last executing test programs: 1m37.167495198s ago: executing program 4 (id=596): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x1, 0x7800, 0x8, 0x995d, {{0x21, 0x4, 0x0, 0x3, 0x84, 0x64, 0x0, 0x10, 0x4, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0xb, 0xd9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @noop, @ssrr={0x89, 0xf, 0x58, [@local, @dev={0xac, 0x14, 0x14, 0x31}, @loopback]}, @ssrr={0x89, 0x27, 0x24, [@local, @remote, @private=0xa010102, @private=0xa010100, @loopback, @multicast1, @remote, @multicast1, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0xf3, [@local, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @rand_addr=0x64010102]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x8041}, 0x8090) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) 1m36.496972894s ago: executing program 4 (id=610): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000800)={[{@nobh}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@dont_appraise}, {@seclabel}, {@euid_eq}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_user={'obj_user', 0x3d, '[,-'}}, {@permit_directio}, {@appraise}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56551, 0x4, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x9, 0x1002, 0x0, 0x2, 0xffffffff, 0x100000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x3, 0xffffffff}}]}}}]}, 0x64}}, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x1c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) writev(r10, &(0x7f0000000080), 0x1000000000000014) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 1m36.298554763s ago: executing program 4 (id=613): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) inotify_init1(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0xf2ff, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1m36.112077081s ago: executing program 4 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4008030) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r8, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) r10 = fcntl$getown(r4, 0x9) setpgid(r9, r10) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x18) 1m36.013238231s ago: executing program 4 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000006c0)={0x0, 0x61, "383291b79efda46b7c895444f3c7f1e702119311bf6825b0181c94f86302ea562efc276dc9d28ebebea8a654df7ebff5a290934553f134f2b1e809077b5885972358a1e53a7ec8f9420389e9fe312159d8067b4d53f1b6a4d4e6d3b9b96d4324e3"}, &(0x7f0000000740)=0x69) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000780)={r2, 0x3ff}, &(0x7f00000007c0)=0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, &(0x7f0000000040), &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x53, &(0x7f0000000300)=""/83, 0x41100, 0x14, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x5, 0x4, 0x10}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x0, 0x4, 0x4, 0x4}, {0x3, 0x3, 0x8, 0x4}, {0x5, 0x4, 0xb, 0xc}, {0x0, 0x42, 0x9}], 0x10, 0x4}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kfree\x00', r5, 0x0, 0x5}, 0x18) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) r8 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e20, 0x401, @private2, 0x100}}}, &(0x7f0000000100)=0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r11 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) setsockopt$packet_drop_memb(r11, 0x107, 0x2, &(0x7f0000000680)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000001000030400000000000000000000000040d338bddf05911cee8eac82615ac2d30b0d46e5f616db1b215b41901fa33fce00a6c382a57ca7938ca76998c866bd", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r10, @ANYRESHEX=r7], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 1m32.141145591s ago: executing program 4 (id=688): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000140)=r3, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1008000}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1840088, &(0x7f0000003100)=ANY=[@ANYRESHEX=r6, @ANYRES8=0x0, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd0c00d6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205", @ANYBLOB="584bccefd3b276a153a2350bf316b50ef34dbc44ab7a7f9421ce8ce2514c7408a91915567b0feff0104bac33e34645a21b53820571b680d5acd9d78f78a606ba65b965e59d2abd85be8e5ccbed02197f35d3c3723c9183e61d82f30537b69f699fd4c88ced1447ef9b6e973feb911a57b2a291fed4abb956ad42b3f450e9b5683681c86c64d7614fed54ed7db0c52cd80a", @ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="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"], 0x25, 0x374, &(0x7f0000000600)="$eJzs3T1sG1UcAPD/9dzYqVqSAamCybAhoaotYoCpVQUSUgcosvhasGjKR2wqxcJSOtTxAqqYQCxIMLF1gLEzYkJsDIxQJFRALHSr1KiHzj6f7cT5GhJa9fcbkqf/e3+//9275C5fL2/3Yvni4bh0+/atqNWSqJw5dybuJLEYhyKNobWY6dO52XEA4D53J8vi32xo59GfHxm13PsB4ME1uP+/e2wcqFZ2n3zt6L7UBADsr11+/f/yzOjlfSsLANhHm+7/T051b/g2f6X8nQAA4MH16htv/nr2fMSFer0W0f6k2+g24vlx/9lL8X60YilOxkKsRwwfFIZPC/nbF186/8LJeu7PxWjkGd1GRLvXbQyfFM6mg/xqnIqFWCzyszI/zfNPDfLrEbHWG8wf7aTbOBxHivl/OxJLcToW4tGIbPREMswf/bBi+AKN9ii/F9GP2ugg8vpPxEL8/E5cjlZczNMn6r96ql4/l52fyu9er9YOch0AAAAAAAAAAAAAAAAAAAAAAHi4nKiXFsv9b7J2r/vxhY0Dyv5qtHvDvX7K/YH6w/2Bsupod59r6cb9gab35+k2KnHofz1yAAAAAAAAAAAAAAAAAAAAuH90Vuei2WotrXRWryxPNnoTkQ9//PaH+Rh1VYrUD9JxVhTBqdcZDZx45TTKKbIyPUtHY+aLjHxMmr8fDl5rXr9RVjw5RbU8iunii0Z1U1dS1NRstY498cdXs7Lu5Y21QSSNcVesxeYTlRTzT6S3H8kDtYhYn3FWd2ic3mHMzSzLtkq/+mUZGZXViSSiEnsuIymWYJsxR2+999gznePPDiLfF5s+PPX0wms3v/jm7+VmK/rFSrbmVjrr2VarU6xFHokkks2lphPXT1Kc52TGlTC70R9H+iud1Wb6yz+vP/7ZT/l1OLFw6Yzr516WZZORj7ae67uNkblhI4lYHJ2E7Uo9HLtdnbfuTp2xbVcw/2ia6jr+9Znmjau//7XbK2Hik4SNOgAAAAAAAAAAAAAAAAAA4ECM/+h3L1nPvbJ/FQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwRv////VK8vzRaNfRvbSuNuLzV3VpZXOlpPPH+ihAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwEPsvAAD//9vtV7s=") r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) 1m32.140883181s ago: executing program 32 (id=688): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x28000600) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000140)=r3, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1008000}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1840088, &(0x7f0000003100)=ANY=[@ANYRESHEX=r6, @ANYRES8=0x0, @ANYBLOB="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", @ANYBLOB="584bccefd3b276a153a2350bf316b50ef34dbc44ab7a7f9421ce8ce2514c7408a91915567b0feff0104bac33e34645a21b53820571b680d5acd9d78f78a606ba65b965e59d2abd85be8e5ccbed02197f35d3c3723c9183e61d82f30537b69f699fd4c88ced1447ef9b6e973feb911a57b2a291fed4abb956ad42b3f450e9b5683681c86c64d7614fed54ed7db0c52cd80a", @ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="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"], 0x25, 0x374, &(0x7f0000000600)="$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") r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) 1m29.304984189s ago: executing program 5 (id=689): r0 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000040)=0x1c) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0)=0x7ff, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x3c}}, 0x48014) 1m29.000539299s ago: executing program 5 (id=735): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f00000023c0)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$eJzs3U9sXdWdB/DvfbYTj4lCgAyTQUBewgQMZBzbGcJEbCaxnxMz/jOyHYloNCIMSaooVqmgSIAqNZWqroraRdUF3SF10xUSG9hU2bXbbrqoVLHuDnUVddFX3fueYzv283MSxzbh87Ge3/3zu+f8zrv33SNfv3dP+CZrNpvV4x7nL/xmO5Nl9zk7/tWnn31cPn50I3vSk1eKL5L+JPWkN8mhJGPjc7PTXQq6nlxKcjMpkuxN63lTLqX4WfYtz99M8auq3tKFe2wYm9LkW22njz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiNirHx4eGRIlOTMxfeqHdWDQHeaWVtubwvq1G/iy+71psU5SP9/UtDfR86uLz6yfLX0Tzdmnu6GpA8/fnokScPvPZEb21p+w0Svht/bw+GfNcbvvfhR9ffWly88m6H9T3t5tx3hrvUucbM5Pzs5PSZc4365Pxs/fSpU8Mnzk/M1ycmpxrzF+cXGtP1sbnGmYXZufrg2Iv1kdOnT9YbQxdnL8ycGx+aaiwtfPXfR4eHT9VfH/qfxpm5+dmZE68PzY+dn5yampw5V8WUq8uYV8sD8b8nF+oLjTPT9frVa4tXTq7KaJ2Xugwa6daSMmi0W9Do8OjoyMjo6MipV06/8urwcO/ygp5UC4bvkDWb3D5os+/hPS6+hT6pbSKoPDnWt/DsDfen1u7/M5XJzORC3kh93Z+xjGcus5nusL5tqf8/dqKxYb0r+/+lXv7Q8uqnUvX/z7bmnu3U/3fIZft+3suH+SjX81YWs5greXfV2r33UGKzuX6rfv2H1mux0y1e/XMujcxkMvOZzWSmc6ZaUm8vqed0TuVUhvNmzmci86lnIpOZSiPzuZj5LKRRHVFjmUsjZ7LQ22rjYMbyYuoZyemczsnU08hQLmY2FzKTcxnPmaqUq7lWve4nN8jxdtDIZoJGNwjaoP9vL7iL/p9vqa0+hcM9a7b7/z13LK+tDR0c266kAAAAgC31r7/P/oOP/+7PSV+eqa6xAwAAAA+b6uN6T5dPfeXUMykmJqcaw2sD39/+3AAAAICtUVTfsSuSDORwa2rpm1DrXAQAAAAAvomq//8/Wz4NlFOHU/j7HwAAAB423e+x3zWiOJ56bpSr6pdbkZfbEe37/A5MTE41hsZmp14byfPVXQaqbxqsKa0nB5Lq6wcv5Ugr6shA63lgdYn9ZdTI0Gsj6c/RdkMGnyufnhtcJ3K0jHwpL7QiX1iK7M+ayJNlJAA87I5u0B9vtv9/KcdbEcefqm7f3vvUOn3wcKtn/eEOtRMAWNZ9jJ2uEcV/LA3/0+Hv/55cPdz6SMFQ3s47WczlHK++bVB94qBdam4WWS51YMXHEI53uRowsGKEl+NL1wMO71v3esDAioFejq+5ItAp9uS6r12x5XsDALbH0TX98Ab9f7PZmlpz/X/jv/8HfKQQAHaV2yPYP8CJO+vs25mmAgBtnXvpDfQ8wIQAAAAAAAAAAAAAAAAAAAAAAAAAAADgIfAg7/9fS/JgRxa4j4kbSXZBGts88Zf2bl+zqr38xo5nuGJib+6/nP5tGeHiw//bs4sP9Xub2MGTEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANumSHrWW15L9ia9w0lObH9WD86NnU5ghxW3cisfZP9O5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LBp3/+/ltbzI61F6a0lx5JcSvK/O53jVrq10wnssBX3/y/3eZpFelu7PUXf2Pjc7HS5+7O3XP/Vp599XD7upZ6ygLKGVYNLtGvovNVj1VYD41feu/79d75XHz9bJXl2YWJqfPrc3H8tBz5ZfJ7U03osWcr3B0X7KF7d8s/Llnavt6xloqp3fG29/7Le1rfrPfbbn3du27LlNK4tXhkta1povLHw/nevfbAi6PEcSZ4bTAZX1/Sd8tGhpiPp26je4uviJ8X+/DKXqv1fplE0i3IXPZrsSe2frl5bvDL09juLlzvkdCCHk1xO+jef0+G1e2JJddTV+spah6ug8tfBLuVt6JGe/c1mq8SRDm14rDpkBu6qDfXObah0ed3bbTzZIaMn8vxd7+nnu9TY9rdmS2uu+Lr4U3E+f8yPV4z/USv3/7Fs5t1ZxlSRK46Uzm0+ttzy0ZUr3rwzsuO7kgfgp/n//Oft/V9bcf5v76vtOR+tqPGBvS+KVi/UVk0fvKNHap99OmXZzvNgK6pDnv+cl9du1yXPl7ucUbbo/b9a8XXxSTGYv+aG8X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdr0h61lteS44lOZDk0XK+njS3or7aQLEVxWzSnjVLbmxj7btH7fZUcSu38kH272g6AAAAAAAAAGyZs+NfffrZx+Wj+n98T/6t+CLpb/2nvzfJgeIXfWPjc7PTXQrqSy4luVlO999dDuV22bc8f7OcO3T3bQEANucfAQAA//+INm5i") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000340)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x58130, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xc}, 0x81203, 0x10000, 0xbdf7, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x3d0, 0x4100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) utime(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'}) bind$inet(r10, &(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r11, &(0x7f0000000100)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xbe0}, 0x1c, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x50, 0x4040040}, 0x85c) 1m28.935045596s ago: executing program 5 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01f617"], 0x0, 0x4e, 0x0, 0x1, 0x10}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0xb, 0x6b, &(0x7f0000000300)="3a8fed42dde9a8f24e9c55", &(0x7f00000005c0)=""/107, 0x48, 0x0, 0xb3, 0xe2, &(0x7f0000000640)="b268fd234ee03c0022cf84e0603c49170d905cfc1d2776d5788efe270d13bae32a8901ea095240af4ecdd07c50fb6ad4b3d6038bb1f350e60b0b9d0af0075bd2e91aa22bfd739dfeb7f6b16c3e3b50057ac84ef53810c700e4b4e61c8a692be93a4292f36b1aa787cd3c68d1c9b3622a2009f1df17ae1ae21f40d2416caa36c0bef511102204f6c7e17dcd1c3d7365b66beee615cde7a73059b43cd771e99f462540c9b951ea46776459a22d3b97c4db70a461", &(0x7f0000000700)="0f4b0af4f7cfe5ade7dbd5bcfc9787679b0b4d036e6f8f6375b4ccc8a06e73c390bb813ac8fcc41b1eef48bae7440150abed04076dfaac944af5f45626ecac14572ab18b19c064af5ace7a481aa21b059c28eb919d02a67a9912e56cbbe936bad01a8301ec7ee8337261ea98fff75f44bb11437278736013b5204d2a24b438a3bee88283aeff28aabe7d09d2d2c9b26330581066893ddc4e0491c9e822e05825ef145ba8e9108abde1996ae42cac59037355e53755299839694f8d1e0854f5195022caf7e2b0abe4160f8ee4ac405d2af99f8c56c739c24c627f0f9f76427e698ade", 0x3, 0x0, 0x91}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r8, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000340)={{r8, 0x800000000000, 0xfffffffffffffffd, 0x4, 0xffffffffffff0001, 0x47a, 0x4, 0x0, 0x106, 0x8, 0x4, 0x7a7d4e3c, 0x1000000000000fd, 0x53c, 0x8001}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000a00)={r8, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x28}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) 1m28.632987405s ago: executing program 2 (id=741): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) io_uring_setup(0x4fee, 0x0) r0 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xaa82710009706b9f}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x6, 0xff, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x60000, 0x1830}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000bc0)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x7800, 0x7, 0xb, 0x8, {{0x4d, 0x4, 0x0, 0x27, 0x134, 0x68, 0x0, 0x4, 0x4, 0x0, @private=0x101, @remote, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@rand_addr=0x64010100, 0x8001}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}]}, @noop, @cipso={0x86, 0xca, 0x2, [{0x5, 0x12, "4379ecf1f7514aa8cb7894370b09005a"}, {0x2, 0x4, "d99b"}, {0x5, 0xf, "29fbe1d21e1432f64b93d779a4"}, {0x1, 0xd, "19ba12347f724dcc474a66"}, {0x5, 0x12, "b5cc22ed9c7e213e56bb143c9999f418"}, {0x1, 0x4, "a256"}, {0x7, 0xe, "9b92fa9d208ee8c01b154625"}, {0x6, 0xd, "e866f3dafc588d17b9f4b7"}, {0x6, 0xe, "844dd1779b3fd5edddfb239c"}, {0x7, 0xd, "305282c1e93c3938b4bf77"}, {0x5, 0xd, "d9f040096f5a916d5f95d6"}, {0x5, 0x10, "ce9b6942dcf649f345af27cd3801"}, {0x5, 0xf, "cbb186e081275d10f7084f8ad0"}, {0x3, 0x12, "a90526830000000000000009000000fc"}, {0x1, 0x8, "54865e883ed0"}]}, @timestamp={0x44, 0x4, 0xd9, 0x0, 0x6}, @noop, @lsrr={0x83, 0xb, 0xa9, [@empty, @loopback]}, @cipso={0x86, 0x2d, 0x2, [{0x5, 0x2}, {0xe, 0xf, "eec0a7d2ef2a3545366a3d6289"}, {0x5, 0x6, "18d69e12"}, {0x2, 0x5, "88522c"}, {0x6, 0x2}, {0x0, 0x9, "81d21e16b6c27e"}]}, @noop]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @multicast2}, &(0x7f0000000c40)=0x5cab5d35f44d140f) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x3, 0x5, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x40, 0x200}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000d40)={@initdev, @remote}, &(0x7f0000000d80)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'team_slave_1\x00'}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001580)={&(0x7f0000000e00)=ANY=[], 0x764}, 0x1, 0x0, 0x0, 0x20044004}, 0x6000840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x900, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) syz_clone(0xe0ae5000, 0x0, 0x4a, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x52, 0x22, r5, 0x0, 0x0, 0x0, 0x2160, 0x1}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @remote, 'geneve0\x00'}}, 0x1e) io_uring_enter(r0, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 1m28.494063379s ago: executing program 2 (id=742): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x40010, r4, 0x4000) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14) read(r4, &(0x7f00000019c0)=""/4097, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r9, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000300), 0x4, {0xa, 0x4e20, 0x11faf2c6, @mcast2, 0x1}, r9}}, 0x38) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRES64=r6], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nombcache}, {@errors_remount}, {@noinit_itable}, {@bsdgroups}, {@bsdgroups}, {@dioread_lock}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r11, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b040000000000bf090000000002000000000000d4557a1dcc063131bcf4222580d045dbae6239beb0c7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) listen(r11, 0x9) fadvise64(r11, 0x7f, 0x1000000, 0x4) 1m27.797056547s ago: executing program 5 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01f617"], 0x0, 0x4e, 0x0, 0x1, 0x10}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0xb, 0x6b, &(0x7f0000000300)="3a8fed42dde9a8f24e9c55", &(0x7f00000005c0)=""/107, 0x48, 0x0, 0xb3, 0xe2, &(0x7f0000000640)="b268fd234ee03c0022cf84e0603c49170d905cfc1d2776d5788efe270d13bae32a8901ea095240af4ecdd07c50fb6ad4b3d6038bb1f350e60b0b9d0af0075bd2e91aa22bfd739dfeb7f6b16c3e3b50057ac84ef53810c700e4b4e61c8a692be93a4292f36b1aa787cd3c68d1c9b3622a2009f1df17ae1ae21f40d2416caa36c0bef511102204f6c7e17dcd1c3d7365b66beee615cde7a73059b43cd771e99f462540c9b951ea46776459a22d3b97c4db70a461", &(0x7f0000000700)="0f4b0af4f7cfe5ade7dbd5bcfc9787679b0b4d036e6f8f6375b4ccc8a06e73c390bb813ac8fcc41b1eef48bae7440150abed04076dfaac944af5f45626ecac14572ab18b19c064af5ace7a481aa21b059c28eb919d02a67a9912e56cbbe936bad01a8301ec7ee8337261ea98fff75f44bb11437278736013b5204d2a24b438a3bee88283aeff28aabe7d09d2d2c9b26330581066893ddc4e0491c9e822e05825ef145ba8e9108abde1996ae42cac59037355e53755299839694f8d1e0854f5195022caf7e2b0abe4160f8ee4ac405d2af99f8c56c739c24c627f0f9f76427e698ade", 0x3, 0x0, 0x91}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r8, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000340)={{r8, 0x800000000000, 0xfffffffffffffffd, 0x4, 0xffffffffffff0001, 0x47a, 0x4, 0x0, 0x106, 0x8, 0x4, 0x7a7d4e3c, 0x1000000000000fd, 0x53c, 0x8001}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000a00)={r8, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) close(r5) socket$netlink(0x10, 0x3, 0x0) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r9) migrate_pages(0x0, 0x3, &(0x7f0000000080)=0x46, &(0x7f00000004c0)=0x101) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x28}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) 