlink_rcv+0x1c/0x30 [ 97.875566][ T5327] netlink_unicast+0x5c0/0x690 [ 97.875691][ T5327] netlink_sendmsg+0x58b/0x6b0 [ 97.875718][ T5327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.875747][ T5327] __sock_sendmsg+0x145/0x180 [ 97.875772][ T5327] ____sys_sendmsg+0x31e/0x4e0 [ 97.875818][ T5327] ___sys_sendmsg+0x17b/0x1d0 [ 97.875859][ T5327] __x64_sys_sendmsg+0xd4/0x160 [ 97.875894][ T5327] x64_sys_call+0x191e/0x3000 [ 97.875988][ T5327] do_syscall_64+0xd2/0x200 [ 97.876013][ T5327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.876082][ T5327] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.876127][ T5327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.876157][ T5327] RIP: 0033:0x7fd1b815f6c9 [ 97.876177][ T5327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.876210][ T5327] RSP: 002b:00007fd1b6bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.876235][ T5327] RAX: ffffffffffffffda RBX: 00007fd1b83b5fa0 RCX: 00007fd1b815f6c9 [ 97.876294][ T5327] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 97.876311][ T5327] RBP: 00007fd1b6bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.876323][ T5327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.876409][ T5327] R13: 00007fd1b83b6038 R14: 00007fd1b83b5fa0 R15: 00007ffd90fb38f8 [ 97.876435][ T5327] [ 98.152226][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.170357][ T5334] netlink: 'syz.1.617': attribute type 4 has an invalid length. [ 98.207519][ T5340] loop3: detected capacity change from 0 to 512 [ 98.227133][ T5340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.247167][ T5340] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.305903][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.318101][ T5351] netlink: 'syz.4.622': attribute type 10 has an invalid length. [ 98.408149][ T5360] loop4: detected capacity change from 0 to 512 [ 98.417774][ T5360] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.627: error while reading EA inode 32 err=-116 [ 98.432234][ T5360] EXT4-fs (loop4): Remounting filesystem read-only [ 98.440820][ T5360] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 98.454424][ T5360] EXT4-fs (loop4): 1 orphan inode deleted [ 98.462952][ T5360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.505510][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.536246][ T5364] netlink: 'syz.4.628': attribute type 5 has an invalid length. [ 98.550127][ T5364] loop4: detected capacity change from 0 to 512 [ 98.560760][ T5364] EXT4-fs (loop4): orphan cleanup on readonly fs [ 98.567799][ T5364] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 98.576896][ T5364] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 98.592404][ T5364] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.628: attempt to clear invalid blocks 2 len 1 [ 98.607223][ T5364] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.628: invalid indirect mapped block 1819239214 (level 0) [ 98.650573][ T5364] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.628: invalid indirect mapped block 1819239214 (level 1) [ 98.675720][ T5364] EXT4-fs (loop4): 1 truncate cleaned up [ 98.696749][ T5364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.719753][ T5372] loop3: detected capacity change from 0 to 1024 [ 98.726930][ T5372] EXT4-fs: Ignoring removed orlov option [ 98.735625][ T5372] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.753561][ T5372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.760423][ T5376] netlink: 'syz.0.633': attribute type 4 has an invalid length. [ 98.780766][ T5364] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 98.783290][ T5372] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 98.791366][ T5364] EXT4-fs error (device loop4): __ext4_remount:6748: comm syz.4.628: Abort forced by user [ 98.804264][ T5372] EXT4-fs (loop3): This should not happen!! Data will be lost [ 98.804264][ T5372] [ 98.804289][ T5372] EXT4-fs (loop3): Total free blocks count 0 [ 98.804306][ T5372] EXT4-fs (loop3): Free/Dirty block details [ 98.804320][ T5372] EXT4-fs (loop3): free_blocks=0 [ 98.824926][ T5364] EXT4-fs (loop4): Remounting filesystem read-only [ 98.830663][ T5372] EXT4-fs (loop3): dirty_blocks=0 [ 98.830683][ T5372] EXT4-fs (loop3): Block reservation details [ 98.836820][ T5364] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 98.842057][ T5372] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 98.889211][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.908942][ T5383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5383 comm=syz.4.634 [ 98.937034][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.966273][ T5389] loop3: detected capacity change from 0 to 512 [ 98.977814][ T5389] EXT4-fs: Ignoring removed oldalloc option [ 98.988133][ T5389] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.636: Parent and EA inode have the same ino 15 [ 98.996212][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.001717][ T5389] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.636: Parent and EA inode have the same ino 15 [ 99.009046][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.022916][ T5389] EXT4-fs (loop3): 1 orphan inode deleted [ 99.036864][ T5393] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 99.039152][ T5391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.052151][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.053369][ T5391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.088923][ T5394] netlink: 'syz.0.638': attribute type 32 has an invalid length. [ 99.098298][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.145139][ T5394] bond1: option coupled_control: invalid value (12) [ 99.153588][ T5394] bond1 (unregistering): Released all slaves [ 99.163783][ T5402] FAULT_INJECTION: forcing a failure. [ 99.163783][ T5402] name failslab, interval 1, probability 0, space 0, times 0 [ 99.177021][ T5402] CPU: 1 UID: 0 PID: 5402 Comm: syz.4.641 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.177055][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.177069][ T5402] Call Trace: [ 99.177129][ T5402] [ 99.177138][ T5402] __dump_stack+0x1d/0x30 [ 99.177167][ T5402] dump_stack_lvl+0xe8/0x140 [ 99.177194][ T5402] dump_stack+0x15/0x1b [ 99.177216][ T5402] should_fail_ex+0x265/0x280 [ 99.177244][ T5402] should_failslab+0x8c/0xb0 [ 99.177271][ T5402] kmem_cache_alloc_noprof+0x50/0x480 [ 99.177362][ T5402] ? dst_alloc+0xbd/0x100 [ 99.177453][ T5402] dst_alloc+0xbd/0x100 [ 99.177481][ T5402] ip_route_input_rcu+0xd99/0x1cd0 [ 99.177652][ T5402] ? ipt_do_table+0x9fb/0xab0 [ 99.177722][ T5402] ? __rcu_read_unlock+0x34/0x70 [ 99.177748][ T5402] ? ip_mc_sf_allow+0x22f/0x250 [ 99.177790][ T5402] ip_route_input_noref+0x5f/0x90 [ 99.177830][ T5402] ip_rcv_finish_core+0x315/0xb60 [ 99.177849][ T5402] ? iptable_mangle_hook+0x119/0x260 [ 99.177872][ T5402] ip_rcv_finish+0x100/0x1c0 [ 99.177890][ T5402] ip_rcv+0x62/0x140 [ 99.177907][ T5402] ? __pfx_ip_rcv_finish+0x10/0x10 [ 99.177934][ T5402] ? __pfx_ip_rcv+0x10/0x10 [ 99.177950][ T5402] __netif_receive_skb+0xff/0x270 [ 99.177973][ T5402] ? tun_rx_batched+0xc7/0x430 [ 99.178040][ T5402] netif_receive_skb+0x4b/0x2e0 [ 99.178060][ T5402] ? tun_rx_batched+0xc7/0x430 [ 99.178233][ T5402] tun_rx_batched+0xfc/0x430 [ 99.178328][ T5402] tun_get_user+0x1f35/0x26e0 [ 99.178425][ T5402] ? ref_tracker_alloc+0x1f2/0x2f0 [ 99.178466][ T5402] tun_chr_write_iter+0x15e/0x210 [ 99.178543][ T5402] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 99.178569][ T5402] vfs_write+0x52a/0x960 [ 99.178684][ T5402] ksys_write+0xda/0x1a0 [ 99.178708][ T5402] __x64_sys_write+0x40/0x50 [ 99.178742][ T5402] x64_sys_call+0x2802/0x3000 [ 99.178836][ T5402] do_syscall_64+0xd2/0x200 [ 99.178854][ T5402] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.178880][ T5402] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.178931][ T5402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.178951][ T5402] RIP: 0033:0x7fc4e84be17f [ 99.178965][ T5402] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 99.178981][ T5402] RSP: 002b:00007fc4e6f1f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 99.178998][ T5402] RAX: ffffffffffffffda RBX: 00007fc4e8715fa0 RCX: 00007fc4e84be17f [ 99.179009][ T5402] RDX: 000000000000002a RSI: 0000200000000100 RDI: 00000000000000c8 [ 99.179020][ T5402] RBP: 00007fc4e6f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 99.179035][ T5402] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 