last executing test programs: 4m8.250381479s ago: executing program 1 (id=897): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f0000000440)={0x10008000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000280)=0x0, {0xf}, &(0x7f00000002c0)=""/242, 0xf2, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=[0x0, 0x0], 0x2}, 0x58) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) unshare(0x68040200) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000003"], 0x58) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/resume_offset', 0x242, 0x2bd) 4m7.107856488s ago: executing program 1 (id=908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x308) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x6, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x143842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e03d3ffbc5cb60128876360864666702c1ffe800000000000", @ANYRESDEC], 0xffdd) 4m6.95101312s ago: executing program 1 (id=912): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000080)=0xffb2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='leases_conflict\x00', r4, 0x0, 0xe3b9}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000000000000000000007"], 0x10}, 0x80) 4m6.516243127s ago: executing program 1 (id=917): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100cd00000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0xffbd) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") socket$packet(0x11, 0x2, 0x300) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) r1 = socket(0x1e, 0x4, 0x0) mount(&(0x7f0000000300)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='msdos\x00', 0x20020, &(0x7f00000001c0)='\xe3\x00\xa5b6\xdd\x97\x8d\xff\xfe') setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000d5d44b68000000000000000000009500000000000000b0a684a0bc2c91ca69d6aa251d86454797975a1deca90f8f827b8ba788542fc7097c6194735fe4aed793dd240ecffb3e61f57349ddb9fd5493e3265e31a3df16dbf5aa29c5d7f1d7a5a52bac020ad36b9d323d94f35cd0677f37e5eb30509025da96fb4a4c72585167782f8e52c647a40675b8963ea385d388502bdfb90b48fe170bf6f963f5331f863278010b0a41038d7b649dee339f5490e29609427550e058cbd7f9324c67bfce435311b13994a4ddc66ea539355a0b51dce68bf31f265bc0bcd67054e3553c1e15380273cc766c68a1179f"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0xa0000, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000100)={0x0}) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000f8b72d788d6a729f108e1fa05d4dad0718469414805f27348d9965af9f2f17f2d4a02bf770"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 4m5.753678259s ago: executing program 1 (id=922): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=default,\x00!']) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r3, 0x0, 0x5}, 0x18) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x8d348b7d2e649c4b, 0x1010, 0xffffffffffffffff, 0x10000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x8d348b7d2e649c4b, 0x1010, 0xffffffffffffffff, 0x10000000) setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x34, 0x0, @fd_index=0x8, 0x0, 0x0, 0x7, 0x8, 0x1, {0x0, r6, r2}}) socket$inet_sctp(0x2, 0x5, 0x84) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v1={0x1000000, [{0xffffffff, 0x6}]}, 0xc, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r1, 0x1a651000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r1, 0x1a651000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@sr0, r0, &(0x7f00000002c0)='./file0/file1\x00') (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@sr0, r0, &(0x7f00000002c0)='./file0/file1\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 4m5.512375633s ago: executing program 1 (id=925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00000000000000000300000000000000080001"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x100, 0x8008, 0x1, 0x1}, 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 4m5.485412363s ago: executing program 32 (id=925): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00000000000000000300000000000000080001"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x100, 0x8008, 0x1, 0x1}, 0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 59.182509181s ago: executing program 4 (id=2875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xe, 0x0, @opaque="03d5932a3e81"}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 59.143535991s ago: executing program 4 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 59.141576092s ago: executing program 4 (id=2877): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 59.097542802s ago: executing program 4 (id=2878): pwrite64(0xffffffffffffffff, &(0x7f0000000100)="7d5446ff1a75bee8908d6dd756c3ab4b860b5e852b8315f4613b5911f34477eb13d98a82224909c06174e54ea63f4e296dd66d55105f942b94a2c7821b9fb75444c967b7dd36101788a43059f4d075247aa99d7872c22f2644bf8bb3b5a4dd2248145b7e7142e37266ef2db9a1ad548dbc07977951e75125da07be6b817a3bad16e2d5212d3405db210901c23b0b6a3dff9ac3927c5267d0101252da472700a39f980f436fde098fcabb30ee8c5f4e80d5c7d0b7fc86d29d150cbf3a70a05c8d4f99e3254bf489fe79def726b7d4f9042f6eb039f54d4897326e885badbf071cc3805410cb59b8a168f20409f5d8b5acf385c9fe0fdde080a1f149b096f75f78dcdc9a983d99fbe9179e9537843b7b333ef108fceda6427c79ea9e07f0ffa1714f88dfba2a402c437e4bf17f6100e2e3a47beb054aa62a2341a67ad82b0d9d26dc8dfc50e41c383c038a17b1d548a03024db300df49d84de9e3317c6c7a82e153de7b7616be3525963dd53afcb19b1c6e9ea686129908a71ea7405e44fa4b7cd7606a8fe3843463a422427b0f8e96e245c72ae3068d33557ae02410391caca49258cb87d90d309fd8db08e2c3d0f18b0084d40a9d726ad1a0917785a87787f58836fb3f342393397e30dea9d401daeba125eea8c8091bf3116c0b6ed3ec5c4bb1e0874ff6bb2ea7e47f10b05adfdf23f431e0d915976003814054f5098a7938de868dfd3ce12bb6c7287b13dfe26075e4148e3ebdc104c3b148d3f64f1b453b5202cc5b8aa09e7ab5f9e7f0886e696a8e86cc92d91d74b655adcc21700311ae7736a768879eb68ff05829df23199ab8f785553546efa2949ab2182d6645ddb1d856bdb4a82b386146c0c0b6d8a73f3b4209c6ce2e480d8b394bdee47f34304c4a0746c8aaa3351ebe6cfc3ab239dce24a3e35bb95ecd6edadd09a7424fb03db2eec4298b6679ebbdfcde5b35d307ee44f3c3052a40c0fa4dbd196344d01b3260c464ccb2ebbb98140a36d01908db063b601be905db935f0d9fa1796b177ccac59ce88018c0866de03b1883f1f8a902c455e29bf152d383fa9199cc532cada092d753627d6f6205caf345f4dbafe6286855b920db5aa1b0d07931c222de5bb457f7256e2fdf660ec6190bb4f738eab88323d066bb06f2a11919e7f92cc78e035a283d7d95864979b4585ee5b8efb5dd0d6c3d698566596b0af04e3233ea9111886b13ee91ed6ae440e740580611e091190f8d68c8f1c52fffff0b13fb6d2ce5423cff57962310c456ff863c4f47d627a9408c79b630d557929260a8efb9c1c3aab2a0333fd596097265f5bb7d8befe1628e1ed11e29ea578af113a523dd011c2c2caa24700e92195d2a11c82f5d81e21b4b2cc5f642752d82880f1a1fbdc0a87c42091a214821cea132c651725486a027374a18e8ecf6de1be37c1b15bcc3f228500d5f2cc55cd111aa1fc60963455ea9e017fc3aa31d7d0fe16ba07b542e3fabd809ad62158d3893de63ce023f8c15c7b6e2b2efc09f972586cff8f2bcfda6d78c98d0d26df171e80a25eda62abacd477836ced60c87818db9a7ae7d608243c6754b11379821c6de91a28b3159f2ef53d14ffecba13aa5f8ce27a54abb6595b146d44612d2d8708f9e7f139ae103d4cdaf062de86e6e761e33c29d3c8162bd9a14b614f2a299d55c152f53da8864503cff06f4a23afedfb593e7cb20da670d66cd696954d1afffc497fc813097d1b63cc9988d09f1e646ae1b1958bb726246828fb7b6702a936113514cbb3ebd8be54c609dc278eeb6fcababd909a12292398eeb60d67f61d7b3dafa3eb1ef1cab08e6eb55379fecbfa98e2a0e64972595a6220dacc9e7f63c318746b285a8575b6a9fc6c10e88f6749bd73557cfe67e0a51b1af36fb72752e80d23d09c1f19bbfc1fbb9278923a5f0eb0282d6791a54ca4ca49adbb33e39115175d3ad835e6488eb988096276bd949f23f0f53c4698c0e49e7793f7ede31b000bf03821edd3573e8b982ac8f4c0573f1897698acdb29e45dfd0a2c9cb332e722ce7d187a8df25f6f2ad77e3c7a4c0ea3c6ab47633d6b99edbb4fed97e20c1e3fc7f6ebeedc006b801cf435325a1a01affecfaaf8ef5c7c14f33c202fb01ab53d453457689f92990c870e086ee7468126f374fa3b74ff813697ed94dd980ef82962a06657949103f5c7acbd7f006ab962a5ee9f628ff039d8349010c64631051dd49ff23ec21908b0f14fd3a30c5d23beba9661d2436800d7aca8e1e357aac415ce9d87ca246d1f3188fcc71fe8685449634e581e7eb48ee8120918544e7f7602962249e0dc5fb2732cbb9616575cb62133e17329d78ca334c3a12df93cf911dcd0a3de5604f6a2d5ffca2b2e3f7ec8d5868ffc74dbdadb4b7551537efd3d765cfcaf643fd695f62bd634d903a83ab375db752c96da103525e576e8b6d59c12ec35683779bd2f5bedbe0a4eb8391cb2160dee9b36a942961dc7f03a4804328a904e7ee345daf3314ac3f969089e1e90d47007d294e9025034203d23fb11801cde3b23c7d4c4d94fbe359de2361797eeadbc496c8631fb9e6ac231161250af697df9a270cff961a775a1cd1e1ab72d77b438edf7aeb024608b40a90644cda0be371007529f8fcf4d4d384a6a59d20ea670c0a7a628edb6a6ad1de9d34781bf1c2f43a200473b29bd74d36741b8400e29052ca586e0067105d581d9857e0c938e3d67e6661b8032f742fb84b0b5efb094e9112872c5d50e47548436c59da46dfe9b129051ee109a9cd7049ddb7724ee2978dfd2287e93a1e29bc6b2e7183cba8c294889f98afa63fbcea57b9d548f1e8e52fb892ca006cb794266fd892de9ea1c711a900d786b1d2b4fa07380864d78241407e62abe6ebe502e55f0961d3a86415f5189825f8648717a0c9f7a9e471f24e28a838705405dc70b0d2335c44335d6b5a3a83849879d7cbb5ef863702c525f684da49b5f2c75759ab2c1fdce346c6abde88f5697404a31e7994918ee8a4ec6b2ac0b43c79f1105e53acc270268ca37081127fe3bb9f0ac6e5ada69d3b13a21c21de30490387401f105e42d87e9462bfea51ee348fa0e22f725547c91db305249d4c8b8aa84800aa4ebdc680760b4c6638699f29632f440d0514c55ad06f8b762e96bafcfa39f82aee01df12af79bf0c09b28b304dd46140f575cc83f75f3dbc00abcb2d1179e97be70d274da4da0fa5ef5dadf3096a8a0790d912cc8abb2bfa3011705e9534668a0a1f4f27ec4c3d520c36b26005465ea27622ef43e58eefb1cd57e1f5d6fbb6e56f0f5554f3a5a0b594ac1fc44349b4a85165cdc6ee0f54ce4a43edee18b1dbb43ac984068a3b6e3ade630e975525dc038941cca9bedc440dbc4bb23409a917f5224bd44296ea62d02d673df07a1eecf3a821c023e9a5678f4527dad3036585b6e9f70ecb9831bb81b658eb2fef1dfeaa2be24fee5b461fa63eb9dcd946d5a9962a02b9949319a68635026684879d1ce43ee56353a150725860b2dc1df4dd8a15dba2493d66d2327fa04eab2eaf96013561621d6313821a01c652109b976e31b96e9dcdbd5d2033143a671d733040fe192432088648be28a0c86689fb43fdefd25afd22fd036aa4dd23352061583f01d6d3e7d6b166cee3cb4f3eceab9a13700b0d94a4730f8e51844a6ce091ac06b8914d28e49e46dc9ac07e27762020faddeb0829f8ac558fd676774b2b74afeb66d5cb72c1f8de1c7caea9410ee5833a38b15292a3905222e249264471aaa890b0b8bf19f5b8b499389b7855d781f6468fadd5eb8e14674700c1c9d8ac635ceb313b96603e1190ce28305bf00eddf74667a9c64bcf232511f1ee3f342340edf9e4133abb9192398f74d146e93ee07597eb6080f15599e054c1036ad09687bd0f946fc3823f845118fe545de097bea5efb51193b44a8bf77631f453b496a03c798db41eb656db705254c050c5e1b5bb40eb3cc6eac28e919514510a579ffd1a97fae4e72058035c8ed0c373ee222a9b4069efe8b2fa763b25caed8dca6f1c700b646570da289bc24d4a52300599f20b8572afae7476897856827a2e2c2a8f9abb027eb42af68367818a0687f799b0b9167570f50aaaae451b6e88e56ba1143be1ecbee431d6991f31d4bf91084a48a65f762fc8046ef96e554ecd37882a1adbbafed10393a26c23bc055b15b7b6c515389f6bf52a76b84cfef906a35a875403c349f0fb82f57e0f792fbe39e1782ce9f5ef066f0f0e288cac5f923884e9a8ff628b939251254f3f57d4162b35b3a9fd32b68e66c24dd7b60c9aa4ad391076cca489d103d3a295d2172c70be309ddd75d61fb7c6d84af9f526d889c2c75a6942d8251a122a4e63df03ed8503e67584caa4bdc687205dbee58f0e81022f0cd1b0ac85db41f6161e084527914f9e56067ab1c4c3033e9775cbf55184c94d88ca32f99e96e1a70abf37a0f75ae0a8177e7d7a8d6d6be717f9fe0c5ebd3bb858f1ffbafd4958cbcc117d28e6adb7b4074b27abecea5398b4e62760c62f1c7199e64f5ef0c358ac92b5d5f925ccf4bda84b15b996070b0c4007fbfa328ca6312c66b08c0e5aeec71354c4c9ada247a2401a9e4c849c83af2347a0f1c245f2ab9c10bdaabe9e2054c7b2b1b547d7f80006dfff7f00517f10658c8640199deed7a900852e7e5cfe94e3de95ee3ce694ac1707bd345e502cd306d7a7d3f55bb4d1717bd769e94a73587a847979f82f7301a7c0013e38a61b77b42eb8a0074855aa7e22946f147158c6a4bec7e3e35c71a9ddb2b175ce298f8c821d944a398b55e64e82800865d3795a1a07d810c5a24abb03441b2e366581a4259c444bf201b280953206686f648db3fa6488dedfd29b6de2f44259aad60c4331f7373816646826c087469c116dc47c24772361c2f634a673a56bc1fe9f37cf261b1c686343e92f3d330628284a21f18fa78975f0ba744ff1e57d25fcf365896568602342931df8c67bfc7afb78de6a38328975a1534e4ce4327033da76928f4e261800828f60122ae28aee4003f5117c89389b9b3f45a59cce39249a6377655d30dd9ef4d0412c001acb073549e312511640c7822f4d2cfe6b61b67048597180f730d91c20a45caaa7328cc1db0730b6f3769cb6328e19546b654aed7b43969e6abb629890858210aa574b46c1fd22225424b0bae7bbe3c3b4689fc03cabb4441f2eb0aa88799524561c3048489fc008049031c105f828156fe6c43ef694eb72dff3876fe1f1a83fa390c834eccc12614a3c6ed96602ce2d4b490b5f14ac5be1f07c84e68c33bd70b6af0a58e046427e6dbc13b353fc009daabd8385942139eb8db3e8333c72cd31e1a06a7f55bf219ae28156d10a472533ee27e9654f0183406fa34fa4cdd4e8232391710723133545241f3ddd873d086d40ac20f55b10451", 0xf01, 0x23) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x118}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x94) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x5499, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r5, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x9811, 0x1}) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) prctl$PR_GET_NAME(0x10, &(0x7f0000001680)=""/224) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/160, 0xa0) 58.748863128s ago: executing program 4 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xe, 0x0, @opaque="03d5932a3e81"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0xff, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0) 58.61675518s ago: executing program 4 (id=2888): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 58.61622499s ago: executing program 33 (id=2888): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1.97446749s ago: executing program 3 (id=3679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003020000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymsxKP7lU45f6myawfHTiLh6AvFhnN1p9z9vDfr+pfFS53Xw928yT09qeP+X5pGf7/Rzg/qfZw+srT4wxgv3flYZGv9WxAuTg/ufXv+bDIn/8oG1/SvLsoMxvvH13d1h8bMfR8wM/P1JHotVadU3K82d3etr9cXV6mp1Y35+7o2FNxdeX5itrKzVqvnfgTG+97GfPzys/VcGxP/tb7r972Htf2XYSvv8597N+x/qZguD4l97eeDv71QMiZ/mv32fzPPt+TO9/F43v9+LP7374mHtXx6y/Y/6/K8ds/2vfvW7vz/mogDAGWju7K4v1mrVrUMyU8dY5mnM/GLqXFTj/8xk3+l+cuelPu83095bfTSl16pzULF9mezMYk3EOWny/zIj7ZYAAIBT8Ginf9Q1AQAAAAAAAAAAAAAAAAAAgPF1FrcT64+5N5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//0wa4Aw=") 1.537903046s ago: executing program 6 (id=3689): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 1.523832786s ago: executing program 3 (id=3691): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) 1.449373938s ago: executing program 3 (id=3693): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) utimes(0x0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="b1f653ddeed8b46bb64e505399c47a3f85dc6db81e30cfaaccb21c913d3e5c774a6c467880e925e385129f515e1aeadfb8eb387026a6ca4e33bfb7df", 0x3c}], 0x1, 0xc, 0x25) 1.419030228s ago: executing program 3 (id=3694): setresgid(0x0, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) openat$autofs(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x5, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x2040850) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x8040, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73e, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulu3ZbSwWRih6kWCnqzUO73d2Gkt1uyW5KEypaUQRPIsWzP07e/AdEEfTmUfDsSQpFSr0IQmS2s3Hb7KabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJtupiYiTd/e7c/taOV2SWFl5/bekvU+aj67PpPZkmcci4rv3Iw7l1pbbXFqeL9Vq1YUsX2jVLxeaS8uHL9ZLc9W56qXi8WePFk8UnzlR3LJY/3jv1fOnvnrpixvv/vjLa2+dejKJk7E329Ydx1aZjdnsO5lMv8J7vLjVhY1YMuoDYFPSW3PH3bs89sd07GinAID/srcjYgUAGDOJ9h8Axkzn/wCdsb1hjIP9k916ISJ29Yp/Ihuz29UeB919J7lnZCSJiJktKH82Iq6++cHX6RJDGocE6OWd6xFxbmZ2bf2XrJmzsFFPD7DP7H159R9sn2/T/s+JXv2f3Gr/J3r0f6Z63Lub8eD7P3dzC4rpK+3/Pdez/7s6aW1mR5b7f7vPN5lcuFirpnXbIxFxMCan0vyRdco49vHzP/Tb1t3/S5e0/E5fMDuOmxNT936mUmqVHibmbreuRzw+0Sv+ZPX8J336v2cGLKP1/ROf99v24PiHa+WziKd6nv+/Z7Ql689PLLSvh0Lnqlgr/+H0vn7ljzr+9PzvXj/+maR7vmZz42X89MmfL/fbttnrf2fyRju9M1t3tdRqLRyJ2Jm8snZ91xTSTr6zfxr/wQPr13+9rv/0b8JzA8Y//+mX5zcf/3Cl8Vc2dP43njjw8zd94xns/B9rpw5mawap/wY9wIf57gAAAAAAAAAAAAAAAAAAAAAAAABgULmI2BtJLr+azuXy+bvv8H40dudqjWbr0IXG4qVKtN+VPROTuc6TLqe7nod6JHsefidfvC9/NCL2RcSNqf+18/lyo1YZdfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkNnT5/3/qV+nRn10AMDQ7Br1AQAA2077DwDjR/sPAONH+w8A40f7DwDjR/sPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkJ05fTpdVn6/fa2c5itXlhbnG1cOV6rN+Xx9sZwvNxYu5+cajblaNV9u1B/0+2qNxuXi8Vi8WmhVm61Cc2n5bL2xeKl19mK9NFc9W53clqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGOaS8vzpVqtuiAhISGxmhh1zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7/BXAAAA///R4B8B") chdir(&(0x7f0000000040)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x1) r6 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f00000002c0)="473a08b0a6e5d41e9c473b71c7b8c52688edc477b61193e169bbc7050478b1541870e4a81ad9ef7deb81f1753629257f278905000000000000f8fe49d73a81000e08000000024bf752e306d096339c5e74000000000000000000", 0x5a}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r4]) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x1, 0x0, 0x0, 0x40001}, 0x4800) 1.390049299s ago: executing program 6 (id=3695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) socket$kcm(0x11, 0xa, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b708000000000000608af8ff00000000bfa20000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64) rt_tgsigqueueinfo(0x0, 0x0, 0xb, &(0x7f0000000240)={0x4, 0x6, 0x3ff}) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.320495489s ago: executing program 6 (id=3697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) connect$unix(r5, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.31985196s ago: executing program 2 (id=3698): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 1.239731681s ago: executing program 3 (id=3700): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x8, &(0x7f0000000900)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2d}, 0x18) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) socket$kcm(0xa, 0x3, 0x87) r3 = socket(0x9, 0x5, 0x4) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = signalfd(r5, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x7f}}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) unshare(0x28020480) r8 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x9}) mq_getsetattr(r6, &(0x7f0000000300)={0x800, 0x0, 0x1, 0xfffffffffffffffe}, 0x0) mq_timedreceive(r8, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r7, &(0x7f00000001c0), 0x0}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES32=0x0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r10 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=' ', 0x1}, {&(0x7f0000000180)="d76a59fae302338a73c35e77781612daa15794485fc6505b1d687aeafae14aea7b6866d3d223eddd4c907e3249e503c70933e45fccb63b299bba06bbbedca89d951440edd38e4b1fd08d3380029e502eb9db4f122148483e6ad4fdb6c6c780b7e570ab03284499113bb20e94723b63f13435", 0x72}], 0x2}, 0x1) 1.185512992s ago: executing program 2 (id=3701): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) 1.060168624s ago: executing program 2 (id=3702): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 1.059404654s ago: executing program 2 (id=3704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) flock(r2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x5}, 0x18) r8 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000240), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 865.907077ms ago: executing program 0 (id=3707): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x65, 0xea, 0x80, 0x70, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x10, 0x600, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x353f, 0x3, 0x8, 0x202a3, r1, 0xde2, '\x00', r2, r1, 0x4, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f00000004c0)=""/120, 0x78}], 0x3, 0xfffffff9, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0xa, 0x5, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r12}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 595.538311ms ago: executing program 5 (id=3709): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = dup3(r0, r1, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 594.604282ms ago: executing program 5 (id=3710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x2200003, 0x0, 0x0, 0x3, 0x80000001}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r8, 0x0, 0x200000000000006}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x1, '\x00', 0x0, r2, 0x0, 0x1}, 0x50) io_setup(0x3, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x340, r9, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "02ed4d92c4a1b12cf5a384ba3366bca742b5cd8dbdc18a84af1754"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "fea0b6efbba0824adca84c8ad9c5fbd4704fe4d7d0446b22563941cc0955bfc1"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ce4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x949}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x32}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x11}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffb}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1b7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x1}, 0x880) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES8=r0, @ANYRES16=r0], 0x20) 588.828301ms ago: executing program 0 (id=3711): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@quota}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r2 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)={0x58002002}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wg0\x00', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040), 0x84000) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r7, r8, 0xfffffffffffffc01, 0x0) (async) tee(r7, r8, 0xfffffffffffffc01, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x21, 0x4, 0x7, 0x0, 0x8000, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x16, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd3f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xb7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @alu={0x4, 0x0, 0xc, 0xb, 0x6, 0x30, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x0, 0x8, 0x2, 0xfffffffffffffffc, 0xffffffffffffffe5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0xa1, &(0x7f00000006c0)=""/161, 0x41000, 0x20, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xe, 0x80, 0x551}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000840)=[r8, 0x1, r9], &(0x7f0000000940)=[{0x3, 0x2}, {0x2, 0x2, 0xc}, {0x4, 0x5, 0x1, 0x1}, {0x2, 0x5, 0x3, 0xde8ae3671e8bc9ae}, {0x5, 0x3, 0xd, 0x8}]}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r12, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r13, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r13, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 580.123992ms ago: executing program 5 (id=3712): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x20000014}) 528.212452ms ago: executing program 6 (id=3713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 471.238463ms ago: executing program 5 (id=3714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) 470.074293ms ago: executing program 6 (id=3715): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x800, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x7, 0x2, 0x80000000, 0x4, 0x5, 0xfffffff8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x0, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0xfffffffd, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x42000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x5, 0x958, 0x9, 0x4, 0x6, 0x25a, 0x80, 0x5, 0x6, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x77, 0x4, 0x5, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0xfffffffc, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0xff, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x82, 0x0, 0x1, 0x2, 0x3, 0xfff, 0x80000001, 0x6, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x4c31, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x802, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x696, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x7, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x3, 0x1c0000}, 0x9, 0xbc, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 407.373334ms ago: executing program 6 (id=3716): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x11) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0x300}}}, 0x14) keyctl$read(0xb, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() lstat(0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 406.451074ms ago: executing program 0 (id=3717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010700000000000000", @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) io_uring_setup(0x1de3, &(0x7f00000000c0)={0x0, 0x45d4, 0x800}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) setgroups(0xefff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB="0000000000000800090000000000000000000000c3d896eaeaabbd998164cda7ede25c94e50e00000000000000001baaad478485e745fff331dfecaeb99f9c6c60f6f6cbf304dcac852090c9f8c91a736a387918d6031e1598fae3fe341efcca874faa82ace5975c29af0b204645e1af189e54b632", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r5, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001000)=@newsa={0x138, 0x10, 0x832152701231f605, 0x70bd27, 0x0, {{@in=@loopback, @in=@remote, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x6c}, @in=@remote, {0x0, 0x8001000000000001, 0x0, 0x400, 0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x20}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x20}}]}, 0x138}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r6, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250300000008000b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44084) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) 406.126594ms ago: executing program 5 (id=3718): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="57fd2dbd7000fbdbdf250100000006000a0002000000050007000b00000006000e"], 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20040000) r2 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xb10, 0x7}, 0x0, 0x2, 0xfffff7f0, 0x0, 0x12, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fchdir(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r8, 0x0, 0x33, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x0, 0x0}) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xd, 0xe10, 0x6, 0x6, 0x5, 0x93b}}, {0x4}}]}]}, 0x58}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0x7, 0xff, 0x101, 0x20300, r3, 0x6, '\x00', 0x0, r2, 0x2, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x1, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000280)='GPL\x00', 0x6, 0x7c, &(0x7f0000000340)=""/124, 0x41100, 0x0, '\x00', r10, @fallback=0x32, r2, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x9, 0xffffffff, 0x19b4}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000500)=[r3, r3, r3, r2, 0xffffffffffffffff, r2, r11], &(0x7f0000000580)=[{0x1, 0x4, 0x0, 0x1}, {0x3, 0x5, 0xc, 0xc}, {0x1, 0x5, 0x9, 0x9}, {0x1, 0x2, 0x8, 0x9}, {0x2, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x3}, {0x4, 0x3, 0xd, 0xa}], 0x10, 0x3c}, 0x94) 405.394264ms ago: executing program 3 (id=3719): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x5195, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==") r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000140)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xf, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r9, @ANYRESHEX=r0, @ANYRES8=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ddff00000000000ae6726d000000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000004fb79612000000000000000040000008", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000f0000001fbf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001aaef8209b41ea9dd0879ceeccfc3111e8d700005ff1049900"], 0x50) 318.040635ms ago: executing program 0 (id=3720): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 228.612197ms ago: executing program 2 (id=3721): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = dup3(r0, r1, 0x0) setsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 153.831128ms ago: executing program 5 (id=3722): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x65, 0xea, 0x80, 0x70, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x10, 0x600, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x353f, 0x3, 0x8, 0x202a3, r1, 0xde2, '\x00', r2, r1, 0x4, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000380)=""/149, 0x95}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f00000004c0)=""/120, 0x78}], 0x3, 0xfffffff9, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0xa, 0x5, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 152.359498ms ago: executing program 2 (id=3723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 112.668569ms ago: executing program 0 (id=3724): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) 0s ago: executing program 0 (id=3725): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) cachestat(r0, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9411, 0x10000, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x41) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESHEX=r5], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x0, 0x8, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x20, 0x40, 0x1a, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x1, 0x6, 0x62, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7, 0x7800, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00042abd7000fedbdf2504000000400001801400020076657468305f766c616e000000000000140002006e6963766630000000000000000000001400020067656e657665300000000000000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="f7a52e9400018008", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="14000200697036677265746170300000000000001400020076657468305f766c616e00000000000008000300010000001400020076657468315f766c616e0000000000001400020073797a5f74756e0000000000000000001400020076657468305f746f5f626174616476001400020077673000"/128], 0xf4}, 0x1, 0x0, 0x0, 0x4004890}, 0x4000880) io_setup(0x8f0, &(0x7f0000002400)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) kernel console output (not intermixed with test programs): 85][T13821] loop5: detected capacity change from 0 to 2048 [ 313.058203][T13798] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3310: mark_inode_dirty error [ 313.076717][T13798] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 313.087247][T13798] EXT4-fs (loop3): 1 truncate cleaned up [ 313.094626][T13798] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.108086][T13821] loop9: detected capacity change from 0 to 7 [ 313.114311][T13821] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.124275][T13821] Buffer I/O error on dev loop9, logical block 0, async page read [ 313.132375][T13821] loop9: unable to read partition table [ 313.169658][T13821] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 313.169658][T13821] ) failed (rc=-5) [ 313.183219][T13824] loop6: detected capacity change from 0 to 164 [ 313.192363][T13824] syz.6.3316: attempt to access beyond end of device [ 313.192363][T13824] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 313.208637][T13824] syz.6.3316: attempt to access beyond end of device [ 313.208637][T13824] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 313.247614][T13830] FAULT_INJECTION: forcing a failure. [ 313.247614][T13830] name failslab, interval 1, probability 0, space 0, times 0 [ 313.260358][T13830] CPU: 0 UID: 0 PID: 13830 Comm: +}[@ Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 313.260400][T13830] Tainted: [W]=WARN [ 313.260409][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.260486][T13830] Call Trace: [ 313.260495][T13830] [ 313.260505][T13830] __dump_stack+0x1d/0x30 [ 313.260530][T13830] dump_stack_lvl+0xe8/0x140 [ 313.260554][T13830] dump_stack+0x15/0x1b [ 313.260641][T13830] should_fail_ex+0x265/0x280 [ 313.260682][T13830] should_failslab+0x8c/0xb0 [ 313.260729][T13830] __kmalloc_cache_node_noprof+0x54/0x320 [ 313.260767][T13830] ? page_pool_create_percpu+0x4d/0x630 [ 313.260800][T13830] page_pool_create_percpu+0x4d/0x630 [ 313.260861][T13830] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 313.260908][T13830] page_pool_create+0x1a/0x30 [ 313.260938][T13830] bpf_test_run_xdp_live+0x12e/0xfe0 [ 313.261009][T13830] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 313.261121][T13830] ? __pfx_autoremove_wake_function+0x10/0x10 [ 313.261189][T13830] ? 0xffffffffa0205540 [ 313.261204][T13830] ? synchronize_rcu+0x45/0x320 [ 313.261269][T13830] ? 0xffffffffa0205540 [ 313.261294][T13830] ? 0xffffffffa0205540 [ 313.261306][T13830] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 313.261339][T13830] ? 0xffffffffa0203590 [ 313.261370][T13830] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 313.261422][T13830] bpf_prog_test_run_xdp+0x4f5/0x910 [ 313.261464][T13830] ? __rcu_read_unlock+0x4f/0x70 [ 313.261570][T13830] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 313.261653][T13830] bpf_prog_test_run+0x22a/0x390 [ 313.261688][T13830] __sys_bpf+0x3dc/0x790 [ 313.261739][T13830] __x64_sys_bpf+0x41/0x50 [ 313.261830][T13830] x64_sys_call+0x2478/0x2fb0 [ 313.261994][T13830] do_syscall_64+0xd2/0x200 [ 313.262020][T13830] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.262060][T13830] ? clear_bhb_loop+0x40/0x90 [ 313.262134][T13830] ? clear_bhb_loop+0x40/0x90 [ 313.262158][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.262184][T13830] RIP: 0033:0x7f0fb869e9a9 [ 313.262260][T13830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.262278][T13830] RSP: 002b:00007f0fb6cff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.262298][T13830] RAX: ffffffffffffffda RBX: 00007f0fb88c5fa0 RCX: 00007f0fb869e9a9 [ 313.262313][T13830] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 313.262329][T13830] RBP: 00007f0fb6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 313.262345][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.262391][T13830] R13: 0000000000000000 R14: 00007f0fb88c5fa0 R15: 00007ffe659bb8e8 [ 313.262485][T13830] [ 313.596843][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3321'. [ 313.723072][T13843] loop2: detected capacity change from 0 to 1024 [ 313.755759][T13843] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 313.768193][T13843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 313.768193][T13843] [ 313.778021][T13843] EXT4-fs (loop2): Total free blocks count 0 [ 313.784089][T13843] EXT4-fs (loop2): Free/Dirty block details [ 313.789606][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3321'. [ 313.789988][T13843] EXT4-fs (loop2): free_blocks=0 [ 313.790003][T13843] EXT4-fs (loop2): dirty_blocks=0 [ 313.809040][T13843] EXT4-fs (loop2): Block reservation details [ 313.815092][T13843] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 313.857431][T13851] 9pnet_fd: Insufficient options for proto=fd [ 313.876767][T13852] loop6: detected capacity change from 0 to 512 [ 313.888730][T13851] loop3: detected capacity change from 0 to 512 [ 313.891928][T13854] loop2: detected capacity change from 0 to 164 [ 313.902592][T13851] EXT4-fs: Ignoring removed nobh option [ 313.909753][T13852] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.920507][T13857] FAULT_INJECTION: forcing a failure. [ 313.920507][T13857] name failslab, interval 1, probability 0, space 0, times 0 [ 313.923883][T13854] syz.2.3329: attempt to access beyond end of device [ 313.923883][T13854] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 