1m27.796765147s ago: executing program 33 (id=751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01f617"], 0x0, 0x4e, 0x0, 0x1, 0x10}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r3, 0x0, 0xb, 0x6b, &(0x7f0000000300)="3a8fed42dde9a8f24e9c55", &(0x7f00000005c0)=""/107, 0x48, 0x0, 0xb3, 0xe2, &(0x7f0000000640)="b268fd234ee03c0022cf84e0603c49170d905cfc1d2776d5788efe270d13bae32a8901ea095240af4ecdd07c50fb6ad4b3d6038bb1f350e60b0b9d0af0075bd2e91aa22bfd739dfeb7f6b16c3e3b50057ac84ef53810c700e4b4e61c8a692be93a4292f36b1aa787cd3c68d1c9b3622a2009f1df17ae1ae21f40d2416caa36c0bef511102204f6c7e17dcd1c3d7365b66beee615cde7a73059b43cd771e99f462540c9b951ea46776459a22d3b97c4db70a461", &(0x7f0000000700)="0f4b0af4f7cfe5ade7dbd5bcfc9787679b0b4d036e6f8f6375b4ccc8a06e73c390bb813ac8fcc41b1eef48bae7440150abed04076dfaac944af5f45626ecac14572ab18b19c064af5ace7a481aa21b059c28eb919d02a67a9912e56cbbe936bad01a8301ec7ee8337261ea98fff75f44bb11437278736013b5204d2a24b438a3bee88283aeff28aabe7d09d2d2c9b26330581066893ddc4e0491c9e822e05825ef145ba8e9108abde1996ae42cac59037355e53755299839694f8d1e0854f5195022caf7e2b0abe4160f8ee4ac405d2af99f8c56c739c24c627f0f9f76427e698ade", 0x3, 0x0, 0x91}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, &(0x7f0000000ec0)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003180)={0x0, r8, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000340)={{r8, 0x800000000000, 0xfffffffffffffffd, 0x4, 0xffffffffffff0001, 0x47a, 0x4, 0x0, 0x106, 0x8, 0x4, 0x7a7d4e3c, 0x1000000000000fd, 0x53c, 0x8001}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000a00)={r8, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) close(r5) socket$netlink(0x10, 0x3, 0x0) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r9) migrate_pages(0x0, 0x3, &(0x7f0000000080)=0x46, &(0x7f00000004c0)=0x101) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x28}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) 1m26.791605296s ago: executing program 2 (id=756): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x28040041, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) 1m25.771236506s ago: executing program 2 (id=765): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x21081e, &(0x7f0000000b80)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x6, @remote, 0x1}], 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x20100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001340)='./file0\x00', 0x280c85a, &(0x7f00000001c0)=ANY=[@ANYBLOB='dmode=0x00000000000000b1,nojoliet,mode=0x00000000000005da,map=normal,dmode=0x0000000000000004,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB=',nocompress,mode=0x0000000000007fff,session=0x0000000000000036,check=relaxed,check=relaxed,nocompress,sbsector=0x0000000000000a9e,norocj,context=root,seclabel,\x00'], 0x3, 0xa64, &(0x7f0000001e00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x3, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munlockall() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpriority(0x1, 0x0) timer_gettime(r6, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 1m25.237183138s ago: executing program 2 (id=767): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2}, 0x18) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1m24.897034032s ago: executing program 2 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYRES8=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xff, 0x4d, 0x54, 0x0, 0xcb2, 0x8b008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x7b7d, 0x9}, 0x4000, 0xa7, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xffffdffffffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x4}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r9, 0x5453, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) 1m24.896423342s ago: executing program 34 (id=769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYRES8=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0xff, 0x4d, 0x54, 0x0, 0xcb2, 0x8b008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x7b7d, 0x9}, 0x4000, 0xa7, 0x800, 0x6, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xffffdffffffffffe}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x4}}, 0x120) write$UHID_DESTROY(r7, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r9, 0x5453, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) 1.464809755s ago: executing program 3 (id=1415): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) setxattr$incfs_metadata(0x0, &(0x7f0000000040), 0x0, 0x0, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.270681785s ago: executing program 7 (id=1421): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x340108a0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback, 0x8}, 0x1c) 1.233594678s ago: executing program 7 (id=1422): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x541b, 0xf0ff1f00000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0), 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 1.133248028s ago: executing program 7 (id=1423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) listen(r0, 0x80000001) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "b0d86846bc1682df4d60fd939000", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f304874ef539d80e29baefbb8c", 0x18}], 0x3) 1.058271056s ago: executing program 6 (id=1424): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.000190881s ago: executing program 7 (id=1425): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 799.221901ms ago: executing program 6 (id=1426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba6e6a869a636c008a123467d4ebde947f09e3e18471413aacf"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r4, &(0x7f00000001c0)) 723.955838ms ago: executing program 1 (id=1429): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x6c3, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x10f}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 681.344673ms ago: executing program 6 (id=1430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r2 = dup2(r1, r1) write(r2, &(0x7f0000000300)='O', 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) close_range(r4, r5, 0x0) (async) close_range(r4, r5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) 637.060107ms ago: executing program 7 (id=1431): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x280001, 0x40) write$cgroup_int(r1, &(0x7f0000000100)=0x100000000, 0x12) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x4, 0x2, 0x2, 0x1ff, 0x1, 0x0, [{0x0, 0x6, 0x4, '\x00', 0x4}]}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x9}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) setpriority(0x1, 0xffffffffffffffff, 0xa) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x30}}, {@sysvgroups}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) r6 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4055, 0x18, 0x6, 0x20f}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) 577.030843ms ago: executing program 3 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x120}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) socket(0x400000000010, 0x3, 0x0) sendmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@canfd={{0x0, 0x1, 0x1}, 0x2, 0x1, 0x0, 0x0, "89e48f7cfd37e103ac7e5207fa97f9f8013e5d1a7cf21b689ed3164bf88781a6738b09fc7436828458c7afb08b969450dd9a438532c62b22c4c8b56eb443ee1f"}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 549.888516ms ago: executing program 6 (id=1433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f00000001c0)="a2b2536b0513", 0x0, 0x1, 0x0, 0x0, 0x0}) 526.422377ms ago: executing program 6 (id=1434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0xf2ff, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 504.54012ms ago: executing program 0 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) 502.43041ms ago: executing program 1 (id=1436): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}], 0x18}}], 0x1, 0xc040) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000feffffff850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa20000000008000000b704004000000000850000000300000095d9ee360dc94857d25f804c58b5fa779dbfffe7b778f8fd0ede2312ef2c28d685dfd97d5ccbe6f66192742b42f6518ad6181f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 439.645856ms ago: executing program 1 (id=1437): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 416.856849ms ago: executing program 6 (id=1438): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000001000e6ffffee56000040001100000000", @ANYBLOB="b9cb87f82875a74361dd7bf1aefb676bbe6daafc2edffc56bbb3ba6727fd7d1598b64b61c4b88225f161f1579413722420a4624f413c85c17257c8342185f84f94518500ebf666673e28d7bf94eba858b8fed6485645a46f3101d51b54832c0d7b87a8bcc7fc443d36b6d949e81f73b952ec599e7c20fa811de66a1ad9084aea6c8f2d21b2fed7136b159134851c1179def1ebd575c7a9c11438546cf4b16e5fee73b3d939086e0a065c7a649352845abc55854b3e5caa8a4fcf5be2910c20770209bca6fbf8b6a5f4883dee945c6b5e770691b7b942ff4deece8bbf25", @ANYRESOCT=r0], 0x0, 0x80000000, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000500), &(0x7f0000000280)='%-010d \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x18, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000000000070007040000f0ffffffb702000000000000182300000000000000000000000000000000e13f5c5c91dc18a4f15948877b03d175a1be88360452040e9836d3f65bd5b5f6edb267c95fd3d19e214621eb67f7760b1a6726bc835aa0ed847ebd0cad484b7e0061b35061ffdf465536ca78c3", @ANYRES32=r7, @ANYBLOB="b3dfc926b3de0b9d79f420aa122b045c4058e4d564fb5bcc85"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r9}, 0x10) getcwd(&(0x7f0000001180)=""/4096, 0x1000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB="0000000000000000b7b70000000000000095000000000000000000000300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x3) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x80, 0x700, 0x103, 0x8, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x65, 0x0, 0x37, 0x29, 0x0, @remote, @local, {[@end]}}}}}) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000540)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000400)=0x7) 416.134499ms ago: executing program 7 (id=1439): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) r3 = gettid() r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x24, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, 0x22820, 0x55007}, [@IFLA_VF_PORTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_delneigh={0x60, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfb, {0x31d93b45370803b9, 0x0, 0x0, 0x0, 0x8, 0x4e, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r6}, @NDA_FLAGS_EXT={0x8}, @NDA_DST_IPV6={0x14, 0x1, @local}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_PROBES={0x8, 0x4, 0x1}, @NDA_MASTER={0x8, 0x9, 0x38000000}, @NDA_PROBES={0x8, 0x4, 0x888f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) tkill(r3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000c40000000400000000000000952b91d10efa501a81e2ebcf4a54aa78d8bd0bf1aae5b71820"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) 335.372396ms ago: executing program 0 (id=1440): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="040094807a026c57d2654d115e528c1459241cdf02597f14d35c3655073c5f407b4160b64e80e167c709d80d9da587820eeb0f3c363a773f519c2717597d2217f73d756a1e5262327a0d6705cffb6119d2df818584899aaf8d7b874dbb99330a6d2593829a3125c105c65840af5555000d003f0026e4b56b1866ada1d6000000ae69a5084963450371edc84dc99933e5f3798214db2bbd9046f0ccf707e29850c523bbf617b1d7ef1a551fb4d16bc02c3b80b31afd787c9d7b26e5ddbb196f76b5ae845fa547821e75e7ce9e57909e40c4879551d2f2238d4b261e66380a5ae73b551539b77a6588ca710abc8bcf5659e97a7c436980198477bba6e6a869a636c008a123467d4ebde947f09e3e18471413aacf"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r4, &(0x7f00000001c0)) 260.495944ms ago: executing program 0 (id=1441): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x340108a0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback, 0x8}, 0x1c) 218.054188ms ago: executing program 0 (id=1442): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@user_xattr}, {@nombcache}, {@barrier}, {@errors_continue}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x81}}, {@lazytime}, {@nodelalloc}, {@init_itable}, {@quota}, {@data_err_abort}, {@init_itable}, {@bh}, {@orlov}]}, 0xff, 0x55c, &(0x7f00000009c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4400, 0x7) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4400, 0x7) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) fdatasync(r1) (async) fdatasync(r1) getdents(r0, 0x0, 0xbb) 141.112336ms ago: executing program 3 (id=1443): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYBLOB="58b614fa69a74536c37690f36ce8032e47befca36a828393abc430d3555a92b93cd3e08c848bfe00f5635efba2c4e8a8f2853eff5bcba3d5e64b921691046fe1338f7928082afbdb0d21654c03f65d38a6bff8c9f5d441cf2abe4dc3a66f061017a656d578998f8a6ff2c01ada03fe739785c8f55831d9d4d462631048b9eb9fccd855636e5b7dfbc0560b3df91b9076dcb30d4be09f80f0ca92e4b955a26f524072f43ebc7c9359310d57d28c3c0ec03bde2235cd632610f8c37411104eacd443d74c573101fc2a87dcd850eb6dd596565a", @ANYBLOB="38ccee087f418d935cf93582f582d1e83f9530cf832ea246ae8c7a278c1aecea093891d2d76c659c82db7b5abbad8da4ef79364c7abb022d380d9b2b6341b32a7ada72de3ecc9a0c0d4fa3a9949a7118edddcf7c7277daf896c1d3c053a049ec18bb3ecfd3add331971ee2913a01eb7aa5", @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x5d1003, 0x1, 0xc}, 0x18) 128.275767ms ago: executing program 0 (id=1444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)="ddaa8c", &(0x7f0000000140), 0x1, r4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) 92.6301ms ago: executing program 0 (id=1445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x28}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) 86.371931ms ago: executing program 3 (id=1446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f00000001c0)="a2b2536b0513", 0x0, 0x1, 0x0, 0x0, 0x0}) 80.289492ms ago: executing program 1 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000899}, 0x0) 51.715765ms ago: executing program 1 (id=1448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9}}}, 0x24}}, 0x0) 50.887924ms ago: executing program 3 (id=1449): unshare(0x2040400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000047c0000040042800c0001"], 0x1570}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c815) 825.789µs ago: executing program 3 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r2}}) chroot(0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=1451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xff}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6.650997][ T6420] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 106.661699][ T6420] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 106.696370][ T6424] FAULT_INJECTION: forcing a failure. [ 106.696370][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 106.709383][ T6424] CPU: 0 UID: 0 PID: 6424 Comm: syz.6.913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.709447][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.709510][ T6424] Call Trace: [ 106.709518][ T6424] [ 106.709527][ T6424] __dump_stack+0x1d/0x30 [ 106.709552][ T6424] dump_stack_lvl+0xe8/0x140 [ 106.709571][ T6424] dump_stack+0x15/0x1b [ 106.709619][ T6424] should_fail_ex+0x265/0x280 [ 106.709661][ T6424] ? io_ring_ctx_alloc+0x38/0x670 [ 106.709781][ T6424] should_failslab+0x8c/0xb0 [ 106.709869][ T6424] __kmalloc_cache_noprof+0x4c/0x4a0 [ 106.709907][ T6424] io_ring_ctx_alloc+0x38/0x670 [ 106.710003][ T6424] ? io_uring_fill_params+0x270/0x300 [ 106.710046][ T6424] io_uring_create+0x134/0x630 [ 106.710082][ T6424] __se_sys_io_uring_setup+0x1f7/0x210 [ 106.710212][ T6424] __x64_sys_io_uring_setup+0x31/0x40 [ 106.710376][ T6424] x64_sys_call+0x2b25/0x3000 [ 106.710399][ T6424] do_syscall_64+0xd2/0x200 [ 106.710432][ T6424] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 106.710477][ T6424] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 106.710502][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.710529][ T6424] RIP: 0033:0x7fd2c4edefc9 [ 106.710587][ T6424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.710610][ T6424] RSP: 002b:00007fd2c393efc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 106.710656][ T6424] RAX: ffffffffffffffda RBX: 00007fd2c5135fa0 RCX: 00007fd2c4edefc9 [ 106.710672][ T6424] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000000000001113 [ 106.710687][ T6424] RBP: 0000200000000280 R08: 0000000000000000 R09: 0000200000000040 [ 106.710699][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.710711][ T6424] R13: 0000200000000000 R14: 0000000000001113 R15: 0000200000000040 [ 106.710735][ T6424] [ 106.955894][ T6434] loop0: detected capacity change from 0 to 1024 [ 106.961443][ T6436] loop6: detected capacity change from 0 to 512 [ 106.975463][ T6436] EXT4-fs (loop6): orphan cleanup on readonly fs [ 106.982288][ T6436] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.917: iget: bad i_size value: 38620345925642 [ 106.983756][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.996272][ T6436] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.917: couldn't read