last executing test programs: 1m27.207725284s ago: executing program 4 (id=129): clock_gettime(0x0, &(0x7f0000000140)) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x40200, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x4, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 1m26.396572539s ago: executing program 4 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 1m26.36390242s ago: executing program 4 (id=140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000880)=[{&(0x7f0000000300)="00214717a706f600000003060000000000000000aaa6", 0x16}], 0x1, 0x7, 0x1) 1m26.304666173s ago: executing program 4 (id=141): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000740)='P', 0x1, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xa9eb, 0x8, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x30000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x200}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@data_journal}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02000000"], 0x24, 0x3) getxattr(&(0x7f0000000000)='./file2\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf", 0x5, 0x52, 0x0, 0x0) 1m25.597618013s ago: executing program 4 (id=147): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd800000000000000000"], 0xa8}}, 0x2) 1m24.875744793s ago: executing program 4 (id=149): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}, {r1, r2+10000000}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) r6 = socket(0xa, 0x5, 0x0) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) 1m24.830358286s ago: executing program 32 (id=149): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x3938700}, {r1, r2+10000000}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) r6 = socket(0xa, 0x5, 0x0) sendto$inet6(r6, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) 5.409620941s ago: executing program 5 (id=1125): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) link(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x100, 0x0, &(0x7f0000000880)="60dd46115509cc24f49ebb2e337c86a05fe0c9c76dc9a92137cb937a5e173aaaecbeba9ba22796f815af8cd6bbc04a775eebfadf3a68032798df22ee4e72f60166609cb82539d8c95ede384dea5cc16223a330d7e95f7a3ca9935bb47b053644299446d007adc61e650f19308aadc0cadc675610bbe5b8844a4b81ced3d86bdd2876d6dbaeb9fe4a28717d4c28961070f198b9f52ee68dfaf9bf9be38eb8e5dd78b95ee8672169bea0503a0050d9ba2b6e00f20b982ec2a14ac573e7da3486ac4688d25a3f14d68b443f98", 0xcb, 0x7, 0x3, 0x356, 0x6, 0x5, &(0x7f0000000980)="82a47ca4fec09dd080fe78f873fbb51b5244d4684ddc4da976c243137844df1cb1ef80f1c63f7fd56c60991da0c3fbe9181af0a9f82b66df9fdeec781fba8e9616050bc198436de8afae7183748245d846bf9dc51f2d727b50ef17490ac65abb3e1bd74082938d92b06c513e3f013ac5046e33e3e74b0518ce5fcae5708137659936cde18edcb1a80d23b771b1ad2174ce072ee7bfdebe1172a05d274ab71b169b5110557322fe58311b7cdb364958af1b3c3528351b62245a40f5e6efa027f44a357f8374fe7cf6c0d6635b7d60851d"}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r5) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xffffc000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 4.772005807s ago: executing program 5 (id=1132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x8, 0x20}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 2.629378708s ago: executing program 0 (id=1170): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4ca7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28e9, 0x0, @perf_bp={0x0, 0x5}, 0x4110, 0x2, 0x0, 0x5, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x4, 0x2, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8, 0x7, 0x1, 0x1ff}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16d, 0x16d, 0x8, [@func={0x9, 0x0, 0x0, 0xc, 0x5}, @union={0x4, 0x6, 0x0, 0x5, 0x1, 0x0, [{0xe, 0x4, 0x8}, {0xb, 0x2, 0x5}, {0x2, 0x0, 0x9}, {0x7, 0x4, 0x2}, {0xd, 0x1, 0x5}, {0x7, 0x5, 0xfffffff4}]}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @datasec={0x6, 0x2, 0x0, 0xf, 0x2, [{0x5, 0x40, 0x1}, {0x1, 0x8, 0x10000}], ' d'}, @datasec={0x3, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x7fff, 0xa}, {0x4, 0x3, 0x1000}, {0x2, 0x3, 0x7fffffff}, {0x2, 0x6, 0x7}, {0x4, 0x4, 0xd7}, {0x5, 0x3, 0xfffffffd}, {0x3, 0x100, 0xfffffffa}, {0x4, 0x9, 0x4}], "8667f8"}, @union={0xb, 0x8, 0x0, 0x5, 0x1, 0x1000, [{0x7, 0x3, 0x2}, {0xd, 0x1, 0x7}, {0x3, 0x2, 0x5}, {0xa, 0x3, 0x9}, {0x0, 0x1, 0x2192}, {0x2, 0x3, 0x2}, {0x5, 0x0, 0x8}, {0x8, 0x1, 0x8001}]}]}, {0x0, [0x0, 0x6f, 0x61, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000880)=""/152, 0x190, 0x98, 0x1, 0x5, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3a}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x97}, @ldst={0x2, 0x0, 0x6, 0x6, 0x8, 0x6, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x0, 0x4, 0xb, 0xfffffffffffffffe, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x20, '\x00', r6, @fallback=0x2c, r7, 0x8, &(0x7f0000000780)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x6, 0x8f3, 0xf9c}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[r4], 0x0, 0x10, 0x2}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r10, 0x0, &(0x7f0000000b00)=""/151}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r11}, 0x10) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r0, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 2.292651242s ago: executing program 3 (id=1178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x20165b9a, 0x4, 0x1) 2.265378654s ago: executing program 3 (id=1179): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000400081e0000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.719643967s ago: executing program 0 (id=1181): bpf$MAP_CREATE(0x0, 0x0, 0x50) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, 0x0}) 1.709383837s ago: executing program 5 (id=1182): readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1.669554769s ago: executing program 5 (id=1183): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x516, &(0x7f0000001540)="$eJzs3c9vI1cdAPCvnThxsukmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/aQnrkiUYkTe+QP4LwnDty4ILhxWQ5I/IhAGyQORjOeZL1Ze2NtEjuNPx9pNO/NzPr7fXHmvfVz7BfAyLoREfsRMRERH0XEbHY8l23xfntLrnt8cH/l8OD+Si5arQ//mUvPJ8ei498krmWPWYyIHz6I+Enu2biN3b2N5Wq1sp3V55u1rfnG7t7t9dryWmWtslkuLy0uLbx7553yubX19dpEVvrqoz/sf+tnSVoz2ZHOdpyndtMLx3ES4xHx/YsINgRjWXsmhp0ILyQfEa9ExBvp/T8bY+mzCQBcZa3WbLRmO+sAwFWXT+fAcvlSNhcwE/l8qdSew3s1pvPVeqN56159Z3O1PVc2F4X8vfVqZSGbK5yLQi6pL6blJ/XyifqdiHg5In4xOZXWSyv16uow/+MDACPs2onx/z+T7fEfALjiisNOAAAYuB7j//6g8wAABsfrfwAYPcZ/ABg9xfQ7HKaGnQYAMEBe/wPA6DH+A8BI+cEHHyRb6zD7/uvVj3d3Nuof316tNDZKtZ2V0kp9e6u0Vq+vpd/ZUzvt8ar1