313.933198][T13857] CPU: 1 UID: 0 PID: 13857 Comm: syz.0.3328 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 313.933243][T13857] Tainted: [W]=WARN [ 313.933253][T13857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.933318][T13857] Call Trace: [ 313.933327][T13857] [ 313.933336][T13857] __dump_stack+0x1d/0x30 [ 313.933368][T13857] dump_stack_lvl+0xe8/0x140 [ 313.933471][T13857] dump_stack+0x15/0x1b [ 313.933493][T13857] should_fail_ex+0x265/0x280 [ 313.933537][T13857] should_failslab+0x8c/0xb0 [ 313.933567][T13857] kmem_cache_alloc_noprof+0x50/0x310 [ 313.933626][T13857] ? audit_log_start+0x365/0x6c0 [ 313.933669][T13857] audit_log_start+0x365/0x6c0 [ 313.933782][T13857] ? bpf_get_stack+0x33/0x50 [ 313.933812][T13857] ? bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 313.933840][T13857] audit_seccomp+0x48/0x100 [ 313.933880][T13857] ? __seccomp_filter+0x68c/0x10d0 [ 313.933945][T13857] __seccomp_filter+0x69d/0x10d0 [ 313.933979][T13857] ? putname+0xda/0x100 [ 313.934106][T13857] ? __traceiter_kmem_cache_free+0x35/0x60 [ 313.934134][T13857] ? putname+0xda/0x100 [ 313.934160][T13857] ? kmem_cache_free+0xdf/0x300 [ 313.934246][T13857] __secure_computing+0x82/0x150 [ 313.934277][T13857] syscall_trace_enter+0xcf/0x1e0 [ 313.934318][T13857] do_syscall_64+0xac/0x200 [ 313.934345][T13857] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.934388][T13857] ? clear_bhb_loop+0x40/0x90 [ 313.934454][T13857] ? clear_bhb_loop+0x40/0x90 [ 313.934484][T13857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.934598][T13857] RIP: 0033:0x7f998aa6d3bc [ 313.934618][T13857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 313.934674][T13857] RSP: 002b:00007f99890cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.934702][T13857] RAX: ffffffffffffffda RBX: 00007f998ac95fa0 RCX: 00007f998aa6d3bc [ 313.934720][T13857] RDX: 000000000000000f RSI: 00007f99890cf0a0 RDI: 0000000000000005 [ 313.934743][T13857] RBP: 00007f99890cf090 R08: 0000000000000000 R09: 0000000000000000 [ 313.934761][T13857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.934778][T13857] R13: 0000000000000000 R14: 00007f998ac95fa0 R15: 00007ffc2cc6e988 [ 313.934851][T13857] [ 314.015383][T13852] EXT4-fs (loop6): 1 truncate cleaned up [ 314.084464][T13854] syz.2.3329: attempt to access beyond end of device [ 314.084464][T13854] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 314.141862][T13851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3327: corrupted inode contents [ 314.209868][T13851] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3327: mark_inode_dirty error [ 314.222791][T13851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3327: corrupted inode contents [ 314.234861][T13851] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3327: mark_inode_dirty error [ 314.246980][T13851] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3327: Failed to acquire dquot type 0 [ 314.259961][T13851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3327: corrupted inode contents [ 314.272209][T13851] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3327: mark_inode_dirty error [ 314.285153][T13851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3327: corrupted inode contents [ 314.298585][T13851] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3327: mark_inode_dirty error [ 314.313965][T13851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3327: corrupted inode contents [ 314.332367][T13851] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 314.342796][T13871] loop2: detected capacity change from 0 to 512 [ 314.350975][T13851] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3327: corrupted inode contents [ 314.367851][T13871] EXT4-fs (loop2): orphan cleanup on readonly fs [ 314.375411][T13874] netlink: 'syz.0.3333': attribute type 17 has an invalid length. [ 314.383458][T13874] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3333'. [ 314.385776][T13851] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3327: mark_inode_dirty error [ 314.392838][T13874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.405565][T13871] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3331: bg 0: block 248: padding at end of block bitmap is not set [ 314.454799][T13876] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 314.474795][T13851] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 314.489721][T13871] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3331: Failed to acquire dquot type 1 [ 314.507752][T13851] EXT4-fs (loop3): 1 truncate cleaned up [ 314.519622][T13851] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.539276][T13871] EXT4-fs (loop2): 1 truncate cleaned up [ 314.611386][T13881] $H: renamed from bond0 (while UP) [ 314.626052][T13881] $H: entered promiscuous mode [ 314.631328][T13881] bond_slave_0: entered promiscuous mode [ 314.637180][T13881] bond_slave_1: entered promiscuous mode [ 314.752677][T13888] loop3: detected capacity change from 0 to 2048 [ 314.789266][T13888] loop9: detected capacity change from 0 to 7 [ 314.811220][T13888] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.855978][T13888] Buffer I/O error on dev loop9, logical block 0, async page read [ 314.863961][T13888] loop9: unable to read partition table [ 314.905628][T13888] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 314.905628][T13888] ) failed (rc=-5) [ 314.997103][T13901] loop2: detected capacity change from 0 to 164 [ 315.026315][T13901] syz.2.3341: attempt to access beyond end of device [ 315.026315][T13901] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 315.076225][T13901] syz.2.3341: attempt to access beyond end of device [ 315.076225][T13901] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 315.199620][T13905] loop2: detected capacity change from 0 to 764 [ 315.215316][T13905] rock: directory entry would overflow storage [ 315.221617][T13905] rock: sig=0x4f50, size=4, remaining=3 [ 315.227226][T13905] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 315.566636][T13919] loop0: detected capacity change from 0 to 512 [ 315.610863][ T1472] kworker/u8:6 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 315.624673][ T1472] CPU: 1 UID: 0 PID: 1472 Comm: kworker/u8:6 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 315.624815][ T1472] Tainted: [W]=WARN [ 315.624821][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.624909][ T1472] Workqueue: loop3 loop_rootcg_workfn [ 315.624941][ T1472] Call Trace: [ 315.624947][ T1472] [ 315.624954][ T1472] __dump_stack+0x1d/0x30 [ 315.625027][ T1472] dump_stack_lvl+0xe8/0x140 [ 315.625052][ T1472] dump_stack+0x15/0x1b [ 315.625071][ T1472] dump_header+0x81/0x220 [ 315.625108][ T1472] oom_kill_process+0x334/0x3f0 [ 315.625137][ T1472] out_of_memory+0x979/0xb80 [ 315.625175][ T1472] try_charge_memcg+0x5e6/0x9e0 [ 315.625274][ T1472] charge_memcg+0x51/0xc0 [ 315.625310][ T1472] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 315.625349][ T1472] __read_swap_cache_async+0x1df/0x350 [ 315.625464][ T1472] swap_cluster_readahead+0x277/0x3e0 [ 315.625500][ T1472] shmem_swapin_folio+0x821/0xf50 [ 315.625623][ T1472] ? filemap_get_entry+0x34b/0x390 [ 315.625707][ T1472] shmem_get_folio_gfp+0x26c/0xd60 [ 315.625743][ T1472] shmem_write_begin+0xa8/0x190 [ 315.625786][ T1472] generic_perform_write+0x181/0x490 [ 315.625887][ T1472] shmem_file_write_iter+0xc5/0xf0 [ 315.625915][ T1472] lo_rw_aio+0x6a0/0x760 [ 315.625979][ T1472] loop_process_work+0x52d/0xa60 [ 315.626019][ T1472] ? wb_workfn+0x7f0/0x910 [ 315.626045][ T1472] ? pwq_dec_nr_in_flight+0x5fe/0x6d0 [ 315.626118][ T1472] loop_rootcg_workfn+0x22/0x30 [ 315.626156][ T1472] process_scheduled_works+0x4cb/0x9d0 [ 315.626203][ T1472] worker_thread+0x582/0x770 [ 315.626241][ T1472] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 315.626284][ T1472] ? schedule+0x5f/0xd0 [ 315.626366][ T1472] kthread+0x489/0x510 [ 315.626388][ T1472] ? __pfx_worker_thread+0x10/0x10 [ 315.626417][ T1472] ? __pfx_kthread+0x10/0x10 [ 315.626435][ T1472] ret_from_fork+0xda/0x150 [ 315.626469][ T1472] ? __pfx_kthread+0x10/0x10 [ 315.626494][ T1472] ret_from_fork_asm+0x1a/0x30 [ 315.626526][ T1472] [ 315.626600][ T1472] memory: usage 307200kB, limit 307200kB, failcnt 2047 [ 315.832793][ T1472] memory+swap: usage 308684kB, limit 9007199254740988kB, failcnt 0 [ 315.840729][ T1472] kmem: usage 303924kB, limit 9007199254740988kB, failcnt 0 [ 315.848041][ T1472] Memory cgroup stats for /syz3: [ 315.928362][T13919] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.038602][ T1472] cache 3817472 [ 316.042240][ T1472] rss 24576 [ 316.045373][ T1472] shmem 3678208 [ 316.048849][ T1472] mapped_file 1253376 [ 316.052905][ T1472] dirty 0 [ 316.055926][ T1472] writeback 4096 [ 316.059558][ T1472] workingset_refault_anon 2201 [ 316.064425][ T1472] workingset_refault_file 1941 [ 316.069244][ T1472] swap 2265088 [ 316.070483][T13926] loop6: detected capacity change from 0 to 4096 [ 316.072629][ T1472] swapcached 32768 [ 316.072641][ T1472] pgpgin 232497 [ 316.072650][ T1472] pgpgout 231554 [ 316.089953][ T1472] pgfault 262866 [ 316.093566][ T1472] pgmajfault 533 [ 316.097121][ T1472] inactive_anon 1716224 [ 316.101376][ T1472] active_anon 2007040 [ 316.105411][ T1472] inactive_file 0 [ 316.109095][ T1472] active_file 49152 [ 316.112925][ T1472] unevictable 0 [ 316.116476][ T1472] hierarchical_memory_limit 314572800 [ 316.121864][ T1472] hierarchical_memsw_limit 9223372036854771712 [ 316.128136][ T1472] total_cache 3817472 [ 316.132191][ T1472] total_rss 24576 [ 316.135904][ T1472] total_shmem 3678208 [ 316.139903][ T1472] total_mapped_file 1253376 [ 316.144421][ T1472] total_dirty 0 [ 316.147922][ T1472] total_writeback 4096 [ 316.152017][ T1472] total_workingset_refault_anon 2201 [ 316.157351][ T1472] total_workingset_refault_file 1941 [ 316.162688][ T1472] total_swap 2265088 [ 316.166645][ T1472] total_swapcached 32768 [ 316.170903][ T1472] total_pgpgin 232497 [ 316.175014][ T1472] total_pgpgout 231554 [ 316.179097][ T1472] total_pgfault 262866 [ 316.183275][ T1472] total_pgmajfault 533 [ 316.187420][ T1472] total_inactive_anon 1716224 [ 316.192117][ T1472] total_active_anon 2007040 [ 316.196712][ T1472] total_inactive_file 0 [ 316.200930][ T1472] total_active_file 49152 [ 316.205322][ T1472] total_unevictable 0 [ 316.209328][ T1472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3337,pid=13884,uid=0 [ 316.224113][ T1472] Memory cgroup out of memory: Killed process 13884 (syz.3.3337) total-vm:98128kB, anon-rss:1072kB, file-rss:26536kB, shmem-rss:1152kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 316.308052][T13932] loop0: detected capacity change from 0 to 164 [ 316.342784][T13932] syz.0.3352: attempt to access beyond end of device [ 316.342784][T13932] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 316.364102][T13932] syz.0.3352: attempt to access beyond end of device [ 316.364102][T13932] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 316.435178][T13938] SET target dimension over the limit! [ 316.493076][T13938] SELinux: syz.0.3354 (13938) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 316.593833][T13948] loop0: detected capacity change from 0 to 764 [ 316.612058][T13948] rock: directory entry would overflow storage [ 316.618274][T13948] rock: sig=0x4f50, size=4, remaining=3 [ 316.624044][T13948] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 316.629196][T13949] $H: renamed from bond0 (while UP) [ 316.649070][T13949] $H: entered promiscuous mode [ 316.654254][T13949] bond_slave_0: entered promiscuous mode [ 316.666853][T13951] netlink: 'syz.6.3360': attribute type 21 has an invalid length. [ 316.674872][T13951] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3360'. [ 316.684234][T13951] netlink: 'syz.6.3360': attribute type 2 has an invalid length. [ 316.776598][T13960] loop6: detected capacity change from 0 to 2048 [ 316.822134][T13960] Alternate GPT is invalid, using primary GPT. [ 316.828476][T13960] loop6: p1 p2 p3 [ 316.888074][T13966] Cannot find del_set index 0 as target [ 316.897954][T13966] IPv6: sit2: Disabled Multicast RS [ 317.023237][T13973] loop0: detected capacity change from 0 to 764 [ 317.042681][T13973] rock: directory entry would overflow storage [ 317.049069][T13973] rock: sig=0x4f50, size=4, remaining=3 [ 317.054785][T13973] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 317.121824][T13980] netlink: 'syz.2.3372': attribute type 10 has an invalid length. [ 317.127192][T13982] FAULT_INJECTION: forcing a failure. [ 317.127192][T13982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.129888][T13980] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3372'. [ 317.142803][T13982] CPU: 1 UID: 0 PID: 13982 Comm: syz.5.3370 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 317.142846][T13982] Tainted: [W]=WARN [ 317.142856][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.142873][T13982] Call Trace: [ 317.142924][T13982] [ 317.142935][T13982] __dump_stack+0x1d/0x30 [ 317.142965][T13982] dump_stack_lvl+0xe8/0x140 [ 317.142995][T13982] dump_stack+0x15/0x1b [ 317.143017][T13982] should_fail_ex+0x265/0x280 [ 317.143092][T13982] should_fail+0xb/0x20 [ 317.143184][T13982] should_fail_usercopy+0x1a/0x20 [ 317.143228][T13982] _copy_from_user+0x1c/0xb0 [ 317.143256][T13982] do_ipv6_setsockopt+0x220/0x22e0 [ 317.143366][T13982] ? _parse_integer+0x27/0x40 [ 317.143402][T13982] ? kstrtoull+0x111/0x140 [ 317.143504][T13982] ? __rcu_read_unlock+0x4f/0x70 [ 317.143534][T13982] ? avc_has_perm_noaudit+0x1b1/0x200 [ 317.143576][T13982] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 317.143655][T13982] ipv6_setsockopt+0x59/0x130 [ 317.143688][T13982] rawv6_setsockopt+0x1d2/0x420 [ 317.143718][T13982] sock_common_setsockopt+0x69/0x80 [ 317.143747][T13982] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 317.143799][T13982] __sys_setsockopt+0x184/0x200 [ 317.143844][T13982] __x64_sys_setsockopt+0x64/0x80 [ 317.143888][T13982] x64_sys_call+0x2bd5/0x2fb0 [ 317.143986][T13982] do_syscall_64+0xd2/0x200 [ 317.144085][T13982] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.144122][T13982] ? clear_bhb_loop+0x40/0x90 [ 317.144151][T13982] ? clear_bhb_loop+0x40/0x90 [ 317.144181][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.144264][T13982] RIP: 0033:0x7f9f093fe9a9 [ 317.144287][T13982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.144342][T13982] RSP: 002b:00007f9f07a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.144404][T13982] RAX: ffffffffffffffda RBX: 00007f9f09625fa0 RCX: 00007f9f093fe9a9 [ 317.144422][T13982] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000003 [ 317.144439][T13982] RBP: 00007f9f07a67090 R08: 0000000000000004 R09: 0000000000000000 [ 317.144497][T13982] R10: 0000200000fcb000 R11: 0000000000000246 R12: 0000000000000001 [ 317.144514][T13982] R13: 0000000000000000 R14: 00007f9f09625fa0 R15: 00007ffe062012d8 [ 317.144542][T13982] [ 317.517118][T13990] loop3: detected capacity change from 0 to 1024 [ 317.538184][T13990] EXT4-fs mount: 84 callbacks suppressed [ 317.538205][T13990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.566122][T13993] loop5: detected capacity change from 0 to 2048 [ 317.578102][T13990] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 317.590584][T13990] EXT4-fs (loop3): This should not happen!! Data will be lost [ 317.590584][T13990] [ 317.600372][T13990] EXT4-fs (loop3): Total free blocks count 0 [ 317.606463][T13990] EXT4-fs (loop3): Free/Dirty block details [ 317.612451][T13990] EXT4-fs (loop3): free_blocks=0 [ 317.617417][T13990] EXT4-fs (loop3): dirty_blocks=0 [ 317.622573][T13990] EXT4-fs (loop3): Block reservation details [ 317.628649][T13990] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 317.650903][T13993] Alternate GPT is invalid, using primary GPT. [ 317.657243][T13993] loop5: p1 p2 p3 [ 317.662978][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.746025][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 317.746041][ T29] audit: type=1326 audit(2000001282.011:152782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 317.810532][T14006] FAULT_INJECTION: forcing a failure. [ 317.810532][T14006] name failslab, interval 1, probability 0, space 0, times 0 [ 317.823260][T14006] CPU: 0 UID: 0 PID: 14006 Comm: syz.5.3379 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 317.823298][T14006] Tainted: [W]=WARN [ 317.823314][T14006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.823329][T14006] Call Trace: [ 317.823337][T14006] [ 317.823344][T14006] __dump_stack+0x1d/0x30 [ 317.823379][T14006] dump_stack_lvl+0xe8/0x140 [ 317.823398][T14006] dump_stack+0x15/0x1b [ 317.823417][T14006] should_fail_ex+0x265/0x280 [ 317.823448][T14006] should_failslab+0x8c/0xb0 [ 317.823476][T14006] kmem_cache_alloc_node_noprof+0x57/0x320 [ 317.823508][T14006] ? __alloc_skb+0x101/0x320 [ 317.823586][T14006] __alloc_skb+0x101/0x320 [ 317.823618][T14006] ? audit_log_start+0x365/0x6c0 [ 317.823754][T14006] audit_log_start+0x380/0x6c0 [ 317.823796][T14006] audit_seccomp+0x48/0x100 [ 317.823853][T14006] ? __seccomp_filter+0x68c/0x10d0 [ 317.823880][T14006] __seccomp_filter+0x69d/0x10d0 [ 317.823906][T14006] ? rep_movs_alternative+0x1e/0x90 [ 317.823933][T14006] ? _copy_from_user+0x3b/0xb0 [ 317.824016][T14006] __secure_computing+0x82/0x150 [ 317.824114][T14006] syscall_trace_enter+0xcf/0x1e0 [ 317.824142][T14006] do_syscall_64+0xac/0x200 [ 317.824164][T14006] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.824204][T14006] ? clear_bhb_loop+0x40/0x90 [ 317.824231][T14006] ? clear_bhb_loop+0x40/0x90 [ 