99.179046][ T5402] R13: 00007fc4e8716038 R14: 00007fc4e8715fa0 R15: 00007ffd51b459a8 [ 99.179063][ T5402] [ 99.493931][ T5408] netlink: 'syz.3.644': attribute type 39 has an invalid length. [ 99.538218][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 99.538281][ T29] audit: type=1326 audit(1762408118.629:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.569605][ T29] audit: type=1326 audit(1762408118.629:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.599895][ T5418] loop3: detected capacity change from 0 to 164 [ 99.610525][ T5412] netlink: 'syz.4.646': attribute type 4 has an invalid length. [ 99.612940][ T29] audit: type=1326 audit(1762408118.629:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.642873][ T29] audit: type=1326 audit(1762408118.629:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.666413][ T29] audit: type=1326 audit(1762408118.629:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.690128][ T29] audit: type=1326 audit(1762408118.629:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.690567][ T5418] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.714090][ T29] audit: type=1326 audit(1762408118.659:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.731570][ T5418] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.745547][ T29] audit: type=1326 audit(1762408118.659:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.755515][ T5420] FAULT_INJECTION: forcing a failure. [ 99.755515][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 99.777852][ T29] audit: type=1326 audit(1762408118.659:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f03a881f6c9 code=0x7ffc0000 [ 99.790659][ T5420] CPU: 1 UID: 0 PID: 5420 Comm: yU9O Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.790755][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.790775][ T5420] Call Trace: [ 99.790786][ T5420] [ 99.790799][ T5420] __dump_stack+0x1d/0x30 [ 99.790831][ T5420] dump_stack_lvl+0xe8/0x140 [ 99.790862][ T5420] dump_stack+0x15/0x1b [ 99.790926][ T5420] should_fail_ex+0x265/0x280 [ 99.790981][ T5420] should_failslab+0x8c/0xb0 [ 99.791010][ T5420] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 99.791048][ T5420] ? __alloc_skb+0x101/0x320 [ 99.791168][ T5420] __alloc_skb+0x101/0x320 [ 99.791266][ T5420] ? audit_log_start+0x342/0x720 [ 99.791302][ T5420] audit_log_start+0x3a0/0x720 [ 99.791336][ T5420] audit_seccomp+0x48/0x100 [ 99.791381][ T5420] ? __seccomp_filter+0x82d/0x1250 [ 99.791421][ T5420] __seccomp_filter+0x83e/0x1250 [ 99.791536][ T5420] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.791582][ T5420] ? vfs_write+0x7e8/0x960 [ 99.791621][ T5420] ? __rcu_read_unlock+0x4f/0x70 [ 99.791656][ T5420] ? __fget_files+0x184/0x1c0 [ 99.791756][ T5420] __secure_computing+0x82/0x150 [ 99.791795][ T5420] syscall_trace_enter+0xcf/0x1e0 [ 99.791837][ T5420] do_syscall_64+0xac/0x200 [ 99.791866][ T5420] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 99.791965][ T5420] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.792114][ T5420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.792171][ T5420] RIP: 0033:0x7fd1b815e0dc [ 99.792194][ T5420] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.792230][ T5420] RSP: 002b:00007fd1b6bc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.792258][ T5420] RAX: ffffffffffffffda RBX: 00007fd1b83b5fa0 RCX: 00007fd1b815e0dc [ 99.792276][ T5420] RDX: 000000000000000f RSI: 00007fd1b6bc70a0 RDI: 0000000000000003 [ 99.792293][ T5420] RBP: 00007fd1b6bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.792369][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.792386][ T5420] R13: 00007fd1b83b6038 R14: 00007fd1b83b5fa0 R15: 00007ffd90fb38f8 [ 99.792413][ T5420] [ 99.792452][ T5420] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 99.820074][ T5418] Symlink component flag not implemented [ 100.051687][ T5418] Symlink component flag not implemented [ 100.057784][ T5418] Symlink component flag not implemented (7) [ 100.063891][ T5418] Symlink component flag not implemented (116) [ 100.156878][ T5437] loop4: detected capacity change from 0 to 512 [ 100.170241][ T5439] __nla_validate_parse: 18 callbacks suppressed [ 100.170316][ T5439] netlink: 