+tbi27Hzydy3txrN+cbu3t1afWezeTf9Xu+7lUJ6lU8WAMAwvfz6wz/nkhH5val0i461HApDzQy4aPlhJwAMzViPMnD1We0LRtcZXuObHoArossSvU8pRpcPCLVardbFpQRcsJtfMv8Po6pj/t9fAcOIMecPo8v8P4yuVivX75r/0e+FAMDlZo4f6PH+/yvZ/jfZmwM/Xj15xWcXmRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbkfr/5aytcBnIp8vlSJeioi5KOTurVcrCxFxPSL+NFmYTOqLQ84ZADir/N9y2fpfN2ffmnnq1GvXjosTEfHTX334y0+Wm83tP0ZM5P41eXS8+Vl2vDz47AGA0x2N0+m+44X844P7K0fbIPP5+3cjotiOf3gwEYfH8cdjPN0XoxAR0//OZfW2XMfcxVnsfxoRX+zW/lzMpHMg7ZVPT8ZPYr800Pj5p+Ln03PtffKz+MI55AKj5mHS/7zf7f7Lx4103/3+L6Y91Nll/V/yUCuHaR/4JP5R/zfWo/+70W+Mt3/3vXZp6tlzn0Z8eTziKPZhR/9zFD/XI/5bfcb/y1dee6PXudavI25G9/idseabta35xu7e7fXa8lplrbJZLi8tLi28e+ed8nw6Rz3fezT4x3u3rvc6l7R/ukf84int/3qf7X/wv49+9LXnxP/mm93i5+PV58RPxsRv9Bl/efq3xV7nkvirPdp/2vN/q8/4j/6698yy4QDA8DR29zaWq9XK9vMK1w8jTrvmc1mI/i7+ffbDuhQ5j3QheRYuQRpdC98ZVKyJHjfjz99s/5pORnT+YrdaLxSrV49xHrNuwGVwfNNHxH+HnQwAAAAAAAAAAAAAANDVID6xNOw2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHX9PwAA//+ik8pK") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000140)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x18f, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x35, 0x4, 0x3, 0x26, 0x181, 0x65, 0x1, 0x7, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x33, 0x1, 0x6, [{@private=0xa010100}, {@loopback, 0x80000000}, {@multicast2}, {@loopback, 0x6}, {@multicast2, 0xff}, {@empty, 0xc8}, {@broadcast}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2a, 0x2, [{0x2, 0xe, "7b9d87bf53c32a7ad6b8e205"}, {0x6, 0xd, "3f69a9c236fd9aa59b3638"}, {0x7, 0x3, "cc"}, {0x0, 0x6, "38e217da"}]}, @timestamp_addr={0x44, 0xc, 0x7b, 0x1, 0x1, [{@private=0xa010102, 0xfff}]}, @ra={0x94, 0x4}, @generic={0x83, 0xa, "7e2b9d3e9f6e12d4"}, @timestamp_prespec={0x44, 0x3c, 0x1c, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@empty, 0xfe70}, {@multicast1, 0x1506}, {@empty, 0x101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x80}, {@multicast1, 0x5}, {@rand_addr=0x64010100, 0x8000000}]}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xa, 0x0, 0x0, 0x5, 0x1, "fb4a07", 0x7f, "d7e19e"}, "dd818b929c10eb76aeb288786273024b5ee3b0aad5efceb929ba036a8bc520c211ccc21b755c45ad687b81babbbe472a21831e99dff4f1bcd814cc37eae09186668dbdd65e124904982bbbef4b2078ed2b5dd2f6fb2a8f09aa11cba9e526b736aa384ada42c7693d4f56cb6951759126b4e27f03c6813a83ba38662b076e40c0a357946f96bce9b148edde868c56d94fa21996ebb7d1a2c3c8993494a6"}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "786284", 0x28, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0xd600, [0x4, 0x0]}}, @generic={0x3, 0x4, "2215fffb"}]}]}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x7ff, 0x7fff, 0xcc}, 0x50) 1.607634592s ago: executing program 0 (id=1184): setresuid(0xee01, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1000) r0 = gettid() tkill(r0, 0x7) ptrace$setregset(0x4205, r0, 0x6, &(0x7f0000000040)={&(0x7f0000000600)="ddaa90ecd284bc14f94b38467c5b55935ecc063e939694deb9a5e27e00d69e7596efde814c82d40c4d619e35ba4fbb87de12375dec2a8e182820216a91f63a6c7931716b357ee77cda0b9e2f280f4c155bc4dd03e81b5fe84315b22c17f2132769d6e22170dc36eafd604c1ea95a03812948311ec15efadc7ba9f03b06d54c669af1b6108d1d", 0x86}) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x0, 0x4, 0x5, 0x0, 0x13a, 0x40100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080)}, 