orphan inode 15 (err -117) [ 107.022074][ T6434] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 107.037669][ T6436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.064645][ T6434] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 107.077100][ T6434] EXT4-fs (loop0): This should not happen!! Data will be lost [ 107.077100][ T6434] [ 107.087022][ T6434] EXT4-fs (loop0): Total free blocks count 0 [ 107.093501][ T6434] EXT4-fs (loop0): Free/Dirty block details [ 107.099594][ T6434] EXT4-fs (loop0): free_blocks=20480 [ 107.104987][ T6434] EXT4-fs (loop0): dirty_blocks=96 [ 107.110203][ T6434] EXT4-fs (loop0): Block reservation details [ 107.116217][ T6434] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 107.123122][ T5886] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.145812][ T6448] xt_hashlimit: max too large, truncated to 1048576 [ 107.186487][ T6450] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.198685][ T4682] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.212898][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.923'. [ 107.221820][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.923'. [ 107.240049][ T6452] veth3: entered promiscuous mode [ 107.240177][ T6457] loop0: detected capacity change from 0 to 512 [ 107.245152][ T6452] veth3: entered allmulticast mode [ 107.253307][ T6457] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 107.267325][ T6457] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.924: bg 0: block 104: invalid block bitmap [ 107.281964][ T6457] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 107.292213][ T6450] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.294403][ T6457] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.924: invalid indirect mapped block 1 (level 1) [ 107.316427][ T6457] EXT4-fs (loop0): 1 truncate cleaned up [ 107.322691][ T6457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.340888][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.353191][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.364897][ T6450] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.405252][ T6450] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.416110][ T6466] loop3: detected capacity change from 0 to 2048 [ 107.422956][ T6468] pim6reg1: entered promiscuous mode [ 107.428702][ T6468] pim6reg1: entered allmulticast mode [ 107.447297][ T6466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.460023][ T6466] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.483078][ T146] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.494861][ T146] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.507256][ T146] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.523414][ T4682] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565994][ T6471] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.925: bg 0: block 345: padding at end of block bitmap is not set [ 107.581558][ T6471] EXT4-fs (loop3): Remounting filesystem read-only [ 107.591426][ T4682] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 107.591585][ T6473] loop0: detected capacity change from 0 to 512 [ 107.666941][ T6473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.680083][ T6473] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.700697][ T6473] FAULT_INJECTION: forcing a failure. [ 107.700697][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 107.713725][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.0.928 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.713812][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.713825][ T6473] Call Trace: [ 107.713831][ T6473] [ 107.713838][ T6473] __dump_stack+0x1d/0x30 [ 107.713862][ T6473] dump_stack_lvl+0xe8/0x140 [ 107.713924][ T6473] dump_stack+0x15/0x1b [ 107.713940][ T6473] should_fail_ex+0x265/0x280 [ 107.714014][ T6473] should_failslab+0x8c/0xb0 [ 107.714050][ T6473] __kmalloc_noprof+0xa5/0x570 [ 107.714084][ T6473] ? find_tree_dqentry+0x4ef/0x8c0 [ 107.714192][ T6473] find_tree_dqentry+0x4ef/0x8c0 [ 107.714301][ T6473] find_tree_dqentry+0x4c9/0x8c0 [ 107.714337][ T6473] find_tree_dqentry+0x4c9/0x8c0 [ 107.714368][ T6473] find_tree_dqentry+0x4c9/0x8c0 [ 107.714394][ T6473] qtree_read_dquot+0x35c/0x4a0 [ 107.714424][ T6473] ? __traceiter_kfree+0x2e/0x50 [ 107.714465][ T6473] ? kfree+0x351/0x400 [ 107.714499][ T6473] v2_read_dquot+0x98/0xd0 [ 107.714520][ T6473] dquot_acquire+0xce/0x2b0 [ 107.714615][ T6473] ext4_acquire_dquot+0x15f/0x200 [ 107.714652][ T6473] dqget+0x535/0x8d0 [ 107.714694][ T6473] __dquot_initialize+0x27f/0x7c0 [ 107.714722][ T6473] ? _raw_spin_unlock+0x26/0x50 [ 107.714868][ T6473] ? __d_add+0x3c4/0x4a0 [ 107.714915][ T6473] dquot_initialize+0x1a/0x30 [ 107.714949][ T6473] ext4_create+0x49/0x2f0 [ 107.714979][ T6473] ? __pfx_ext4_create+0x10/0x10 [ 107.715029][ T6473] path_openat+0x1105/0x2170 [ 107.715067][ T6473] do_filp_open+0x109/0x230 [ 107.715105][ T6473] do_sys_openat2+0xa6/0x110 [ 107.715183][ T6473] __x64_sys_openat+0xf2/0x120 [ 107.715205][ T6473] x64_sys_call+0x2eab/0x3000 [ 107.715227][ T6473] do_syscall_64+0xd2/0x200 [ 107.715256][ T6473] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.715321][ T6473] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.715347][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.715369][ T6473] RIP: 0033:0x7f508921efc9 [ 107.715444][ T6473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.715469][ T6473] RSP: 002b:00007f5087c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.715494][ T6473] RAX: ffffffffffffffda RBX: 00007f5089475fa0 RCX: 00007f508921efc9 [ 107.715511][ T6473] RDX: 0000000000101042 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 107.715600][ T6473] RBP: 00007f5087c87090 R08: 0000000000000000 R09: 0000000000000000 [ 107.715615][ T6473] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000002 [ 107.715628][ T6473] R13: 00007f5089476038 R14: 00007f5089475fa0 R15: 00007ffcb0c81f08 [ 107.715649][ T6473] [ 107.715667][ T6473] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.928: Failed to acquire dquot type 0 [ 107.858482][ T3394] IPVS: starting estimator thread 0... [ 107.997951][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.019757][ T6484] loop0: detected capacity change from 0 to 512 [ 108.028679][ T6484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.035259][ T6484] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.931: iget: bad i_size value: 38620345925642 [ 108.049053][ T6484] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.931: couldn't read orphan inode 15 (err -117) [ 108.063817][ T6484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.078054][ T6482] IPVS: using max 1920 ests per chain, 96000 per kthread [ 108.095887][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.106647][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.146658][ T6491] FAULT_INJECTION: forcing a failure. [ 108.146658][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 108.159546][ T6491] CPU: 0 UID: 0 PID: 6491 Comm: syz.3.932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.159575][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.159588][ T6491] Call Trace: [ 108.159593][ T6491] [ 108.159602][ T6491] __dump_stack+0x1d/0x30 [ 108.159629][ T6491] dump_stack_lvl+0xe8/0x140 [ 108.159656][ T6491] dump_stack+0x15/0x1b [ 108.159679][ T6491] should_fail_ex+0x265/0x280 [ 108.159725][ T6491] should_failslab+0x8c/0xb0 [ 108.159761][ T6491] kmem_cache_alloc_noprof+0x50/0x480 [ 108.159796][ T6491] ? vm_area_dup+0x33/0x2c0 [ 108.159837][ T6491] vm_area_dup+0x33/0x2c0 [ 108.159875][ T6491] dup_mmap+0x501/0xf20 [ 108.159913][ T6491] copy_mm+0x11a/0x370 [ 108.159951][ T6491] copy_process+0xd08/0x2000 [ 108.159995][ T6491] kernel_clone+0x16c/0x5c0 [ 108.160029][ T6491] ? vfs_write+0x7e8/0x960 [ 108.160062][ T6491] __x64_sys_clone+0xe6/0x120 [ 108.160104][ T6491] x64_sys_call+0x119c/0x3000 [ 108.160130][ T6491] do_syscall_64+0xd2/0x200 [ 108.160162][ T6491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.160194][ T6491] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.160219][ T6491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.160241][ T6491] RIP: 0033:0x7f5e3cebefc9 [ 108.160260][ T6491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.160285][ T6491] RSP: 002b:00007f5e3b91efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 108.160306][ T6491] RAX: ffffffffffffffda RBX: 00007f5e3d115fa0 RCX: 00007f5e3cebefc9 [ 108.160323][ T6491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041aa1000 [ 108.160339][ T6491] RBP: 00007f5e3b91f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.160355][ T6491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 108.160371][ T6491] R13: 00007f5e3d116038 R14: 00007f5e3d115fa0 R15: 00007ffc00986558 [ 108.160399][ T6491] [ 108.410627][ T6495] loop3: detected capacity change from 0 to 1024 [ 108.449056][ T6495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.529343][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.564420][ T6504] atomic_op ffff88811a892d28 conn xmit_atomic 0000000000000000 [ 108.610845][ T6506] netlink: 'gtp': attribute type 4 has an invalid length. [ 108.621969][ T6506] netlink: 'gtp': attribute type 4 has an invalid length. [ 108.695889][ T6513] netlink: 'syz.3.938': attribute type 12 has an invalid length. [ 108.715245][ T6517] loop7: detected capacity change from 0 to 512 [ 108.732463][ T6517] EXT4-fs (loop7): orphan cleanup on readonly fs [ 108.739559][ T6517] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.944: iget: bad i_size value: 38620345925642 [ 108.746136][ T6518] lo speed is unknown, defaulting to 1000 [ 108.752483][ T6517] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.944: couldn't read orphan inode 15 (err -117) [ 108.770950][ T6517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.825490][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.868972][ T6527] loop7: detected capacity change from 0 to 128 [ 108.881777][ T6518] netlink: 'syz.6.942': attribute type 1 has an invalid length. [ 108.883379][ T6527] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 108.889632][ T6518] netlink: 224 bytes leftover after parsing attributes in process `syz.6.942'. [ 108.908976][ T6527] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.922090][ T6527] ext2 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.959019][ T5980] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.048616][ T6532] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 109.071101][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 109.071120][ T29] audit: type=1326 audit(1760886569.083:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f5efb51efc9 code=0x7ffc0000 [ 109.097465][ T6530] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6530 comm=syz.7.946 [ 109.101155][ T29] audit: type=1326 audit(1760886569.083:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efb51efc9 code=0x7ffc0000 [ 109.116846][ T6530] netlink: 'syz.7.946': attribute type 29 has an invalid length. [ 109.137945][ T29] audit: type=1326 audit(1760886569.083:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f5efb51efc9 code=0x7ffc0000 [ 109.169436][ T29] audit: type=1326 audit(1760886569.083:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6531 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efb51efc9 code=0x7ffc0000 [ 109.197675][ T29] audit: type=1326 audit(1760886569.163:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c4f11885 code=0x7ffc0000 [ 109.222127][ T29] audit: type=1326 audit(1760886569.163:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c4f11885 code=0x7ffc0000 [ 109.245830][ T29] audit: type=1326 audit(1760886569.163:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c4f11885 code=0x7ffc0000 [ 109.269636][ T29] audit: type=1326 audit(1760886569.163:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c4f11885 code=0x7ffc0000 [ 109.293317][ T29] audit: type=1326 audit(1760886569.163:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c4f11885 code=0x7ffc0000 [ 109.316786][ T29] audit: type=1326 audit(1760886569.163:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6508 comm="syz.6.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd2c4f11885 code=0x7ffc0000 [ 109.340958][ T6535] FAULT_INJECTION: forcing a failure. [ 109.340958][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 109.354030][ T6535] CPU: 0 UID: 0 PID: 6535 Comm: syz.1.948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.354065][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.354082][ T6535] Call Trace: [ 109.354090][ T6535] [ 109.354099][ T6535] __dump_stack+0x1d/0x30 [ 109.354188][ T6535] dump_stack_lvl+0xe8/0x140 [ 109.354215][ T6535] dump_stack+0x15/0x1b [ 109.354242][ T6535] should_fail_ex+0x265/0x280 [ 109.354304][ T6535] should_failslab+0x8c/0xb0 [ 109.354329][ T6535] __kvmalloc_node_noprof+0x12e/0x670 [ 109.354365][ T6535] ? io_ring_ctx_alloc+0xb5/0x670 [ 109.354480][ T6535] io_ring_ctx_alloc+0xb5/0x670 [ 109.354507][ T6535] io_uring_create+0x134/0x630 [ 109.354533][ T6535] __se_sys_io_uring_setup+0x1f7/0x210 [ 109.354634][ T6535] __x64_sys_io_uring_setup+0x31/0x40 [ 109.354665][ T6535] x64_sys_call+0x2b25/0x3000 [ 109.354685][ T6535] do_syscall_64+0xd2/0x200 [ 109.354709][ T6535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.354796][ T6535] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.354818][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.354874][ T6535] RIP: 0033:0x7f5efb51efc9 [ 109.354894][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.354985][ T6535] RSP: 002b:00007f5ef9f86fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 109.355003][ T6535] RAX: ffffffffffffffda RBX: 00007f5efb775fa0 RCX: 00007f5efb51efc9 [ 109.355014][ T6535] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 109.355026][ T6535] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 109.355039][ T6535] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 109.355050][ T6535] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 109.355129][ T6535] [ 109.611798][ T6543] loop3: detected capacity change from 0 to 512 [ 109.633869][ T6549] netlink: 'gtp': attribute type 4 has an invalid length. [ 109.685262][ T6554] netlink: 'syz.0.952': attribute type 4 has an invalid length. [ 109.735601][ T6543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.777895][ T6543] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.882689][ T6574] tipc: Started in network mode [ 109.887565][ T6576] xt_hashlimit: max too large, truncated to 1048576 [ 109.887672][ T6574] tipc: Node identity 6ad7003b3c96, cluster identity 4711 [ 109.902360][ T6574] tipc: Enabled bearer , priority 0 [ 109.911884][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.994721][ T6565] tipc: Resetting bearer [ 110.043085][ T6565] tipc: Disabling bearer [ 110.095839][ T6589] loop0: detected capacity change from 0 to 1024 [ 110.113507][ T6589] EXT4-fs: inline encryption not supported [ 110.157657][ T6589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.221569][ T6601] netlink: 'gtp': attribute type 4 has an invalid length. [ 110.250543][ T6601] netlink: 'gtp': attribute type 4 has an invalid length. [ 110.271045][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.315657][ T6605] loop7: detected capacity change from 0 to 1024 [ 110.358200][ T6605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.363179][ T6609] loop0: detected capacity change from 0 to 1024 [ 110.389771][ T6615] FAULT_INJECTION: forcing a failure. [ 110.389771][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.403218][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.1.970 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.403254][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.403268][ T6615] Call Trace: [ 110.403276][ T6615] [ 110.403286][ T6615] __dump_stack+0x1d/0x30 [ 110.403308][ T6615] dump_stack_lvl+0xe8/0x140 [ 110.403332][ T6615] dump_stack+0x15/0x1b [ 110.403376][ T6615] should_fail_ex+0x265/0x280 [ 110.403421][ T6615] should_fail+0xb/0x20 [ 110.403540][ T6615] should_fail_usercopy+0x1a/0x20 [ 110.403563][ T6615] _copy_from_user+0x1c/0xb0 [ 110.403632][ T6615] ___sys_sendmsg+0xc1/0x1d0 [ 110.403691][ T6615] __x64_sys_sendmsg+0xd4/0x160 [ 110.403774][ T6615] x64_sys_call+0x191e/0x3000 [ 110.403803][ T6615] do_syscall_64+0xd2/0x200 [ 110.403836][ T6615] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 110.403872][ T6615] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 110.403951][ T6615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.403976][ T6615] RIP: 0033:0x7f5efb51efc9 [ 110.404065][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.404089][ T6615] RSP: 002b:00007f5ef9f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.404113][ T6615] RAX: ffffffffffffffda RBX: 00007f5efb775fa0 RCX: 00007f5efb51efc9 [ 110.404126][ T6615] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 110.404142][ T6615] RBP: 00007f5ef9f87090 R08: 0000000000000000 R09: 0000000000000000 [ 110.404159][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.404202][ T6615] R13: 00007f5efb776038 R14: 00007f5efb775fa0 R15: 00007fff329b2388 [ 110.404227][ T6615] [ 110.480567][ T6609] EXT4-fs: inline encryption not supported [ 110.598964][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.609373][ T6609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.644387][ T6624] loop6: detected capacity change from 0 to 512 [ 110.667107][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.690719][ T6626] tipc: Enabled bearer , priority 0 [ 110.701234][ T6625] tipc: Resetting bearer [ 110.720913][ T6624] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.734656][ T6625] tipc: Disabling bearer [ 110.742255][ T6624] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.760111][ T6624] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.779551][ T6642] netlink: 'gtp': attribute type 4 has an invalid length. [ 110.796615][ T5886] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.838290][ T6650] netlink: 'syz.3.979': attribute type 4 has an invalid length. [ 110.863857][ T2966] lo speed is unknown, defaulting to 1000 [ 110.869827][ T2966] sy0: Port: 1 Link DOWN [ 110.885184][ T3394] lo speed is unknown, defaulting to 1000 [ 110.891092][ T3394] sy0: Port: 1 Link ACTIVE [ 110.939887][ T6658] lo speed is unknown, defaulting to 1000 [ 111.225492][ T6676] tipc: Enabled bearer , priority 0 [ 111.257358][ T6675] tipc: Resetting bearer [ 111.308926][ T6681] 9pnet_fd: Insufficient options for proto=fd [ 111.353355][ T6675] tipc: Disabling bearer [ 111.420964][ T6686] pim6reg1: entered promiscuous mode [ 111.426442][ T6686] pim6reg1: entered allmulticast mode [ 111.479533][ T6688] netlink: 'gtp': attribute type 4 has an invalid length. [ 111.505643][ T6688] netlink: 'gtp': attribute type 4 has an invalid length. [ 111.559503][ T6697] loop3: detected capacity change from 0 to 1024 [ 111.567638][ T6697] EXT4-fs: inline encryption not supported [ 111.625811][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.666541][ T6703] atomic_op ffff88812bc64d28 conn xmit_atomic 0000000000000000 [ 111.716517][ T6704] netlink: 19 bytes leftover after parsing attributes in process `syz.7.999'. [ 111.737955][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.071809][ T6709] loop0: detected capacity change from 0 to 2048 [ 112.114130][ T6709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.481720][ T6724] 9pnet_fd: Insufficient options for proto=fd [ 112.601594][ T6731] tipc: Enabled bearer , priority 0 [ 112.609680][ T6730] tipc: Resetting bearer [ 112.633848][ T6730] tipc: Disabling bearer [ 112.646582][ T6733] loop7: detected capacity change from 0 to 1024 [ 112.653698][ T6733] EXT4-fs: Ignoring removed nobh option [ 112.660173][ T4689] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.660572][ T6733] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.686025][ T4689] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 112.698641][ T4689] EXT4-fs (loop0): This should not happen!! Data will be lost [ 112.698641][ T4689] [ 112.708418][ T4689] EXT4-fs (loop0): Total free blocks count 0 [ 112.710772][ T6733] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.1008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 112.714493][ T4689] EXT4-fs (loop0): Free/Dirty block details [ 112.739021][ T4689] EXT4-fs (loop0): free_blocks=2415919104 [ 112.744936][ T4689] EXT4-fs (loop0): dirty_blocks=8192 [ 112.750338][ T4689] EXT4-fs (loop0): Block reservation details [ 112.756604][ T4689] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 112.763040][ T6733] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1008: couldn't read orphan inode 11 (err -117) [ 112.785517][ T6733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.826572][ T6571] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 112.841930][ T6733] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1008: Invalid block bitmap block 0 in block_group 0 [ 112.853961][ T6744] FAULT_INJECTION: forcing a failure. [ 112.853961][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.856062][ T6733] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1008: Failed to acquire dquot type 0 [ 112.868510][ T6744] CPU: 0 UID: 0 PID: 6744 Comm: syz.3.1014 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.868543][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.868559][ T6744] Call Trace: [ 112.868568][ T6744] [ 112.868578][ T6744] __dump_stack+0x1d/0x30 [ 112.868669][ T6744] dump_stack_lvl+0xe8/0x140 [ 112.868697][ T6744] dump_stack+0x15/0x1b [ 112.868748][ T6744] should_fail_ex+0x265/0x280 [ 112.868800][ T6744] should_fail+0xb/0x20 [ 112.868844][ T6744] should_fail_usercopy+0x1a/0x20 [ 112.868874][ T6744] _copy_from_user+0x1c/0xb0 [ 112.868984][ T6744] __sys_sendto+0x19e/0x330 [ 112.869105][ T6744] __x64_sys_sendto+0x76/0x90 [ 112.869149][ T6744] x64_sys_call+0x2d14/0x3000 [ 112.869181][ T6744] do_syscall_64+0xd2/0x200 [ 112.869218][ T6744] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.869266][ T6744] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 112.869302][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.869333][ T6744] RIP: 0033:0x7f5e3cec0e5c [ 112.869356][ T6744] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 112.869415][ T6744] RSP: 002b:00007f5e3b91dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 112.869482][ T6744] RAX: ffffffffffffffda RBX: 00007f5e3b91dfc0 RCX: 00007f5e3cec0e5c [ 112.869500][ T6744] RDX: 0000000000000028 RSI: 00007f5e3b91e010 RDI: 0000000000000005 [ 112.869518][ T6744] RBP: 0000000000000000 R08: 00007f5e3b91df14 R09: 000000000000000c [ 112.869536][ T6744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 112.869565][ T6744] R13: 00007f5e3b91df68 R14: 00007f5e3b91e010 R15: 0000000000000000 [ 112.869592][ T6744] [ 113.053490][ T6746] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.1008: Invalid inode table block 21474836481 in block_group 0 [ 113.087531][ T6751] pim6reg1: entered promiscuous mode [ 113.093600][ T6751] pim6reg1: entered allmulticast mode [ 113.113173][ T6558] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm kworker/u8:59: Invalid inode table block 21474836481 in block_group 0 [ 113.148074][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.168118][ T6759] loop9: detected capacity change from 0 to 7 [ 113.174613][ T6759] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.182853][ T6759] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.190773][ T6759] loop9: unable to read partition table [ 113.196743][ T6759] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.196743][ T6759] ) failed (rc=-5) [ 113.258167][ T6759] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.270809][ T6773] loop3: detected capacity change from 0 to 512 [ 113.298381][ T6759] Buffer I/O error on dev loop9, logical block 0, async page read [ 113.306298][ T6759] loop9: unable to read partition table [ 113.312982][ T6759] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 113.312982][ T6759] ) failed (rc=-5) [ 113.389132][ T6773] EXT4-fs (loop3): 1 truncate cleaned up [ 113.396051][ T6773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.412724][ T6759] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1019: invalid indirect mapped block 234881024 (level 0) [ 113.472289][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.773757][ T6781] 9pnet_fd: Insufficient options for proto=fd [ 113.817223][ T6785] xt_hashlimit: max too large, truncated to 1048576 [ 114.154505][ T6799] loop6: detected capacity change from 0 to 512 [ 114.177625][ T6761] syz.7.1017 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 114.191905][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.7.1017 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.191987][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.192003][ T6761] Call Trace: [ 114.192011][ T6761] [ 114.192020][ T6761] __dump_stack+0x1d/0x30 [ 114.192046][ T6761] dump_stack_lvl+0xe8/0x140 [ 114.192070][ T6761] dump_stack+0x15/0x1b [ 114.192165][ T6761] dump_header+0x81/0x220 [ 114.192211][ T6761] oom_kill_process+0x342/0x400 [ 114.192244][ T6761] out_of_memory+0x979/0xb80 [ 114.192277][ T6761] try_charge_memcg+0x610/0xa10 [ 114.192320][ T6761] obj_cgroup_charge_pages+0xa6/0x150 [ 114.192404][ T6761] __memcg_kmem_charge_page+0x9f/0x170 [ 114.192450][ T6761] __alloc_frozen_pages_noprof+0x188/0x360 [ 114.192575][ T6761] alloc_pages_mpol+0xb3/0x260 [ 114.192608][ T6761] ? alloc_pages_noprof+0x61/0x130 [ 114.192633][ T6761] alloc_pages_noprof+0x90/0x130 [ 114.192656][ T6761] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 114.192810][ T6761] __kvmalloc_node_noprof+0x483/0x670 [ 114.192846][ T6761] ? ip_set_alloc+0x24/0x30 [ 114.192878][ T6761] ? ip_set_alloc+0x24/0x30 [ 114.192975][ T6761] ip_set_alloc+0x24/0x30 [ 114.193001][ T6761] hash_netiface_create+0x282/0x740 [ 114.193039][ T6761] ? __pfx_hash_netiface_create+0x10/0x10 [ 114.193110][ T6761] ip_set_create+0x3cc/0x970 [ 114.193201][ T6761] ? save_fpregs_to_fpstate+0x100/0x160 [ 114.193251][ T6761] nfnetlink_rcv_msg+0x4c6/0x590 [ 114.193326][ T6761] netlink_rcv_skb+0x123/0x220 [ 114.193359][ T6761] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 114.193414][ T6761] nfnetlink_rcv+0x167/0x16c0 [ 114.193440][ T6761] ? kmem_cache_free+0xe4/0x3d0 [ 114.193477][ T6761] ? __kfree_skb+0x109/0x150 [ 114.193536][ T6761] ? nlmon_xmit+0x4f/0x60 [ 114.193565][ T6761] ? consume_skb+0x49/0x150 [ 114.193596][ T6761] ? nlmon_xmit+0x4f/0x60 [ 114.193624][ T6761] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 114.193741][ T6761] ? __dev_queue_xmit+0x1200/0x2000 [ 114.193778][ T6761] ? __dev_queue_xmit+0x182/0x2000 [ 114.193823][ T6761] ? __pte_offset_map_lock+0x1d4/0x230 [ 114.193863][ T6761] ? ref_tracker_free+0x37d/0x3e0 [ 114.193916][ T6761] ? __netlink_deliver_tap+0x4dc/0x500 [ 114.194032][ T6761] netlink_unicast+0x5c0/0x690 [ 114.194068][ T6761] netlink_sendmsg+0x58b/0x6b0 [ 114.194108][ T6761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.194148][ T6761] __sock_sendmsg+0x145/0x180 [ 114.194180][ T6761] ____sys_sendmsg+0x31e/0x4e0 [ 114.194240][ T6761] ___sys_sendmsg+0x17b/0x1d0 [ 114.194378][ T6761] __x64_sys_sendmsg+0xd4/0x160 [ 114.194422][ T6761] x64_sys_call+0x191e/0x3000 [ 114.194511][ T6761] do_syscall_64+0xd2/0x200 [ 114.194541][ T6761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.194575][ T6761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.194602][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.194698][ T6761] RIP: 0033:0x7f846977efc9 [ 114.194788][ T6761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.194811][ T6761] RSP: 002b:00007f84681e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.194905][ T6761] RAX: ffffffffffffffda RBX: 00007f84699d5fa0 RCX: 00007f846977efc9 [ 114.194926][ T6761] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 114.194941][ T6761] RBP: 00007f8469801f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.194955][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.194970][ T6761] R13: 00007f84699d6038 R14: 00007f84699d5fa0 R15: 00007fff32062bc8 [ 114.194993][ T6761] [ 114.195037][ T6761] memory: usage 307200kB, limit 307200kB, failcnt 322 [ 114.201613][ T6799] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 114.205015][ T6761] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 114.348251][ T6801] lo speed is unknown, defaulting to 1000 [ 114.352393][ T6761] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 114.418485][ T6799] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1031: bg 0: block 104: invalid block bitmap [ 114.423169][ T6761] Memory cgroup stats for /syz7: [ 114.428517][ T6799] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 114.473691][ T6761] cache 0 [ 114.476280][ T6799] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1031: invalid indirect mapped block 1 (level 1) [ 114.494998][ T6761] rss 0 [ 114.503780][ T6799] EXT4-fs (loop6): 1 truncate cleaned up [ 114.511631][ T6761] shmem 0 [ 114.520278][ T6799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.527938][ T6761] mapped_file 0 [ 114.527952][ T6761] dirty 0 [ 114.655576][ T6761] writeback 0 [ 114.658914][ T6761] workingset_refault_anon 36 [ 114.663678][ T6761] workingset_refault_file 113 [ 114.668383][ T6761] swap 376832 [ 114.671674][ T6761] swapcached 0 [ 114.675057][ T6761] pgpgin 12305 [ 114.678472][ T6761] pgpgout 12305 [ 114.681939][ T6761] pgfault 14806 [ 114.685557][ T6761] pgmajfault 12 [ 114.689141][ T6761] inactive_anon 0 [ 114.692906][ T6761] active_anon 0 [ 114.696376][ T6761] inactive_file 0 [ 114.700140][ T6761] active_file 0 [ 114.703689][ T6761] unevictable 0 [ 114.707244][ T6761] hierarchical_memory_limit 314572800 [ 114.712703][ T6761] hierarchical_memsw_limit 9223372036854771712 [ 114.718958][ T6761] total_cache 0 [ 114.722425][ T6761] total_rss 0 [ 114.725735][ T6761] total_shmem 0 [ 114.729327][ T6761] total_mapped_file 0 [ 114.733317][ T6761] total_dirty 0 [ 114.736871][ T6761] total_writeback 0 [ 114.740722][ T6761] total_workingset_refault_anon 36 [ 114.745888][ T6761] total_workingset_refault_file 113 [ 114.751113][ T6761] total_swap 376832 [ 114.754935][ T6761] total_swapcached 0 [ 114.758866][ T6761] total_pgpgin 12305 [ 114.762772][ T6761] total_pgpgout 12305 [ 114.766765][ T6761] total_pgfault 14806 [ 114.770887][ T6761] total_pgmajfault 12 [ 114.774989][ T6761] total_inactive_anon 0 [ 114.779180][ T6761] total_active_anon 0 [ 114.783174][ T6761] total_inactive_file 0 [ 114.787337][ T6761] total_active_file 0 [ 114.791442][ T6761] total_unevictable 0 [ 114.795532][ T6761] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1017,pid=6760,uid=0 [ 114.810272][ T6761] Memory cgroup out of memory: Killed process 6760 (syz.7.1017) total-vm:95872kB, anon-rss:1136kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 114.835114][ T5886] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.010391][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 115.010411][ T29] audit: type=1326 audit(1760886575.023:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.040341][ T29] audit: type=1326 audit(1760886575.023:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.167745][ T29] audit: type=1326 audit(1760886575.073:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.191252][ T29] audit: type=1326 audit(1760886575.073:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.215146][ T29] audit: type=1326 audit(1760886575.073:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.238834][ T29] audit: type=1326 audit(1760886575.073:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.262409][ T29] audit: type=1326 audit(1760886575.073:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.285982][ T29] audit: type=1326 audit(1760886575.073:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.309671][ T29] audit: type=1326 audit(1760886575.073:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.333527][ T29] audit: type=1326 audit(1760886575.073:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6811 comm="syz.6.