40 bytes leftover after parsing attributes in process `syz.2.651'. [ 100.191016][ T5437] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.655: error while reading EA inode 32 err=-116 [ 100.222067][ T5437] EXT4-fs (loop4): Remounting filesystem read-only [ 100.232347][ T5437] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 100.244973][ T5437] EXT4-fs (loop4): 1 orphan inode deleted [ 100.251290][ T5437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.300498][ T5448] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 100.342365][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.578733][ T5487] 9pnet_fd: Insufficient options for proto=fd [ 100.599827][ T5488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5488 comm=syz.4.670 [ 100.614218][ T5481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 100.722750][ T5493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.674'. [ 100.796477][ T5494] loop2: detected capacity change from 0 to 512 [ 100.828563][ T5494] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.675: error while reading EA inode 32 err=-116 [ 100.832412][ T5496] FAULT_INJECTION: forcing a failure. [ 100.832412][ T5496] name failslab, interval 1, probability 0, space 0, times 0 [ 100.842076][ T5494] EXT4-fs (loop2): Remounting filesystem read-only [ 100.854842][ T5496] CPU: 1 UID: 0 PID: 5496 Comm: syz.0.676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.854877][ T5496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.854944][ T5496] Call Trace: [ 100.854955][ T5496] [ 100.854968][ T5496] __dump_stack+0x1d/0x30 [ 100.855001][ T5496] dump_stack_lvl+0xe8/0x140 [ 100.855104][ T5496] dump_stack+0x15/0x1b [ 100.855130][ T5496] should_fail_ex+0x265/0x280 [ 100.855159][ T5496] should_failslab+0x8c/0xb0 [ 100.855215][ T5496] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 100.855262][ T5496] ? match_strdup+0x37/0x40 [ 100.855300][ T5496] ? strcmp+0x22/0x50 [ 100.855328][ T5496] kmemdup_nul+0x36/0xc0 [ 100.855370][ T5496] match_strdup+0x37/0x40 [ 100.855561][ T5496] p9_client_create+0x2c9/0xbc0 [ 100.855622][ T5496] v9fs_session_init+0xf7/0xde0 [ 100.855730][ T5496] ? avc_has_perm_noaudit+0x1b1/0x200 [ 100.855760][ T5496] ? should_fail_ex+0xdb/0x280 [ 100.855787][ T5496] ? v9fs_mount+0x51/0x5c0 [ 100.855816][ T5496] ? should_failslab+0x8c/0xb0 [ 100.855872][ T5496] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 100.855921][ T5496] v9fs_mount+0x67/0x5c0 [ 100.855949][ T5496] ? selinux_capable+0x31/0x40 [ 100.855981][ T5496] ? __pfx_v9fs_mount+0x10/0x10 [ 100.856049][ T5496] legacy_get_tree+0x78/0xd0 [ 100.856089][ T5496] vfs_get_tree+0x57/0x1d0 [ 100.856147][ T5496] do_new_mount+0x24d/0x660 [ 100.856182][ T5496] ? security_capable+0x83/0x90 [ 100.856237][ T5496] path_mount+0x4a5/0xb70 [ 100.856306][ T5496] ? user_path_at+0x109/0x130 [ 100.856437][ T5496] __se_sys_mount+0x28c/0x2e0 [ 100.856554][ T5496] ? fput+0x8f/0xc0 [ 100.856582][ T5496] __x64_sys_mount+0x67/0x80 [ 100.856706][ T5496] x64_sys_call+0x2b51/0x3000 [ 100.856739][ T5496] do_syscall_64+0xd2/0x200 [ 100.856766][ T5496] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.856814][ T5496] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.856895][ T5496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.856926][ T5496] RIP: 0033:0x7f03a881f6c9 [ 100.856950][ T5496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.856974][ T5496] RSP: 002b:00007f03a727f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.857001][ T5496] RAX: ffffffffffffffda RBX: 00007f03a8a75fa0 RCX: 00007f03a881f6c9 [ 100.857019][ T5496] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 100.857095][ T5496] RBP: 00007f03a727f090 R08: 0000200000000600 R09: 0000000000000000 [ 100.857113][ T5496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.857130][ T5496] R13: 00007f03a8a76038 R14: 00007f03a8a75fa0 R15: 00007ffe05bd8918 [ 100.857157][ T5496] [ 101.147552][ T5494] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 101.157987][ T5494] EXT4-fs (loop2): 1 orphan inode deleted [ 101.164764][ T5494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.304781][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.343347][ T5516] loop0: detected capacity