0x8000, 0x80000001, 0x5, 0x4, 0x6, 0xfffffff9, 0x1, 0x0, 0x800}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x81, 0x5, 0xa4, 0x20, 0x0, 0xfffffffffffff95f, 0x22601, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x11002, 0xfffffffffffff56c, 0x8, 0x2, 0xfffffffffffffffc, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x89}, r0, 0x8, r1, 0x2) 1.547778144s ago: executing program 2 (id=1186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11fb, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) 1.458045028s ago: executing program 2 (id=1187): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) ioctl$sock_SIOCGPGRP(r9, 0x8904, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)={0x2}) ioctl$TIOCGETD(r9, 0x5424, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x72d) 1.337529633s ago: executing program 5 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x18) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00040000000000000000030300"/43, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRES64=r6, @ANYRESOCT=r5], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r9}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@version_9p2000}]}}) 1.281160545s ago: executing program 2 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x20165b9a, 0x4, 0x1) 1.252500096s ago: executing program 2 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 1.220641818s ago: executing program 2 (id=1191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfffc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfffc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xd, 0x30}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xd, 0x30}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xfff1}}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000e80)="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", 0x7d}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r10, &(0x7f0000000040), 0x0, 0x300, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00'}) 903.559551ms ago: executing program 0 (id=1193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r5, r6+10000000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYBLOB="ce241e1cc47a00447d6362c6ff88dd0a6fe01d5453cf06a94aa956a94352207bb96ece135f031951a399c5273b8af8d58b6e538b5ca383defa73bcaee3ecf47600c4ef7ee2", @ANYRES16=r0, @ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 800.967616ms ago: executing program 3 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) ioperm(0x5, 0x90b, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = geteuid() openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x440842, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="46a4143553c3aed78996f27c2cc5d14684faa97bf34f816338526c697a027e38d83431290543bce55d29f275ab78d8096e353ad3f546552a6f620d4e97fb8eb539024493e84a869ecba809584d3265c1ce92ae1d56b7aeeddca39444e4151129334c158af4c72e8515370978a447ee1402b31f33048945784835509da7384cd8b5d5d2cf402c18fb8d9dfcb0b15f1d9471a57eac3874cf245d3469e9182315e8927f0106fe690e4bfc972c77f8b377842af14cdf2d6ffc99b47710351535543be0c278396f123a2e31480ae889cd8d53ccd6f7e3698248ea2228afd690d35e6be6e6280cff83e16bfec217cae2de90695334da35d1aee64155814ce024621448865002f7a43ff34d9cdccbe77648dfecda85718456ec51bf26524b508a59c04