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c4edefc9 code=0x7ffc0000 [ 115.426415][ T6818] loop0: detected capacity change from 0 to 1024 [ 115.433350][ T6818] EXT4-fs: Ignoring removed orlov option [ 115.451249][ T6818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.721410][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.775805][ T6838] netlink: 'gtp': attribute type 4 has an invalid length. [ 115.952353][ T6855] loop6: detected capacity change from 0 to 128 [ 115.987857][ T6855] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 116.019018][ T6855] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.042600][ T6855] ext2 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.147517][ T5886] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.284851][ T6865] loop7: detected capacity change from 0 to 164 [ 116.292416][ T6867] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.303972][ T6865] Unable to read rock-ridge attributes [ 116.318767][ T6865] Unable to read rock-ridge attributes [ 116.334948][ T6865] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.355555][ T6867] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.429576][ T6867] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.489598][ T6867] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.559391][ T4692] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.568030][ T4692] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.597862][ T4692] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.637810][ T4692] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.737531][ T6877] netlink: 56 bytes leftover after parsing attributes in process `wޣ'. [ 116.769065][ T6877] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 116.811186][ T6888] loop3: detected capacity change from 0 to 128 [ 116.828793][ T6888] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 116.850357][ T6888] ext2 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.086219][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 117.222460][ T6919] loop6: detected capacity change from 0 to 512 [ 117.248819][ T6919] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.091000][ T6951] loop6: detected capacity change from 0 to 512 [ 118.098249][ T6951] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 118.108223][ T6951] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1087: bg 0: block 104: invalid block bitmap [ 118.121179][ T6951] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 118.130227][ T6951] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1087: invalid indirect mapped block 1 (level 1) [ 118.144208][ T6951] EXT4-fs (loop6): 1 truncate cleaned up [ 118.165630][ T6956] tipc: Enabling of bearer rejected, failed to enable media [ 118.199718][ T6964] netlink: 5452 bytes leftover after parsing attributes in process `syz.6.1092'. [ 118.436910][ T6982] FAULT_INJECTION: forcing a failure. [ 118.436910][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 118.449706][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.1.1099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.449744][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.449762][ T6982] Call Trace: [ 118.449771][ T6982] [ 118.449781][ T6982] __dump_stack+0x1d/0x30 [ 118.449809][ T6982] dump_stack_lvl+0xe8/0x140 [ 118.449895][ T6982] dump_stack+0x15/0x1b [ 118.449917][ T6982] should_fail_ex+0x265/0x280 [ 118.450013][ T6982] should_failslab+0x8c/0xb0 [ 118.450048][ T6982] __kmalloc_noprof+0xa5/0x570 [ 118.450182][ T6982] ? nla_strdup+0x78/0xc0 [ 118.450208][ T6982] ? nf_tables_newflowtable+0x5c5/0x1380 [ 118.450297][ T6982] nla_strdup+0x78/0xc0 [ 118.450324][ T6982] nf_tables_newflowtable+0x649/0x1380 [ 118.450438][ T6982] nfnetlink_rcv+0xbc9/0x16c0 [ 118.450470][ T6982] ? kmem_cache_free+0xe4/0x3d0 [ 118.450629][ T6982] netlink_unicast+0x5c0/0x690 [ 118.450669][ T6982] netlink_sendmsg+0x58b/0x6b0 [ 118.450804][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.450846][ T6982] __sock_sendmsg+0x145/0x180 [ 118.450931][ T6982] ____sys_sendmsg+0x31e/0x4e0 [ 118.451081][ T6982] ___sys_sendmsg+0x17b/0x1d0 [ 118.451217][ T6982] __x64_sys_sendmsg+0xd4/0x160 [ 118.451263][ T6982] x64_sys_call+0x191e/0x3000 [ 118.451323][ T6982] do_syscall_64+0xd2/0x200 [ 118.451351][ T6982] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 118.451387][ T6982] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 118.451418][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.451504][ T6982] RIP: 0033:0x7f5efb51efc9 [ 118.451520][ T6982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.451542][ T6982] RSP: 002b:00007f5ef9f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.451561][ T6982] RAX: ffffffffffffffda RBX: 00007f5efb775fa0 RCX: 00007f5efb51efc9 [ 118.451573][ T6982] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 118.451585][ T6982] RBP: 00007f5ef9f87090 R08: 0000000000000000 R09: 0000000000000000 [ 118.451608][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.451622][ T6982] R13: 00007f5efb776038 R14: 00007f5efb775fa0 R15: 00007fff329b2388 [ 118.451645][ T6982] [ 118.455889][ T6984] pim6reg1: entered promiscuous mode [ 118.486148][ T6988] loop6: detected capacity change from 0 to 1024 [ 118.486686][ T6984] pim6reg1: entered allmulticast mode [ 118.694985][ T6988] EXT4-fs: inline encryption not supported [ 118.766298][ T7000] netlink: 'gtp': attribute type 4 has an invalid length. [ 118.777363][ T7000] netlink: 'gtp': attribute type 4 has an invalid length. [ 118.812861][ T7004] loop0: detected capacity change from 0 to 128 [ 119.239825][ T7004] bio_check_eod: 1 callbacks suppressed [ 119.239844][ T7004] syz.0.1108: attempt to access beyond end of device [ 119.239844][ T7004] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 119.259080][ T7004] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 119.503956][ T7031] pim6reg1: entered promiscuous mode [ 119.509609][ T7031] pim6reg1: entered allmulticast mode [ 119.755057][ T7052] loop0: detected capacity change from 0 to 512 [ 119.762122][ T7052] EXT4-fs: Ignoring removed nobh option [ 119.779956][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm : corrupted inode contents [ 119.791623][ T7052] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm : mark_inode_dirty error [ 119.803252][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm : corrupted inode contents [ 119.815071][ T7052] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm : mark_inode_dirty error [ 119.826136][ T7052] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm : Failed to acquire dquot type 0 [ 119.838135][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 119.849756][ T7052] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm : mark_inode_dirty error [ 119.865096][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 119.877467][ T7052] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm : mark_inode_dirty error [ 119.899256][ T7063] FAULT_INJECTION: forcing a failure. [ 119.899256][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 119.906729][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 119.912015][ T7063] CPU: 0 UID: 0 PID: 7063 Comm: syz.7.1130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.912092][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.912112][ T7063] Call Trace: [ 119.912122][ T7063] [ 119.912132][ T7063] __dump_stack+0x1d/0x30 [ 119.912163][ T7063] dump_stack_lvl+0xe8/0x140 [ 119.912225][ T7063] dump_stack+0x15/0x1b [ 119.912249][ T7063] should_fail_ex+0x265/0x280 [ 119.912370][ T7063] should_failslab+0x8c/0xb0 [ 119.912407][ T7063] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 119.912493][ T7063] ? __alloc_skb+0x101/0x320 [ 119.912530][ T7063] ? _raw_spin_unlock_bh+0x36/0x40 [ 119.912577][ T7063] __alloc_skb+0x101/0x320 [ 119.912615][ T7063] qdisc_notify+0xcb/0x280 [ 119.912656][ T7063] qdisc_graft+0xafb/0xcc0 [ 119.912719][ T7063] tc_modify_qdisc+0xf84/0x1420 [ 119.912765][ T7063] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 119.912796][ T7063] rtnetlink_rcv_msg+0x65a/0x6d0 [ 119.912832][ T7063] netlink_rcv_skb+0x123/0x220 [ 119.912872][ T7063] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.912975][ T7063] rtnetlink_rcv+0x1c/0x30 [ 119.912998][ T7063] netlink_unicast+0x5c0/0x690 [ 119.913040][ T7063] netlink_sendmsg+0x58b/0x6b0 [ 119.913087][ T7063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.913202][ T7063] __sock_sendmsg+0x145/0x180 [ 119.913277][ T7063] ____sys_sendmsg+0x345/0x4e0 [ 119.913325][ T7063] ___sys_sendmsg+0x17b/0x1d0 [ 119.913387][ T7063] __sys_sendmmsg+0x178/0x300 [ 119.913465][ T7063] __x64_sys_sendmmsg+0x57/0x70 [ 119.913519][ T7063] x64_sys_call+0x1c4a/0x3000 [ 119.913551][ T7063] do_syscall_64+0xd2/0x200 [ 119.913650][ T7063] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.913688][ T7063] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.913721][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.913770][ T7063] RIP: 0033:0x7f846977efc9 [ 119.913793][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.913817][ T7063] RSP: 002b:00007f84681e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 119.913870][ T7063] RAX: ffffffffffffffda RBX: 00007f84699d5fa0 RCX: 00007f846977efc9 [ 119.913884][ T7063] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 119.913896][ T7063] RBP: 00007f84681e7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.913909][ T7063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.913927][ T7063] R13: 00007f84699d6038 R14: 00007f84699d5fa0 R15: 00007fff32062bc8 [ 119.913956][ T7063] [ 120.175536][ T7052] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 120.184597][ T7052] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 120.196394][ T7052] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm : mark_inode_dirty error [ 120.207743][ T7052] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 120.220626][ T7052] EXT4-fs (loop0): 1 truncate cleaned up [ 120.227021][ T7052] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.238271][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 120.238287][ T29] audit: type=1326 audit(1760886580.253:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f508921d810 code=0x7ffc0000 [ 120.267239][ T29] audit: type=1326 audit(1760886580.253:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f508921dd17 code=0x7ffc0000 [ 120.290047][ T29] audit: type=1326 audit(1760886580.253:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f508921d810 code=0x7ffc0000 [ 120.312744][ T29] audit: type=1326 audit(1760886580.253:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.335561][ T29] audit: type=1326 audit(1760886580.253:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.358355][ T29] audit: type=1326 audit(1760886580.253:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.380902][ T29] audit: type=1326 audit(1760886580.253:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.403667][ T29] audit: type=1326 audit(1760886580.253:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.427166][ T29] audit: type=1326 audit(1760886580.443:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.455960][ T29] audit: type=1326 audit(1760886580.463:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 120.616893][ T7078] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 120.634762][ T7078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.662459][ T7078] bond1: (slave gretap1): making interface the new active one [ 120.671203][ T7078] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 120.815322][ T7088] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.880783][ T7088] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.902598][ T7093] loop7: detected capacity change from 0 to 128 [ 120.912939][ T7093] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 120.927061][ T7093] ext2 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.960222][ T7088] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.033214][ T7088] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.147041][ T6571] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.163180][ T6571] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.196155][ T6571] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.218725][ T6571] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.349292][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1146'. [ 121.358950][ T7114] loop7: detected capacity change from 0 to 128 [ 121.381608][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1148'. [ 121.397446][ T7114] syz.7.1148: attempt to access beyond end of device [ 121.397446][ T7114] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 121.421612][ T7118] netlink: 'gtp': attribute type 4 has an invalid length. [ 121.451773][ T7118] netlink: 'gtp': attribute type 4 has an invalid length. [ 121.633042][ T7132] loop0: detected capacity change from 0 to 128 [ 121.691565][ T7130] lo speed is unknown, defaulting to 1000 [ 121.773940][ T7136] lo speed is unknown, defaulting to 1000 [ 122.105592][ T7151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.112917][ T7151] IPv6: NLM_F_CREATE should be set when creating new route [ 122.172989][ T7154] netlink: 'gtp': attribute type 4 has an invalid length. [ 122.186391][ T7154] netlink: 'gtp': attribute type 4 has an invalid length. [ 122.308779][ T7160] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.380118][ T7160] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.393368][ T7166] lo speed is unknown, defaulting to 1000 [ 122.428726][ T7167] netlink: 'syz.7.1163': attribute type 1 has an invalid length. [ 122.436336][ T7132] syz.0.1155: attempt to access beyond end of device [ 122.436336][ T7132] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 122.436531][ T7167] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1163'. [ 122.449963][ T7132] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 122.481212][ T7160] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.540020][ T7160] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.561431][ T7170] loop0: detected capacity change from 0 to 128 [ 122.568281][ T7170] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 122.578609][ T7170] ext2 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.734173][ T7184] bridge0: entered allmulticast mode [ 122.745842][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 122.756311][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 122.879854][ T7189] SELinux: failed to load policy [ 122.905777][ T7191] loop0: detected capacity change from 0 to 512 [ 122.948678][ T7191] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 122.967571][ T7191] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 122.967571][ T7191] program syz.0.1175 not setting count and/or reply_len properly [ 123.102488][ T7209] loop7: detected capacity change from 0 to 128 [ 123.109691][ T7209] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 123.119722][ T7209] ext2 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.214562][ T7217] FAULT_INJECTION: forcing a failure. [ 123.214562][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.227886][ T7217] CPU: 0 UID: 0 PID: 7217 Comm: syz.3.1184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.227918][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 123.227934][ T7217] Call Trace: [ 123.227944][ T7217] [ 123.227954][ T7217] __dump_stack+0x1d/0x30 [ 123.227980][ T7217] dump_stack_lvl+0xe8/0x140 [ 123.228012][ T7217] dump_stack+0x15/0x1b [ 123.228105][ T7217] should_fail_ex+0x265/0x280 [ 123.228147][ T7217] should_fail+0xb/0x20 [ 123.228254][ T7217] should_fail_usercopy+0x1a/0x20 [ 123.228295][ T7217] _copy_from_user+0x1c/0xb0 [ 123.228318][ T7217] __sys_bpf+0x183/0x7c0 [ 123.228357][ T7217] __x64_sys_bpf+0x41/0x50 [ 123.228440][ T7217] x64_sys_call+0x2aee/0x3000 [ 123.228460][ T7217] do_syscall_64+0xd2/0x200 [ 123.228610][ T7217] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.228636][ T7217] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.228718][ T7217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.228852][ T7217] RIP: 0033:0x7f5e3cebefc9 [ 123.228888][ T7217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.228974][ T7217] RSP: 002b:00007f5e3b91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.229000][ T7217] RAX: ffffffffffffffda RBX: 00007f5e3d115fa0 RCX: 00007f5e3cebefc9 [ 123.229012][ T7217] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 123.229023][ T7217] RBP: 00007f5e3b91f090 R08: 0000000000000000 R09: 0000000000000000 [ 123.229118][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.229134][ T7217] R13: 00007f5e3d116038 R14: 00007f5e3d115fa0 R15: 00007ffc00986558 [ 123.229175][ T7217] [ 123.235680][ T7218] loop7: detected capacity change from 0 to 512 [ 123.416592][ T7218] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.429417][ T7218] EXT4-fs (loop7): 1 truncate cleaned up [ 123.482460][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1182'. [ 124.027568][ T7237] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 124.037422][ T7236] loop7: detected capacity change from 0 to 512 [ 124.121807][ T7247] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.153588][ T7247] pim6reg: entered allmulticast mode [ 124.159890][ T7247] pim6reg: left allmulticast mode [ 124.327639][ T7254] netlink: 'syz.7.1196': attribute type 1 has an invalid length. [ 124.342948][ T7254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.356241][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1196'. [ 124.368685][ T7254] bond1 (unregistering): Released all slaves [ 124.382928][ T7257] cgroup: Invalid name [ 124.752495][ T7268] loop0: detected capacity change from 0 to 128 [ 124.759389][ T7268] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 124.769908][ T7268] ext2 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.974953][ T7271] block device autoloading is deprecated and will be removed. [ 125.171443][ T7281] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.237617][ T7281] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.279389][ T29] kauditd_printk_skb: 649 callbacks suppressed [ 125.279405][ T29] audit: type=1326 audit(1760886585.293:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.321469][ T29] audit: type=1326 audit(1760886585.323:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.345183][ T29] audit: type=1326 audit(1760886585.323:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.368879][ T29] audit: type=1326 audit(1760886585.323:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.392361][ T29] audit: type=1326 audit(1760886585.323:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.416034][ T29] audit: type=1326 audit(1760886585.323:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.439669][ T29] audit: type=1326 audit(1760886585.323:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.463160][ T29] audit: type=1326 audit(1760886585.323:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.486663][ T29] audit: type=1326 audit(1760886585.323:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.510174][ T29] audit: type=1326 audit(1760886585.323:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7283 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3cebefc9 code=0x7ffc0000 [ 125.537737][ T7281] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.592897][ T7281] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.616433][ T7289] lo speed is unknown, defaulting to 1000 [ 125.649707][ T7292] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 125.657490][ T7292] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1205'. [ 125.676576][ T4710] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.688665][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 125.723501][ T4710] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.754402][ T4710] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.763929][ T4710] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.951880][ T7313] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1215'. [ 126.132821][ T7316] loop7: detected capacity change from 0 to 128 [ 126.255398][ T7326] pim6reg1: entered promiscuous mode [ 126.260952][ T7326] pim6reg1: entered allmulticast mode [ 126.260973][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 126.284282][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 126.308985][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 126.341447][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7336 comm=syz.7.1223 [ 126.354095][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7336 comm=syz.7.1223 [ 126.369026][ T7336] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7336 comm=syz.7.1223 [ 126.390965][ T7337] 9pnet_fd: Insufficient options for proto=fd [ 126.475163][ T7341] lo speed is unknown, defaulting to 1000 [ 126.516751][ T7341] netlink: 'syz.7.1225': attribute type 1 has an invalid length. [ 126.674830][ T4692] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.686877][ T4710] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.699607][ T4710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.712475][ T4710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.738545][ T7346] FAULT_INJECTION: forcing a failure. [ 126.738545][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.751986][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.0.1227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.752043][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 126.752060][ T7346] Call Trace: [ 126.752067][ T7346] [ 126.752076][ T7346] __dump_stack+0x1d/0x30 [ 126.752178][ T7346] dump_stack_lvl+0xe8/0x140 [ 126.752204][ T7346] dump_stack+0x15/0x1b [ 126.752225][ T7346] should_fail_ex+0x265/0x280 [ 126.752305][ T7346] should_fail+0xb/0x20 [ 126.752346][ T7346] should_fail_usercopy+0x1a/0x20 [ 126.752373][ T7346] _copy_from_user+0x1c/0xb0 [ 126.752458][ T7346] ppp_write+0x122/0x330 [ 126.752499][ T7346] ? __pfx_ppp_write+0x10/0x10 [ 126.752595][ T7346] vfs_write+0x269/0x960 [ 126.752618][ T7346] ? __rcu_read_unlock+0x4f/0x70 [ 126.752649][ T7346] ? __fget_files+0x184/0x1c0 [ 126.752761][ T7346] ksys_write+0xda/0x1a0 [ 126.752790][ T7346] __x64_sys_write+0x40/0x50 [ 126.752813][ T7346] x64_sys_call+0x2802/0x3000 [ 126.752909][ T7346] do_syscall_64+0xd2/0x200 [ 126.752943][ T7346] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.753022][ T7346] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 126.753052][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.753080][ T7346] RIP: 0033:0x7f508921efc9 [ 126.753095][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.753113][ T7346] RSP: 002b:00007f5087c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.753183][ T7346] RAX: ffffffffffffffda RBX: 00007f5089475fa0 RCX: 00007f508921efc9 [ 126.753196][ T7346] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 126.753208][ T7346] RBP: 00007f5087c87090 R08: 0000000000000000 R09: 0000000000000000 [ 126.753220][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.753235][ T7346] R13: 00007f5089476038 R14: 00007f5089475fa0 R15: 00007ffcb0c81f08 [ 126.753309][ T7346] [ 126.760560][ T7348] loop1: detected capacity change from 0 to 512 [ 126.998599][ T7348] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.072238][ T7348] EXT4-fs error (device loop1): ext4_empty_dir:3080: inode #12: comm syz.1.1228: Directory hole found for htree leaf block 0 [ 127.091032][ T7361] loop3: detected capacity change from 0 to 512 [ 127.110424][ T7361] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.139481][ T7365] loop6: detected capacity change from 0 to 512 [ 127.147162][ T7365] EXT4-fs: Ignoring removed nobh option [ 127.155963][ T7361] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.1231: Directory hole found for htree leaf block 0 [ 127.170861][ T7368] pim6reg1: entered promiscuous mode [ 127.176304][ T7368] pim6reg1: entered allmulticast mode [ 127.185907][ T7365] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm : corrupted inode contents [ 127.197332][ T7365] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm : mark_inode_dirty error [ 127.208320][ T7365] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm : corrupted inode contents [ 127.220501][ T7365] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm : mark_inode_dirty error [ 127.231945][ T7365] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm : Failed to acquire dquot type 0 [ 127.243298][ T7365] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 127.255133][ T7365] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm : mark_inode_dirty error [ 127.266394][ T7365] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 127.278496][ T7365] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm : mark_inode_dirty error [ 127.290397][ T7365] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 127.301870][ T7365] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 127.301978][ T7373] loop7: detected capacity change from 0 to 256 [ 127.317846][ T7365] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm : corrupted inode contents [ 127.329527][ T7365] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm : mark_inode_dirty error [ 127.340511][ T7365] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 127.350384][ T7365] EXT4-fs (loop6): 1 truncate cleaned up [ 127.356517][ T7365] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.499742][ T7381] loop6: detected capacity change from 0 to 164 [ 127.508545][ T7381] FAULT_INJECTION: forcing a failure. [ 127.508545][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 127.521471][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.6.1237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.521506][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.521522][ T7381] Call Trace: [ 127.521530][ T7381] [ 127.521539][ T7381] __dump_stack+0x1d/0x30 [ 127.521581][ T7381] dump_stack_lvl+0xe8/0x140 [ 127.521606][ T7381] dump_stack+0x15/0x1b [ 127.521629][ T7381] should_fail_ex+0x265/0x280 [ 127.521662][ T7381] should_failslab+0x8c/0xb0 [ 127.521693][ T7381] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 127.521795][ T7381] ? __d_alloc+0x3d/0x340 [ 127.521824][ T7381] __d_alloc+0x3d/0x340 [ 127.521865][ T7381] d_alloc_parallel+0x58/0xc70 [ 127.521979][ T7381] ? lockref_get_not_dead+0x120/0x1c0 [ 127.522006][ T7381] ? __rcu_read_unlock+0x4f/0x70 [ 127.522029][ T7381] __lookup_slow+0x8c/0x250 [ 127.522121][ T7381] lookup_slow+0x3c/0x60 [ 127.522151][ T7381] walk_component+0x1ec/0x220 [ 127.522255][ T7381] path_lookupat+0xfe/0x2a0 [ 127.522284][ T7381] filename_lookup+0x147/0x340 [ 127.522323][ T7381] do_linkat+0xd2/0x600 [ 127.522390][ T7381] ? kmem_cache_free+0xe4/0x3d0 [ 127.522420][ T7381] __x64_sys_link+0x58/0x70 [ 127.522441][ T7381] x64_sys_call+0x12a7/0x3000 [ 127.522460][ T7381] do_syscall_64+0xd2/0x200 [ 127.522564][ T7381] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.522590][ T7381] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.522619][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.522649][ T7381] RIP: 0033:0x7fd2c4edefc9 [ 127.522728][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.522755][ T7381] RSP: 002b:00007fd2c393f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 127.522809][ T7381] RAX: ffffffffffffffda RBX: 00007fd2c5135fa0 RCX: 00007fd2c4edefc9 [ 127.522825][ T7381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 127.522837][ T7381] RBP: 00007fd2c393f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.522904][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.522914][ T7381] R13: 00007fd2c5136038 R14: 00007fd2c5135fa0 R15: 00007ffd09991eb8 [ 127.522938][ T7381] [ 127.819351][ T7386] 9pnet_fd: Insufficient options for proto=fd [ 127.828447][ T7387] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=50 sclass=netlink_audit_socket pid=7387 comm=syz.1.1238 [ 127.842770][ T7387] loop1: detected capacity change from 0 to 128 [ 127.959557][ T7399] infiniband syz!: set active [ 127.964525][ T7399] infiniband syz!: added team_slave_0 [ 127.979813][ T7404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.984080][ T7399] RDS/IB: syz!: added [ 128.001288][ T7405] __nla_validate_parse: 1 callbacks suppressed [ 128.001302][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 128.016493][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1247'. [ 128.128679][ T7408] hub 9-0:1.0: USB hub found [ 128.199110][ T7410] tipc: Enabled bearer , priority 0 [ 128.215450][ T7409] tipc: Resetting bearer [ 128.232098][ T7408] hub 9-0:1.0: 8 ports detected [ 128.243621][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1250'. [ 128.271287][ T7409] tipc: Disabling bearer [ 128.341482][ T7418] 9pnet_fd: Insufficient options for proto=fd [ 128.930521][ T7404] syz.1.1246 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 128.944703][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.1.1246 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.944731][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.944745][ T7404] Call Trace: [ 128.944807][ T7404] [ 128.944818][ T7404] __dump_stack+0x1d/0x30 [ 128.944846][ T7404] dump_stack_lvl+0xe8/0x140 [ 128.944925][ T7404] dump_stack+0x15/0x1b [ 128.944948][ T7404] dump_header+0x81/0x220 [ 128.944985][ T7404] oom_kill_process+0x342/0x400 [ 128.945018][ T7404] out_of_memory+0x979/0xb80 [ 128.945130][ T7404] try_charge_memcg+0x610/0xa10 [ 128.945185][ T7404] obj_cgroup_charge_pages+0xa6/0x150 [ 128.945268][ T7404] __memcg_kmem_charge_page+0x9f/0x170 [ 128.945319][ T7404] __alloc_frozen_pages_noprof+0x188/0x360 [ 128.945441][ T7404] alloc_pages_mpol+0xb3/0x260 [ 128.945471][ T7404] alloc_pages_noprof+0x90/0x130 [ 128.945498][ T7404] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 128.945553][ T7404] __kvmalloc_node_noprof+0x483/0x670 [ 128.945590][ T7404] ? ip_set_alloc+0x24/0x30 [ 128.945627][ T7404] ? ip_set_alloc+0x24/0x30 [ 128.945665][ T7404] ip_set_alloc+0x24/0x30 [ 128.945694][ T7404] hash_netiface_create+0x282/0x740 [ 128.945737][ T7404] ? __pfx_hash_netiface_create+0x10/0x10 [ 128.945771][ T7404] ip_set_create+0x3cc/0x970 [ 128.945836][ T7404] ? __nla_parse+0x40/0x60 [ 128.945868][ T7404] nfnetlink_rcv_msg+0x4c6/0x590 [ 128.945933][ T7404] netlink_rcv_skb+0x123/0x220 [ 128.945969][ T7404] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 128.946008][ T7404] nfnetlink_rcv+0x167/0x16c0 [ 128.946055][ T7404] ? kmem_cache_free+0xe4/0x3d0 [ 128.946097][ T7404] ? __kfree_skb+0x109/0x150 [ 128.946172][ T7404] ? nlmon_xmit+0x4f/0x60 [ 128.946204][ T7404] ? consume_skb+0x49/0x150 [ 128.946236][ T7404] ? nlmon_xmit+0x4f/0x60 [ 128.946269][ T7404] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 128.946391][ T7404] ? __dev_queue_xmit+0x1200/0x2000 [ 128.946432][ T7404] ? __dev_queue_xmit+0x182/0x2000 [ 128.946487][ T7404] ? ref_tracker_free+0x37d/0x3e0 [ 128.946533][ T7404] ? __netlink_deliver_tap+0x4dc/0x500 [ 128.946581][ T7404] netlink_unicast+0x5c0/0x690 [ 128.946668][ T7404] netlink_sendmsg+0x58b/0x6b0 [ 128.946748][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.946813][ T7404] __sock_sendmsg+0x145/0x180 [ 128.946840][ T7404] ____sys_sendmsg+0x31e/0x4e0 [ 128.946900][ T7404] ___sys_sendmsg+0x17b/0x1d0 [ 128.947043][ T7404] __x64_sys_sendmsg+0xd4/0x160 [ 128.947128][ T7404] x64_sys_call+0x191e/0x3000 [ 128.947232][ T7404] do_syscall_64+0xd2/0x200 [ 128.947258][ T7404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.947296][ T7404] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 128.947323][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.947426][ T7404] RIP: 0033:0x7f5efb51efc9 [ 128.947447][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.947473][ T7404] RSP: 002b:00007f5ef9f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.947499][ T7404] RAX: ffffffffffffffda RBX: 00007f5efb775fa0 RCX: 00007f5efb51efc9 [ 128.947517][ T7404] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 128.947537][ T7404] RBP: 00007f5efb5a1f91 R08: 0000000000000000 R09: 0000000000000000 [ 128.947550][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.947562][ T7404] R13: 00007f5efb776038 R14: 00007f5efb775fa0 R15: 00007fff329b2388 [ 128.947585][ T7404] [ 128.947594][ T7404] memory: usage 307200kB, limit 307200kB, failcnt 2261 [ 129.291823][ T7404] memory+swap: usage 311900kB, limit 9007199254740988kB, failcnt 0 [ 129.299881][ T7404] kmem: usage 307076kB, limit 9007199254740988kB, failcnt 0 [ 129.307192][ T7404] Memory cgroup stats for /syz1: [ 129.307547][ T7404] cache 114688 [ 129.315987][ T7404] rss 0 [ 129.318786][ T7404] shmem 0 [ 129.321774][ T7404] mapped_file 0 [ 129.325250][ T7404] dirty 0 [ 129.328283][ T7404] writeback 4096 [ 129.331844][ T7404] workingset_refault_anon 3102 [ 129.336706][ T7404] workingset_refault_file 1910 [ 129.341520][ T7404] swap 4825088 [ 129.344997][ T7404] swapcached 4096 [ 129.348815][ T7404] pgpgin 121276 [ 129.352344][ T7404] pgpgout 121246 [ 129.355927][ T7404] pgfault 141801 [ 129.359552][ T7404] pgmajfault 693 [ 129.363100][ T7404] inactive_anon 0 [ 129.366817][ T7404] active_anon 4096 [ 129.370569][ T7404] inactive_file 0 [ 129.374207][ T7404] active_file 118784 [ 129.378135][ T7404] unevictable 0 [ 129.381619][ T7404] hierarchical_memory_limit 314572800 [ 129.387092][ T7404] hierarchical_memsw_limit 9223372036854771712 [ 129.393466][ T7404] total_cache 114688 [ 129.397418][ T7404] total_rss 0 [ 129.400820][ T7404] total_shmem 0 [ 129.404383][ T7404] total_mapped_file 0 [ 129.408397][ T7404] total_dirty 0 [ 129.411987][ T7404] total_writeback 4096 [ 129.416072][ T7404] total_workingset_refault_anon 3102 [ 129.421403][ T7404] total_workingset_refault_file 1910 [ 129.426724][ T7404] total_swap 4825088 [ 129.430684][ T7404] total_swapcached 4096 [ 129.434946][ T7404] total_pgpgin 121276 [ 129.439544][ T7404] total_pgpgout 121246 [ 129.443700][ T7404] total_pgfault 141801 [ 129.447838][ T7404] total_pgmajfault 693 [ 129.451918][ T7404] total_inactive_anon 0 [ 129.456179][ T7404] total_active_anon 4096 [ 129.460630][ T7404] total_inactive_file 0 [ 129.464801][ T7404] total_active_file 118784 [ 129.469255][ T7404] total_unevictable 0 [ 129.473257][ T7404] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1246,pid=7402,uid=0 [ 129.487920][ T7404] Memory cgroup out of memory: Killed process 7402 (syz.1.1246) total-vm:96004kB, anon-rss:1136kB, file-rss:22696kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 129.570948][ T7438] syz.7.1258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 173.397110][ T29] kauditd_printk_skb: 1630 callbacks suppressed [ 173.397126][ T29] audit: type=1326 audit(1760886633.403:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.435406][ T7449] netlink: 'syz.7.1262': attribute type 1 has an invalid length. [ 173.443315][ T7449] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1262'. [ 173.469774][ T29] audit: type=1326 audit(1760886633.433:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.493806][ T29] audit: type=1326 audit(1760886633.433:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.517276][ T29] audit: type=1326 audit(1760886633.443:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.541016][ T29] audit: type=1326 audit(1760886633.443:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.564710][ T29] audit: type=1326 audit(1760886633.443:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.588589][ T29] audit: type=1326 audit(1760886633.443:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.612734][ T29] audit: type=1326 audit(1760886633.443:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.636236][ T29] audit: type=1326 audit(1760886633.443:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.659683][ T29] audit: type=1326 audit(1760886633.443:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7446 comm="syz.7.