317.824257][T14006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.824293][T14006] RIP: 0033:0x7f9f093fd3bc [ 317.824362][T14006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 317.824385][T14006] RSP: 002b:00007f9f07a67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 317.824408][T14006] RAX: ffffffffffffffda RBX: 00007f9f09625fa0 RCX: 00007f9f093fd3bc [ 317.824424][T14006] RDX: 000000000000000f RSI: 00007f9f07a670a0 RDI: 0000000000000006 [ 317.824440][T14006] RBP: 00007f9f07a67090 R08: 0000000000000000 R09: 0000000000000000 [ 317.824456][T14006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.824471][T14006] R13: 0000000000000000 R14: 00007f9f09625fa0 R15: 00007ffe062012d8 [ 317.824521][T14006] [ 317.824539][T14006] audit: audit_lost=17298 audit_rate_limit=0 audit_backlog_limit=64 [ 317.935577][ T29] audit: type=1326 audit(2000001282.011:152783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 317.936367][T14006] audit: out of memory in audit_log_start [ 317.941474][ T29] audit: type=1326 audit(2000001282.011:152784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 318.105436][ T29] audit: type=1326 audit(2000001282.011:152785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 318.105473][ T29] audit: type=1326 audit(2000001282.011:152786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 318.105507][ T29] audit: type=1326 audit(2000001282.011:152787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 318.105542][ T29] audit: type=1326 audit(2000001282.043:152788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 318.105575][ T29] audit: type=1326 audit(2000001282.043:152789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14001 comm="syz.5.3378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f093fe9a9 code=0x7ffc0000 [ 318.267165][T14018] loop0: detected capacity change from 0 to 128 [ 318.306765][T14024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3385'. [ 318.338965][T14024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3385'. [ 318.410433][T14034] loop2: detected capacity change from 0 to 1024 [ 318.428200][T14035] loop5: detected capacity change from 0 to 512 [ 318.440665][T14034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.454302][T14035] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 318.474237][T14039] loop3: detected capacity change from 0 to 512 [ 318.487963][T14039] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 318.489676][T14035] EXT4-fs (loop5): 1 truncate cleaned up [ 318.504871][T14035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.510325][T14034] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 318.524169][T14039] EXT4-fs (loop3): 1 truncate cleaned up [ 318.529315][T14034] EXT4-fs (loop2): This should not happen!! Data will be lost [ 318.529315][T14034] [ 318.529332][T14034] EXT4-fs (loop2): Total free blocks count 0 [ 318.535607][T14039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.544763][T14034] EXT4-fs (loop2): Free/Dirty block details [ 318.568921][T14034] EXT4-fs (loop2): free_blocks=0 [ 318.573925][T14034] EXT4-fs (loop2): dirty_blocks=0 [ 318.579007][T14034] EXT4-fs (loop2): Block reservation details [ 318.585043][T14034] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 318.606861][ T4058] kworker/u8:20: attempt to access beyond end of device [ 318.606861][ T4058] loop0: rw=1, sector=137, nr_sectors = 8 limit=128 [ 318.623173][T12524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.633259][ T4058] kworker/u8:20: attempt to access beyond end of device [ 318.633259][ T4058] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 318.648434][ T4058] kworker/u8:20: attempt to access beyond end of device [ 318.648434][ T4058] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 318.662169][ T4058] kworker/u8:20: attempt to access beyond end of device [ 318.662169][ T4058] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 318.680540][T14045] 9pnet_fd: Insufficient options for proto=fd [ 318.699025][T14045] loop2: detected capacity change from 0 to 512 [ 318.705751][T14045] EXT4-fs: Ignoring removed nobh option [ 318.720905][T14045] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3390: corrupted inode contents [ 318.739174][T14045] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3390: mark_inode_dirty error [ 318.751550][T14045] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3390: corrupted inode contents [ 318.763652][T14045] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3390: mark_inode_dirty error [ 318.776416][T14045] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3390: Failed to acquire dquot type 0 [ 318.788346][T14045] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3390: corrupted inode contents [ 318.801482][T14045] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3390: mark_inode_dirty error [ 318.813488][T14045] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3390: corrupted inode contents [ 318.813681][T14047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3389'. [ 318.825744][T14045] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3390: mark_inode_dirty error [ 318.849206][T14045] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3390: corrupted inode contents [ 318.862271][T14045] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 318.871168][T14045] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3390: corrupted inode contents [ 318.884675][T14045] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3390: mark_inode_dirty error [ 318.896122][T14045] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 318.906534][T14045] EXT4-fs (loop2): 1 truncate cleaned up [ 318.912631][T14045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.926279][T14045] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.939625][T14045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.954792][T14055] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14055 comm=syz.6.3392 [ 318.989016][T14056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14056 comm=syz.0.3391 [ 319.026209][T14059] loop6: detected capacity change from 0 to 128 [ 319.146755][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.168151][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.246975][T14073] loop5: detected capacity change from 0 to 512 [ 319.255887][T14073] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3398: corrupted in-inode xattr: invalid ea_ino [ 319.270645][T14073] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3398: couldn't read orphan inode 15 (err -117) [ 319.284838][T14073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.312736][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.371598][T14079] lo speed is unknown, defaulting to 1000 [ 319.384230][T14071] loop3: detected capacity change from 0 to 256 [ 319.410155][T14071] FAT-fs (loop3): Directory bread(block 64) failed [ 319.426959][T14071] FAT-fs (loop3): Directory bread(block 65) failed [ 319.440745][T14071] FAT-fs (loop3): Directory bread(block 66) failed [ 319.456179][T14071] FAT-fs (loop3): Directory bread(block 67) failed [ 319.474731][T14071] FAT-fs (loop3): Directory bread(block 68) failed [ 319.489776][T14071] FAT-fs (loop3): Directory bread(block 69) failed [ 319.503116][T14071] FAT-fs (loop3): Directory bread(block 70) failed [ 319.518092][T14071] FAT-fs (loop3): Directory bread(block 71) failed [ 319.531326][T14071] FAT-fs (loop3): Directory bread(block 72) failed [ 319.544557][T14071] FAT-fs (loop3): Directory bread(block 73) failed [ 319.602941][T14079] loop2: detected capacity change from 0 to 512 [ 319.611220][T14079] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 319.648302][T14079] loop2: detected capacity change from 0 to 512 [ 319.699677][T14079] EXT4-fs error (device loop2): __ext4_iget:5379: inode #4: block 193290: comm syz.2.3400: invalid block [ 319.732233][T14079] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.3400: Bad quota inode: 4, type: 1 [ 319.772381][T14079] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.790520][T14079] EXT4-fs (loop2): mount failed [ 319.795684][ T4058] bio_check_eod: 110 callbacks suppressed [ 319.795701][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.795701][ T4058] loop6: rw=1, sector=129, nr_sectors = 8 limit=128 [ 319.829070][T14079] SELinux: ebitmap: map size 16777365 does not match my size 64 (high bit was 131080) [ 319.830048][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.830048][ T4058] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 319.856366][T14079] SELinux: failed to load policy [ 319.862273][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.862273][ T4058] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 319.876476][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.876476][ T4058] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 319.890534][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.890534][ T4058] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 319.904175][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.904175][ T4058] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 319.917982][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.917982][ T4058] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 319.931948][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.931948][ T4058] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 319.945720][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.945720][ T4058] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 319.959568][ T4058] kworker/u8:20: attempt to access beyond end of device [ 319.959568][ T4058] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 320.019565][T14104] loop6: detected capacity change from 0 to 764 [ 320.035108][T14104] rock: directory entry would overflow storage [ 320.041444][T14104] rock: sig=0x4f50, size=4, remaining=3 [ 320.047036][T14104] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 320.149898][T14119] loop5: detected capacity change from 0 to 164 [ 320.191004][T14123] netlink: 'syz.6.3414': attribute type 10 has an invalid length. [ 320.204919][T14123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.213091][T14123] batadv0: entered promiscuous mode [ 320.218631][T14123] $H: (slave batadv0): Enslaving as an active interface with an up link [ 320.235080][T14123] loop6: detected capacity change from 0 to 1024 [ 320.241969][T14123] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 320.254587][T14125] 9pnet_fd: Insufficient options for proto=fd [ 320.264346][T14125] loop0: detected capacity change from 0 to 512 [ 320.272036][T14125] EXT4-fs: Ignoring removed nobh option [ 320.280275][T14125] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3415: corrupted inode contents [ 320.293587][T14125] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3415: mark_inode_dirty error [ 320.305444][T14125] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3415: corrupted inode contents [ 320.319833][T14125] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3415: mark_inode_dirty error [ 320.331793][T14125] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3415: Failed to acquire dquot type 0 [ 320.344457][T14125] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3415: corrupted inode contents [ 320.366454][T14125] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3415: mark_inode_dirty error [ 320.381878][T14125] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3415: corrupted inode contents [ 320.394995][T14125] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3415: mark_inode_dirty error [ 320.400033][T14133] loop6: detected capacity change from 0 to 8192 [ 320.406466][T14125] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3415: corrupted inode contents [ 320.426046][T14125] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 320.435543][T14125] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3415: corrupted inode contents [ 320.454783][T14135] loop2: detected capacity change from 0 to 764 [ 320.464074][T14125] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3415: mark_inode_dirty error [ 320.480234][T14125] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 320.491064][T14125] EXT4-fs (loop0): 1 truncate cleaned up [ 320.510843][T14125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.525470][T14135] rock: directory entry would overflow storage [ 320.531689][T14135] rock: sig=0x4f50, size=4, remaining=3 [ 320.537300][T14135] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 320.552650][T14125] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.577155][T14125] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.828185][T14149] loop0: detected capacity change from 0 to 1024 [ 320.843190][T14149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.873634][T14149] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 320.886049][T14149] EXT4-fs (loop0): This should not happen!! Data will be lost [ 320.886049][T14149] [ 320.895766][T14149] EXT4-fs (loop0): Total free blocks count 0 [ 320.901867][T14149] EXT4-fs (loop0): Free/Dirty block details [ 320.907815][T14149] EXT4-fs (loop0): free_blocks=0 [ 320.912836][T14149] EXT4-fs (loop0): dirty_blocks=0 [ 320.917939][T14149] EXT4-fs (loop0): Block reservation details [ 320.923945][T14149] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 320.946907][T14154] loop2: detected capacity change from 0 to 2048 [ 320.956516][T11033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.992819][T14154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.028395][T14162] loop0: detected capacity change from 0 to 2048 [ 321.070371][T14162] Alternate GPT is invalid, using primary GPT. [ 321.076980][T14162] loop0: p1 p2 p3 [ 321.199053][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 321.213258][T12524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.230372][T14173] loop0: detected capacity change from 0 to 512 [ 321.244904][T14173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.259200][T14173] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.272185][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 321.360317][T14182] loop2: detected capacity change from 0 to 512 [ 321.371720][T14182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 321.383838][T14182] EXT4-fs (loop2): 1 truncate cleaned up [ 321.384183][T11033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.391707][T14182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.439548][T14187] loop0: detected capacity change from 0 to 164 [ 321.564861][T14199] support for cryptoloop has been removed. Use dm-crypt instead. [ 321.575288][T14210] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3435'. [ 321.670393][T14219] loop3: detected capacity change from 0 to 512 [ 321.678879][T14219] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3448: corrupted in-inode xattr: invalid ea_ino [ 321.692703][T14219] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3448: couldn't read orphan inode 15 (err -117) [ 321.705449][T14219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.729958][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.825231][T14234] netlink: '+}[@': attribute type 1 has an invalid length. [ 321.841732][T14234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.859386][T14234] bond0 (unregistering): Released all slaves [ 321.859889][T14239] 9pnet_fd: Insufficient options for proto=fd [ 321.873641][T14236] xt_TPROXY: Can be used only with -p tcp or -p udp [ 321.878927][T14239] loop5: detected capacity change from 0 to 512 [ 321.886819][T14239] EXT4-fs: Ignoring removed nobh option [ 321.910689][T14239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3455: corrupted inode contents [ 321.922728][T14242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.931448][T14242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.940890][T14239] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.3455: mark_inode_dirty error [ 321.955132][T14239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3455: corrupted inode contents [ 321.968183][T14239] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3455: mark_inode_dirty error [ 321.980153][T14239] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3455: Failed to acquire dquot type 0 [ 321.992549][T14239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3455: corrupted inode contents [ 322.006162][T14246] tipc: Started in network mode [ 322.006166][T14239] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3455: mark_inode_dirty error [ 322.006375][T14239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3455: corrupted inode contents [ 322.011120][T14246] tipc: Node identity 4, cluster identity 4711 [ 322.011134][T14246] tipc: Node number set to 4 [ 322.024550][T14239] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3455: mark_inode_dirty error [ 322.058803][T14239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3455: corrupted inode contents [ 322.072656][T14239] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 322.081829][T14239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3455: corrupted inode contents [ 322.084077][T12524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.094885][T14239] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3455: mark_inode_dirty error [ 322.123813][T14239] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 322.134306][T14239] EXT4-fs (loop5): 1 truncate cleaned up [ 322.140816][T14239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.154310][T14239] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.176136][T14239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.208769][T14252] loop3: detected capacity change from 0 to 1024 [ 322.250984][T14252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.254116][T14257] loop5: detected capacity change from 0 to 512 [ 322.290661][T14257] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3461: corrupted in-inode xattr: invalid ea_ino [ 322.291306][T14252] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 322.316406][T14252] EXT4-fs (loop3): This should not happen!! Data will be lost [ 322.316406][T14252] [ 322.326112][T14252] EXT4-fs (loop3): Total free blocks count 0 [ 322.332199][T14252] EXT4-fs (loop3): Free/Dirty block details [ 322.338203][T14252] EXT4-fs (loop3): free_blocks=0 [ 322.343219][T14252] EXT4-fs (loop3): dirty_blocks=0 [ 322.348388][T14252] EXT4-fs (loop3): Block reservation details [ 322.354397][T14252] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 322.361046][T14257] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3461: couldn't read orphan inode 15 (err -117) [ 322.364607][T14260] loop2: detected capacity change from 0 to 128 [ 322.380485][T14253] loop9: detected capacity change from 0 to 7 [ 322.389284][T14253] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.398553][T14253] Buffer I/O error on dev loop9, logical block 0, async page read [ 322.406577][T14253] loop9: unable to read partition table [ 322.412925][T14257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.432329][T14253] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 322.432329][T14253] ) failed (rc=-5) [ 322.471219][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.481773][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.522612][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 322.522631][ T29] audit: type=1326 audit(2000001287.029:153063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb5e055967 code=0x7ffc0000 [ 322.599899][ T29] audit: type=1326 audit(2000001287.029:153064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb5dffab89 code=0x7ffc0000 [ 322.623732][ T29] audit: type=1326 audit(2000001287.029:153065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7feb5e05e9a9 code=0x7ffc0000 [ 322.647630][ T29] audit: type=1326 audit(2000001287.040:153066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb5e055967 code=0x7ffc0000 [ 322.671306][ T29] audit: type=1326 audit(2000001287.040:153067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb5dffab89 code=0x7ffc0000 [ 322.695011][ T29] audit: type=1326 audit(2000001287.040:153068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7feb5e05e9a9 code=0x7ffc0000 [ 322.703742][T14273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.718886][ T29] audit: type=1326 audit(2000001287.040:153069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb5e055967 code=0x7ffc0000 [ 322.749024][ T29] audit: type=1326 audit(2000001287.040:153070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb5dffab89 code=0x7ffc0000 [ 322.772737][ T29] audit: type=1326 audit(2000001287.040:153071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7feb5e05e9a9 code=0x7ffc0000 [ 322.796440][ T29] audit: type=1326 audit(2000001287.040:153072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14262 comm="syz.2.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb5e055967 code=0x7ffc0000 [ 322.872235][T14280] loop5: detected capacity change from 0 to 128 [ 323.045259][T14285] loop3: detected capacity change from 0 to 2048 [ 323.099153][T14285] Alternate GPT is invalid, using primary GPT. [ 323.105479][T14285] loop3: p1 p2 p3 [ 323.349927][T14295] loop3: detected capacity change from 0 to 2048 [ 323.403918][T14298] loop0: detected capacity change from 0 to 1024 [ 323.417131][T14295] Alternate GPT is invalid, using primary GPT. [ 323.423534][T14295] loop3: p1 p2 p3 [ 323.434566][T14298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.439798][T14293] lo speed is unknown, defaulting to 1000 [ 323.456639][T14302] loop2: detected capacity change from 0 to 164 [ 323.481268][T14298] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 323.493776][T14298] EXT4-fs (loop0): This should not happen!! Data will be lost [ 323.493776][T14298] [ 323.503446][T14298] EXT4-fs (loop0): Total free blocks count 0 [ 323.509466][T14298] EXT4-fs (loop0): Free/Dirty block details [ 323.515384][T14298] EXT4-fs (loop0): free_blocks=0 [ 323.520437][T14298] EXT4-fs (loop0): dirty_blocks=0 [ 323.525509][T14298] EXT4-fs (loop0): Block reservation details [ 323.531654][T14298] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 323.629607][T14306] loop2: detected capacity change from 0 to 2048 [ 323.634969][T11033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.678226][T14311] netlink: 'syz.0.3479': attribute type 39 has an invalid length. [ 323.698843][T14306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.754780][T12524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.822661][T14324] support for cryptoloop has been removed. Use dm-crypt instead. [ 323.833022][T14318] xt_TPROXY: Can be used only with -p tcp or -p udp [ 323.848508][T14323] xt_TPROXY: Can be used only with -p tcp or -p udp [ 323.884456][T14331] loop2: detected capacity change from 0 to 2048 [ 323.894931][T14333] loop3: detected capacity change from 0 to 764 [ 323.912512][T14333] rock: directory entry would overflow storage [ 323.918889][T14333] rock: sig=0x4f50, size=4, remaining=3 [ 323.924479][T14333] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 323.941913][T14331] Alternate GPT is invalid, using primary GPT. [ 323.948261][T14331] loop2: p1 p2 p3 [ 323.954248][T14335] loop6: detected capacity change from 0 to 2048 [ 323.985186][T14335] Alternate GPT is invalid, using primary GPT. [ 323.991484][T14335] loop6: p1 p2 p3 [ 324.087305][T14343] loop3: detected capacity change from 0 to 512 [ 324.115756][T14343] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3493: corrupted in-inode xattr: invalid ea_ino [ 324.130705][T14343] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3493: couldn't read orphan inode 15 (err -117) [ 324.143314][T14343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.167911][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.181997][T14351] $H: renamed from bond0 (while UP) [ 324.193269][T14351] $H: entered promiscuous mode [ 324.268607][T14355] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.291297][T14358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3498'. [ 324.302883][T14358] loop3: detected capacity change from 0 to 512 [ 324.310864][T14358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.376215][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.393392][T14361] FAULT_INJECTION: forcing a failure. [ 324.393392][T14361] name failslab, interval 1, probability 0, space 0, times 0 [ 324.406155][T14361] CPU: 1 UID: 0 PID: 14361 Comm: syz.3.3499 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 324.406197][T14361] Tainted: [W]=WARN [ 324.406204][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.406221][T14361] Call Trace: [ 324.406227][T14361] [ 324.406236][T14361] __dump_stack+0x1d/0x30 [ 324.406256][T14361] dump_stack_lvl+0xe8/0x140 [ 324.406274][T14361] dump_stack+0x15/0x1b [ 324.406295][T14361] should_fail_ex+0x265/0x280 [ 324.406332][T14361] should_failslab+0x8c/0xb0 [ 324.406390][T14361] kmem_cache_alloc_noprof+0x50/0x310 [ 324.406416][T14361] ? audit_log_start+0x365/0x6c0 [ 324.406516][T14361] audit_log_start+0x365/0x6c0 [ 324.406629][T14361] ? timerqueue_add+0x14e/0x180 [ 324.406661][T14361] audit_seccomp+0x48/0x100 [ 324.406686][T14361] ? __seccomp_filter+0x68c/0x10d0 [ 324.406790][T14361] __seccomp_filter+0x69d/0x10d0 [ 324.406818][T14361] ? fput+0x8f/0xc0 [ 324.406839][T14361] ? do_timerfd_settime+0xa43/0xa70 [ 324.406878][T14361] __secure_computing+0x82/0x150 [ 324.406914][T14361] syscall_trace_enter+0xcf/0x1e0 [ 324.406938][T14361] do_syscall_64+0xac/0x200 [ 324.406955][T14361] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.406979][T14361] ? clear_bhb_loop+0x40/0x90 [ 324.407056][T14361] ? clear_bhb_loop+0x40/0x90 [ 324.407103][T14361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.407130][T14361] RIP: 0033:0x7f0fb869d3bc [ 324.407183][T14361] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 324.407203][T14361] RSP: 002b:00007f0fb6cff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.407221][T14361] RAX: ffffffffffffffda RBX: 00007f0fb88c5fa0 RCX: 00007f0fb869d3bc [ 324.407234][T14361] RDX: 000000000000000f RSI: 00007f0fb6cff0a0 RDI: 0000000000000004 [ 324.407314][T14361] RBP: 00007f0fb6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 324.407330][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.407370][T14361] R13: 0000000000000000 R14: 00007f0fb88c5fa0 R15: 00007ffe659bb8e8 [ 324.407388][T14361] [ 324.702973][T14371] loop3: detected capacity change from 0 to 2048 [ 324.724345][T14375] loop5: detected capacity change from 0 to 512 [ 324.733114][T14375] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3506: corrupted in-inode xattr: invalid ea_ino [ 324.747507][T14371] Alternate GPT is invalid, using primary GPT. [ 324.753790][T14371] loop3: p1 p2 p3 [ 324.754014][T14378] loop0: detected capacity change from 0 to 512 [ 324.758686][T14375] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3506: couldn't read orphan inode 15 (err -117) [ 324.777774][T14378] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.3507: corrupted in-inode xattr: invalid ea_ino [ 324.778554][T14375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.792930][T14378] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3507: couldn't read orphan inode 15 (err -117) [ 324.816706][T14378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.845320][T11033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.867659][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.923070][T14391] FAULT_INJECTION: forcing a failure. [ 324.923070][T14391] name failslab, interval 1, probability 0, space 0, times 0 [ 324.935850][T14391] CPU: 0 UID: 0 PID: 14391 Comm: syz.0.3513 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 324.935888][T14391] Tainted: [W]=WARN [ 324.935895][T14391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.935908][T14391] Call Trace: [ 324.935916][T14391] [ 324.935947][T14391] __dump_stack+0x1d/0x30 [ 324.936046][T14391] dump_stack_lvl+0xe8/0x140 [ 324.936066][T14391] dump_stack+0x15/0x1b [ 324.936083][T14391] should_fail_ex+0x265/0x280 [ 324.936114][T14391] ? security_load_policy+0x66/0x890 [ 324.936173][T14391] should_failslab+0x8c/0xb0 [ 324.936268][T14391] __kmalloc_cache_noprof+0x4c/0x320 [ 324.936366][T14391] security_load_policy+0x66/0x890 [ 324.936394][T14391] ? should_fail_ex+0xdb/0x280 [ 324.936470][T14391] sel_write_load+0x1d4/0x380 [ 324.936498][T14391] ? __pfx_sel_write_load+0x10/0x10 [ 324.936523][T14391] vfs_write+0x266/0x8e0 [ 324.936659][T14391] ? __rcu_read_unlock+0x4f/0x70 [ 324.936743][T14391] ? __fget_files+0x184/0x1c0 [ 324.936765][T14391] ksys_write+0xda/0x1a0 [ 324.936808][T14391] __x64_sys_write+0x40/0x50 [ 324.936907][T14391] x64_sys_call+0x2cdd/0x2fb0 [ 324.936930][T14391] do_syscall_64+0xd2/0x200 [ 324.936949][T14391] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.936986][T14391] ? clear_bhb_loop+0x40/0x90 [ 324.937008][T14391] ? clear_bhb_loop+0x40/0x90 [ 324.937029][T14391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.937051][T14391] RIP: 0033:0x7f998aa6e9a9 [ 324.937067][T14391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.937165][T14391] RSP: 002b:00007f99890cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 324.937184][T14391] RAX: ffffffffffffffda RBX: 00007f998ac95fa0 RCX: 00007f998aa6e9a9 [ 324.937234][T14391] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000003 [ 324.937290][T14391] RBP: 00007f99890cf090 R08: 0000000000000000 R09: 0000000000000000 [ 324.937302][T14391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.937405][T14391] R13: 0000000000000000 R14: 00007f998ac95fa0 R15: 00007ffc2cc6e988 [ 324.937503][T14391] [ 325.152937][T14391] SELinux: failed to load policy [ 325.159622][T14395] loop3: detected capacity change from 0 to 128 [ 325.168327][T14395] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 325.173685][T14394] netlink: 'syz.6.3514': attribute type 29 has an invalid length. [ 325.176262][T14395] FAT-fs (loop3): Filesystem has been set read-only [ 325.184101][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3514'. [ 325.190735][T14395] bio_check_eod: 224 callbacks suppressed [ 325.190751][T14395] syz.3.3508: attempt to access beyond end of device [ 325.190751][T14395] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 325.219231][T14395] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 325.227145][T14395] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 325.236432][T14395] syz.3.3508: attempt to access beyond end of device [ 325.236432][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.250030][T14395] syz.3.3508: attempt to access beyond end of device [ 325.250030][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.263421][T14395] syz.3.3508: attempt to access beyond end of device [ 325.263421][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.276740][T14395] syz.3.3508: attempt to access beyond end of device [ 325.276740][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.290228][T14395] syz.3.3508: attempt to access beyond end of device [ 325.290228][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.303789][T14395] syz.3.3508: attempt to access beyond end of device [ 325.303789][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.317507][T14395] syz.3.3508: attempt to access beyond end of device [ 325.317507][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.331008][T14395] syz.3.3508: attempt to access beyond end of device [ 325.331008][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.344414][T14395] syz.3.3508: attempt to access beyond end of device [ 325.344414][T14395] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 325.407493][T14394] loop6: detected capacity change from 0 to 8192 [ 325.423169][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3514'. [ 325.608110][T14412] loop5: detected capacity change from 0 to 2048 [ 325.645220][T14412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.713635][T14412] loop9: detected capacity change from 0 to 7 [ 325.730470][T14412] Buffer I/O error on dev loop9, logical block 0, async page read [ 325.761572][T14412] Buffer I/O error on dev loop9, logical block 0, async page read [ 325.769542][T14412] loop9: unable to read partition table [ 325.808915][T14412] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 325.808915][T14412] ) failed (rc=-5) [ 325.863818][T14417] loop0: detected capacity change from 0 to 1024 [ 325.893459][T14417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.962904][T11033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.303355][T14423] lo speed is unknown, defaulting to 1000 [ 326.314878][T14430] loop3: detected capacity change from 0 to 764 [ 326.331469][T14430] rock: directory entry would overflow storage [ 326.337807][T14430] rock: sig=0x4f50, size=4, remaining=3 [ 326.343404][T14430] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 326.358022][T14424] loop0: detected capacity change from 0 to 512 [ 326.377720][T14424] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 326.439101][T14435] loop3: detected capacity change from 0 to 2048 [ 326.445491][T14437] loop2: detected capacity change from 0 to 2048 [ 326.459794][T14423] loop0: detected capacity change from 0 to 512 [ 326.476134][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.487597][T14423] EXT4-fs error (device loop0): __ext4_iget:5379: inode #4: block 193290: comm syz.0.3522: invalid block [ 326.499249][T14423] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.3522: Bad quota inode: 4, type: 1 [ 326.511230][T14443] loop6: detected capacity change from 0 to 2048 [ 326.512877][T14435] Alternate GPT is invalid, using primary GPT. [ 326.518077][T14423] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.524012][T14435] loop3: p1 p2 p3 [ 326.541097][T14423] EXT4-fs (loop0): mount failed [ 326.544524][T14437] Alternate GPT is invalid, using primary GPT. [ 326.553613][T14437] loop2: p1 p2 p3 [ 326.557445][T14443] Alternate GPT is invalid, using primary GPT. [ 326.563759][T14443] loop6: p1 p2 p3 [ 326.588237][T14423] SELinux: ebitmap: map size 16777365 does not match my size 64 (high bit was 131080) [ 326.604044][T14423] SELinux: failed to load policy [ 326.645017][T14454] FAULT_INJECTION: forcing a failure. [ 326.645017][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.658341][T14454] CPU: 0 UID: 0 PID: 14454 Comm: syz.2.3535 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 326.658384][T14454] Tainted: [W]=WARN [ 326.658391][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.658405][T14454] Call Trace: [ 326.658412][T14454] [ 326.658422][T14454] __dump_stack+0x1d/0x30 [ 326.658449][T14454] dump_stack_lvl+0xe8/0x140 [ 326.658521][T14454] dump_stack+0x15/0x1b [ 326.658615][T14454] should_fail_ex+0x265/0x280 [ 326.658648][T14454] should_fail+0xb/0x20 [ 326.658682][T14454] should_fail_usercopy+0x1a/0x20 [ 326.658778][T14454] _copy_from_user+0x1c/0xb0 [ 326.658804][T14454] __sys_bpf+0x178/0x790 [ 326.658893][T14454] __x64_sys_bpf+0x41/0x50 [ 326.658992][T14454] x64_sys_call+0x2478/0x2fb0 [ 326.659019][T14454] do_syscall_64+0xd2/0x200 [ 326.659061][T14454] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.659094][T14454] ? clear_bhb_loop+0x40/0x90 [ 