last executing test programs: 3.833504992s ago: executing program 3 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x73, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}], 0x10, 0x7}, 0x94) 3.626035449s ago: executing program 3 (id=554): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe80, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x962e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x1, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/338], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000026c0)='map_files\x00') mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f0000000000)=""/11, 0x54) getdents64(r6, 0xfffffffffffffffe, 0x64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000000051f0000aa5a73bacc14403c82a3c7b2c400060000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 3.448619343s ago: executing program 3 (id=556): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3505, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) (fail_nth: 11) 3.299340585s ago: executing program 3 (id=560): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a0000000109022200010000000009040000000e010000082403"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@struct={0xf, 0x4, 0x0, 0x4, 0x1, 0xfeba, [{0xf, 0x3, 0xc37}, {0x6, 0x2, 0x8}, {0xc, 0x1, 0x7}, {0x0, 0x3, 0x4}]}, @fwd={0x3}]}}, &(0x7f00000007c0)=""/195, 0x62, 0xc3, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) 3.201951993s ago: executing program 1 (id=562): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "25351d", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 2.871336559s ago: executing program 1 (id=567): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000990000000b8dd8acfebab86d99a7dcfa6b211297c1d50b9380ef009a9445d93d694de8ff0d68d80958f61287640c477206b4a1eb43486b834b76f1a82e164aebb7f535ef0ca5b93e91eb8fa809eb76e9e8618f31d6a9ef32a7cbe66a1a647c919d24d1361646a8b17668cde8e9397a6cef48e92a80db7227ba47fb07e5a04424"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x808003, &(0x7f0000000680)={[{@errors_remount}, {@minixdf}, {@resgid}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@resuid}, {@jqfmt_vfsold}, {@test_dummy_encryption}, {@discard}]}, 0x3, 0x4ff, &(0x7f0000000d40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) syz_io_uring_setup(0x69d4, &(0x7f0000000300)={0x0, 0x1, 0x1000, 0x8000000, 0x8000021e}, &(0x7f0000000940)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.475299601s ago: executing program 4 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 2.357820061s ago: executing program 1 (id=574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/104, 0x68}, 0x7fff}], 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000002000000000000000000001100007274bb0454e5107cc95bdef7a056c964d5c72978047c3769521276900e0f0abda61864839e725a11dc44c8cf0ee922e1766ee974c77b8e710f9816c51d4f4414c486f8bb5fb003a5b2dc09d3d400e04ecdb9d571da98d15840e0423633", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x5, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000780)="c86865718f13b6253132917de50893b2389f396dfb8d670798a35fc1c88ac2e737a8571a7a663f6c", 0x28, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) 2.275128567s ago: executing program 4 (id=575): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x3, 0x241, 0x401, 0xffffffffffff8000, 0x5, 0xffffffffffffffff}) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socket$pptp(0x18, 0x1, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000140)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='\t '], 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) chdir(&(0x7f0000000540)='./cgroup\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x7fffffff, 0x2) getdents64(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r6, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r8, &(0x7f0000000140)='./file0\x00') r9 = openat(r8, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) connect$nfc_raw(r5, &(0x7f0000000280)={0x27, 0x0, 0xffffffffffffffff, 0x6}, 0x10) io_uring_enter(r8, 0x6ce5, 0xbefa, 0x0, &(0x7f00000002c0)={[0xf6]}, 0x8) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="701817f5", @ANYRES16=0x0, @ANYBLOB="000829bd700001dcdf2503000000140002006970365f767469300000000000000000140002006d61637674617030000000000000000014000200766c616e3000000000000000000000000900010073797a31000000001400020073797a6b616c6c657230000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x20004814}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0xfff, 0xffffffffffffffff, &(0x7f0000000080)="334e516e71547814efa058da3e0f08f544775aef44e8df84e3ee6c31507438b2e5d996827700437f52e1ea87d210aeefa12019e993ff273aa65bf29f515972c04945c0ded785fdae2adbc74ce0de6ec0b4f35b43da317915a6de5a3c55958d3e4a7a19f75131067ac95c858d67bf4a81ad84fff36c8f072bd1e23b2ea1871b05a2424525d73a7942581bb6bcf0d447cb58755d8c7abf13f759d5643e43f75cab5afd10ba42b0d550b05ebf5e87799555d771096ac808cf39e81d2804af93ea3570f1e334f50577b41b71f0426ad99f22", 0xd0, 0x9}]) creat(&(0x7f0000000640)='./cgroup\x00', 0xb0) 1.965880902s ago: executing program 4 (id=576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)=""/211, 0xd3}, {&(0x7f0000000380)=""/111, 0x6f}, {}, {&(0x7f00000004c0)=""/212, 0xd4}], 0x4, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x2000) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$evdev(&(0x7f0000000380), 0x2, 0x8000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c04fb00", @ANYRES16=r2, @ANYBLOB="04002dbd7000fbdbdf250800000010000280080002000200000004000100480001801400020070696d36726567000000000000000000140002007767310000000000000000000000000008000300010000001400020076657468305f766972745f7769666900d0030280c60005007b3ba6d6b5eed034db41132e4ea4223af821fb813ea5e2289283c684dcf3658a84ba974237956e3972e882ee198cdc526209eea775de46f92aaa084afb5f2b146a22bbfbfc46a6db197d8a10c7eff999d4c73162a9497ebd42f3ab9c4de8a2f6c2eccf9111a4c608b3372c1ca2640b3e7550f87c77df5efc14978fb23152e6c2498e1b88a52685dec8ae87126f366161dd0aa4d3409ddee1484adb0907d984f690632b457e13c2d9b1c15259a388e9923e24bc12703480fd10d34de9466f5f9e491c0000a4000380100001800800010009000000040003001c000180040003000800010009000000080002003a2f2800040003004c000180080001000010000004000300040003001100020073636865645f737769746368000000000800020047504c00080001000ef30000040003000800020047504c00080001000500000028000180080001000080000008000100ff030000060002002f000000080001000000000004000300c5000400a7b0ce9f5763b05ca73b8f98689634a7612aec463f874f308ee456a888301e0a20f3717ebab782107e244d58f2a7bfe28e4d7f9e7c0f3308510a563ff17e58aa532b8abc3397b218dd85b92e127eca9b82b9baa14d96d13b2ba27f4b0b963e8bc3c9387709ec75b460fe4e1b77c8aeae63d97f0bd765305b39c0b437dc13b526c8f44e6db638fd86e9eda043acbe5fc92c53d1303e8c0399befddd338cf92f3061b26c359627acfd3c566f83affb69495c1d70f94654ca6a8da506c9d0a7fec5b0000000af000500ebe6e833c425861fcbbe352ebc7601e6609a1afbfdd8c421f81ce27e0d809cadf3a34786b2e502bddc8e73babffb7b8b416380a296b4fb4f95ea05cb409e79cfbad54552903bb134dfa0eea9f94a60aeacbbd250faba239230ed070505c3c998161f877e2a6fb992c7539eb1b4726554d0f9211a1044c238d086545632d5a92bd56d5d49cc90eafacf89b1289f54c24ae46ac34803bd2e0770c20797824fd5a841728c045d55af6a7e29a100800005008ee4f4df7ea30e2dc126b231cd2abfd4e42352f35b9926255a49f15f41042143f6488be95fefec77706f9aa99828ded2c5dab87f94a41b7f5d840875a4dd396eac624490cd486751c3b8e49b431172ff7cd9cd3dba5e730f6da4d401c6422a97138f4c0747b30d0771cfa062faee566cf3fdc9aad1a6bc3b84cb543168000380440001800800010000000000040003000800010008000000080001000100000004000300060002002a000000040003001100020073636865645f737769746368000000002000018008000100000000001100020073636865645f73776974636800000000"], 0x43c}, 0x1, 0x0, 0x0, 0x400c4}, 0x44800) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) 1.297650415s ago: executing program 1 (id=578): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x1000, 0x4c, {{0x32, 0x4, 0x0, 0x1e, 0xc8, 0x66, 0x0, 0x10, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x47, [@multicast1]}, @generic={0x83, 0x3, '?'}, @timestamp_addr={0x44, 0x14, 0x17, 0x1, 0x7, [{@rand_addr=0x64010101, 0xf}, {@loopback, 0x6}]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xd9, 0x3, 0xe, [{@rand_addr=0x64010101, 0x6}, {@multicast2, 0x3}, {@loopback, 0x96}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xfffffff7}, {@broadcast, 0x379b}, {@loopback, 0x8204}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}]}, @timestamp_prespec={0x44, 0x4c, 0x59, 0x3, 0x4, [{@multicast2, 0x8}, {@local, 0xffff0001}, {@local, 0x35}, {@broadcast, 0x7}, {@empty, 0x41}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local}, {@multicast1, 0x6}]}, @ssrr={0x89, 0xb, 0x74, [@empty, @local]}, @noop]}}}}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9365, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x8, 0x4, 0xffffffffffffffc0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc7c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', r1, @fallback=0x38, r2, 0x8, &(0x7f0000000380)={0x400, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x7, 0x7, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000400), &(0x7f0000000440)=[{0x3, 0x1, 0x3, 0xc}, {0x5, 0x4, 0x1}, {0x5, 0x4, 0xc}], 0x10, 0x91}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000100)={0x1, 0x0, 0x1, 0xc2c6d7ed92c4ca45, 0x4}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e10500000086dd00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x4) 1.180424005s ago: executing program 2 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001880)={{r1}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000600)={0x1, 0x3, 0x8, 0x8, {0x3, 0x20000000000, 0x2, 0x4ed0, 0x8}, [0x7fff, 0xffffffff80000000, 0x8]}}, @devid}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000000), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x9}, 0x18) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r3, 0x8002f515, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5, 0x0, 0x400007}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) socket$inet(0x2, 0x2, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x42c, r10, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd9c}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2732}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x84}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff07}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffd29c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x5a, 0x3, "0338166960c226425f497d8223587df2fe59a1b0cb8860240e15b9348e106dc303b748911d1a57fa77e8dc3bf933b91664c7e3b902b2022978af4565e96020c70df9f7bc9e16c19b879d32226c87d9a1a44b13511bf0"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x200}, @TIPC_NLA_NODE_ID={0x5, 0x3, "ab"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x260, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdc, 0x3, "c63eb344e4faf5971a9bd197e65b9336966e819b35ca94731a1a0ef47bb15ae9b2f861cf5d65d1eb6693b98624fa62fa79a10e4f286929cd576307d107894d64a1d4ba10fd4f5c06b95a7b2245d95012708f677fa4dfedb5f3b95a441d4d10b51e13e29744c7217eb8cab5eab4db8903882a515bf2e61513930de64b92440da4feba562ec614889eaf5951ef1abb50d0777eed77abaf17f73aaa012d1087c5a6b5212c62691c3e036339ca962653addf0f13a5257cadd8c539119e749ddf12198da13cccb7bb80d4dc71a3877f3410a2e6141d8f80c353be"}, @TIPC_NLA_NODE_ID={0x62, 0x3, "8b56633d198164c54716345b03b5debd0100d5af5f7285a5c1b7c5b4374c769baae4ccb350d5723d467eb4cd3169bfba9ee18a79d22306369f934b4c058ebbc3b142275fd48995336f959c6c1762224834f16f87484c08e01d27bfc3c09b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "831cabfc327fe4f4dc8498a398880720805800ea4da8d30d6be6c9d4205fa2e6bf420b406cfd18eb6f5441fca7ca227634f65dc568af9db9"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "90d5cc2a66535fab7d520ef7072c0c4dccdb958038"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f2946c9915839d9c42a6ddd6b18dd22a9f7e2cf56fc0e6b2ef1592454d07da"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "5780b54491bbad52d53848b85075dfb5c2239c3bc8eb112e565ce4f81308a1e189d45d"}}]}]}, 0x42c}}, 0x81) unlinkat(0xffffffffffffff9c, 0x0, 0x200) unshare(0x64000600) 1.061410035s ago: executing program 2 (id=581): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x6, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x80, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffff27f, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={0xffffffffffffffff, r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00'}, 0x18) sync_file_range(r2, 0x2, 0x0, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r3, 0x0, 0x2400c044) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYBLOB="01000000000000"], 0x34}}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0x4) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") chdir(&(0x7f0000000200)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r6], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) unlink(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) 1.014192518s ago: executing program 0 (id=582): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000380)={0x81, 0x8, 0xff80}) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES64, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x4e) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) fstat(r1, &(0x7f00000003c0)) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<=0||!') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000380)={0x81, 0x8, 0xff80}) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES64, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x4e) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) getpid() (async) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) (async) fstat(r1, &(0x7f00000003c0)) (async) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<=0||!') (async) 994.50325ms ago: executing program 4 (id=583): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 898.400178ms ago: executing program 4 (id=584): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/26, 0x1a}, 0x3}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f00000000c0)=""/29, 0x1d}], 0x3, &(0x7f0000000400)=""/104, 0x68}, 0x7fff}], 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000002000000000000000000001100007274bb0454e5107cc95bdef7a056c964d5c72978047c3769521276900e0f0abda61864839e725a11dc44c8cf0ee922e1766ee974c77b8e710f9816c51d4f4414c486f8bb5fb003a5b2dc09d3d400e04ecdb9d571da98d15840e0423633", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x5, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000780)="c86865718f13b6253132917de50893b2389f396dfb8d670798a35fc1c88ac2e737a8571a7a663f6c", 0x28, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = socket$rxrpc(0x21, 0x2, 0x2) unshare(0x2040600) getsockopt(r5, 0x110, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'ip6_vti0\x00', r7, 0x29, 0x0, 0x2, 0xfffffffb, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x20, 0x700, 0x9}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="500000001000010025bd70000700000000000000", @ANYRES32=r9, @ANYBLOB="984104008f18000030001280110001006272696467655f736c61766500000000180005800400180005001900020000000500050000000000b5326a6b07ef78158e55961fe25d155a96d92316b827e5eaa9b8b7cf75c64250e8123b732bb98b07190bd764ca13330b1c1c462baa61c6e251dc96db2d0e836bdd2d"], 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x40000c0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) 865.546781ms ago: executing program 2 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 841.599232ms ago: executing program 0 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df0061114a0000000000850000005400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote}, &(0x7f00000002c0)=0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfe, 0x0, 0x103, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 840.993042ms ago: executing program 2 (id=587): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e24000000002e003a000000003a000000000000005f02000000200002000a0000000000000cff010000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 816.551054ms ago: executing program 2 (id=588): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(0x0, 0x14927e, 0x20) copy_file_range(r1, 0x0, r1, 0x0, 0x101, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) 768.904198ms ago: executing program 2 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 672.669896ms ago: executing program 0 (id=590): perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000340)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) eventfd(0xfffffff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 670.996556ms ago: executing program 0 (id=591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x73, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}], 0x10, 0x7}, 0x94) 450.052604ms ago: executing program 0 (id=592): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x120, 0x30, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{0x10c, 0x1, [@m_mirred={0x108, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5f3, 0x4, 0x3, 0x4}, 0x2, r4}}]}, {0xb9, 0x6, "34d2f492b083ac1fc87299d70ebf4828c661fdcfbf13025da7ab0e359121f7499e6c183bd301b4abf4cfc5957bb389d3cfa570b4a6ecc8de072a86bb87e769dcc6988f0204dccae0f81e725c1ea11faf199e72f41b8f808e9f26c34aca4afafc76c3c11c6f4684535249dcd7b5c4e5333fa492324d35b92b5f6f7520895f11a0a542358cfde992067bf4da402bfeaaf3de5ad8bc62131e497458b42970093d372dd09be3d2e25241fb41e4385bc61cd90fa0e1cff8"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x120}}, 0x20000000) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x104) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) setgroups(0x40000000000000dd, &(0x7f0000000400)=[0xee00]) 327.376993ms ago: executing program 0 (id=593): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x2808480, &(0x7f0000000000)=ANY=[@ANYBLOB="646f7485b1f692010bad916c6f70703902819e4fc7"], 0x1, 0x11e9, &(0x7f0000002440)="$eJzs3E+LW1UYB+B3bOtMU2c6/qu2Gw+60c3FduFCXDjIFKQBpe0IrSDcYe5oSEyG3CwScdEu3LjRD+LSnaB+gfkW7gZBdKMgXpncdGqHcZBZ3Mj0eSDck/tLuO85SQ6ckJO9t77+tLtdZtvDiFhYiKWopXgiHrgXr/3w5m9f3rpz98Zau71+M6Xra7evvpFSWnnp+w8//+blH0cXPvh25bvF2F39aO+Xaz/tXtq9vPfX7U86ZeqUqT8YpTxtDgajfLNXpK1O2c1Ser9X5GWROv2yGNb5/qV6RdruDXZ2Jinvby23doZFWaa8P0ndYpJGgzQaTlL+cd7ppyzL0nIrOKn7s2NV7d/OxZNRVVV1PlpxIZ6K5ViJi7EaT8cz8Ww8F8/HpXghXozL00fNuXQAAAAAAAAAAAAAAAAAAAA4ZX6vDu//vzjd///g3wGO3///x/wKBwAAAAAAAAAAAAAAAAAAgFPk1p27N9ba7fWbKS1F/HxvvDHeqI91fv3d9vrrf1a1g2f9Oh5vnDnIr6ZaPJIvRmuWXzsyX4pXX6nz/eyd99qH8iuxFRFfnWlgEAAAAOCUy9KB1YdnH67vs+zf8ro1/X7gyPX92bhytrFucELl5LNufm52J+/1iuH0zOPaiC+OjDYjYo6FLcx1WBZn7475vzqzxv3mL/roh+b/MAjNdfnt5mYjmvaPqe945xsqCAAAAAAAAAAAgP+kkR/VAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDf7MCBAAAAAIAgf+sJNigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUQAAAP//qXFsQQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="b35c3850249e6a316bbbe24edf28d50a5bc7117916081a83ae5f914c48856e5bca661e8484afcd3c11bd94c7ee4a81fa4ba21163a4d695646534eb4653f27f71ee09474df7fac402a4135158", @ANYRESHEX=r3, @ANYRES8=r3], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000dc0)="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", &(0x7f00000000c0)=@tcp6=r2}, 0x78) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) msync(&(0x7f00009ec000/0x4000)=nil, 0x4000, 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00 \x00$\x00'], 0x50) 288.322246ms ago: executing program 1 (id=594): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 278.615997ms ago: executing program 3 (id=595): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r0, 0x0, 0x5}, 0x18) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) 191.970695ms ago: executing program 1 (id=596): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x6, 0x0, 0x0, 0x4, 0x510, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x80, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xfffff27f, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={0xffffffffffffffff, r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00'}, 0x18) sync_file_range(r2, 0x2, 0x0, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r3, 0x0, 0x2400c044) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYRES16, @ANYBLOB="01000000000000"], 0x34}}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0x4) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") chdir(&(0x7f0000000200)='./file0\x00') lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) unlink(&(0x7f0000000100)='./file0\x00') 18.913278ms ago: executing program 4 (id=597): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r2, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000380)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/169, 0xa9}], 0x4, &(0x7f00000003c0)=[{0x110, 0x0, 0x0, ""/250}, {0xb0, 0x0, 0x0, ""/160}], 0x1c0, 0x1}, 0x38, 0x10000) r3 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) 0s ago: executing program 3 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='l\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e24000000002e003a000000003a000000000000005f02000000200002000a0000000000000cff010000000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) kernel console output (not intermixed with test programs): .578638][ T3561] EXT4-fs (loop1): 1 truncate cleaned up [ 34.587950][ T3561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.609890][ T3568] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.626763][ T3564] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.24: lblock 1 mapped to illegal pblock 1 (length 3) [ 34.707915][ T3564] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.24: lblock 1 mapped to illegal pblock 1 (length 3) [ 34.725498][ T3564] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.24: lblock 1 mapped to illegal pblock 1 (length 3) [ 34.746324][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.751378][ T3554] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.24: lblock 1 mapped to illegal pblock 1 (length 3) [ 34.815004][ T3583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 34.855905][ T3583] netlink: 'syz.0.30': attribute type 1 has an invalid length. [ 34.888590][ T3583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 35.021529][ T3540] syz.2.19 (3540) used greatest stack depth: 7536 bytes left [ 35.045407][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 35.074481][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.082001][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.092112][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.148894][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.156324][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.184642][ T3593] loop2: detected capacity change from 0 to 1024 [ 35.185415][ T3594] loop4: detected capacity change from 0 to 1024 [ 35.218719][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.255134][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.321724][ T3594] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.350657][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 15) [ 35.368442][ T3594] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 35.380832][ T3594] EXT4-fs (loop4): This should not happen!! Data will be lost [ 35.380832][ T3594] [ 35.393381][ T3594] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 35.409450][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.420350][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.439124][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.453351][ T3602] loop0: detected capacity change from 0 to 2048 [ 35.466926][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.488300][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.489096][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.522897][ T3604] loop1: detected capacity change from 0 to 2048 [ 35.542516][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.561915][ T3604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.576132][ T3590] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.576527][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.602020][ T3590] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.643402][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.644528][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.667017][ T3614] loop0: detected capacity change from 0 to 2048 [ 35.675702][ T3594] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.34: lblock 1 mapped to illegal pblock 1 (length 3) [ 35.702364][ T3615] netlink: 'syz.2.39': attribute type 4 has an invalid length. [ 35.710050][ T3615] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39'. [ 35.724368][ T3615] : renamed from bond0 (while UP) [ 35.732248][ T3614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.787541][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.821075][ T3625] loop1: detected capacity change from 0 to 512 [ 35.842695][ T3625] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.855824][ T3625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.881183][ T3629] loop0: detected capacity change from 0 to 8192 [ 35.899181][ T3625] EXT4-fs (loop1): 1 truncate cleaned up [ 35.909317][ T3625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.931955][ T3629] msdos: Unknown parameter 'dot lopp9O' [ 35.963079][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.009235][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.069792][ T3631] loop3: detected capacity change from 0 to 512 [ 36.097946][ T3631] EXT4-fs: Ignoring removed oldalloc option [ 36.103951][ T3631] EXT4-fs: inline encryption not supported [ 36.109848][ T3631] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.153889][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 36.170293][ T3631] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.187393][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.194806][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.213017][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.220552][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.229698][ T3631] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.45: bg 0: block 64: padding at end of block bitmap is not set [ 36.253712][ T3641] loop1: detected capacity change from 0 to 1024 [ 36.285898][ T3631] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.45: Failed to acquire dquot type 0 [ 36.305281][ T3631] EXT4-fs (loop3): 1 truncate cleaned up [ 36.306122][ T3641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.315731][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.529196][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.602991][ T3650] loop2: detected capacity change from 0 to 2048 [ 36.699787][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.852845][ T29] kauditd_printk_skb: 3705 callbacks suppressed [ 36.852861][ T29] audit: type=1400 audit(1755533173.971:3817): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.854955][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.868934][ T29] audit: type=1400 audit(1755533173.991:3818): avc: denied { open } for pid=3655 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.906895][ T29] audit: type=1400 audit(1755533173.991:3819): avc: denied { kernel } for pid=3655 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.951447][ T3656] loop1: detected capacity change from 0 to 2048 [ 36.998933][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.999654][ T3656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.008298][ T29] audit: type=1326 audit(1755533174.031:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 37.043400][ T29] audit: type=1326 audit(1755533174.031:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 37.066659][ T29] audit: type=1400 audit(1755533174.051:3822): avc: denied { create } for pid=3655 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.087256][ T29] audit: type=1400 audit(1755533174.091:3823): avc: denied { mounton } for pid=3655 comm="syz.1.51" path="/15/file1" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.109700][ T29] audit: type=1400 audit(1755533174.111:3824): avc: denied { prog_run } for pid=3659 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.128961][ T29] audit: type=1400 audit(1755533174.141:3825): avc: denied { execute } for pid=3642 comm="syz.4.48" path="/6/cpu.stat" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.151501][ T29] audit: type=1400 audit(1755533174.161:3826): avc: denied { create } for pid=3659 