change from 0 to 512 [ 101.348758][ T5518] loop4: detected capacity change from 0 to 512 [ 101.359396][ T5518] EXT4-fs (loop4): orphan cleanup on readonly fs [ 101.366519][ T5518] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.686: bad orphan inode 13 [ 101.398326][ T5518] ext4_test_bit(bit=12, block=18) = 1 [ 101.404081][ T5518] is_bad_inode(inode)=0 [ 101.408418][ T5518] NEXT_ORPHAN(inode)=2130706432 [ 101.413423][ T5518] max_ino=32 [ 101.416722][ T5518] i_nlink=1 [ 101.420370][ T5516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.433178][ T5516] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.445014][ T5518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.487619][ T5527] loop3: detected capacity change from 0 to 1024 [ 101.496931][ T5527] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 101.509740][ T5527] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 101.525002][ T5527] JBD2: no valid journal superblock found [ 101.531271][ T5527] EXT4-fs (loop3): Could not load journal inode [ 101.539812][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.573332][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.617083][ T5536] loop0: detected capacity change from 0 to 1024 [ 101.628638][ T5536] EXT4-fs: inline encryption not supported [ 101.653398][ T5536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.694752][ T5536] Illegal XDP return value 4294967274 on prog (id 476) dev N/A, expect packet loss! [ 101.714709][ T5551] loop3: detected capacity change from 0 to 512 [ 101.744765][ T5551] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.696: error while reading EA inode 32 err=-116 [ 101.761516][ T5551] EXT4-fs (loop3): Remounting filesystem read-only [ 101.768471][ T5551] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 101.779113][ T5551] EXT4-fs (loop3): 1 orphan inode deleted [ 101.785797][ T5551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.839334][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.869862][ T5565] ================================================================== [ 101.878390][ T5565] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 101.885898][ T5565] [ 101.888235][ T5565] write to 0xffff888104713e00 of 8 bytes by task 5564 on cpu 1: [ 101.896403][ T5565] mas_wmb_replace+0x208/0xfa0 [ 101.901457][ T5565] mas_wr_store_entry+0x136b/0x26e0 [ 101.906720][ T5565] mas_store_prealloc+0x74d/0xa80 [ 101.911856][ T5565] vma_iter_store_new+0x1c5/0x200 [ 101.917001][ T5565] vma_complete+0x125/0x580 [ 101.921912][ T5565] __split_vma+0x5d9/0x650 [ 101.926705][ T5565] vma_modify+0x3f2/0xc80 [ 101.931136][ T5565] vma_modify_flags+0x101/0x130 [ 101.936536][ T5565] mprotect_fixup+0x2cc/0x570 [ 101.942196][ T5565] do_mprotect_pkey+0x6d6/0x980 [ 101.947285][ T5565] __x64_sys_mprotect+0x48/0x60 [ 101.952509][ T5565] x64_sys_call+0x2752/0x3000 [ 101.957217][ T5565] do_syscall_64+0xd2/0x200 [ 101.961754][ T5565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.967679][ T5565] [ 101.970026][ T5565] read to 0xffff888104713e00 of 8 bytes by task 5565 on cpu 0: [ 101.977966][ T5565] mas_state_walk+0x485/0x650 [ 101.982762][ T5565] mas_walk+0x60/0x150 [ 101.987033][ T5565] lock_vma_under_rcu+0x95/0x170 [ 101.992942][ T5565] do_user_addr_fault+0x233/0x1080 [ 101.998270][ T5565] exc_page_fault+0x62/0xa0 [ 102.002803][ T5565] asm_exc_page_fault+0x26/0x30 [ 102.007928][ T5565] [ 102.010354][ T5565] value changed: 0xffff88810465e7c1 -> 0xffff888104713e00 [ 102.017657][ T5565] [ 102.020200][ T5565] Reported by Kernel Concurrency Sanitizer on: [ 102.026752][ T5565] CPU: 0 UID: 0 PID: 5565 Comm: syz.2.705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.037051][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.047747][ T5565] ================================================================== [ 102.074424][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.084067][ T5570] loop3: detected capacity change from 0 to 1024 [ 102.091896][ T5570] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 102.103772][ T5570] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 102.115633][ T5570] JBD2: no valid journal superblock found [ 102.121796][ T5570] EXT4-fs (loop3): Could not load journal inode