326.659118][T14454] ? clear_bhb_loop+0x40/0x90 [ 326.659163][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.659190][T14454] RIP: 0033:0x7feb5e05e9a9 [ 326.659209][T14454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.659233][T14454] RSP: 002b:00007feb5c6bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.659269][T14454] RAX: ffffffffffffffda RBX: 00007feb5e285fa0 RCX: 00007feb5e05e9a9 [ 326.659326][T14454] RDX: 0000000000000020 RSI: 0000200000000540 RDI: 0000000000000009 [ 326.659343][T14454] RBP: 00007feb5c6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 326.659355][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.659371][T14454] R13: 0000000000000001 R14: 00007feb5e285fa0 R15: 00007fffe9f47fe8 [ 326.659420][T14454] [ 326.880139][T14461] 9pnet_fd: Insufficient options for proto=fd [ 326.894753][T14463] loop2: detected capacity change from 0 to 764 [ 326.900710][T14465] sd 0:0:1:0: device reset [ 326.905727][T14461] loop6: detected capacity change from 0 to 512 [ 326.912365][T14461] EXT4-fs: Ignoring removed nobh option [ 326.920674][T14463] rock: directory entry would overflow storage [ 326.926957][T14463] rock: sig=0x4f50, size=4, remaining=3 [ 326.932593][T14463] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 326.943221][T14461] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3537: corrupted inode contents [ 326.964456][T14461] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.3537: mark_inode_dirty error [ 326.977582][T14461] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3537: corrupted inode contents [ 326.993222][T14461] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3537: mark_inode_dirty error [ 327.004963][T14461] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3537: Failed to acquire dquot type 0 [ 327.017876][T14461] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3537: corrupted inode contents [ 327.030232][T14461] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.3537: mark_inode_dirty error [ 327.030785][T14465] lo speed is unknown, defaulting to 1000 [ 327.043554][T14461] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3537: corrupted inode contents [ 327.059773][T14461] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3537: mark_inode_dirty error [ 327.074042][T14461] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3537: corrupted inode contents [ 327.087033][T14461] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 327.096524][T14461] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3537: corrupted inode contents [ 327.116152][T14461] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.3537: mark_inode_dirty error [ 327.128657][T14461] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 327.138241][T14461] EXT4-fs (loop6): 1 truncate cleaned up [ 327.144552][T14461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.161311][T14461] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.175406][T14461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.177401][T14477] loop3: detected capacity change from 0 to 164 [ 327.248861][T14481] loop3: detected capacity change from 0 to 2048 [ 327.312935][T14481] Alternate GPT is invalid, using primary GPT. [ 327.319302][T14481] loop3: p1 p2 p3 [ 327.323318][T14484] loop6: detected capacity change from 0 to 2048 [ 327.334508][T14484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.365604][T14484] loop9: detected capacity change from 0 to 7 [ 327.372063][T14484] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.379996][T14484] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.388115][T14484] loop9: unable to read partition table [ 327.393975][T14484] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 327.393975][T14484] ) failed (rc=-5) [ 327.432024][T14489] loop5: detected capacity change from 0 to 2048 [ 327.485267][T14489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.531407][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 327.531422][ T29] audit: type=1400 audit(2000001292.289:153548): avc: denied { read write open } for pid=14488 comm="syz.5.3548" path="/480/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 327.634505][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.653480][T14502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3554'. [ 327.811933][ T29] audit: type=1400 audit(2000001292.572:153549): avc: denied { create } for pid=14510 comm="syz.2.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.832002][ T29] audit: type=1400 audit(2000001292.572:153550): avc: denied { connect } for pid=14510 comm="syz.2.3556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.843910][T14509] loop5: detected capacity change from 0 to 2048 [ 327.890114][T14509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.988810][ T29] audit: type=1400 audit(2000001292.761:153551): avc: denied { write } for pid=14515 comm="syz.2.3558" path="socket:[41676]" dev="sockfs" ino=41676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 328.104073][T14519] loop3: detected capacity change from 0 to 2048 [ 328.138581][T14519] Alternate GPT is invalid, using primary GPT. [ 328.144876][T14519] loop3: p1 p2 p3 [ 328.151309][T14521] openvswitch: netlink: Message has 6 unknown bytes. [ 328.208106][ T29] audit: type=1400 audit(2000001292.982:153552): avc: denied { read } for pid=14522 comm="syz.3.3561" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.231263][ T29] audit: type=1400 audit(2000001292.982:153553): avc: denied { open } for pid=14522 comm="syz.3.3561" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.254881][ T29] audit: type=1400 audit(2000001292.982:153554): avc: denied { connect } for pid=14522 comm="syz.3.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 328.313420][ T29] audit: type=1326 audit(2000001293.108:153555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.0.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 328.337326][ T29] audit: type=1326 audit(2000001293.108:153556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.0.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 328.357623][T14525] loop0: detected capacity change from 0 to 512 [ 328.402982][T14525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.412807][ T29] audit: type=1326 audit(2000001293.108:153557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.0.3562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 328.444306][T12391] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.454411][T14525] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.510132][T14533] loop6: detected capacity change from 0 to 764 [ 328.550748][T14533] rock: directory entry would overflow storage [ 328.557005][T14533] rock: sig=0x4f50, size=4, remaining=3 [ 328.562661][T14533] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 328.629943][T11033] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.642046][T14539] netlink: 'syz.6.3567': attribute type 39 has an invalid length. [ 328.663130][T14537] xt_TPROXY: Can be used only with -p tcp or -p udp [ 328.671664][T14541] netlink: 'syz.0.3568': attribute type 39 has an invalid length. [ 328.691508][T14543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.699033][T14543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.739514][T14543] $H: (slave batadv0): Releasing backup interface [ 328.748525][T14543] batadv0 (unregistering): left promiscuous mode [ 328.823802][T14547] sd 0:0:1:0: device reset [ 328.862543][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.886708][T14553] loop6: detected capacity change from 0 to 764 [ 328.903050][T14557] loop3: detected capacity change from 0 to 164 [ 328.913762][T14553] rock: directory entry would overflow storage [ 328.920055][T14553] rock: sig=0x4f50, size=4, remaining=3 [ 328.925691][T14553] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 328.985011][T14565] loop6: detected capacity change from 0 to 764 [ 329.004629][T14565] rock: directory entry would overflow storage [ 329.006407][T14572] loop5: detected capacity change from 0 to 512 [ 329.010841][T14565] rock: sig=0x4f50, size=4, remaining=3 [ 329.022715][T14565] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 329.039145][T14572] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.3581: corrupted in-inode xattr: invalid ea_ino [ 329.060143][T14572] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3581: couldn't read orphan inode 15 (err -117) [ 329.088632][T14576] loop2: detected capacity change from 0 to 2048 [ 329.095771][T14572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.122806][ T6138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.132759][T14576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.155236][T14583] loop3: detected capacity change from 0 to 2048 [ 329.185676][T14583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.210801][T12524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.231000][T14583] loop9: detected capacity change from 0 to 7 [ 329.240857][T14583] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.253743][T14590] netlink: 'syz.2.3587': attribute type 4 has an invalid length. [ 329.263963][T14583] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.271971][T14583] loop9: unable to read partition table [ 329.290929][T14590] netlink: 'syz.2.3587': attribute type 4 has an invalid length. [ 329.319088][T14583] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 329.319088][T14583] ) failed (rc=-5) [ 329.338134][ T1028] lo speed is unknown, defaulting to 1000 [ 329.347141][T14590] FAULT_INJECTION: forcing a failure. [ 329.347141][T14590] name failslab, interval 1, probability 0, space 0, times 0 [ 329.359921][T14590] CPU: 1 UID: 0 PID: 14590 Comm: syz.2.3587 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 329.360019][T14590] Tainted: [W]=WARN [ 329.360041][T14590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.360056][T14590] Call Trace: [ 329.360062][T14590] [ 329.360070][T14590] __dump_stack+0x1d/0x30 [ 329.360095][T14590] dump_stack_lvl+0xe8/0x140 [ 329.360117][T14590] dump_stack+0x15/0x1b [ 329.360136][T14590] should_fail_ex+0x265/0x280 [ 329.360196][T14590] should_failslab+0x8c/0xb0 [ 329.360292][T14590] __kmalloc_noprof+0xa5/0x3e0 [ 329.360382][T14590] ? sock_kmalloc+0x85/0xc0 [ 329.360402][T14590] sock_kmalloc+0x85/0xc0 [ 329.360419][T14590] __ip_mc_join_group+0x1be/0x2b0 [ 329.360475][T14590] ip_mc_join_group+0x1f/0x30 [ 329.360505][T14590] ip_mcast_join_leave+0x132/0x180 [ 329.360549][T14590] do_ip_setsockopt+0x18e0/0x2240 [ 329.360603][T14590] ip_setsockopt+0x58/0x110 [ 329.360689][T14590] raw_setsockopt+0xbd/0x150 [ 329.360720][T14590] sock_common_setsockopt+0x69/0x80 [ 329.360748][T14590] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 329.360846][T14590] __sys_setsockopt+0x184/0x200 [ 329.360888][T14590] __x64_sys_setsockopt+0x64/0x80 [ 329.361003][T14590] x64_sys_call+0x2bd5/0x2fb0 [ 329.361027][T14590] do_syscall_64+0xd2/0x200 [ 329.361051][T14590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.361094][T14590] ? clear_bhb_loop+0x40/0x90 [ 329.361120][T14590] ? clear_bhb_loop+0x40/0x90 [ 329.361148][T14590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.361177][T14590] RIP: 0033:0x7feb5e05e9a9 [ 329.361196][T14590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.361219][T14590] RSP: 002b:00007feb5c6bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 329.361243][T14590] RAX: ffffffffffffffda RBX: 00007feb5e285fa0 RCX: 00007feb5e05e9a9 [ 329.361259][T14590] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000005 [ 329.361275][T14590] RBP: 00007feb5c6bf090 R08: 0000000000000088 R09: 0000000000000000 [ 329.361290][T14590] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 329.361340][T14590] R13: 0000000000000000 R14: 00007feb5e285fa0 R15: 00007fffe9f47fe8 [ 329.361359][T14590] [ 329.627651][ T3395] lo speed is unknown, defaulting to 1000 [ 329.946051][T14607] lo speed is unknown, defaulting to 1000 [ 330.204225][T14612] 9pnet_fd: Insufficient options for proto=fd [ 330.220499][T14612] loop2: detected capacity change from 0 to 512 [ 330.227480][T14612] EXT4-fs: Ignoring removed nobh option [ 330.254899][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3595: corrupted inode contents [ 330.270691][T14612] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3595: mark_inode_dirty error [ 330.283576][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3595: corrupted inode contents [ 330.295696][T14612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3595: mark_inode_dirty error [ 330.307993][T14612] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3595: Failed to acquire dquot type 0 [ 330.323429][T14620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.336030][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3595: corrupted inode contents [ 330.364794][T14612] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3595: mark_inode_dirty error [ 330.382120][T12685] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.391610][T14623] loop0: detected capacity change from 0 to 2048 [ 330.402337][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3595: corrupted inode contents [ 330.427712][T14612] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3595: mark_inode_dirty error [ 330.439370][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3595: corrupted inode contents [ 330.492178][T14623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.507970][T14635] loop3: detected capacity change from 0 to 512 [ 330.515243][T14638] 9pnet_fd: Insufficient options for proto=fd [ 330.522615][T14612] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 330.541226][T14638] loop5: detected capacity change from 0 to 512 [ 330.552327][T14630] lo speed is unknown, defaulting to 1000 [ 330.559588][T14612] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3595: corrupted inode contents [ 330.568306][T14635] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3603: corrupted in-inode xattr: invalid ea_ino [ 330.588103][T14612] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3595: mark_inode_dirty error [ 330.599110][T14638] EXT4-fs: Ignoring removed nobh option [ 330.605540][T14612] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 330.624061][T14635] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3603: couldn't read orphan inode 15 (err -117) [ 330.635099][T14638] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3604: corrupted inode contents [ 330.648331][T14612] EXT4-fs (loop2): 1 truncate cleaned up [ 330.654497][T14635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.656993][T14638] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #3: comm syz.5.3604: mark_inode_dirty error [ 330.671922][T14612] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.699250][T14638] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #3: comm syz.5.3604: corrupted inode contents [ 330.740907][T14638] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3604: mark_inode_dirty error [ 330.754166][T14638] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3604: Failed to acquire dquot type 0 [ 330.772945][T14638] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3604: corrupted inode contents [ 330.795607][T14630] loop6: detected capacity change from 0 to 512 [ 330.802734][T14638] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #16: comm syz.5.3604: mark_inode_dirty error [ 330.820699][T14630] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 330.829624][T14644] support for cryptoloop has been removed. Use dm-crypt instead. [ 330.840580][T14638] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3604: corrupted inode contents [ 330.853409][T14638] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3604: mark_inode_dirty error [ 330.864989][T14638] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3604: corrupted inode contents [ 330.886247][T14630] loop6: detected capacity change from 0 to 512 [ 330.889722][T14638] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 330.915649][T14660] loop0: detected capacity change from 0 to 764 [ 330.918606][T14638] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #16: comm syz.5.3604: corrupted inode contents [ 330.934083][T14659] loop2: detected capacity change from 0 to 2048 [ 330.934836][T14638] EXT4-fs error (device loop5): ext4_truncate:4597: inode #16: comm syz.5.3604: mark_inode_dirty error [ 330.955344][T14660] rock: directory entry would overflow storage [ 330.961610][T14660] rock: sig=0x4f50, size=4, remaining=3 [ 330.963669][T14638] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 330.967220][T14660] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 330.984314][T14659] Alternate GPT is invalid, using primary GPT. [ 330.990783][T14659] loop2: p1 p2 p3 [ 330.997342][T14630] EXT4-fs error (device loop6): __ext4_iget:5379: inode #4: block 193290: comm syz.6.3602: invalid block [ 331.003371][T14638] EXT4-fs (loop5): 1 truncate cleaned up [ 331.015242][T14638] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.026897][T14630] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.3602: Bad quota inode: 4, type: 1 [ 331.038487][T14630] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.062414][T14630] EXT4-fs (loop6): mount failed [ 331.078779][T14630] SELinux: ebitmap: map size 16777365 does not match my size 64 (high bit was 131080) [ 331.088810][T14630] SELinux: failed to load policy [ 331.098366][T14670] 9pnet_fd: Insufficient options for proto=fd [ 331.126582][T14666] xt_TPROXY: Can be used only with -p tcp or -p udp [ 331.133872][T14670] loop2: detected capacity change from 0 to 512 [ 