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.207880][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.260352][ T3629] syz.0.42 (3629) used greatest stack depth: 7472 bytes left [ 37.293574][ T3668] loop4: detected capacity change from 0 to 2048 [ 37.317834][ T3677] loop2: detected capacity change from 0 to 1024 [ 37.381521][ T3678] loop1: detected capacity change from 0 to 512 [ 37.409509][ T3678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.422911][ T3677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.458230][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.488860][ T3677] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.496665][ T3678] EXT4-fs (loop1): 1 truncate cleaned up [ 37.517186][ T3677] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.528353][ T3678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.533262][ T3677] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 37.544875][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.555672][ T3677] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.555672][ T3677] [ 37.575466][ T3677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 37.594738][ T3688] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 37.602454][ T3677] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.604658][ T3677] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.616376][ T3688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.60'. [ 37.654214][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.655532][ T3677] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.678172][ T3669] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.694310][ T3669] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.708247][ T3691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 37.708266][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.708281][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.724864][ T3693] loop1: detected capacity change from 0 to 2048 [ 37.733398][ T3669] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.752955][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.754483][ T3687] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.760387][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.775505][ T3687] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 3) [ 37.803629][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.841742][ T3694] loop4: detected capacity change from 0 to 1024 [ 37.853362][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.864645][ T3694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.027475][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.083830][ T3704] loop1: detected capacity change from 0 to 512 [ 38.092283][ T3704] EXT4-fs: Ignoring removed oldalloc option [ 38.098340][ T3704] EXT4-fs: inline encryption not supported [ 38.104202][ T3704] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.130999][ T3704] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.150684][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.165066][ T3709] loop3: detected capacity change from 0 to 2048 [ 38.204637][ T3709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.206671][ T3704] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.64: bg 0: block 64: padding at end of block bitmap is not set [ 38.244078][ T3704] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.64: Failed to acquire dquot type 0 [ 38.278579][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.357475][ T3704] EXT4-fs (loop1): 1 truncate cleaned up [ 38.371603][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.482177][ T3726] loop0: detected capacity change from 0 to 2048 [ 38.519288][ T3728] loop2: detected capacity change from 0 to 512 [ 38.534237][ T3724] loop3: detected capacity change from 0 to 8192 [ 38.549422][ T3726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.555214][ T3728] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.571806][ T3724] msdos: Unknown parameter 'dot lopp9O' [ 38.618750][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.628021][ T3733] loop4: detected capacity change from 0 to 2048 [ 38.639294][ T3728] EXT4-fs (loop2): 1 truncate cleaned up [ 38.645512][ T3728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.668072][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.705763][ T3733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.718800][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.824419][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.876107][ T3747] loop2: detected capacity change from 0 to 1024 [ 38.955465][ T3747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.974720][ T3751] loop0: detected capacity change from 0 to 2048 [ 39.028367][ T3751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.043483][ T3756] loop4: detected capacity change from 0 to 1024 [ 39.088033][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.118441][ T3756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.153583][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.179815][ T3756] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.245908][ T3756] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 15) [ 39.286060][ T3756] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 39.293580][ T3770] netlink: 'syz.0.82': attribute type 4 has an invalid length. [ 39.298493][ T3756] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.298493][ T3756] [ 39.306096][ T3770] __nla_validate_parse: 1 callbacks suppressed [ 39.306132][ T3770] netlink: 152 bytes leftover after parsing attributes in process `syz.0.82'. [ 39.325900][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.368352][ T3756] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.385589][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.404410][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.419368][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.433684][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.450903][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.465340][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.480424][ T3771] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.78: lblock 1 mapped to illegal pblock 1 (length 3) [ 39.624592][ T3724] syz.3.69 (3724) used greatest stack depth: 7304 bytes left [ 39.716653][ T3782] loop1: detected capacity change from 0 to 2048 [ 39.753364][ T3782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.782850][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.839692][ T3788] loop2: detected capacity change from 0 to 512 [ 39.847903][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.848043][ T3788] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.860452][ T3786] loop4: detected capacity change from 0 to 2048 [ 39.874921][ T3788] EXT4-fs (loop2): 1 truncate cleaned up [ 39.881564][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.901230][ T3786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.913570][ T3789] loop3: detected capacity change from 0 to 512 [ 39.920903][ T3789] EXT4-fs: Ignoring removed oldalloc option [ 39.926940][ T3789] EXT4-fs: inline encryption not supported [ 39.933192][ T3789] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.960665][ T3789] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.979068][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.002301][ T3789] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.86: bg 0: block 64: padding at end of block bitmap is not set [ 40.019341][ T3789] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.86: Failed to acquire dquot type 0 [ 40.031940][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 40.043062][ T3789] EXT4-fs (loop3): 1 truncate cleaned up [ 40.057732][ T3789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.074280][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.085684][ T3796] loop1: detected capacity change from 0 to 1024 [ 40.231889][ T3802] loop4: detected capacity change from 0 to 2048 [ 40.285190][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.295966][ T3796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.309995][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.398899][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.413907][ T3824] loop2: detected capacity change from 0 to 1024 [ 40.429450][ T3823] loop3: detected capacity change from 0 to 8192 [ 40.436097][ T3823] msdos: Unknown parameter 'dot lopp9O' [ 40.468874][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.481970][ T3824] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.482784][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.516026][ T3824] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 15) [ 40.600922][ T3824] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 40.613489][ T3824] EXT4-fs (loop2): This should not happen!! Data will be lost [ 40.613489][ T3824] [ 40.630708][ T3832] loop1: detected capacity change from 0 to 2048 [ 40.673441][ T3833] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.676474][ T3824] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 40.707503][ T3833] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.733378][ T3832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.796321][ T3820] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.814212][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.848345][ T3833] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.873272][ T3820] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.903158][ T3842] loop1: detected capacity change from 0 to 2048 [ 40.914959][ T3833] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.934125][ T3844] loop4: detected capacity change from 0 to 512 [ 40.954639][ T3820] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 40.979394][ T3844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.995420][ T3842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.041862][ T3844] EXT4-fs (loop4): 1 truncate cleaned up [ 41.054581][ T3844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.068180][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.079277][ T3833] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.99: lblock 1 mapped to illegal pblock 1 (length 3) [ 41.163199][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.193380][ T3852] netlink: 'syz.1.105': attribute type 4 has an invalid length. [ 41.201159][ T3852] netlink: 152 bytes leftover after parsing attributes in process `syz.1.105'. [ 41.214572][ T3852] : renamed from bond0 (while UP) [ 41.328296][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.497743][ T3865] loop3: detected capacity change from 0 to 2048 [ 41.538860][ T3866] loop4: detected capacity change from 0 to 512 [ 41.541442][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.558385][ T3875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 41.568173][ T3866] EXT4-fs: Ignoring removed oldalloc option [ 41.574136][ T3866] EXT4-fs: inline encryption not supported [ 41.580086][ T3866] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.590616][ T3866] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.600244][ T3868] loop2: detected capacity change from 0 to 1024 [ 41.639429][ T3866] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.109: bg 0: block 64: padding at end of block bitmap is not set [ 41.661855][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.687641][ T3866] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.109: Failed to acquire dquot type 0 [ 41.688119][ T3868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.718038][ T3866] EXT4-fs (loop4): 1 truncate cleaned up [ 41.730869][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.771449][ T3882] loop3: detected capacity change from 0 to 2048 [ 41.807048][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.831256][ T3886] loop0: detected capacity change from 0 to 2048 [ 41.839203][ T3882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.856004][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.868494][ T29] kauditd_printk_skb: 1003 callbacks suppressed [ 41.868512][ T29] audit: type=1400 audit(1755533178.991:4824): avc: denied { add_name } for pid=3881 comm="syz.3.114" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.887607][ T3890] loop2: detected capacity change from 0 to 512 [ 41.895462][ T29] audit: type=1400 audit(1755533178.991:4825): avc: denied { create } for pid=3881 comm="syz.3.114" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.921988][ T29] audit: type=1400 audit(1755533179.021:4826): avc: denied { read write open } for pid=3881 comm="syz.3.114" path="/15/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.955485][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.974084][ T29] audit: type=1400 audit(1755533179.081:4827): avc: denied { prog_run } for pid=3893 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.975147][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.018302][ T29] audit: type=1400 audit(1755533179.131:4828): avc: denied { open } for pid=3895 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.037837][ T29] audit: type=1400 audit(1755533179.131:4829): avc: denied { kernel } for pid=3895 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.038486][ T3890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.072103][ T29] audit: type=1400 audit(1755533179.191:4830): avc: denied { create } for pid=3895 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.092466][ T29] audit: type=1400 audit(1755533179.211:4831): avc: denied { ioctl } for pid=3895 comm="syz.1.120" path="socket:[6331]" dev="sockfs" ino=6331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.139542][ T29] audit: type=1400 audit(1755533179.261:4832): avc: denied { write } for pid=3900 comm="syz.3.119" name="protocols" dev="proc" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.167918][ T3890] EXT4-fs (loop2): 1 truncate cleaned up [ 42.189340][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.195813][ T3905] loop1: detected capacity change from 0 to 1024 [ 42.237930][ T29] audit: type=1400 audit(1755533179.301:4833): avc: denied { create } for pid=3903 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 42.280017][ T3905] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.334509][ T3905] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 15) [ 42.358579][ T3905] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 42.371079][ T3905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.371079][ T3905] [ 42.390023][ T3905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 42.408658][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.429893][ T3907] loop0: detected capacity change from 0 to 8192 [ 42.450936][ T3907] msdos: Unknown parameter 'dot lopp9O' [ 42.499340][ T3916] loop2: detected capacity change from 0 to 2048 [ 42.520209][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.632901][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.680121][ T3898] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.703135][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 42.720182][ T3925] loop2: detected capacity change from 0 to 1024 [ 42.740403][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.805015][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.864121][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.908834][ T3914] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.121: lblock 1 mapped to illegal pblock 1 (length 3) [ 42.948885][ T3936] loop3: detected capacity change from 0 to 2048 [ 42.968445][ T3938] FAULT_INJECTION: forcing a failure. [ 42.968445][ T3938] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.981576][ T3938] CPU: 1 UID: 0 PID: 3938 Comm: syz.2.131 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 42.981678][ T3938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.981689][ T3938] Call Trace: [ 42.981695][ T3938] [ 42.981703][ T3938] __dump_stack+0x1d/0x30 [ 42.981725][ T3938] dump_stack_lvl+0xe8/0x140 [ 42.981747][ T3938] dump_stack+0x15/0x1b [ 42.981792][ T3938] should_fail_ex+0x265/0x280 [ 42.981816][ T3938] should_fail+0xb/0x20 [ 42.981888][ T3938] should_fail_usercopy+0x1a/0x20 [ 42.982063][ T3938] _copy_from_user+0x1c/0xb0 [ 42.982094][ T3938] __sys_bpf+0x178/0x7b0 [ 42.982124][ T3938] __x64_sys_bpf+0x41/0x50 [ 42.982149][ T3938] x64_sys_call+0x2aea/0x2ff0 [ 42.982215][ T3938] do_syscall_64+0xd2/0x200 [ 42.982237][ T3938] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.982264][ T3938] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.982310][ T3938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.982333][ T3938] RIP: 0033:0x7f71cd98ebe9 [ 42.982351][ T3938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.982431][ T3938] RSP: 002b:00007f71cc3f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.982450][ T3938] RAX: ffffffffffffffda RBX: 00007f71cdbb5fa0 RCX: 00007f71cd98ebe9 [ 42.982462][ T3938] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 42.982474][ T3938] RBP: 00007f71cc3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.982484][ T3938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.982497][ T3938] R13: 00007f71cdbb6038 R14: 00007f71cdbb5fa0 R15: 00007ffe516dac68 [ 42.982518][ T3938] [ 43.181074][ T3934] loop4: detected capacity change from 0 to 512 [ 43.188248][ T3934] EXT4-fs: Ignoring removed oldalloc option [ 43.194252][ T3934] EXT4-fs: inline encryption not supported [ 43.200222][ T3934] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.207223][ T3934] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.301545][ T3948] loop3: detected capacity change from 0 to 2048 [ 43.328570][ T3934] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.129: bg 0: block 64: padding at end of block bitmap is not set [ 43.372895][ T3934] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.129: Failed to acquire dquot type 0 [ 43.383688][ T3907] syz.0.123 (3907) used greatest stack depth: 6416 bytes left [ 43.392635][ T3934] EXT4-fs (loop4): 1 truncate cleaned up [ 43.444512][ T3957] loop2: detected capacity change from 0 to 2048 [ 43.491762][ T3955] loop3: detected capacity change from 0 to 512 [ 43.630421][ T3955] ext4 filesystem being mounted at /23/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.686090][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 43.695323][ T3971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.703141][ T3971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.737878][ T3971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.745288][ T3971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.878596][ T3976] loop0: detected capacity change from 0 to 1024 [ 43.944642][ T3983] loop4: detected capacity change from 0 to 2048 [ 44.041066][ T3990] loop3: detected capacity change from 0 to 2048 [ 44.138659][ T3992] loop4: detected capacity change from 0 to 8192 [ 44.167989][ T4004] loop3: detected capacity change from 0 to 2048 [ 44.188256][ T4005] loop0: detected capacity change from 0 to 1024 [ 44.205341][ T3992] msdos: Unknown parameter 'dot lopp9O' [ 44.285662][ T4005] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.319199][ T4005] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 15) [ 44.334288][ T4005] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 44.346684][ T4005] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.346684][ T4005] [ 44.358381][ T4005] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.403740][ T4005] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.476831][ T4018] loop3: detected capacity change from 0 to 512 [ 44.486041][ T3999] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.524527][ T4005] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.549462][ T4018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.583662][ T3999] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.600756][ T4018] EXT4-fs (loop3): 1 truncate cleaned up [ 44.676793][ T3999] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.769036][ T4005] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.795340][ T4030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 44.804329][ T4030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.811793][ T4030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.820815][ T4014] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.845631][ T4030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.853166][ T4030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.867529][ T4014] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.150: lblock 1 mapped to illegal pblock 1 (length 3) [ 44.891349][ T4016] loop1: detected capacity change from 0 to 512 [ 44.905241][ T4032] loop3: detected capacity change from 0 to 1024 [ 44.915165][ T4016] EXT4-fs: Ignoring removed oldalloc option [ 44.921135][ T4016] EXT4-fs: inline encryption not supported [ 44.926994][ T4016] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.963493][ T4016] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.018193][ T4016] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.155: bg 0: block 64: padding at end of block bitmap is not set [ 45.107710][ T4016] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.155: Failed to acquire dquot type 0 [ 45.129194][ T4016] EXT4-fs (loop1): 1 truncate cleaned up [ 45.156505][ T4039] loop3: detected capacity change from 0 to 2048 [ 45.212821][ T4047] loop0: detected capacity change from 0 to 2048 [ 45.328232][ T4052] loop4: detected capacity change from 0 to 2048 [ 45.512445][ T4065] vlan2: entered promiscuous mode [ 45.517615][ T4065] vlan2: entered allmulticast mode [ 45.520524][ T4069] loop1: detected capacity change from 0 to 512 [ 45.522737][ T4065] hsr_slave_1: entered allmulticast mode [ 45.532507][ T4065] netlink: 1340 bytes leftover after parsing attributes in process `syz.0.169'. [ 45.555346][ T4069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.573920][ T4067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 45.586169][ T4069] EXT4-fs (loop1): 1 truncate cleaned up [ 45.621189][ T4067] loop3: detected capacity change from 0 to 1024 [ 45.635261][ T4077] loop4: detected capacity change from 0 to 1024 [ 45.683741][ T4077] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.724897][ T4077] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 15) [ 45.739572][ T4081] loop1: detected capacity change from 0 to 8192 [ 45.741205][ T4077] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 45.746245][ T4081] msdos: Unknown parameter 'dot lopp9O' [ 45.758457][ T4077] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.758457][ T4077] [ 45.846991][ T4077] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.847802][ T4072] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 45.866286][ T4088] loop3: detected capacity change from 0 to 2048 [ 45.908251][ T4072] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 45.948105][ T4086] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 45.966221][ T4097] loop3: detected capacity change from 0 to 2048 [ 45.981751][ T4086] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 46.011299][ T4086] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 46.037195][ T4072] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 46.066198][ T4086] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.172: lblock 1 mapped to illegal pblock 1 (length 3) [ 46.166287][ T4072] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 4: comm syz.4.172: lblock 4 mapped to illegal pblock 4 (length 4) [ 46.382633][ T4114] loop2: detected capacity change from 0 to 2048 [ 46.416487][ T4116] loop3: detected capacity change from 0 to 512 [ 46.454709][ T4116] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.505919][ T4116] EXT4-fs (loop3): 1 truncate cleaned up [ 46.532705][ T4119] loop0: detected capacity change from 0 to 512 [ 46.540143][ T4119] EXT4-fs: Ignoring removed oldalloc option [ 46.546091][ T4119] EXT4-fs: inline encryption not supported [ 46.551981][ T4119] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.568372][ T4127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 46.655469][ T4119] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.665636][ T4121] loop4: detected capacity change from 0 to 1024 [ 46.716082][ T4119] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.179: bg 0: block 64: padding at end of block bitmap is not set [ 46.742852][ T4132] loop2: detected capacity change from 0 to 2048 [ 46.751424][ T4119] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.179: Failed to acquire dquot type 0 [ 46.767747][ T4119] EXT4-fs (loop0): 1 truncate cleaned up [ 46.907354][ T29] kauditd_printk_skb: 1491 callbacks suppressed [ 46.907371][ T29] audit: type=1400 audit(1755533184.021:6319): avc: denied { execmem } for pid=4145 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.934443][ T4147] loop2: detected capacity change from 0 to 2048 [ 47.000598][ T29] audit: type=1400 audit(1755533184.121:6320): avc: denied { write } for pid=4145 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.021144][ T29] audit: type=1400 audit(1755533184.121:6321): avc: denied { read } for pid=4145 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.043105][ T29] audit: type=1326 audit(1755533184.141:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 47.066577][ T29] audit: type=1326 audit(1755533184.141:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 47.090117][ T29] audit: type=1326 audit(1755533184.141:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 47.113504][ T29] audit: type=1326 audit(1755533184.141:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea7a68d550 code=0x7ffc0000 [ 47.136837][ T29] audit: type=1400 audit(1755533184.141:6326): avc: denied { write } for pid=4133 comm="syz.3.189" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.159685][ T29] audit: type=1326 audit(1755533184.141:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 47.183058][ T29] audit: type=1326 audit(1755533184.141:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4133 comm="syz.3.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 47.235291][ T4160] loop4: detected capacity change from 0 to 1024 [ 47.262500][ T4155] loop3: detected capacity change from 0 to 2048 [ 47.298433][ T4160] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.309012][ T4164] loop2: detected capacity change from 0 to 512 [ 47.320102][ T4164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.344628][ T4160] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 15) [ 47.364619][ T4160] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 47.364835][ T4164] EXT4-fs (loop2): 1 truncate cleaned up [ 47.377079][ T4160] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.377079][ T4160] [ 47.437630][ T4172] loop0: detected capacity change from 0 to 128 [ 47.448909][ T4160] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 47.473145][ T4172] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.505041][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.527488][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.593053][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.603597][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 47.609675][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.638944][ T4180] loop2: detected capacity change from 0 to 1024 [ 47.646945][ T4184] loop3: detected capacity change from 0 to 2048 [ 47.664484][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.681428][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.695770][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.719060][ T4177] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.196: lblock 1 mapped to illegal pblock 1 (length 3) [ 47.901975][ T4194] loop2: detected capacity change from 0 to 8192 [ 47.922069][ T4194] msdos: Unknown parameter 'dot lopp9O' [ 47.977072][ T4195] loop3: detected capacity change from 0 to 512 [ 47.996620][ T4195] EXT4-fs: Ignoring removed oldalloc option [ 48.002615][ T4195] EXT4-fs: inline encryption not supported [ 48.008600][ T4195] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.040954][ T4195] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.204343][ T4202] loop4: detected capacity change from 0 to 2048 [ 48.220335][ T4195] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.205: bg 0: block 64: padding at end of block bitmap is not set [ 48.282696][ T4195] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.205: Failed to acquire dquot type 0 [ 48.294371][ T4195] EXT4-fs (loop3): 1 truncate cleaned up [ 48.324891][ T4207] netlink: 'syz.0.208': attribute type 4 has an invalid length. [ 48.332609][ T4207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.208'. [ 48.488704][ T4217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 48.547769][ T4217] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 48.548867][ T4221] loop4: detected capacity change from 0 to 2048 [ 48.616720][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 48.629564][ T4217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.728127][ T4224] bond0 (unregistering): Released all slaves [ 48.799674][ T4228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 48.919306][ T4228] loop4: detected capacity change from 0 to 1024 [ 49.018035][ T4242] loop1: detected capacity change from 0 to 2048 [ 49.029368][ T4245] loop2: detected capacity change from 0 to 128 [ 49.039536][ T4247] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 49.047213][ T4247] netlink: 152 bytes leftover after parsing attributes in process `syz.0.221'. [ 49.067613][ T4245] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.294691][ T4265] netlink: 'syz.1.226': attribute type 4 has an invalid length. [ 49.344948][ T4269] loop4: detected capacity change from 0 to 2048 [ 49.585733][ T4274] loop0: detected capacity change from 0 to 512 [ 49.610401][ T4274] EXT4-fs: Ignoring removed oldalloc option [ 49.616379][ T4274] EXT4-fs: inline encryption not supported [ 49.622272][ T4274] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.647327][ T4274] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.669093][ T4274] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.228: bg 0: block 64: padding at end of block bitmap is not set [ 49.687738][ T4274] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.228: Failed to acquire dquot type 0 [ 49.699535][ T4279] loop4: detected capacity change from 0 to 1024 [ 49.699937][ T4274] EXT4-fs (loop0): 1 truncate cleaned up [ 49.808597][ T4287] netlink: 'syz.2.234': attribute type 4 has an invalid length. [ 49.816288][ T4287] __nla_validate_parse: 4 callbacks suppressed [ 49.816304][ T4287] netlink: 152 bytes leftover after parsing attributes in process `syz.2.234'. [ 49.958883][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 49.967894][ T4302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.240'. [ 50.036768][ T4310] loop3: detected capacity change from 0 to 2048 [ 50.117840][ T4319] loop1: detected capacity change from 0 to 512 [ 50.150388][ T4319] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.163145][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.170651][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.178123][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.185546][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.193022][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.200717][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.208176][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.215565][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.223060][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.230491][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.239376][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 50.288361][ T4318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 50.375844][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 50.389515][ T4329] fido_id[4329]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.403481][ T4331] loop4: detected capacity change from 0 to 1024 [ 50.410020][ T4339] loop3: detected capacity change from 0 to 128 [ 50.424030][ T4339] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.501433][ T4343] netlink: 'syz.2.248': attribute type 4 has an invalid length. [ 50.509189][ T4343] netlink: 152 bytes leftover after parsing attributes in process `syz.2.248'. [ 50.523608][ T4326] loop0: detected capacity change from 0 to 512 [ 50.540265][ T4326] EXT4-fs: Ignoring removed oldalloc option [ 50.546218][ T4326] EXT4-fs: inline encryption not supported [ 50.552161][ T4326] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.589706][ T4350] loop2: detected capacity change from 0 to 164 [ 50.618441][ T4326] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.633331][ T4350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.650612][ T4350] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 50.663651][ T4350] Symlink component flag not implemented [ 50.669447][ T4350] Symlink component flag not implemented [ 50.675812][ T4350] Symlink component flag not implemented (7) [ 50.681855][ T4350] Symlink component flag not implemented (116) [ 50.690756][ T4326] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.244: bg 0: block 64: padding at end of block bitmap is not set [ 50.711752][ T4360] loop4: detected capacity change from 0 to 1024 [ 50.754025][ T4326] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.244: Failed to acquire dquot type 0 [ 50.770173][ T4363] loop2: detected capacity change from 0 to 512 [ 50.776959][ T4326] EXT4-fs (loop0): 1 truncate cleaned up [ 50.777248][ T4360] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.794927][ T4363] EXT4-fs: test_dummy_encryption option not supported [ 50.899989][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 15) [ 50.914289][ T4360] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 50.926783][ T4360] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.926783][ T4360] [ 50.969951][ T4360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 50.990438][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.004841][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.020613][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.035096][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.055855][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 51.056508][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.087009][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.102840][ T4360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.118279][ T4354] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.253: lblock 1 mapped to illegal pblock 1 (length 3) [ 51.164452][ T4374] loop0: detected capacity change from 0 to 2048 [ 51.209953][ T4378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 51.218923][ T4378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 51.267581][ T4380] loop0: detected capacity change from 0 to 512 [ 51.283422][ T4380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.296889][ T4380] EXT4-fs (loop0): 1 truncate cleaned up [ 51.351209][ T4385] netlink: 'syz.3.260': attribute type 4 has an invalid length. [ 51.358938][ T4385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.260'. [ 51.373347][ T4385] : renamed from bond0 (while UP) [ 51.425130][ T4391] netlink: 'syz.0.263': attribute type 1 has an invalid length. [ 51.449299][ T4391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.475719][ T4391] bond0 (unregistering): Released all slaves [ 51.515441][ T4398] loop3: detected capacity change from 0 to 1024 [ 51.672602][ T4409] loop1: detected capacity change from 0 to 256 [ 51.699526][ T4410] loop0: detected capacity change from 0 to 128 [ 51.712636][ T4409] FAT-fs (loop1): bogus logical sector size 65529 [ 51.719145][ T4409] FAT-fs (loop1): Can't find a valid FAT filesystem [ 51.740198][ T4410] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.753034][ T4412] loop3: detected capacity change from 0 to 2048 [ 51.790715][ T4407] loop2: detected capacity change from 0 to 8192 [ 51.814047][ T4397] loop4: detected capacity change from 0 to 512 [ 51.820825][ T4407] msdos: Unknown parameter 'dot lopp9O' [ 51.824692][ T4416] loop1: detected capacity change from 0 to 512 [ 51.849777][ T4416] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.873105][ T4397] EXT4-fs: Ignoring removed oldalloc option [ 51.879240][ T4397] EXT4-fs: inline encryption not supported [ 51.885150][ T4397] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.902703][ T4416] EXT4-fs (loop1): 1 truncate cleaned up [ 51.917861][ T4397] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.927500][ T29] kauditd_printk_skb: 2211 callbacks suppressed [ 51.927516][ T29] audit: type=1400 audit(1755533189.051:8534): avc: denied { append } for pid=4415 comm="syz.1.271" path="/49/file2/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.017477][ T29] audit: type=1400 audit(1755533189.081:8535): avc: denied { ioctl } for pid=4415 comm="syz.1.271" path="/49/file2/cpu.stat" dev="loop1" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.041773][ T29] audit: type=1400 audit(1755533189.131:8536): avc: denied { write } for pid=4422 comm="syz.3.272" name="protocols" dev="proc" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 52.110700][ T4397] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.265: bg 0: block 64: padding at end of block bitmap is not set [ 52.134119][ T4397] Quota error (device loop4): write_blk: dquota write failed [ 52.145296][ T4429] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 52.153149][ T4397] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 52.153197][ T29] audit: type=1326 audit(1755533189.261:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 52.186446][ T29] audit: type=1326 audit(1755533189.261:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 52.192771][ T4397] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.265: Failed to acquire dquot type 0 [ 52.209995][ T29] audit: type=1326 audit(1755533189.261:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 52.244509][ T29] audit: type=1326 audit(1755533189.261:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 52.278078][ T29] audit: type=1326 audit(1755533189.281:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea7a68ebe9 code=0x7ffc0000 [ 52.305041][ T4397] EXT4-fs (loop4): 1 truncate cleaned up [ 52.691751][ T4441] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 52.811811][ T4445] loop4: detected capacity change from 0 to 512 [ 52.813519][ T4447] loop1: detected capacity change from 0 to 164 [ 52.818364][ T4444] loop0: detected capacity change from 0 to 2048 [ 52.841825][ T4447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.853004][ T4447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 52.861652][ T4445] EXT4-fs: test_dummy_encryption option not supported [ 52.865017][ T4447] Symlink component flag not implemented [ 52.874220][ T4447] Symlink component flag not implemented [ 52.900452][ T4447] Symlink component flag not implemented (7) [ 52.906488][ T4447] Symlink component flag not implemented (116) [ 53.146360][ T4453] loop0: detected capacity change from 0 to 2048 [ 53.180105][ T4458] loop1: detected capacity change from 0 to 2048 [ 53.331995][ T4467] loop0: detected capacity change from 0 to 164 [ 53.339526][ T4467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.352033][ T4467] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 53.363298][ T4467] Symlink component flag not implemented [ 53.369000][ T4467] Symlink component flag not implemented [ 53.375037][ T4467] Symlink component flag not implemented (7) [ 53.381110][ T4467] Symlink component flag not implemented (116) [ 53.557537][ T4480] loop3: detected capacity change from 0 to 128 [ 53.572417][ T4480] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.679823][ T4477] loop0: detected capacity change from 0 to 512 [ 53.692396][ T4477] EXT4-fs: Ignoring removed oldalloc option [ 53.698490][ T4477] EXT4-fs: inline encryption not supported [ 53.704346][ T4477] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.712082][ T4477] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.728403][ T4484] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 53.739237][ T4477] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.290: bg 0: block 64: padding at end of block bitmap is not set [ 53.748940][ T4488] loop2: detected capacity change from 0 to 2048 [ 53.753979][ T4477] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.290: Failed to acquire dquot type 0 [ 53.774684][ T4477] EXT4-fs (loop0): 1 truncate cleaned up [ 53.811582][ T4492] loop4: detected capacity change from 0 to 512 [ 53.824568][ T4492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.839886][ T4492] EXT4-fs (loop4): 1 truncate cleaned up [ 53.914628][ T4497] loop2: detected capacity change from 0 to 2048 [ 54.159848][ T4512] netlink: 'syz.4.302': attribute type 4 has an invalid length. [ 54.179434][ T4512] : renamed from bond0 (while UP) [ 54.189949][ T4514] loop2: detected capacity change from 0 to 512 [ 54.232539][ T4519] loop4: detected capacity change from 0 to 2048 [ 54.248175][ T4514] EXT4-fs: test_dummy_encryption option not supported [ 54.387563][ T4521] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 54.409554][ T4527] loop3: detected capacity change from 0 to 512 [ 54.438130][ T4527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.450212][ T4527] EXT4-fs (loop3): 1 truncate cleaned up [ 54.512926][ T4535] loop3: detected capacity change from 0 to 2048 [ 54.663726][ T4547] loop3: detected capacity change from 0 to 512 [ 54.674144][ T4547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.684706][ T4543] loop4: detected capacity change from 0 to 512 [ 54.693307][ T4547] EXT4-fs (loop3): 1 truncate cleaned up [ 54.706699][ T4543] EXT4-fs: Ignoring removed oldalloc option [ 54.712812][ T4543] EXT4-fs: inline encryption not supported [ 54.718850][ T4543] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.727688][ T4543] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.756570][ T4543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.308: bg 0: block 64: padding at end of block bitmap is not set [ 54.757471][ T4552] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 54.771359][ T4543] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.308: Failed to acquire dquot type 0 [ 54.814449][ T4543] EXT4-fs (loop4): 1 truncate cleaned up [ 54.835936][ T4560] loop3: detected capacity change from 0 to 2048 [ 54.845324][ T4556] __nla_validate_parse: 