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f846977efc9 code=0x7ffc0000 [ 173.690251][ T7462] netlink: 'gtp': attribute type 4 has an invalid length. [ 173.710242][ T7462] netlink: 'gtp': attribute type 4 has an invalid length. [ 173.793925][ T7474] 9pnet_fd: Insufficient options for proto=fd [ 173.908063][ T7481] loop0: detected capacity change from 0 to 1024 [ 173.908798][ T7481] EXT4-fs: Ignoring removed nobh option [ 173.908830][ T7481] EXT4-fs: Ignoring removed bh option [ 173.909361][ T7481] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 173.946491][ T7481] EXT4-fs mount: 26 callbacks suppressed [ 173.946545][ T7481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.987546][ T7484] tipc: Enabled bearer , priority 0 [ 173.988849][ T7482] tipc: Resetting bearer [ 173.998723][ T7482] tipc: Disabling bearer [ 174.060504][ T7494] SELinux: failed to load policy [ 174.103906][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1277'. [ 174.122536][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1277'. [ 174.145438][ T7493] lo speed is unknown, defaulting to 1000 [ 174.151775][ T7502] netlink: 'gtp': attribute type 4 has an invalid length. [ 174.163527][ T7502] netlink: 'gtp': attribute type 4 has an invalid length. [ 174.203253][ T7503] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.1274: Allocating blocks 385-513 which overlap fs metadata [ 174.219127][ T7508] FAULT_INJECTION: forcing a failure. [ 174.219127][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.232466][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: wޣ Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.232501][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.232517][ T7508] Call Trace: [ 174.232534][ T7508] [ 174.232543][ T7508] __dump_stack+0x1d/0x30 [ 174.232578][ T7508] dump_stack_lvl+0xe8/0x140 [ 174.232629][ T7508] dump_stack+0x15/0x1b [ 174.232644][ T7508] should_fail_ex+0x265/0x280 [ 174.232688][ T7508] should_fail+0xb/0x20 [ 174.232729][ T7508] should_fail_usercopy+0x1a/0x20 [ 174.232816][ T7508] _copy_from_user+0x1c/0xb0 [ 174.232844][ T7508] ___sys_sendmsg+0xc1/0x1d0 [ 174.232895][ T7508] __sys_sendmmsg+0x178/0x300 [ 174.232941][ T7508] __x64_sys_sendmmsg+0x57/0x70 [ 174.233056][ T7508] x64_sys_call+0x1c4a/0x3000 [ 174.233122][ T7508] do_syscall_64+0xd2/0x200 [ 174.233149][ T7508] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.233179][ T7508] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.233206][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.233229][ T7508] RIP: 0033:0x7fd2c4edefc9 [ 174.233245][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.233264][ T7508] RSP: 002b:00007fd2c393f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.233284][ T7508] RAX: ffffffffffffffda RBX: 00007fd2c5135fa0 RCX: 00007fd2c4edefc9 [ 174.233298][ T7508] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 174.233391][ T7508] RBP: 00007fd2c393f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.233404][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.233417][ T7508] R13: 00007fd2c5136038 R14: 00007fd2c5135fa0 R15: 00007ffd09991eb8 [ 174.233438][ T7508] [ 174.433626][ T7509] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.458646][ T7514] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1284'. [ 174.500567][ T7509] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.552504][ T7509] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.609705][ T7509] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.656613][ T4710] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.667788][ T4710] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.688968][ T4710] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.726275][ T4710] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.736991][ T7480] EXT4-fs (loop0): pa ffff888106da2620: logic 16, phys. 129, len 24 [ 174.745065][ T7480] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 174.789778][ T7519] cgroup: Invalid name [ 174.801193][ T7521] loop7: detected capacity change from 0 to 512 [ 174.817518][ T7521] EXT4-fs: Ignoring removed nobh option [ 174.824518][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.841677][ T7523] netlink: 'wޣ': attribute type 5 has an invalid length. [ 174.853803][ T7521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1287: corrupted inode contents [ 174.868349][ T7523] batman_adv: batadv0: Adding interface: vxlan0 [ 174.874718][ T7523] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 174.874855][ T7523] batman_adv: batadv0: Interface activated: vxlan0 [ 174.875105][ T6571] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.875152][ T6571] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.875184][ T6571] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.875228][ T6571] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.876204][ T7528] loop0: detected capacity change from 0 to 1024 [ 174.876474][ T7528] EXT4-fs: Ignoring removed orlov option [ 174.904898][ T7528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.969518][ T7521] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.1287: mark_inode_dirty error [ 174.982523][ T7527] 9pnet_fd: Insufficient options for proto=fd [ 174.988207][ T7521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1287: corrupted inode contents [ 175.006766][ T7521] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.1287: mark_inode_dirty error [ 175.019157][ T7521] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1287: Failed to acquire dquot type 0 [ 175.036431][ T7521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1287: corrupted inode contents [ 175.049574][ T7521] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.1287: mark_inode_dirty error [ 175.067856][ T7521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1287: corrupted inode contents [ 175.080255][ T7521] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.1287: mark_inode_dirty error [ 175.094654][ T7521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1287: corrupted inode contents [ 175.106817][ T7537] FAULT_INJECTION: forcing a failure. [ 175.106817][ T7537] name failslab, interval 1, probability 0, space 0, times 0 [ 175.112456][ T7535] SELinux: Context is not valid (left unmapped). [ 175.119708][ T7537] CPU: 0 UID: 0 PID: 7537 Comm: syz.1.1292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.119747][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.119773][ T7537] Call Trace: [ 175.119781][ T7537] [ 175.119792][ T7537] __dump_stack+0x1d/0x30 [ 175.119821][ T7537] dump_stack_lvl+0xe8/0x140 [ 175.119850][ T7537] dump_stack+0x15/0x1b [ 175.119916][ T7537] should_fail_ex+0x265/0x280 [ 175.119997][ T7537] should_failslab+0x8c/0xb0 [ 175.120035][ T7537] __kvmalloc_node_noprof+0x12e/0x670 [ 175.120078][ T7537] ? bpf_test_run_xdp_live+0xed/0x11c0 [ 175.120148][ T7537] bpf_test_run_xdp_live+0xed/0x11c0 [ 175.120191][ T7537] ? __pfx_autoremove_wake_function+0x10/0x10 [ 175.120221][ T7537] ? 0xffffffffa0205240 [ 175.120270][ T7537] ? synchronize_rcu+0x45/0x320 [ 175.120294][ T7537] ? 0xffffffffa0205240 [ 175.120314][ T7537] ? 0xffffffffa0205240 [ 175.120335][ T7537] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 175.120373][ T7537] ? 0xffffffffa0205240 [ 175.120410][ T7537] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 175.120466][ T7537] bpf_prog_test_run_xdp+0x525/0x970 [ 175.120562][ T7537] ? _kstrtol+0x51/0x90 [ 175.120606][ T7537] ? __rcu_read_unlock+0x4f/0x70 [ 175.120647][ T7537] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 175.120691][ T7537] bpf_prog_test_run+0x22a/0x390 [ 175.120781][ T7537] __sys_bpf+0x4c0/0x7c0 [ 175.120841][ T7537] __x64_sys_bpf+0x41/0x50 [ 175.120881][ T7537] x64_sys_call+0x2aee/0x3000 [ 175.120959][ T7537] do_syscall_64+0xd2/0x200 [ 175.120995][ T7537] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.121033][ T7537] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.121087][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.121119][ T7537] RIP: 0033:0x7f5efb51efc9 [ 175.121140][ T7537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.121168][ T7537] RSP: 002b:00007f5ef9f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.121223][ T7537] RAX: ffffffffffffffda RBX: 00007f5efb775fa0 RCX: 00007f5efb51efc9 [ 175.121290][ T7537] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 175.121330][ T7537] RBP: 00007f5ef9f87090 R08: 0000000000000000 R09: 0000000000000000 [ 175.121348][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.121365][ T7537] R13: 00007f5efb776038 R14: 00007f5efb775fa0 R15: 00007fff329b2388 [ 175.121473][ T7537] [ 175.368724][ T7521] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 175.378142][ T7521] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1287: corrupted inode contents [ 175.405312][ T7521] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.1287: mark_inode_dirty error [ 175.419084][ T7521] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 175.434441][ T7521] EXT4-fs (loop7): 1 truncate cleaned up [ 175.444507][ T7521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.467306][ T7521] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.508554][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.539935][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.778380][ T7531] 9pnet_fd: p9_fd_create_tcp (7531): problem connecting socket to 127.0.0.1 [ 175.952219][ T7568] loop7: detected capacity change from 0 to 512 [ 175.968027][ T7568] EXT4-fs: Ignoring removed nobh option [ 176.004549][ T7572] loop3: detected capacity change from 0 to 1024 [ 176.026689][ T7568] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1304: corrupted inode contents [ 176.128223][ T7568] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.1304: mark_inode_dirty error [ 176.141155][ T7584] cgroup: Invalid name [ 176.185691][ T7568] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1304: corrupted inode contents [ 176.208604][ T7589] loop6: detected capacity change from 0 to 128 [ 176.209100][ T7589] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 176.244044][ T7568] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.1304: mark_inode_dirty error [ 176.244721][ T7568] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1304: Failed to acquire dquot type 0 [ 176.245271][ T7568] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1304: corrupted inode contents [ 176.245771][ T7591] Driver unsupported XDP return value 0 on prog (id 1015) dev N/A, expect packet loss! [ 176.253460][ T7595] Option ''MO' to dns_resolver key: bad/missing value [ 176.267331][ T7568] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.1304: mark_inode_dirty error [ 176.284450][ T7568] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1304: corrupted inode contents [ 176.284664][ T7568] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.1304: mark_inode_dirty error [ 176.284834][ T7568] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1304: corrupted inode contents [ 176.284984][ T7568] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 176.285134][ T7568] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1304: corrupted inode contents [ 176.285308][ T7568] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.1304: mark_inode_dirty error [ 176.285451][ T7568] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 176.285924][ T7568] EXT4-fs (loop7): 1 truncate cleaned up [ 176.286299][ T7568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.286442][ T7568] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.302785][ T7598] 9pnet_fd: Insufficient options for proto=fd [ 176.368158][ T7603] 9pnet_fd: Insufficient options for proto=fd [ 176.378445][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.515642][ T7611] SELinux: failed to load policy [ 176.530054][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 176.552008][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 176.678291][ T7626] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1326'. [ 176.704167][ T7628] loop0: detected capacity change from 0 to 512 [ 176.711303][ T7628] EXT4-fs: Ignoring removed nobh option [ 176.769680][ T7628] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1327: corrupted inode contents [ 176.786196][ T7628] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.1327: mark_inode_dirty error [ 176.799631][ T7628] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1327: corrupted inode contents [ 176.812006][ T7628] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.1327: mark_inode_dirty error [ 176.824257][ T7628] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1327: Failed to acquire dquot type 0 [ 176.838638][ T7628] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1327: corrupted inode contents [ 176.851208][ T7628] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.1327: mark_inode_dirty error [ 176.865405][ T7628] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1327: corrupted inode contents [ 176.877998][ T7628] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.1327: mark_inode_dirty error [ 176.889768][ T7628] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1327: corrupted inode contents [ 176.902333][ T7628] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 176.916185][ T7628] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.1327: corrupted inode contents [ 176.929062][ T7628] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.1327: mark_inode_dirty error [ 176.941750][ T7628] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 176.952586][ T7628] EXT4-fs (loop0): 1 truncate cleaned up [ 176.959304][ T7628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.972595][ T7628] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.008814][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.156122][ T7660] SELinux: failed to load policy [ 177.190450][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1339'. [ 177.215118][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1339'. [ 177.294335][ T7672] loop7: detected capacity change from 0 to 512 [ 177.301236][ T7672] EXT4-fs: Ignoring removed nobh option [ 177.329415][ T7672] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1344: corrupted inode contents [ 177.342193][ T7672] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.1344: mark_inode_dirty error [ 177.354568][ T7672] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1344: corrupted inode contents [ 177.386111][ T7672] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.1344: mark_inode_dirty error [ 177.410487][ T7672] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1344: Failed to acquire dquot type 0 [ 177.437209][ T7672] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1344: corrupted inode contents [ 177.441560][ T7679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4993 sclass=netlink_route_socket pid=7679 comm=syz.6.1346 [ 177.450075][ T7672] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.1344: mark_inode_dirty error [ 177.473813][ T7672] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1344: corrupted inode contents [ 177.486006][ T7672] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.1344: mark_inode_dirty error [ 177.497587][ T7672] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1344: corrupted inode contents [ 177.510129][ T7672] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 177.519157][ T7672] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1344: corrupted inode contents [ 177.531314][ T7672] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.1344: mark_inode_dirty error [ 177.543558][ T7672] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 177.553473][ T7672] EXT4-fs (loop7): 1 truncate cleaned up [ 177.559696][ T7672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.572792][ T7672] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.600522][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.619618][ T7681] vhci_hcd: invalid port number 96 [ 177.624841][ T7681] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 177.636645][ T7685] SELinux: failed to load policy [ 177.669419][ T7694] 9pnet_fd: Insufficient options for proto=fd [ 177.693738][ T7697] FAULT_INJECTION: forcing a failure. [ 177.693738][ T7697] name failslab, interval 1, probability 0, space 0, times 0 [ 177.702371][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1348'. [ 177.707148][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz.7.1353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.707230][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.707248][ T7697] Call Trace: [ 177.707256][ T7697] [ 177.707266][ T7697] __dump_stack+0x1d/0x30 [ 177.707296][ T7697] dump_stack_lvl+0xe8/0x140 [ 177.707326][ T7697] dump_stack+0x15/0x1b [ 177.707349][ T7697] should_fail_ex+0x265/0x280 [ 177.707399][ T7697] should_failslab+0x8c/0xb0 [ 177.707477][ T7697] kmem_cache_alloc_noprof+0x50/0x480 [ 177.707523][ T7697] ? security_file_alloc+0x32/0x100 [ 177.707608][ T7697] security_file_alloc+0x32/0x100 [ 177.707644][ T7697] init_file+0x5c/0x1d0 [ 177.707694][ T7697] alloc_empty_file+0x8b/0x200 [ 177.707790][ T7697] path_openat+0x68/0x2170 [ 177.707819][ T7697] ? mntput+0x4b/0x80 [ 177.707863][ T7697] ? terminate_walk+0x27f/0x2a0 [ 177.707960][ T7697] ? path_openat+0x1bf8/0x2170 [ 177.707990][ T7697] ? _parse_integer_limit+0x170/0x190 [ 177.708089][ T7697] do_filp_open+0x109/0x230 [ 177.708137][ T7697] do_open_execat+0xd8/0x260 [ 177.708212][ T7697] alloc_bprm+0x25/0x350 [ 177.708260][ T7697] do_execveat_common+0x12e/0x750 [ 177.708295][ T7697] ? getname_flags+0x154/0x3b0 [ 177.708359][ T7697] __x64_sys_execveat+0x73/0x90 [ 177.708393][ T7697] x64_sys_call+0x1fec/0x3000 [ 177.708437][ T7697] do_syscall_64+0xd2/0x200 [ 177.708474][ T7697] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.708578][ T7697] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.708612][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.708645][ T7697] RIP: 0033:0x7f846977efc9 [ 177.708666][ T7697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.708693][ T7697] RSP: 002b:00007f84681e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 177.708720][ T7697] RAX: ffffffffffffffda RBX: 00007f84699d5fa0 RCX: 00007f846977efc9 [ 177.708770][ T7697] RDX: 0000000000000000 RSI: 0000200000000300 RDI: ffffffffffffffff [ 177.708811][ T7697] RBP: 00007f84681e7090 R08: 0000000000001100 R09: 0000000000000000 [ 177.708828][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.708856][ T7697] R13: 00007f84699d6038 R14: 00007f84699d5fa0 R15: 00007fff32062bc8 [ 177.708885][ T7697] [ 177.938321][ T7707] FAULT_INJECTION: forcing a failure. [ 177.938321][ T7707] name failslab, interval 1, probability 0, space 0, times 0 [ 177.959126][ T7707] CPU: 0 UID: 0 PID: 7707 Comm: syz.1.1354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.959159][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.959191][ T7707] Call Trace: [ 177.959237][ T7707] [ 177.959258][ T7707] __dump_stack+0x1d/0x30 [ 177.959282][ T7707] dump_stack_lvl+0xe8/0x140 [ 177.959305][ T7707] dump_stack+0x15/0x1b [ 177.959324][ T7707] should_fail_ex+0x265/0x280 [ 177.959369][ T7707] ? register_netdevice+0x1e8/0xf00 [ 177.959458][ T7707] should_failslab+0x8c/0xb0 [ 177.959490][ T7707] __kmalloc_cache_noprof+0x4c/0x4a0 [ 177.959523][ T7707] ? rb_erase+0x206/0x680 [ 177.959623][ T7707] register_netdevice+0x1e8/0xf00 [ 177.959655][ T7707] ? dev_addr_mod+0x1a4/0x1d0 [ 177.959688][ T7707] tun_set_iff+0x5f1/0x8a0 [ 177.959789][ T7707] __tun_chr_ioctl+0x5f0/0x14c0 [ 177.959873][ T7707] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 177.959952][ T7707] tun_chr_ioctl+0x27/0x40 [ 177.959983][ T7707] __se_sys_ioctl+0xce/0x140 [ 177.960005][ T7707] __x64_sys_ioctl+0x43/0x50 [ 177.960026][ T7707] x64_sys_call+0x1816/0x3000 [ 177.960074][ T7707] do_syscall_64+0xd2/0x200 [ 177.960116][ T7707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.960143][ T7707] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.960203][ T7707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.960230][ T7707] RIP: 0033:0x7f5efb51efc9 [ 177.960247][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.960268][ T7707] RSP: 002b:00007f5ef9f66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.960289][ T7707] RAX: ffffffffffffffda RBX: 00007f5efb776090 RCX: 00007f5efb51efc9 [ 177.960304][ T7707] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000003 [ 177.960391][ T7707] RBP: 00007f5ef9f66090 R08: 0000000000000000 R09: 0000000000000000 [ 177.960404][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.960418][ T7707] R13: 00007f5efb776128 R14: 00007f5efb776090 R15: 00007fff329b2388 [ 177.960441][ T7707] [ 178.273055][ T7701] batadv_slave_1: entered promiscuous mode [ 178.281036][ T7700] batadv_slave_1: left promiscuous mode [ 178.343053][ T7721] random: crng reseeded on system resumption [ 178.346184][ T7723] netlink: 'syz.0.1364': attribute type 1 has an invalid length. [ 178.386923][ T7721] loop1: detected capacity change from 0 to 256 [ 178.396296][ T7721] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.418065][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 178.418089][ T29] audit: type=1326 audit(1760886638.433:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.467858][ T29] audit: type=1326 audit(1760886638.433:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.491560][ T29] audit: type=1326 audit(1760886638.463:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.515202][ T29] audit: type=1326 audit(1760886638.463:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.538914][ T29] audit: type=1326 audit(1760886638.463:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.562507][ T29] audit: type=1326 audit(1760886638.463:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.585941][ T29] audit: type=1326 audit(1760886638.463:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.0.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 178.630096][ T7725] tipc: Enabled bearer , priority 0 [ 178.637950][ T7724] tipc: Resetting bearer [ 178.653253][ T7724] tipc: Disabling bearer [ 178.686726][ T7743] netlink: 'syz.0.1373': attribute type 30 has an invalid length. [ 178.720480][ T7745] loop6: detected capacity change from 0 to 512 [ 178.727337][ T7745] ext4: Unknown parameter 'e' [ 178.970497][ T7762] FAULT_INJECTION: forcing a failure. [ 178.970497][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 178.983231][ T7762] CPU: 0 UID: 0 PID: 7762 Comm: syz.0.1380 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.983312][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.983335][ T7762] Call Trace: [ 178.983344][ T7762] [ 178.983354][ T7762] __dump_stack+0x1d/0x30 [ 178.983380][ T7762] dump_stack_lvl+0xe8/0x140 [ 178.983399][ T7762] dump_stack+0x15/0x1b [ 178.983426][ T7762] should_fail_ex+0x265/0x280 [ 178.983496][ T7762] ? sctp_add_bind_addr+0x71/0x1e0 [ 178.983530][ T7762] should_failslab+0x8c/0xb0 [ 178.983560][ T7762] __kmalloc_cache_noprof+0x4c/0x4a0 [ 178.983592][ T7762] sctp_add_bind_addr+0x71/0x1e0 [ 178.983692][ T7762] sctp_copy_local_addr_list+0x199/0x220 [ 178.983728][ T7762] sctp_copy_one_addr+0x7f/0x280 [ 178.983824][ T7762] sctp_bind_addr_copy+0x79/0x290 [ 178.983852][ T7762] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 178.983897][ T7762] sctp_connect_new_asoc+0x1c3/0x3a0 [ 178.983986][ T7762] sctp_sendmsg+0xf10/0x18d0 [ 178.984030][ T7762] ? selinux_socket_sendmsg+0x81/0x1b0 [ 178.984063][ T7762] ? __pfx_sctp_sendmsg+0x10/0x10 [ 178.984100][ T7762] inet_sendmsg+0xc5/0xd0 [ 178.984178][ T7762] __sock_sendmsg+0x102/0x180 [ 178.984200][ T7762] ____sys_sendmsg+0x345/0x4e0 [ 178.984237][ T7762] ___sys_sendmsg+0x17b/0x1d0 [ 178.984332][ T7762] __sys_sendmmsg+0x178/0x300 [ 178.984388][ T7762] __x64_sys_sendmmsg+0x57/0x70 [ 178.984421][ T7762] x64_sys_call+0x1c4a/0x3000 [ 178.984516][ T7762] do_syscall_64+0xd2/0x200 [ 178.984547][ T7762] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.984581][ T7762] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 178.984612][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.984660][ T7762] RIP: 0033:0x7f508921efc9 [ 178.984678][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.984696][ T7762] RSP: 002b:00007f5087c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 178.984716][ T7762] RAX: ffffffffffffffda RBX: 00007f5089475fa0 RCX: 00007f508921efc9 [ 178.984730][ T7762] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000006 [ 178.984746][ T7762] RBP: 00007f5087c87090 R08: 0000000000000000 R09: 0000000000000000 [ 178.984762][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.984780][ T7762] R13: 00007f5089476038 R14: 00007f5089475fa0 R15: 00007ffcb0c81f08 [ 178.984803][ T7762] [ 179.281291][ T29] audit: type=1326 audit(1760886639.293:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 179.336050][ T29] audit: type=1326 audit(1760886639.323:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 179.359625][ T29] audit: type=1326 audit(1760886639.323:8341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7768 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508921efc9 code=0x7ffc0000 [ 179.417976][ T7779] netlink: 'gtp': attribute type 4 has an invalid length. [ 179.437388][ T7779] netlink: 'gtp': attribute type 4 has an invalid length. [ 179.459823][ T36] lo speed is unknown, defaulting to 1000 [ 179.474668][ T36] lo speed is unknown, defaulting to 1000 [ 179.517746][ T7786] veth0_to_batadv: entered promiscuous mode [ 179.532145][ T7785] veth0_to_batadv: left promiscuous mode [ 179.572688][ T7795] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 179.580533][ T7795] __nla_validate_parse: 2 callbacks suppressed [ 179.580554][ T7795] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1393'. [ 179.604384][ T7797] loop7: detected capacity change from 0 to 512 [ 179.624524][ T7801] rdma_op ffff888105858580 conn xmit_rdma 0000000000000000 [ 179.647776][ T7801] 9pnet: Could not find request transport: fdrfdno=(}qͦ7p$d [ 179.648973][ T7797] EXT4-fs: Ignoring removed nobh option [ 179.663409][ T7801] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 179.698308][ T7797] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1394: corrupted inode contents [ 179.719556][ T7797] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.1394: mark_inode_dirty error [ 179.768303][ T7797] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.1394: corrupted inode contents [ 179.803715][ T7797] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.1394: mark_inode_dirty error [ 179.823920][ T7797] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1394: Failed to acquire dquot type 0 [ 179.836907][ T7818] netlink: 'syz.6.1403': attribute type 1 has an invalid length. [ 179.852476][ T7797] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1394: corrupted inode contents [ 179.865526][ T7797] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.1394: mark_inode_dirty error [ 179.902855][ T7818] bond1: (slave bridge1): making interface the new active one [ 179.918974][ T7797] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1394: corrupted inode contents [ 179.931463][ T7797] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.1394: mark_inode_dirty error [ 179.932016][ T7818] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 179.957556][ T7824] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 179.967218][ T7797] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1394: corrupted inode contents [ 179.980046][ T7797] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 179.982710][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 179.996664][ T7797] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.1394: corrupted inode contents [ 180.010609][ T7797] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.1394: mark_inode_dirty error [ 180.011323][ T7827] 9pnet_fd: Insufficient options for proto=fd [ 180.022057][ T7797] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 180.038380][ T7797] EXT4-fs (loop7): 1 truncate cleaned up [ 180.058037][ T7797] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.063029][ T7818] macvlan2: entered promiscuous mode [ 180.076097][ T7818] macvlan2: entered allmulticast mode [ 180.111435][ T7797] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.114441][ T7834] cgroup: Invalid name [ 180.145066][ T7833] netlink: 'syz.6.1408': attribute type 1 has an invalid length. [ 180.152987][ T7833] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1408'. [ 180.163133][ T7838] FAULT_INJECTION: forcing a failure. [ 180.163133][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.167808][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.176538][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.3.1411 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.176623][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.176648][ T7838] Call Trace: [ 180.176658][ T7838] [ 180.176670][ T7838] __dump_stack+0x1d/0x30 [ 180.176697][ T7838] dump_stack_lvl+0xe8/0x140 [ 180.176761][ T7838] dump_stack+0x15/0x1b [ 180.176842][ T7838] should_fail_ex+0x265/0x280 [ 180.176964][ T7838] should_fail+0xb/0x20 [ 180.177007][ T7838] should_fail_usercopy+0x1a/0x20 [ 180.177036][ T7838] _copy_from_user+0x1c/0xb0 [ 180.177122][ T7838] ___sys_sendmsg+0xc1/0x1d0 [ 180.177187][ T7838] __x64_sys_sendmsg+0xd4/0x160 [ 180.177308][ T7838] x64_sys_call+0x191e/0x3000 [ 180.177336][ T7838] do_syscall_64+0xd2/0x200 [ 180.177371][ T7838] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.177473][ T7838] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 180.177505][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.177537][ T7838] RIP: 0033:0x7f5e3cebefc9 [ 180.177559][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.177585][ T7838] RSP: 002b:00007f5e3b91f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.177674][ T7838] RAX: ffffffffffffffda RBX: 00007f5e3d115fa0 RCX: 00007f5e3cebefc9 [ 180.177687][ T7838] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 180.177705][ T7838] RBP: 00007f5e3b91f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.177722][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.177739][ T7838] R13: 00007f5e3d116038 R14: 00007f5e3d115fa0 R15: 00007ffc00986558 [ 180.177767][ T7838] [ 180.244207][ T7842] loop1: detected capacity change from 0 to 128 [ 180.307430][ T7841] 9pnet_fd: Insufficient options for proto=fd [ 180.391778][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1417'. [ 180.400832][ T7855] tipc: Enabling of bearer rejected, media not registered [ 180.621613][ T7868] tipc: Enabled bearer , priority 0 [ 180.655904][ T7868] syzkaller0: entered promiscuous mode [ 180.661554][ T7868] syzkaller0: entered allmulticast mode [ 180.667995][ T7868] tipc: Resetting bearer [ 180.683332][ T7867] tipc: Resetting bearer [ 180.700901][ T7867] tipc: Disabling bearer [ 180.990321][ T7876] netlink: 'syz.6.1426': attribute type 1 has an invalid length. [ 180.998233][ T7876] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1426'. [ 181.020854][ T7880] loop0: detected capacity change from 0 to 512 [ 181.060863][ T7880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.093305][ T7880] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.160407][ T7894] loop3: detected capacity change from 0 to 1024 [ 181.163317][ T7891] loop7: detected capacity change from 0 to 1024 [ 181.173980][ T7894] EXT4-fs: Ignoring removed orlov option [ 181.175337][ T7891] EXT4-fs: Ignoring removed orlov option [ 181.185836][ T7891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.194500][ T7894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.237809][ T7891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.259084][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.277520][ T7905] netlink: 'gtp': attribute type 4 has an invalid length. [ 181.294830][ T7905] netlink: 'gtp': attribute type 4 has an invalid length. [ 181.348786][ T5980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.444615][ T7914] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 181.452528][ T7914] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1440'. [ 181.471436][ T7915] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.478694][ T6558] Bluetooth: hci0: Frame reassembly failed (-84) [ 181.569456][ T7922] loop0: detected capacity change from 0 to 1024 [ 181.576344][ T7922] EXT4-fs: Invalid want_extra_isize 129 [ 181.576907][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.585264][ T48] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 181.600670][ T48] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 181.622345][ T7923] netlink: 5388 bytes leftover after parsing attributes in process `syz.7.1439'. [ 181.699255][ T7931] tipc: Enabled bearer , priority 0 [ 181.713939][ T7929] tipc: Disabling bearer [ 181.723439][ T7938] SELinux: failed to load policy [ 181.731037][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 181.741252][ T7938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 181.766739][ T6558] ================================================================== [ 181.775009][ T6558] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release [ 181.783284][ T6558] [ 181.785613][ T6558] write to 0xffff88813e674320 of 8 bytes by task 7942 on cpu 1: [ 181.793252][ T6558] sk_common_release+0xae/0x230 [ 181.798112][ T6558] udp_lib_close+0x15/0x20 [ 181.802630][ T6558] inet_release+0xce/0xf0 [ 181.806979][ T6558] inet6_release+0x3e/0x60 [ 181.811486][ T6558] sock_close+0x6b/0x150 [ 181.815740][ T6558] __fput+0x29b/0x650 [ 181.819746][ T6558] ____fput+0x1c/0x30 [ 181.823768][ T6558] task_work_run+0x131/0x1a0 [ 181.828377][ T6558] exit_to_user_mode_loop+0xed/0x110 [ 181.833738][ T6558] do_syscall_64+0x1d6/0x200 [ 181.838360][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.844268][ T6558] [ 181.846601][ T6558] read to 0xffff88813e674320 of 8 bytes by task 6558 on cpu 0: [ 181.854249][ T6558] l2tp_tunnel_del_work+0x2f/0x1a0 [ 181.859410][ T6558] process_scheduled_works+0x4ce/0x9d0 [ 181.864983][ T6558] worker_thread+0x582/0x770 [ 181.869582][ T6558] kthread+0x489/0x510 [ 181.873663][ T6558] ret_from_fork+0x122/0x1b0 [ 181.878263][ T6558] ret_from_fork_asm+0x1a/0x30 [ 181.883078][ T6558] [ 181.885492][ T6558] value changed: 0xffff888106ec2a40 -> 0x0000000000000000 [ 181.892599][ T6558] [ 181.894924][ T6558] Reported by Kernel Concurrency Sanitizer on: [ 181.901076][ T6558] CPU: 0 UID: 0 PID: 6558 Comm: kworker/u8:59 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.911072][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.921140][ T6558] Workqueue: l2tp l2tp_tunnel_del_work [ 181.926639][ T6558] ================================================================== [ 181.945471][ T7940] 9pnet_fd: Insufficient options for proto=fd [ 183.487787][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 183.489471][ T4071] Bluetooth: hci0: command 0x1003 tx timeout