331.140906][T14668] loop0: detected capacity change from 0 to 8192 [ 331.147517][T14670] EXT4-fs: Ignoring removed nobh option [ 331.178880][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3614: corrupted inode contents [ 331.213412][T14670] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3614: mark_inode_dirty error [ 331.229241][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3614: corrupted inode contents [ 331.241665][T14670] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3614: mark_inode_dirty error [ 331.253746][T14670] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3614: Failed to acquire dquot type 0 [ 331.265617][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3614: corrupted inode contents [ 331.270303][T14673] lo speed is unknown, defaulting to 1000 [ 331.279079][T14670] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3614: mark_inode_dirty error [ 331.295498][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3614: corrupted inode contents [ 331.309906][T14670] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3614: mark_inode_dirty error [ 331.327480][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3614: corrupted inode contents [ 331.340670][T14670] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 331.345551][T14676] lo speed is unknown, defaulting to 1000 [ 331.351262][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3614: corrupted inode contents [ 331.367403][T14670] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3614: mark_inode_dirty error [ 331.378875][T14670] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 331.388349][T14670] EXT4-fs (loop2): 1 truncate cleaned up [ 331.394539][T14670] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.415736][T14673] loop5: detected capacity change from 0 to 512 [ 331.423318][T14673] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 331.437512][T14673] loop5: detected capacity change from 0 to 512 [ 331.463494][T14673] EXT4-fs error (device loop5): __ext4_iget:5379: inode #4: block 193290: comm syz.5.3615: invalid block [ 331.475176][T14673] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.3615: Bad quota inode: 4, type: 1 [ 331.486503][T14676] loop3: detected capacity change from 0 to 512 [ 331.486861][T14673] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.507827][T14673] EXT4-fs (loop5): mount failed [ 331.513504][T14676] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 331.513850][T14687] atomic_op ffff88812515e928 conn xmit_atomic 0000000000000000 [ 331.534015][T14673] SELinux: ebitmap: map size 16777365 does not match my size 64 (high bit was 131080) [ 331.543974][T14673] SELinux: failed to load policy [ 331.615957][T14676] loop3: detected capacity change from 0 to 512 [ 331.635426][T14676] EXT4-fs error (device loop3): __ext4_iget:5379: inode #4: block 193290: comm syz.3.3616: invalid block [ 331.646997][T14676] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.3616: Bad quota inode: 4, type: 1 [ 331.659342][T14676] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 331.684778][T14676] EXT4-fs (loop3): mount failed [ 331.697762][T14676] SELinux: ebitmap: map size 16777365 does not match my size 64 (high bit was 131080) [ 331.707732][T14697] FAULT_INJECTION: forcing a failure. [ 331.707732][T14697] name failslab, interval 1, probability 0, space 0, times 0 [ 331.720458][T14697] CPU: 1 UID: 0 PID: 14697 Comm: syz.6.3622 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 331.720506][T14697] Tainted: [W]=WARN [ 331.720512][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.720525][T14697] Call Trace: [ 331.720533][T14697] [ 331.720561][T14697] __dump_stack+0x1d/0x30 [ 331.720589][T14697] dump_stack_lvl+0xe8/0x140 [ 331.720615][T14697] dump_stack+0x15/0x1b [ 331.720637][T14697] should_fail_ex+0x265/0x280 [ 331.720757][T14697] ? audit_log_d_path+0x8d/0x150 [ 331.720821][T14697] should_failslab+0x8c/0xb0 [ 331.720860][T14697] __kmalloc_cache_noprof+0x4c/0x320 [ 331.720895][T14697] audit_log_d_path+0x8d/0x150 [ 331.720976][T14697] audit_log_d_path_exe+0x42/0x70 [ 331.721011][T14697] audit_log_task+0x1e9/0x250 [ 331.721090][T14697] audit_seccomp+0x61/0x100 [ 331.721115][T14697] ? __seccomp_filter+0x68c/0x10d0 [ 331.721140][T14697] __seccomp_filter+0x69d/0x10d0 [ 331.721217][T14697] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 331.721277][T14697] ? vfs_write+0x75e/0x8e0 [ 331.721314][T14697] ? __rcu_read_unlock+0x4f/0x70 [ 331.721342][T14697] ? __fget_files+0x184/0x1c0 [ 331.721385][T14697] __secure_computing+0x82/0x150 [ 331.721405][T14697] syscall_trace_enter+0xcf/0x1e0 [ 331.721428][T14697] do_syscall_64+0xac/0x200 [ 331.721449][T14697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.721479][T14697] ? clear_bhb_loop+0x40/0x90 [ 331.721505][T14697] ? clear_bhb_loop+0x40/0x90 [ 331.721587][T14676] SELinux: failed to load policy [ 331.721546][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.721614][T14697] RIP: 0033:0x7fe89f43e9a9 [ 331.721629][T14697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.721647][T14697] RSP: 002b:00007fe89da9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 331.721749][T14697] RAX: ffffffffffffffda RBX: 00007fe89f665fa0 RCX: 00007fe89f43e9a9 [ 331.721842][T14697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 331.721859][T14697] RBP: 00007fe89da9f090 R08: 0000000000000000 R09: 0000000000000000 [ 331.721876][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.721893][T14697] R13: 0000000000000000 R14: 00007fe89f665fa0 R15: 00007ffc2c431c28 [ 331.721919][T14697] [ 331.791985][T14699] loop6: detected capacity change from 0 to 164 [ 331.964530][T14699] bio_check_eod: 31561 callbacks suppressed [ 331.964602][T14699] syz.6.3623: attempt to access beyond end of device [ 331.964602][T14699] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 331.984538][T14699] syz.6.3623: attempt to access beyond end of device [ 331.984538][T14699] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 332.044949][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3625'. [ 332.057034][T14703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.066150][T14703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.171859][T14716] loop5: detected capacity change from 0 to 2048 [ 332.215335][T14716] Alternate GPT is invalid, using primary GPT. [ 332.221783][T14716] loop5: p1 p2 p3 [ 332.255865][T14720] FAULT_INJECTION: forcing a failure. [ 332.255865][T14720] name failslab, interval 1, probability 0, space 0, times 0 [ 332.268571][T14720] CPU: 1 UID: 0 PID: 14720 Comm: syz.5.3633 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 332.268675][T14720] Tainted: [W]=WARN [ 332.268682][T14720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.268801][T14720] Call Trace: [ 332.268836][T14720] [ 332.268846][T14720] __dump_stack+0x1d/0x30 [ 332.268894][T14720] dump_stack_lvl+0xe8/0x140 [ 332.268913][T14720] dump_stack+0x15/0x1b [ 332.269003][T14720] should_fail_ex+0x265/0x280 [ 332.269044][T14720] should_failslab+0x8c/0xb0 [ 332.269092][T14720] __kmalloc_noprof+0xa5/0x3e0 [ 332.269158][T14720] ? alloc_trace_uprobe+0x2f/0x1e0 [ 332.269186][T14720] alloc_trace_uprobe+0x2f/0x1e0 [ 332.269293][T14720] ? create_local_trace_uprobe+0x91/0x2c0 [ 332.269365][T14720] create_local_trace_uprobe+0xb5/0x2c0 [ 332.269397][T14720] perf_uprobe_init+0xc0/0x150 [ 332.269493][T14720] perf_uprobe_event_init+0xc4/0x140 [ 332.269589][T14720] perf_try_init_event+0xd9/0x540 [ 332.269616][T14720] ? perf_event_alloc+0xb1c/0x1680 [ 332.269646][T14720] perf_event_alloc+0xb27/0x1680 [ 332.269710][T14720] __se_sys_perf_event_open+0x4a5/0x11c0 [ 332.269758][T14720] __x64_sys_perf_event_open+0x67/0x80 [ 332.269793][T14720] x64_sys_call+0x27ec/0x2fb0 [ 332.269820][T14720] do_syscall_64+0xd2/0x200 [ 332.269878][T14720] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.269975][T14720] ? clear_bhb_loop+0x40/0x90 [ 332.270000][T14720] ? clear_bhb_loop+0x40/0x90 [ 332.270093][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.270120][T14720] RIP: 0033:0x7f9f093fe9a9 [ 332.270139][T14720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.270162][T14720] RSP: 002b:00007f9f07a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 332.270234][T14720] RAX: ffffffffffffffda RBX: 00007f9f09625fa0 RCX: 00007f9f093fe9a9 [ 332.270250][T14720] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0 [ 332.270267][T14720] RBP: 00007f9f07a67090 R08: 0000000000000000 R09: 0000000000000000 [ 332.270337][T14720] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 332.270352][T14720] R13: 0000000000000000 R14: 00007f9f09625fa0 R15: 00007ffe062012d8 [ 332.270404][T14720] [ 332.270411][T14720] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 332.284754][T14718] loop2: detected capacity change from 0 to 8192 [ 332.421581][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 332.421601][ T29] audit: type=1326 audit(2000001297.412:153972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.540080][ T29] audit: type=1326 audit(2000001297.412:153973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.564015][ T29] audit: type=1400 audit(2000001297.475:153974): avc: denied { associate } for pid=14717 comm="syz.2.3632" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 332.585252][ T29] audit: type=1326 audit(2000001297.538:153975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.609047][ T29] audit: type=1326 audit(2000001297.559:153976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.632928][ T29] audit: type=1326 audit(2000001297.559:153977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.656772][ T29] audit: type=1326 audit(2000001297.559:153978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.680585][ T29] audit: type=1326 audit(2000001297.559:153979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.704665][ T29] audit: type=1326 audit(2000001297.559:153980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.728439][ T29] audit: type=1326 audit(2000001297.559:153981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14726 comm="syz.3.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fb869e9a9 code=0x7ffc0000 [ 332.818643][T14733] loop2: detected capacity change from 0 to 2048 [ 332.995439][T14740] loop6: detected capacity change from 0 to 2048 [ 333.033455][T14740] loop9: detected capacity change from 0 to 7 [ 333.050255][T14743] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 333.059368][T14740] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.075500][T14740] Buffer I/O error on dev loop9, logical block 0, async page read [ 333.083428][T14740] loop9: unable to read partition table [ 333.113829][T14743] SELinux: policydb magic number 0xf97cfe8c does not match expected magic number 0xf97cff8c [ 333.150902][T14740] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 333.150902][T14740] ) failed (rc=-5) [ 333.187175][T14743] SELinux: failed to load policy [ 333.200259][T14748] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3642'. [ 333.308692][T14756] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3646'. [ 333.382812][T14759] loop5: detected capacity change from 0 to 512 [ 333.389917][T14759] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 333.406455][T14759] EXT4-fs (loop5): 1 truncate cleaned up [ 333.564202][T14732] syz.2.3637 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 333.578538][T14732] CPU: 0 UID: 0 PID: 14732 Comm: syz.2.3637 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 333.578572][T14732] Tainted: [W]=WARN [ 333.578578][T14732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.578593][T14732] Call Trace: [ 333.578602][T14732] [ 333.578612][T14732] __dump_stack+0x1d/0x30 [ 333.578708][T14732] dump_stack_lvl+0xe8/0x140 [ 333.578736][T14732] dump_stack+0x15/0x1b [ 333.578753][T14732] dump_header+0x81/0x220 [ 333.578786][T14732] oom_kill_process+0x334/0x3f0 [ 333.578864][T14732] out_of_memory+0x979/0xb80 [ 333.578902][T14732] try_charge_memcg+0x5e6/0x9e0 [ 333.579122][T14732] obj_cgroup_charge_pages+0xa6/0x150 [ 333.579158][T14732] __memcg_kmem_charge_page+0x9f/0x170 [ 333.579199][T14732] __alloc_frozen_pages_noprof+0x188/0x360 [ 333.579247][T14732] alloc_pages_mpol+0xb3/0x250 [ 333.579289][T14732] alloc_pages_noprof+0x90/0x130 [ 333.579333][T14732] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 333.579445][T14732] __kvmalloc_node_noprof+0x30f/0x4e0 [ 333.579484][T14732] ? ip_set_alloc+0x1f/0x30 [ 333.579591][T14732] ? ip_set_alloc+0x1f/0x30 [ 333.579684][T14732] ? __kmalloc_cache_noprof+0x189/0x320 [ 333.579721][T14732] ip_set_alloc+0x1f/0x30 [ 333.579774][T14732] hash_netiface_create+0x282/0x740 [ 333.579807][T14732] ? __pfx_hash_netiface_create+0x10/0x10 [ 333.579938][T14732] ip_set_create+0x3cc/0x960 [ 333.579983][T14732] ? __nla_parse+0x40/0x60 [ 333.580009][T14732] nfnetlink_rcv_msg+0x4c3/0x590 [ 333.580072][T14732] ? selinux_capable+0x1f9/0x270 [ 333.580149][T14732] netlink_rcv_skb+0x120/0x220 [ 333.580192][T14732] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.580356][T14732] nfnetlink_rcv+0x16b/0x1690 [ 333.580389][T14732] ? __kfree_skb+0x109/0x150 [ 333.580501][T14732] ? nlmon_xmit+0x4f/0x60 [ 333.580524][T14732] ? consume_skb+0x49/0x150 [ 333.580607][T14732] ? nlmon_xmit+0x4f/0x60 [ 333.580634][T14732] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 333.580680][T14732] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 333.580869][T14732] ? __dev_queue_xmit+0x182/0x1fb0 [ 333.580903][T14732] ? ref_tracker_free+0x37d/0x3e0 [ 333.581074][T14732] ? __netlink_deliver_tap+0x4dc/0x500 [ 333.581164][T14732] netlink_unicast+0x5a5/0x680 [ 333.581262][T14732] netlink_sendmsg+0x58b/0x6b0 [ 333.581286][T14732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.581359][T14732] __sock_sendmsg+0x142/0x180 [ 333.581393][T14732] ____sys_sendmsg+0x31e/0x4e0 [ 333.581433][T14732] ___sys_sendmsg+0x17b/0x1d0 [ 333.581554][T14732] __x64_sys_sendmsg+0xd4/0x160 [ 333.581599][T14732] x64_sys_call+0x2999/0x2fb0 [ 333.581629][T14732] do_syscall_64+0xd2/0x200 [ 333.581680][T14732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.581716][T14732] ? clear_bhb_loop+0x40/0x90 [ 333.581741][T14732] ? clear_bhb_loop+0x40/0x90 [ 333.581785][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.581814][T14732] RIP: 0033:0x7feb5e05e9a9 [ 333.581834][T14732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.581926][T14732] RSP: 002b:00007feb5c6bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.581951][T14732] RAX: ffffffffffffffda RBX: 00007feb5e285fa0 RCX: 00007feb5e05e9a9 [ 333.581967][T14732] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 333.582007][T14732] RBP: 00007feb5e0e0d69 R08: 0000000000000000 R09: 0000000000000000 [ 333.582019][T14732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.582117][T14732] R13: 0000000000000000 R14: 00007feb5e285fa0 R15: 00007fffe9f47fe8 [ 333.582139][T14732] [ 333.582146][T14732] memory: usage 307200kB, limit 307200kB, failcnt 4420 [ 333.941447][T14732] memory+swap: usage 308428kB, limit 9007199254740988kB, failcnt 0 [ 333.949359][T14732] kmem: usage 306588kB, limit 9007199254740988kB, failcnt 0 [ 333.956688][T14732] Memory cgroup stats for /syz2: [ 333.956863][T14732] cache 602112 [ 333.965208][T14732] rss 4096 [ 333.968298][T14732] shmem 0 [ 333.971297][T14732] mapped_file 4096 [ 333.975084][T14732] dirty 0 [ 333.978150][T14732] writeback 598016 [ 333.981880][T14732] workingset_refault_anon 2558 [ 333.986664][T14732] workingset_refault_file 2055 [ 333.991468][T14732] swap 1265664 [ 333.994847][T14732] swapcached 16384 [ 333.998576][T14732] pgpgin 244325 [ 334.002083][T14732] pgpgout 244174 [ 334.005691][T14732] pgfault 280057 [ 334.009294][T14732] pgmajfault 712 [ 334.012910][T14732] inactive_anon 0 [ 334.016574][T14732] active_anon 16384 [ 334.020410][T14732] inactive_file 598016 [ 334.024493][T14732] active_file 4096 [ 334.028301][T14732] unevictable 0 [ 334.031757][T14732] hierarchical_memory_limit 314572800 [ 334.037140][T14732] hierarchical_memsw_limit 9223372036854771712 [ 334.043304][T14732] total_cache 602112 [ 334.047227][T14732] total_rss 4096 [ 334.050850][T14732] total_shmem 0 [ 334.054337][T14732] total_mapped_file 4096 [ 334.058601][T14732] total_dirty 0 [ 334.062065][T14732] total_writeback 598016 [ 334.066341][T14732] total_workingset_refault_anon 2558 [ 334.071665][T14732] total_workingset_refault_file 2055 [ 334.076978][T14732] total_swap 1265664 [ 334.080913][T14732] total_swapcached 16384 [ 334.085194][T14732] total_pgpgin 244325 [ 334.089226][T14732] total_pgpgout 244174 [ 334.093325][T14732] total_pgfault 280057 [ 334.097548][T14732] total_pgmajfault 712 [ 334.101640][T14732] total_inactive_anon 0 [ 334.105806][T14732] total_active_anon 16384 [ 334.110151][T14732] total_inactive_file 598016 [ 334.114801][T14732] total_active_file 4096 [ 334.119137][T14732] total_unevictable 0 [ 334.123208][T14732] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3637,pid=14731,uid=0 [ 334.138062][T14732] Memory cgroup out of memory: Killed process 14731 (syz.2.3637) total-vm:93892kB, anon-rss:1072kB, file-rss:22328kB, shmem-rss:128kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 334.202738][T14771] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 334.234425][T14769] loop5: detected capacity change from 0 to 2048 [ 334.254608][T14775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 334.291928][T14775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3651'. [ 334.410824][T14789] FAULT_INJECTION: forcing a failure. [ 334.410824][T14789] name failslab, interval 1, probability 0, space 0, times 0 [ 