20 callbacks suppressed [ 54.845338][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 54.900392][ T4556] loop1: detected capacity change from 0 to 1024 [ 55.102094][ T4571] loop3: detected capacity change from 0 to 512 [ 55.173546][ T4571] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.218533][ T4571] EXT4-fs (loop3): 1 truncate cleaned up [ 55.230313][ T4576] loop0: detected capacity change from 0 to 128 [ 55.239780][ T4578] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'. [ 55.269501][ T4576] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.380690][ T4586] netlink: 'syz.3.328': attribute type 4 has an invalid length. [ 55.388619][ T4586] netlink: 152 bytes leftover after parsing attributes in process `syz.3.328'. [ 55.423385][ T4588] loop1: detected capacity change from 0 to 2048 [ 55.441165][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 55.450196][ T4592] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 55.500615][ T4600] loop3: detected capacity change from 0 to 512 [ 55.519828][ T4600] EXT4-fs: test_dummy_encryption option not supported [ 55.715358][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 55.734992][ T4606] loop2: detected capacity change from 0 to 1024 [ 55.765856][ T4613] loop1: detected capacity change from 0 to 512 [ 55.797103][ T4613] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.845515][ T4613] EXT4-fs (loop1): 1 truncate cleaned up [ 55.944537][ T4625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 55.981544][ T4627] netlink: 'syz.1.341': attribute type 4 has an invalid length. [ 55.989341][ T4627] netlink: 152 bytes leftover after parsing attributes in process `syz.1.341'. [ 56.041920][ T4633] loop1: detected capacity change from 0 to 512 [ 56.050211][ T4633] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.066100][ T4633] EXT4-fs (loop1): 1 truncate cleaned up [ 56.082350][ T4633] FAULT_INJECTION: forcing a failure. [ 56.082350][ T4633] name failslab, interval 1, probability 0, space 0, times 1 [ 56.095151][ T4633] CPU: 0 UID: 0 PID: 4633 Comm: syz.1.343 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 56.095179][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.095190][ T4633] Call Trace: [ 56.095198][ T4633] [ 56.095206][ T4633] __dump_stack+0x1d/0x30 [ 56.095229][ T4633] dump_stack_lvl+0xe8/0x140 [ 56.095309][ T4633] dump_stack+0x15/0x1b [ 56.095373][ T4633] should_fail_ex+0x265/0x280 [ 56.095395][ T4633] ? ext4_getfsmap_datadev+0x3de/0x1340 [ 56.095539][ T4633] should_failslab+0x8c/0xb0 [ 56.095595][ T4633] __kmalloc_cache_noprof+0x4c/0x320 [ 56.095694][ T4633] ? ext4_get_group_desc+0x16b/0x190 [ 56.095804][ T4633] ext4_getfsmap_datadev+0x3de/0x1340 [ 56.095844][ T4633] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 56.095945][ T4633] ext4_getfsmap+0x803/0x830 [ 56.095972][ T4633] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 56.095999][ T4633] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 56.096037][ T4633] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 56.096071][ T4633] ? ext4_fsmap_to_internal+0xba/0xd0 [ 56.096103][ T4633] ext4_ioctl+0x1ec3/0x2080 [ 56.096166][ T4633] ? __pfx_ext4_ioctl+0x10/0x10 [ 56.096189][ T4633] __se_sys_ioctl+0xcb/0x140 [ 56.096219][ T4633] __x64_sys_ioctl+0x43/0x50 [ 56.096305][ T4633] x64_sys_call+0x1816/0x2ff0 [ 56.096329][ T4633] do_syscall_64+0xd2/0x200 [ 56.096353][ T4633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.096378][ T4633] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.096479][ T4633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.096503][ T4633] RIP: 0033:0x7fd1afb8ebe9 [ 56.096520][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.096605][ T4633] RSP: 002b:00007fd1ae5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.096764][ T4633] RAX: ffffffffffffffda RBX: 00007fd1afdb5fa0 RCX: 00007fd1afb8ebe9 [ 56.096778][ T4633] RDX: 0000200000000e00 RSI: 00000000c0c0583b RDI: 0000000000000006 [ 56.096792][ T4633] RBP: 00007fd1ae5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 56.096806][ T4633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.096819][ T4633] R13: 00007fd1afdb6038 R14: 00007fd1afdb5fa0 R15: 00007ffc1236ed28 [ 56.096839][ T4633] [ 56.324299][ T4636] loop0: detected capacity change from 0 to 1024 [ 56.336490][ T4635] loop2: detected capacity change from 0 to 512 [ 56.349427][ T4635] EXT4-fs: Ignoring removed oldalloc option [ 56.355446][ T4635] EXT4-fs: inline encryption not supported [ 56.361296][ T4635] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.382636][ T4635] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.418379][ T4642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 56.427382][ T4642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 56.473743][ T4636] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.493315][ T4636] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 15) [ 56.507689][ T4636] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 56.520165][ T4636] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.520165][ T4636] [ 56.531088][ T4635] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.338: bg 0: block 64: padding at end of block bitmap is not set [ 56.532691][ T4636] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 56.560228][ T4648] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.585298][ T4635] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.338: Failed to acquire dquot type 0 [ 56.604070][ T4635] EXT4-fs (loop2): 1 truncate cleaned up [ 56.609023][ T4652] loop4: detected capacity change from 0 to 2048 [ 56.615593][ T4648] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.644006][ T4630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.674203][ T4630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.690699][ T4648] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.719635][ T4657] loop3: detected capacity change from 0 to 1024 [ 56.807336][ T4630] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.840656][ T4636] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.880213][ T4648] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.344: lblock 1 mapped to illegal pblock 1 (length 3) [ 56.929467][ T4670] loop3: detected capacity change from 0 to 2048 [ 56.941501][ T29] kauditd_printk_skb: 2662 callbacks suppressed [ 56.941517][ T29] audit: type=1400 audit(1755533194.061:11192): avc: denied { getopt } for pid=4630 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.967563][ T29] audit: type=1400 audit(1755533194.061:11193): avc: denied { mount } for pid=4668 comm="syz.3.355" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.997525][ T29] audit: type=1326 audit(1755533194.061:11194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4669 comm="syz.4.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 57.021231][ T29] audit: type=1400 audit(1755533194.071:11195): avc: denied { ioctl } for pid=4630 comm="syz.0.344" path="socket:[8424]" dev="sockfs" ino=8424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 57.046005][ T29] audit: type=1400 audit(1755533194.071:11196): avc: denied { add_name } for pid=4668 comm="syz.3.355" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.066822][ T29] audit: type=1400 audit(1755533194.071:11197): avc: denied { create } for pid=4668 comm="syz.3.355" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.087019][ T29] audit: type=1400 audit(1755533194.111:11198): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.106977][ T29] audit: type=1400 audit(1755533194.111:11199): avc: denied { read write open } for pid=4668 comm="syz.3.355" path="/71/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.130556][ T29] audit: type=1400 audit(1755533194.111:11200): avc: denied { create } for pid=4672 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.151372][ T29] audit: type=1400 audit(1755533194.111:11201): avc: denied { ioctl } for pid=4672 comm="syz.1.356" path="socket:[7432]" dev="sockfs" ino=7432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.279802][ T4689] loop4: detected capacity change from 0 to 512 [ 57.300889][ T4689] EXT4-fs: test_dummy_encryption option not supported [ 57.356533][ T4691] loop0: detected capacity change from 0 to 2048 [ 57.432070][ T4701] loop2: detected capacity change from 0 to 1024 [ 57.557085][ T4711] loop1: detected capacity change from 0 to 2048 [ 57.656738][ T4720] loop1: detected capacity change from 0 to 164 [ 57.665714][ T4720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.676547][ T4720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.686027][ T4720] Symlink component flag not implemented [ 57.691732][ T4720] Symlink component flag not implemented [ 57.691831][ T4721] loop2: detected capacity change from 0 to 1024 [ 57.697845][ T4720] Symlink component flag not implemented (7) [ 57.709854][ T4720] Symlink component flag not implemented (116) [ 57.720510][ T4721] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.731716][ T4719] loop0: detected capacity change from 0 to 512 [ 57.740729][ T4719] EXT4-fs: Ignoring removed oldalloc option [ 57.746686][ T4719] EXT4-fs: inline encryption not supported [ 57.751004][ T4721] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 15) [ 57.752566][ T4719] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.767045][ T4721] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 57.785505][ T4721] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.785505][ T4721] [ 57.790452][ T4719] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.805798][ T4725] loop1: detected capacity change from 0 to 512 [ 57.808986][ T4721] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.816536][ T4725] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.836938][ T4721] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.839407][ T4719] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.367: bg 0: block 64: padding at end of block bitmap is not set [ 57.859198][ T4721] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.879638][ T4719] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.367: Failed to acquire dquot type 0 [ 57.880213][ T4725] EXT4-fs (loop1): 1 truncate cleaned up [ 57.897233][ T4721] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.897765][ T4719] EXT4-fs (loop0): 1 truncate cleaned up [ 57.926265][ T4716] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.942462][ T4721] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.978014][ T4721] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.994201][ T4716] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 58.131857][ T4716] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.370: lblock 1 mapped to illegal pblock 1 (length 3) [ 58.216969][ T4741] loop3: detected capacity change from 0 to 2048 [ 58.375594][ T4758] loop4: detected capacity change from 0 to 128 [ 58.384867][ T4756] loop1: detected capacity change from 0 to 164 [ 58.398208][ T4756] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.413862][ T4758] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.459246][ T4764] loop3: detected capacity change from 0 to 128 [ 58.465849][ T4763] loop0: detected capacity change from 0 to 1024 [ 58.484448][ T4756] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 58.493649][ T4764] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.526845][ T4756] Symlink component flag not implemented [ 58.532531][ T4756] Symlink component flag not implemented [ 58.560250][ T4756] Symlink component flag not implemented (7) [ 58.566260][ T4756] Symlink component flag not implemented (116) [ 58.759265][ T4776] loop2: detected capacity change from 0 to 512 [ 58.778431][ T4776] EXT4-fs: test_dummy_encryption option not supported [ 58.811665][ T4779] loop1: detected capacity change from 0 to 4096 [ 58.835997][ T4777] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 58.893555][ T4777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.015200][ T4787] loop0: detected capacity change from 0 to 2048 [ 59.157106][ T4796] loop0: detected capacity change from 0 to 1024 [ 59.203446][ T4796] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.217136][ T4802] netlink: 'syz.4.395': attribute type 4 has an invalid length. [ 59.283465][ T4796] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.392: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.301602][ T4796] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 59.314103][ T4796] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.314103][ T4796] [ 59.357937][ T4810] loop1: detected capacity change from 0 to 512 [ 59.364793][ T4810] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.376779][ T4810] EXT4-fs (loop1): 1 truncate cleaned up [ 59.438749][ T4808] loop4: detected capacity change from 0 to 8192 [ 59.451230][ T4808] msdos: Unknown parameter 'dot lopp9O' [ 59.536574][ T2883] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.557134][ T4817] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 59.573560][ T2883] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 59.585990][ T2883] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.585990][ T2883] [ 59.607675][ T4820] loop1: detected capacity change from 0 to 2048 [ 59.643008][ T2883] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 2) [ 59.660776][ T2883] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 59.673276][ T2883] EXT4-fs (loop0): This should not happen!! Data will be lost [ 59.673276][ T2883] [ 59.789615][ T4832] netlink: 'syz.2.408': attribute type 4 has an invalid length. [ 59.860643][ T4840] loop1: detected capacity change from 0 to 128 [ 59.871231][ T4838] loop2: detected capacity change from 0 to 736 [ 59.903171][ T4840] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.107028][ T4855] loop0: detected capacity change from 0 to 512 [ 60.168032][ T4855] EXT4-fs: test_dummy_encryption option not supported [ 60.186801][ T4851] __nla_validate_parse: 14 callbacks suppressed [ 60.186815][ T4851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 60.202471][ T4851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 60.439679][ T4862] loop3: detected capacity change from 0 to 2048 [ 60.536493][ T4867] FAULT_INJECTION: forcing a failure. [ 60.536493][ T4867] name failslab, interval 1, probability 0, space 0, times 0 [ 60.549196][ T4867] CPU: 0 UID: 0 PID: 4867 Comm: syz.3.417 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 60.549259][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.549272][ T4867] Call Trace: [ 60.549281][ T4867] [ 60.549290][ T4867] __dump_stack+0x1d/0x30 [ 60.549340][ T4867] dump_stack_lvl+0xe8/0x140 [ 60.549358][ T4867] dump_stack+0x15/0x1b [ 60.549372][ T4867] should_fail_ex+0x265/0x280 [ 60.549391][ T4867] should_failslab+0x8c/0xb0 [ 60.549416][ T4867] __kmalloc_noprof+0xa5/0x3e0 [ 60.549503][ T4867] ? kobject_get_path+0x92/0x1c0 [ 60.549537][ T4867] kobject_get_path+0x92/0x1c0 [ 60.549564][ T4867] kobject_uevent_env+0x1da/0x570 [ 60.549640][ T4867] kobject_uevent+0x1d/0x30 [ 60.549659][ T4867] device_del+0x710/0x790 [ 60.549685][ T4867] device_unregister+0x15/0x40 [ 60.549759][ T4867] bdi_unregister+0x307/0x3a0 [ 60.549857][ T4867] __del_gendisk+0x2c3/0x570 [ 60.549884][ T4867] del_gendisk+0xac/0xf0 [ 60.549910][ T4867] loop_remove+0x26/0x80 [ 60.549940][ T4867] loop_control_ioctl+0x3b3/0x3f0 [ 60.550017][ T4867] ? __pfx_loop_control_ioctl+0x10/0x10 [ 60.550058][ T4867] __se_sys_ioctl+0xcb/0x140 [ 60.550158][ T4867] __x64_sys_ioctl+0x43/0x50 [ 60.550269][ T4867] x64_sys_call+0x1816/0x2ff0 [ 60.550293][ T4867] do_syscall_64+0xd2/0x200 [ 60.550321][ T4867] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.550376][ T4867] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.550441][ T4867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.550487][ T4867] RIP: 0033:0x7fea7a68ebe9 [ 60.550502][ T4867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.550518][ T4867] RSP: 002b:00007fea790f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.550538][ T4867] RAX: ffffffffffffffda RBX: 00007fea7a8b5fa0 RCX: 00007fea7a68ebe9 [ 60.550626][ T4867] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000005 [ 60.550640][ T4867] RBP: 00007fea790f7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.550654][ T4867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.550667][ T4867] R13: 00007fea7a8b6038 R14: 00007fea7a8b5fa0 R15: 00007ffcb5af30c8 [ 60.550685][ T4867] [ 60.866806][ T4875] netlink: 'syz.3.421': attribute type 4 has an invalid length. [ 60.874531][ T4875] netlink: 152 bytes leftover after parsing attributes in process `syz.3.421'. [ 61.010761][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 61.039171][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 61.044445][ T4889] loop2: detected capacity change from 0 to 2048 [ 61.110024][ T4881] loop4: detected capacity change from 0 to 1024 [ 61.115209][ T4892] loop3: detected capacity change from 0 to 8192 [ 61.125716][ T4892] msdos: Unknown parameter 'dot lopp9O' [ 61.395929][ T4912] loop4: detected capacity change from 0 to 164 [ 61.614950][ T4912] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.644551][ T4918] netlink: 'syz.2.436': attribute type 4 has an invalid length. [ 61.652319][ T4918] netlink: 152 bytes leftover after parsing attributes in process `syz.2.436'. [ 61.669150][ T4912] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 61.681926][ T4912] Symlink component flag not implemented [ 61.687662][ T4912] Symlink component flag not implemented [ 61.706234][ T4912] Symlink component flag not implemented (7) [ 61.712283][ T4912] Symlink component flag not implemented (116) [ 61.989423][ T29] kauditd_printk_skb: 1345 callbacks suppressed [ 61.989440][ T29] audit: type=1326 audit(1755533199.111:12545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.027643][ T29] audit: type=1326 audit(1755533199.111:12546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.051115][ T29] audit: type=1326 audit(1755533199.141:12547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.074548][ T29] audit: type=1326 audit(1755533199.141:12548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.097959][ T29] audit: type=1326 audit(1755533199.141:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.121464][ T29] audit: type=1326 audit(1755533199.141:12550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8344bcd550 code=0x7ffc0000 [ 62.136262][ T4938] loop2: detected capacity change from 0 to 164 [ 62.145060][ T29] audit: type=1326 audit(1755533199.141:12551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.174633][ T29] audit: type=1326 audit(1755533199.141:12552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.198263][ T29] audit: type=1326 audit(1755533199.141:12553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.221782][ T29] audit: type=1326 audit(1755533199.141:12554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4933 comm="syz.4.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 62.248404][ T4938] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.300264][ T4938] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 62.312404][ T4938] Symlink component flag not implemented [ 62.318099][ T4938] Symlink component flag not implemented [ 62.334983][ T4942] loop4: detected capacity change from 0 to 1024 [ 62.358371][ T4938] Symlink component flag not implemented (7) [ 62.364395][ T4938] Symlink component flag not implemented (116) [ 62.376745][ T4942] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.393915][ T4946] loop1: detected capacity change from 0 to 512 [ 62.422761][ T4946] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.469024][ T4942] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 15) [ 62.503648][ T4946] EXT4-fs (loop1): 1 truncate cleaned up [ 62.525948][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 62.535949][ T4942] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 62.548405][ T4942] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.548405][ T4942] [ 62.593394][ T4952] loop2: detected capacity change from 0 to 1024 [ 62.600977][ T4956] loop1: detected capacity change from 0 to 2048 [ 62.688249][ T4961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.707963][ T4321] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 62.745484][ T4961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.760501][ T4963] netlink: 'syz.0.449': attribute type 4 has an invalid length. [ 62.768491][ T4963] netlink: 152 bytes leftover after parsing attributes in process `syz.0.449'. [ 62.778242][ T4939] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.811054][ T4965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 62.837199][ T4961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.855452][ T4961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.877855][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 62.891879][ T4939] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.908720][ T4961] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.970296][ T4975] loop2: detected capacity change from 0 to 512 [ 62.978049][ T4939] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.445: lblock 1 mapped to illegal pblock 1 (length 3) [ 62.986002][ T4975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.003181][ T4977] loop1: detected capacity change from 0 to 2048 [ 63.072364][ T4975] EXT4-fs (loop2): 1 truncate cleaned up [ 63.167557][ T4987] loop3: detected capacity change from 0 to 2048 [ 63.194918][ T4994] netlink: 'syz.2.461': attribute type 4 has an invalid length. [ 63.231160][ T4990] loop1: detected capacity change from 0 to 128 [ 63.266654][ T4990] ext4 filesystem being mounted at /113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.351773][ T5001] mmap: syz.4.462 (5001) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.382646][ T5001] netlink: 'syz.4.462': attribute type 13 has an invalid length. [ 63.412365][ T5004] loop3: detected capacity change from 0 to 1024 [ 63.423887][ T5005] loop2: detected capacity change from 0 to 1024 [ 63.469386][ T5005] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.480697][ T5004] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.520069][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.527302][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.527854][ T5005] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 15) [ 63.572117][ T5004] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 15) [ 63.620676][ T5005] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 63.633359][ T5005] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.633359][ T5005] [ 63.646181][ T5005] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 63.647948][ T5004] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 63.662790][ T5012] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.673425][ T5004] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.673425][ T5004] [ 63.698791][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.699726][ T5012] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.713341][ T5004] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 63.744024][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.758648][ T5012] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.765997][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.795370][ T4997] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.821939][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.830924][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.850501][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.872228][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.894785][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.903866][ T4997] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.938145][ T4997] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.959206][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 63.962848][ T5005] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.464: lblock 1 mapped to illegal pblock 1 (length 3) [ 64.017372][ T5002] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 64.026801][ T5015] loop4: detected capacity change from 0 to 512 [ 64.040288][ T4997] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 4: comm syz.2.464: lblock 4 mapped to illegal pblock 4 (length 4) [ 64.056536][ T5013] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 64.078135][ T5015] EXT4-fs: journaled quota format not specified [ 64.087855][ T5002] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.465: lblock 1 mapped to illegal pblock 1 (length 3) [ 64.251974][ T5021] loop1: detected capacity change from 0 to 8192 [ 64.262642][ T5021] msdos: Unknown parameter 'dot lopp9O' [ 64.388549][ T5034] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 64.431000][ T5036] loop3: detected capacity change from 0 to 512 [ 64.470184][ T5036] EXT4-fs: test_dummy_encryption option not supported [ 64.597086][ T5045] loop2: detected capacity change from 0 to 128 [ 64.607825][ T5048] loop4: detected capacity change from 0 to 2048 [ 64.649038][ T5045] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.914976][ T5069] loop4: detected capacity change from 0 to 2048 [ 65.001689][ T5073] netlink: 'syz.0.488': attribute type 4 has an invalid length. [ 65.335311][ T5087] loop3: detected capacity change from 0 to 2048 [ 65.428704][ T5093] __nla_validate_parse: 10 callbacks suppressed [ 65.428719][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 65.447655][ T5093] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 65.487815][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.539186][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.498'. [ 65.616707][ T5107] loop4: detected capacity change from 0 to 1024 [ 65.656063][ T5109] loop2: detected capacity change from 0 to 512 [ 65.742608][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.503'. [ 65.751567][ T5117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.503'. [ 65.763102][ T5109] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.920371][ T5128] netlink: 'syz.0.510': attribute type 4 has an invalid length. [ 65.928095][ T5128] netlink: 152 bytes leftover after parsing attributes in process `syz.0.510'. [ 65.939575][ T5132] loop4: detected capacity change from 0 to 128 [ 65.955631][ T5132] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.988810][ T5134] cgroup2: Unknown parameter 'cpu' [ 66.026178][ T5136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 66.079468][ T5136] loop3: detected capacity change from 0 to 512 [ 66.089790][ T5138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.512'. [ 66.102865][ T5136] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 66.413674][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 66.422619][ T5153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 66.440107][ T5155] loop3: detected capacity change from 0 to 512 [ 66.455466][ T5155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.487941][ T5155] EXT4-fs (loop3): 1 truncate cleaned up [ 66.494019][ T5155] EXT4-fs mount: 241 callbacks suppressed [ 66.494035][ T5155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.551827][ T5161] loop1: detected capacity change from 0 to 164 [ 66.570412][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.587889][ T5161] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.610951][ T5161] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 66.639216][ T5161] Symlink component flag not implemented [ 66.644906][ T5161] Symlink component flag not implemented [ 66.653034][ T5161] Symlink component flag not implemented (7) [ 66.659107][ T5161] Symlink component flag not implemented (116) [ 66.835400][ T5176] loop3: detected capacity change from 0 to 2048 [ 66.859099][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.868585][ T5184] FAULT_INJECTION: forcing a failure. [ 66.868585][ T5184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.881869][ T5184] CPU: 0 UID: 0 PID: 5184 Comm: syz.1.531 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 66.881947][ T5184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.881958][ T5184] Call Trace: [ 66.881964][ T5184] [ 66.881973][ T5184] __dump_stack+0x1d/0x30 [ 66.882003][ T5184] dump_stack_lvl+0xe8/0x140 [ 66.882022][ T5184] dump_stack+0x15/0x1b [ 66.882040][ T5184] should_fail_ex+0x265/0x280 [ 66.882103][ T5184] should_fail+0xb/0x20 [ 66.882120][ T5184] should_fail_usercopy+0x1a/0x20 [ 66.882139][ T5184] _copy_from_user+0x1c/0xb0 [ 66.882162][ T5184] vmemdup_user+0x59/0xd0 [ 66.882261][ T5184] path_setxattrat+0x1b6/0x310 [ 66.882302][ T5184] __x64_sys_fsetxattr+0x6b/0x80 [ 66.882349][ T5184] x64_sys_call+0x1ced/0x2ff0 [ 66.882371][ T5184] do_syscall_64+0xd2/0x200 [ 66.882396][ T5184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.882439][ T5184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.882460][ T5184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.882479][ T5184] RIP: 0033:0x7fd1afb8ebe9 [ 66.882494][ T5184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.882510][ T5184] RSP: 002b:00007fd1ae5ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 66.882529][ T5184] RAX: ffffffffffffffda RBX: 00007fd1afdb5fa0 RCX: 00007fd1afb8ebe9 [ 66.882606][ T5184] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000004 [ 66.882618][ T5184] RBP: 00007fd1ae5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 66.882629][ T5184] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 66.882640][ T5184] R13: 00007fd1afdb6038 R14: 00007fd1afdb5fa0 R15: 00007ffc1236ed28 [ 66.882656][ T5184] [ 67.154646][ T5190] loop1: detected capacity change from 0 to 512 [ 67.162613][ T5176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.212525][ T5190] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.242603][ T5198] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 67.250339][ T5198] netlink: 224 bytes leftover after parsing attributes in process `syz.4.536'. [ 67.252229][ T29] kauditd_printk_skb: 3115 callbacks suppressed [ 67.252243][ T29] audit: type=1400 audit(1755533204.361:15670): avc: denied { ioctl } for pid=5197 comm="syz.4.536" path="socket:[8087]" dev="sockfs" ino=8087 ioctlcmd=0xf515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.293121][ T5190] EXT4-fs (loop1): 1 truncate cleaned up [ 67.299475][ T5190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.346898][ T29] audit: type=1400 audit(1755533204.461:15671): avc: denied { create } for pid=5197 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.390434][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.407707][ T29] audit: type=1326 audit(1755533204.491:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8344bcebe9 code=0x7ffc0000 [ 67.431195][ T29] audit: type=1326 audit(1755533204.491:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8344bd0b07 code=0x7ffc0000 [ 67.454820][ T29] audit: type=1326 audit(1755533204.491:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.4.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8344bd0a7c code=0x7ffc0000 [ 67.478236][ T29] audit: type=1400 audit(1755533204.501:15675): avc: denied { write } for pid=5174 comm="syz.3.526" path="/104/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.500886][ T29] audit: type=1400 audit(1755533204.521:15676): avc: denied { relabelfrom } for pid=5202 comm="syz.2.538" name="NETLINK" dev="sockfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 67.525020][ T29] audit: type=1400 audit(1755533204.521:15677): avc: denied { relabelto } for pid=5202 comm="syz.2.538" name="NETLINK" dev="sockfs" ino=9332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 67.549682][ T29] audit: type=1400 audit(1755533204.521:15678): avc: denied { read } for pid=3030 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 67.572219][ T29] audit: type=1400 audit(1755533204.551:15679): avc: denied { write } for pid=5197 comm="syz.4.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.620627][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.693108][ T5211] loop3: detected capacity change from 0 to 1024 [ 67.700927][ T5213] syz.0.542 uses obsolete (PF_INET,SOCK_PACKET) [ 67.702853][ T5216] netlink: 'syz.4.543': attribute type 1 has an invalid length. [ 67.730363][ T5211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.753199][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.771341][ T5216] bond0 (unregistering): Released all slaves [ 67.790070][ T5218] loop1: detected capacity change from 0 to 1024 [ 67.814010][ T5218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.906559][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.948424][ T5237] loop2: detected capacity change from 0 to 2048 [ 67.957022][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.011977][ T5237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.031703][ T5246] netlink: 'syz.1.550': attribute type 13 has an invalid length. [ 68.094542][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.101797][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.126032][ T5251] loop4: detected capacity change from 0 to 512 [ 68.133546][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.149246][ T5251] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 68.244621][ T5252] 0X: renamed from caif0 [ 68.254554][ T5252] 0X: entered allmulticast mode [ 68.259927][ T5252] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 68.297329][ T380] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.306697][ T380] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.317741][ T5265] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 68.354491][ T380] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.375537][ T380] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.585077][ T5278] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 68.593443][ T5281] hsr_slave_0: left promiscuous mode [ 68.601554][ T5282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.610169][ T5282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.773129][ T5281] hsr_slave_1: left promiscuous mode [ 68.796580][ T5278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.891066][ T5294] loop1: detected capacity change from 0 to 512 [ 68.906557][ T5293] netlink: 'syz.4.568': attribute type 13 has an invalid length. [ 68.918899][ T5294] EXT4-fs: test_dummy_encryption option not supported [ 69.068690][ T5299] loop4: detected capacity change from 0 to 512 [ 69.083571][ T5299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.131773][ T5299] EXT4-fs (loop4): 1 truncate cleaned up [ 69.156930][ T5299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.265588][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.436785][ T5310] loop2: detected capacity change from 0 to 1024 [ 69.489106][ T5310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.503559][ T5314] loop1: detected capacity change from 0 to 1024 [ 69.538629][ T5310] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.565549][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.583076][ T5314] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.597436][ T5314] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.608865][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 69.621341][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 69.621341][ T12] [ 69.623775][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 15) [ 69.631092][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 69.651310][ T12] EXT4-fs (loop2): Free/Dirty block details [ 69.657367][ T12] EXT4-fs (loop2): free_blocks=4293918720 [ 69.663140][ T12] EXT4-fs (loop2): dirty_blocks=16 [ 69.667965][ T5314] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 69.668415][ T12] EXT4-fs (loop2): Block reservation details [ 69.680634][ T5314] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.680634][ T5314] [ 69.686578][ T12] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 69.704266][ T5322] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 15) [ 69.704366][ T5314] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.746266][ T5322] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 69.787344][ T5310] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 69.816450][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 69.832882][ T5306] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 69.851113][ T5325] loop4: detected capacity change from 0 to 128 [ 69.868753][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 69.883732][ T5325] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.897358][ T5306] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 69.919925][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 69.947573][ T5325] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.988436][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.002671][ T5310] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.037564][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.055949][ T5310] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.077619][ T5306] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.092476][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.102646][ T5310] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.127587][ T5310] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.572: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.185389][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.228011][ T5314] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 1: comm syz.1.574: lblock 1 mapped to illegal pblock 1 (length 3) [ 70.402810][ T5332] loop2: detected capacity change from 0 to 2048 [ 70.443922][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.456644][ T5332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.521105][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.576971][ T5341] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 70.584702][ T5341] __nla_validate_parse: 8 callbacks suppressed [ 70.584715][ T5341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.580'. [ 70.714600][ T5343] loop2: detected capacity change from 0 to 512 [ 70.744426][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.746606][ T5343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.767592][ T5343] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.857575][ T5343] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.905210][ T5359] random: crng reseeded on system resumption [ 70.916486][ T5360] loop4: detected capacity change from 0 to 1024 [ 70.930172][ T5359] pim6reg1: entered promiscuous mode [ 70.935583][ T5359] pim6reg1: entered allmulticast mode [ 70.946244][ T5360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.960133][ T5360] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.990020][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 15) [ 71.004650][ T5360] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 71.017170][ T5360] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.017170][ T5360] [ 71.033341][ T5360] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 71.096009][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.166344][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.227353][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.257379][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.288479][ T5351] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.318865][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.354768][ T5360] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.377531][ T5351] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 1: comm syz.4.584: lblock 1 mapped to illegal pblock 1 (length 3) [ 71.469424][ C0] hrtimer: interrupt took 45933 ns [ 71.633474][ T5388] loop1: detected capacity change from 0 to 512 [ 71.670028][ T5388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.721583][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.746233][ T5388] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.773863][ T3303] ================================================================== [ 71.781980][ T3303] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 71.789725][ T3303] [ 71.792056][ T3303] read-write to 0xffff888237c26f50 of 8 bytes by task 5388 on cpu 0: [ 71.800124][ T3303] find_get_block_common+0x4f0/0x960 [ 71.805427][ T3303] bdev_getblk+0x83/0x3b0 [ 71.809770][ T3303] ext4_getblk+0x1b6/0x510 [ 71.814217][ T3303] ext4_xattr_inode_lookup_create+0x971/0xed0 [ 71.820312][ T3303] ext4_xattr_block_set+0x123/0x1a30 [ 71.825620][ T3303] ext4_xattr_set_handle+0xa4f/0xe70 [ 71.830924][ T3303] ext4_xattr_set+0x18e/0x240 [ 71.835612][ T3303] ext4_xattr_security_set+0x3c/0x50 [ 71.840993][ T3303] __vfs_setxattr+0x2e6/0x310 [ 71.845678][ T3303] __vfs_setxattr_noperm+0xe8/0x410 [ 71.850914][ T3303] __vfs_setxattr_locked+0x1af/0x1d0 [ 71.856203][ T3303] vfs_setxattr+0x132/0x270 [ 71.860705][ T3303] filename_setxattr+0x1ad/0x400 [ 71.865646][ T3303] path_setxattrat+0x2c9/0x310 [ 71.870418][ T3303] __x64_sys_lsetxattr+0x71/0x90 [ 71.875360][ T3303] x64_sys_call+0x2877/0x2ff0 [ 71.880040][ T3303] do_syscall_64+0xd2/0x200 [ 71.884560][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.890455][ T3303] [ 71.892782][ T3303] read to 0xffff888237c26f50 of 8 bytes by task 3303 on cpu 1: [ 71.900334][ T3303] has_bh_in_lru+0x35/0x1f0 [ 71.904839][ T3303] smp_call_function_many_cond+0x2a9/0xc60 [ 71.910647][ T3303] on_each_cpu_cond_mask+0x3c/0x80 [ 71.915758][ T3303] invalidate_bh_lrus+0x2a/0x30 [ 71.920618][ T3303] invalidate_bdev+0x42/0x70 [ 71.925211][ T3303] ext4_put_super+0x624/0x7d0 [ 71.929887][ T3303] generic_shutdown_super+0xe3/0x210 [ 71.935185][ T3303] kill_block_super+0x2a/0x70 [ 71.939955][ T3303] ext4_kill_sb+0x42/0x80 [ 71.944297][ T3303] deactivate_locked_super+0x72/0x1c0 [ 71.950159][ T3303] deactivate_super+0x97/0xa0 [ 71.954903][ T3303] cleanup_mnt+0x269/0x2e0 [ 71.959346][ T3303] __cleanup_mnt+0x19/0x20 [ 71.963770][ T3303] task_work_run+0x12e/0x1a0 [ 71.968370][ T3303] exit_to_user_mode_loop+0xe4/0x100 [ 71.973659][ T3303] do_syscall_64+0x1d6/0x200 [ 71.978270][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.984165][ T3303] [ 71.986485][ T3303] value changed: 0xffff88811a42cbc8 -> 0xffff8881004aec30 [ 71.993586][ T3303] [ 71.995906][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 72.002066][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 72.013002][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.023081][ T3303] ================================================================== [ 72.064316][ T5388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.