334.423587][T14789] CPU: 1 UID: 0 PID: 14789 Comm: syz.3.3655 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 334.423656][T14789] Tainted: [W]=WARN [ 334.423662][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.423673][T14789] Call Trace: [ 334.423678][T14789] [ 334.423685][T14789] __dump_stack+0x1d/0x30 [ 334.423704][T14789] dump_stack_lvl+0xe8/0x140 [ 334.423722][T14789] dump_stack+0x15/0x1b [ 334.423737][T14789] should_fail_ex+0x265/0x280 [ 334.423816][T14789] should_failslab+0x8c/0xb0 [ 334.423837][T14789] kmem_cache_alloc_noprof+0x50/0x310 [ 334.423859][T14789] ? skb_clone+0x151/0x1f0 [ 334.423877][T14789] skb_clone+0x151/0x1f0 [ 334.423893][T14789] __netlink_deliver_tap+0x2c9/0x500 [ 334.423982][T14789] netlink_unicast+0x653/0x680 [ 334.424012][T14789] netlink_sendmsg+0x58b/0x6b0 [ 334.424032][T14789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.424064][T14789] __sock_sendmsg+0x142/0x180 [ 334.424091][T14789] ____sys_sendmsg+0x31e/0x4e0 [ 334.424135][T14789] ___sys_sendmsg+0x17b/0x1d0 [ 334.424183][T14789] __x64_sys_sendmsg+0xd4/0x160 [ 334.424299][T14789] x64_sys_call+0x2999/0x2fb0 [ 334.424329][T14789] do_syscall_64+0xd2/0x200 [ 334.424361][T14789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.424460][T14789] ? clear_bhb_loop+0x40/0x90 [ 334.424481][T14789] ? clear_bhb_loop+0x40/0x90 [ 334.424508][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.424532][T14789] RIP: 0033:0x7f0fb869e9a9 [ 334.424587][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.424611][T14789] RSP: 002b:00007f0fb6cff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.424650][T14789] RAX: ffffffffffffffda RBX: 00007f0fb88c5fa0 RCX: 00007f0fb869e9a9 [ 334.424666][T14789] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 334.424682][T14789] RBP: 00007f0fb6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 334.424696][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.424793][T14789] R13: 0000000000000000 R14: 00007f0fb88c5fa0 R15: 00007ffe659bb8e8 [ 334.424812][T14789] [ 334.649832][T14790] loop6: detected capacity change from 0 to 512 [ 334.658010][T14790] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 334.667936][T14790] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 334.677346][T14789] IPv6: Can't replace route, no match found [ 334.755873][T14787] loop6: detected capacity change from 0 to 8192 [ 334.765275][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.772777][T14798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.777340][T14796] loop3: detected capacity change from 0 to 2048 [ 334.786883][T14798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.794435][T14798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.796723][T14787] loop6: p1 < > p2 p4 [ 334.805726][T14787] loop6: partition table partially beyond EOD, truncated [ 334.813158][T14787] loop6: p1 start 408832 is beyond EOD, truncated [ 334.819674][T14787] loop6: p2 size 8388352 extends beyond EOD, truncated [ 334.828108][T14798] $H: (slave batadv0): Releasing backup interface [ 334.835865][T14798] batadv0 (unregistering): left promiscuous mode [ 334.892180][T14794] lo speed is unknown, defaulting to 1000 [ 334.955373][T14807] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3662'. [ 334.965013][T14807] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3662'. [ 335.004412][T14794] loop2: detected capacity change from 0 to 512 [ 335.026414][T14808] loop5: detected capacity change from 0 to 2048 [ 335.054676][T14794] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 335.069764][T14808] loop9: detected capacity change from 0 to 7 [ 335.076726][T14808] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.090502][T14794] loop2: detected capacity change from 0 to 512 [ 335.118880][T14808] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.126815][T14808] loop9: unable to read partition table [ 335.165874][T14794] EXT4-fs error (device loop2): __ext4_iget:5379: inode #4: block 193290: comm syz.2.3657: invalid block [ 335.186151][T14814] loop6: detected capacity change from 0 to 2048 [ 335.194192][T14808] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 335.194192][T14808] ) failed (rc=-5) [ 335.208526][T14794] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.3657: Bad quota inode: 4, type: 1 [ 335.221084][T14794] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.263352][T14794] EXT4-fs (loop2): mount failed [ 335.278288][T14794] SELinux: ebitmap: map size 16777365 does not match my size 64 (high bit was 131080) [ 335.298221][T14794] SELinux: failed to load policy [ 335.311155][T14822] loop0: detected capacity change from 0 to 512 [ 335.319823][T14822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.359319][T14822] EXT4-fs (loop0): 1 truncate cleaned up [ 335.565593][T14833] FAULT_INJECTION: forcing a failure. [ 335.565593][T14833] name failslab, interval 1, probability 0, space 0, times 0 [ 335.578327][T14833] CPU: 1 UID: 0 PID: 14833 Comm: syz.3.3668 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 335.578381][T14833] Tainted: [W]=WARN [ 335.578387][T14833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.578431][T14833] Call Trace: [ 335.578440][T14833] [ 335.578450][T14833] __dump_stack+0x1d/0x30 [ 335.578475][T14833] dump_stack_lvl+0xe8/0x140 [ 335.578497][T14833] dump_stack+0x15/0x1b [ 335.578515][T14833] should_fail_ex+0x265/0x280 [ 335.578620][T14833] should_failslab+0x8c/0xb0 [ 335.578643][T14833] __kmalloc_noprof+0xa5/0x3e0 [ 335.578671][T14833] ? batadv_hash_new+0x59/0x190 [ 335.578706][T14833] batadv_hash_new+0x59/0x190 [ 335.578753][T14833] batadv_originator_init+0x3b/0x130 [ 335.578786][T14833] batadv_mesh_init+0x291/0x440 [ 335.578841][T14833] batadv_meshif_init_late+0x3ea/0x460 [ 335.578901][T14833] register_netdevice+0x284/0xf00 [ 335.578935][T14833] ? validate_linkmsg+0x4f2/0x570 [ 335.579014][T14833] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 335.579035][T14833] batadv_meshif_newlink+0x7d/0x90 [ 335.579141][T14833] rtnl_newlink_create+0x1bc/0x620 [ 335.579171][T14833] ? security_capable+0x83/0x90 [ 335.579200][T14833] ? netlink_ns_capable+0x86/0xa0 [ 335.579231][T14833] rtnl_newlink+0xf29/0x12d0 [ 335.579338][T14833] ? bpf_trace_run3+0x12c/0x1d0 [ 335.579364][T14833] ? __memcg_slab_free_hook+0x135/0x230 [ 335.579399][T14833] ? __kfree_skb+0x109/0x150 [ 335.579471][T14833] ? __rcu_read_unlock+0x4f/0x70 [ 335.579499][T14833] ? avc_has_perm_noaudit+0x1b1/0x200 [ 335.579537][T14833] ? selinux_capable+0x1f9/0x270 [ 335.579577][T14833] ? security_capable+0x83/0x90 [ 335.579632][T14833] ? ns_capable+0x7d/0xb0 [ 335.579654][T14833] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.579682][T14833] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 335.579714][T14833] netlink_rcv_skb+0x120/0x220 [ 335.579757][T14833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.579794][T14833] rtnetlink_rcv+0x1c/0x30 [ 335.579816][T14833] netlink_unicast+0x5a5/0x680 [ 335.579864][T14833] netlink_sendmsg+0x58b/0x6b0 [ 335.579934][T14833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.579953][T14833] __sock_sendmsg+0x142/0x180 [ 335.579981][T14833] ____sys_sendmsg+0x31e/0x4e0 [ 335.580076][T14833] ___sys_sendmsg+0x17b/0x1d0 [ 335.580145][T14833] __x64_sys_sendmsg+0xd4/0x160 [ 335.580191][T14833] x64_sys_call+0x2999/0x2fb0 [ 335.580249][T14833] do_syscall_64+0xd2/0x200 [ 335.580272][T14833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.580306][T14833] ? clear_bhb_loop+0x40/0x90 [ 335.580341][T14833] ? clear_bhb_loop+0x40/0x90 [ 335.580369][T14833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.580394][T14833] RIP: 0033:0x7f0fb869e9a9 [ 335.580409][T14833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.580509][T14833] RSP: 002b:00007f0fb6cff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.580534][T14833] RAX: ffffffffffffffda RBX: 00007f0fb88c5fa0 RCX: 00007f0fb869e9a9 [ 335.580546][T14833] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 335.580560][T14833] RBP: 00007f0fb6cff090 R08: 0000000000000000 R09: 0000000000000000 [ 335.580571][T14833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.580583][T14833] R13: 0000000000000000 R14: 00007f0fb88c5fa0 R15: 00007ffe659bb8e8 [ 335.580656][T14833] [ 335.991921][T14837] loop3: detected capacity change from 0 to 2048 [ 336.035095][T14837] Alternate GPT is invalid, using primary GPT. [ 336.041446][T14837] loop3: p1 p2 p3 [ 336.135474][T14849] loop0: detected capacity change from 0 to 164 [ 336.174376][T14854] loop5: detected capacity change from 0 to 512 [ 336.175942][T14849] syz.0.3676: attempt to access beyond end of device [ 336.175942][T14849] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 336.210217][T14849] syz.0.3676: attempt to access beyond end of device [ 336.210217][T14849] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 336.229015][T14856] 9pnet_fd: Insufficient options for proto=fd [ 336.251525][T14856] loop3: detected capacity change from 0 to 512 [ 336.263364][T14856] EXT4-fs: Ignoring removed nobh option [ 336.303390][T14856] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3679: corrupted inode contents [ 336.323886][T14856] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3679: mark_inode_dirty error [ 336.337358][T14856] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3679: corrupted inode contents [ 336.349538][T14856] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3679: mark_inode_dirty error [ 336.365100][T14856] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3679: Failed to acquire dquot type 0 [ 336.377654][T14856] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3679: corrupted inode contents [ 336.392650][T14856] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3679: mark_inode_dirty error [ 336.408072][T14856] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3679: corrupted inode contents [ 336.420463][T14856] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3679: mark_inode_dirty error [ 336.432140][T14856] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3679: corrupted inode contents [ 336.445106][T14856] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 336.455589][T14856] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3679: corrupted inode contents [ 336.470708][T14871] loop6: detected capacity change from 0 to 2048 [ 336.488090][T14875] loop2: detected capacity change from 0 to 1024 [ 336.496214][T14856] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3679: mark_inode_dirty error [ 336.507873][T14856] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 336.519086][T14856] EXT4-fs (loop3): 1 truncate cleaned up [ 336.527964][T14856] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.537200][T14871] Alternate GPT is invalid, using primary GPT. [ 336.540847][T14875] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.3686: Abort forced by user [ 336.544875][T14871] loop6: p1 p2 p3 [ 336.561792][T14875] EXT4-fs (loop2): Remounting filesystem read-only [ 336.568450][T14875] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 336.577512][T14881] EXT4-fs (loop2): shut down requested (0) [ 336.694055][T14888] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 336.714464][T14888] hsr0: entered promiscuous mode [ 336.734846][T14884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.743430][T14888] $H: (slave hsr0): The slave device specified does not support setting the MAC address [ 336.761622][T14888] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 336.774444][T14888] $H: (slave hsr0): Error -22 calling dev_set_mtu [ 336.866264][T14908] loop3: detected capacity change from 0 to 2048 [ 336.901874][T14898] program syz.3.3694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.126997][T14927] loop0: detected capacity change from 0 to 512 [ 337.139441][T14927] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.3703: corrupted in-inode xattr: invalid ea_ino [ 337.153246][T14927] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3703: couldn't read orphan inode 15 (err -117) [ 337.186727][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 337.192998][ T29] audit: type=1326 audit(2000001302.419:154256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.220214][ T29] audit: type=1326 audit(2000001302.430:154257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.243952][ T29] audit: type=1326 audit(2000001302.430:154258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.267666][ T29] audit: type=1326 audit(2000001302.430:154259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.291382][ T29] audit: type=1326 audit(2000001302.430:154260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.315187][ T29] audit: type=1326 audit(2000001302.430:154261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.338953][ T29] audit: type=1326 audit(2000001302.430:154262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.362784][ T29] audit: type=1326 audit(2000001302.451:154263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.386489][ T29] audit: type=1326 audit(2000001302.451:154264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.410871][T14938] loop2: detected capacity change from 0 to 512 [ 337.418146][T14938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 337.419739][ T29] audit: type=1326 audit(2000001302.451:154265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14934 comm="syz.0.3706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f998aa6e9a9 code=0x7ffc0000 [ 337.454914][T14938] EXT4-fs (loop2): 1 truncate cleaned up [ 337.515104][T14939] sd 0:0:1:0: device reset [ 337.607959][T14950] loop0: detected capacity change from 0 to 512 [ 337.614798][T14950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.625566][T14950] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.3711: invalid block [ 337.637973][T14950] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3711: invalid indirect mapped block 4294967295 (level 1) [ 337.652359][T14950] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3711: invalid indirect mapped block 4294967295 (level 1) [ 337.655447][T14955] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3713'. [ 337.676122][T14955] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3713'. [ 337.685251][T14950] EXT4-fs (loop0): 2 truncates cleaned up [ 337.696623][T14959] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3714'. [ 337.706353][T14959] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3714'. [ 337.740545][T14963] loop6: detected capacity change from 0 to 512 [ 337.868365][T14973] loop3: detected capacity change from 0 to 2048 [ 337.876663][T14975] loop0: detected capacity change from 0 to 2048 [ 337.930545][T14973] loop9: detected capacity change from 0 to 7 [ 337.937706][T14973] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.952120][T14975] Alternate GPT is invalid, using primary GPT. [ 337.958656][T14975] loop0: p1 p2 p3 [ 337.984198][T14973] Buffer I/O error on dev loop9, logical block 0, async page read [ 337.992239][T14973] loop9: unable to read partition table [ 338.012505][T14973] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 338.012505][T14973] ) failed (rc=-5) [ 338.116784][T14991] sd 0:0:1:0: device reset [ 338.189807][T14963] ================================================================== [ 338.197958][T14963] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 338.206334][T14963] [ 338.208682][T14963] write to 0xffff888106b89844 of 4 bytes by task 14972 on cpu 1: [ 338.216414][T14963] __xa_set_mark+0x172/0x1a0 [ 338.221021][T14963] __folio_mark_dirty+0x3af/0x4d0 [ 338.226066][T14963] mark_buffer_dirty+0x11e/0x210 [ 338.231031][T14963] block_write_end+0x12e/0x210 [ 338.235826][T14963] ext4_write_end+0x13a/0x730 [ 338.240532][T14963] ext4_da_write_end+0x70/0x810 [ 338.245413][T14963] generic_perform_write+0x30f/0x490 [ 338.250716][T14963] ext4_buffered_write_iter+0x1ee/0x3c0 [ 338.256298][T14963] ext4_file_write_iter+0xdbf/0xf00 [ 338.261522][T14963] iter_file_splice_write+0x5ef/0x970 [ 338.266922][T14963] direct_splice_actor+0x156/0x2a0 [ 338.272060][T14963] splice_direct_to_actor+0x312/0x680 [ 338.277458][T14963] do_splice_direct+0xda/0x150 [ 338.282246][T14963] do_sendfile+0x380/0x650 [ 338.286678][T14963] __x64_sys_sendfile64+0x105/0x150 [ 338.291897][T14963] x64_sys_call+0xb39/0x2fb0 [ 338.296504][T14963] do_syscall_64+0xd2/0x200 [ 338.301020][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.306946][T14963] [ 338.309277][T14963] read to 0xffff888106b89844 of 4 bytes by task 14963 on cpu 0: [ 338.316926][T14963] filemap_write_and_wait_range+0xfc/0x340 [ 338.322758][T14963] ext4_file_write_iter+0xe04/0xf00 [ 338.327978][T14963] iter_file_splice_write+0x5ef/0x970 [ 338.333376][T14963] direct_splice_actor+0x156/0x2a0 [ 338.338514][T14963] splice_direct_to_actor+0x312/0x680 [ 338.343933][T14963] do_splice_direct+0xda/0x150 [ 338.348735][T14963] do_sendfile+0x380/0x650 [ 338.353170][T14963] __x64_sys_sendfile64+0x105/0x150 [ 338.358471][T14963] x64_sys_call+0xb39/0x2fb0 [ 338.363081][T14963] do_syscall_64+0xd2/0x200 [ 338.367612][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.373732][T14963] [ 338.376068][T14963] value changed: 0x00000021 -> 0x0a000021 [ 338.381796][T14963] [ 338.384129][T14963] Reported by Kernel Concurrency Sanitizer on: [ 338.390293][T14963] CPU: 0 UID: 0 PID: 14963 Comm: syz.6.3716 Tainted: G W 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 338.404376][T14963] Tainted: [W]=WARN [ 338.408188][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.418262][T14963] ==================================================================