fa2cf9f100feea5fdd844adabf384b8d94ffcee6d015770ecf545730eeda15f0c3df88ef6f6dc3e7d223be894fe7e71b4521010c6cbeb96b4579933c98c79905ebb90ad3d640236d5ad088f217de05ac2e7fc24e86dbaf65eef3b59e271091991e7307bbd06f54bf1800aae053a9842ec35c8912257d69cc699cc8c973c500680fdea71b0bfbbb5d16bfcfb60ba850089987ca0394a5c3839f6d9e46e4adf16d52ab9c47115124886bd553ab56a3dea55eb624d2b032aee5cad4ed7a7377a6ab276bde26dd281c3d9a8112889e4b2ba5fbd414cb745a742f499e883d408e1b4266642105c2076824d885abf1f9180602e1ace987c82adc95d45e32d61c782179986b38e5c486c671e3f3e37ab93d4a5abea0966233996dfc6384f7e12cfe4fdfda8c0913ce50ed23bc150393b86de1d648092e692bc12c5b02d9acc06d43527b859674563897ac2204b49155f8f5ec01559650ca18de5666f281a720a24fc1832f618252a2c29a05388e1b1045b4a1288c7210371035b20bb538d584500c94e7cee795b7a6dde74686ea324dacaa212d513ab08c7676da89274ff40df76ccaf34d5ae06940078e14e71ff5289b638f418884aecc8fb5a8a90bb0df3e1eeb7159f2abd328e581b257bf9aaff8807540edb57f46a1be2a1a5200d12fa41adf99a4cdebf474a2054f33f8cc55f7c887f65df18b3223dcc1c0f36c59990d554e6bb40f09207078fbddbfba54fccb62f55d6e3707d97f8df91568a47ef14c87ef23f8b91121665a71b01dd894f1a61f0604e513182f562ebcc4f27bc0e315e9d9b26a3b4838a8ad2b05f618df982434eb322023dcaec9c50db39e9729799a0b94fad62e5f8751c9032e33eb3d5c5658eddd52a37f4115687f2682fe48627819c169598fbef9ea5ba5650815518fa4d42d943f73c2157c4727da08cff4026650493cc02a26cb1535b00cd65c1e96cc99e43569a0321bdc0d08e9630f996744ff6d7d089cae2c392cfcadb490407f3be464c0b9a6a122d7a31a34a67bce08a64f4e2bf4786413bd80dd40cc6c8a429d79773101d0972b5c7ad8233c97ff892a7598de9187134a95b9e558f98dd24384f14a2cd8bff4ffa123e3ba7a33ebe0b327d1989497df7033199084ca153ea697aa26aff9c6f78f87b3851fccdddca5b0de9109bc50c242342a586b59342df16d86d1ad8827c2ec2defec940724cff0d379c0ea545bb5a4ac5664da8b5cc273508b8fa7828aa422d745efb976c4b1bafb26ff91b8e32e8944a8cda7e28c0216c3554d8d8e6d236767cc31ed7e267e8d40c13f307dec442f58deb2bd607d263c9a12824de151702fb0f14705933716277522f0d6b700c0d45b9d80385af5524c29eef4960b13ace3d0ea55891fd4d750b4fde02a098f3b013f6c8ad92c4c3364e69d95d51626c600bddebe2e7b7cf900c967f2ae7105de9e98276e157e1d014f90b88a7fee86afaeae250b6ddda85a51f93daa55eda7ee13eb228dd6565d6cc162657f913334805fe5740745f410b6ecd0b20c3781297b025f2158530bc1428eab000289c602588aca3a7849f68b67fac32e8a3df72125282a9993ebad37a548fca1397b4f5117289a09c4abe254dc506c65f4341673c73c11fb4ea8caa82b1c3cab44c826ba893d9f499dd0c001e220c38847c95e71730d411a367d35a6cf2bb856c758100600791a9afed69a0f36fb3a5da129775afb8bb4bbd765551a98ef2a9356dc14135729c228f403369357ca65fb585e25ba1d974f764f6d9e61547c24d2821f9ddb94b748673683a9104ea9b52fca55ff3ce1db366ddb848a8a03c59aadad6c5eb311ba9b9100d1151784463efe25931c9ca2e8dbaac2b00e1e1786366dfe540c9edac5b6f567245224560300a081640997483de0c2c4c3b28e63446657e31e081854c78d374494eb0b5a7cf433de9410d95cee44bf8371d7c8deecfc0d5b52fdfc10d64c1e440e2f89185860de49ce131ed14a322a8e9eb1110b63fa8315edfb0e034eef971b0b76a74debeaddb4f128f8fccd67e7b4e714fe034fb7a525dfe1115da0fd2dbe4d9205a7a29579312ba3c5aabcdf8f757a335c728776c9f533a42b8dd2c1a4655e2a16d594062a350fcf329c9bd29fd0d69f38ba2b1fa378d6bb592175537163cd941cfea54d54130ffbd20afd860b14a6f0df4ce8bc477dbbb76f5c92dc7d737ecba0b188e89b74546d2f977d581bd95bc67763be35339420b6c98073c33123d294d56edc742687f7e347901a2241de836095894c90a675a78adf98061c9ef14030ab9f2cbc68f66413e6a6ecfeeb5cc2a1ec4aeb258eb3cd2ab087fb13401d511a222ad81aa663490aec100c08c9f4aa5b8c5a8acde06f8cf2936eb6ce397082af780ddc25f6ca97076610627047fa26dcc935f8ebed577b037183c6f7d031ab727ce8c67e31e32cf11649783a81195b85375ea443cef4707ccaee44c6942b57df0fbceeed6afe0ba76b579fde004d30065523024f4ae26bca58702be56060a0d871698da3676cd7483e66728f99fea9646338a6fc04ac23060c4b259884e1aea637ca87366d60e506b2fb014eb3e2d889648fec1c3f778867b44959a64c2f0fff2e31c9a98d91c9eac450dffa029ec243e95193bf063615d387fed88168c577a3bf4f4e6c5afc74d47caace73f8238bda446129ca59c545173591427dffbc61ea363289e95b21c069dd995395d6002b7f31b85136190a7fd7e5a1d6f16ffe46ceb19f5b3b5f5469144ad15f8982fd231112bc64241904c2bf5c3d9d99b4dce52237363a2cca816854506fd8767b5219644169e4d3c994d12911fc85968e9f48e49d9fbf729d9d078f4e05106f4522ec68da73b7720358f919baba4736f91bc3d744310ddff44c1b54c715d8139a47759eebc11122d9375df895df53a03dd780af1c05de103d205fe8b0b91aa50dff150b28bf41412b9105109485ccb5b4021cef5ef89606514f36cb04501be98712be38a949517d22644d131c49a4416dc032df429e9ef7c20631f7de7584d3960fc656e0980b85da16b3e4311f874bf766ff2c8bcd59b54ebe2264aeb2e95e575b82e94de477cd7d7be889ea415c84c9b894f0ee0e2c87ce10edb7680fc418cff36eec57fe2001b0f6ef48ac40edee8ac33ddea03f78cd1a7d28b956392c88e6878ec16d126bc8d087bc28dc4b732893dc7c4b8f19848b3712afbd391df55f8b28fad53f285dafd21a8f9afe04c359dfd7d25476a6a9ae3c9a505f2a1d2a8f211ff89d1d3d2cfb377f5f8ce89e0db85535c9f287a23f5316063864321e19d4c9995cc7fdb059ad14adad1ad6f57faed055ce24b817acac3f274860682463dcf2e40862126137e0f8bd098f3b30358c5a27fb2fa226fcb8d9f9ac8b798ed94e3007349617e98aa393e50c3e32f41e09c544b60e1167ce68e6cf2d66df326e3b3ecfe053ac67e9893cd715e6be0859357d574aa11b179df55f3766acdaba4b6f238c0c8e5281cd32bde3e465b640813cee47971e2ba66a8afe25cb5bf37ac4d612069d824fda09d2926f845e4aa8b72c355871b503f70bb6eaa0e189b23fe15928bf4badf3e05f9d95b6ea856f001f655dd1f7ac649a53bcf44b3eca6c4d9e564702e8e510dacab2b30f49bc9cc7b6ef6c06322fd35769e78cafc3affcb104790a6eaa0b6c6c7608f7e72f4a50c7a49874027dfa57bd22e73a1c2cfb1fe764c4d1bccea8a86f89bff52830f32abf5b5cf8c6cb5ca310413c2d0411d0951343dfc3dfc6d6f0b359d5f037e2426acd2f1715c0a6409be609b7d3f3ddcce74da91c08da4fdebd52a8e9f9fbdfb1fc9bf8124d4bbf4f5c427e3ad863a22a46d9f1d0483b9ff3fa7c84b059ac5a72f68f0ba93f566b4f1ce1798f38ffdbb2eb3b24173ca49e87b6272c4491a20a0c7b7ac6bc4d0133295fa99f5890b4d4331133f70e77b831cfa97bb48932c33adbdb1eb4ab01bdb039bc20781dbe736e52852328df58ccbe5faa949c04a3e383db1b5a3c191984e1992499a7e53fdbb8aff5c940ad66ead7af423f104a7f38c8affb6fd9a84576aa3914f0f7bd1b97a4686846173fc16ed7ad22b55cf501b9b72affe341449ca411354f521dc64a55876b00453e7c6ce153d899c01b88ab7c90fa6e92cb99158dd24e8930166fec389c145074a1f8a0728893f0e5831e65710ea4c266fc7971d70f07e66a0ee811425c47d65068eaf655bdc1b0942366f7d1e2ed5a8c564c08436b322af7256eba0627c401cfcd4bb063ec732897951d74452e0eb70944e96bf2a2bfef74901313bf18d93ed9b5f58c2d64df913922cc3fa6ab823b7a697455c2695cd7377103c099700586167de8370e3c02bb7953360192e9249316600726ffeae9f6151f9a2a7f4f7755e0304e2fb70731633e7c3a54c43a0348ace585f5d8afdb964df60aeb60b28adfecc8f2679124ae29749e8d74062d037877bb7501c91b4c3776625130308423689e398857859922001a14d0c594122422b7249a82af11272003a798287f2c8dab631bc607cf993ebb0f390e570b72fcdc051d15fb1e7ce05113dcbd3a926c2e9c272bde36307fb777701a0410523576f731bd51b1b1b260e1f1c0406b09a287f09e5c2a1bcf1a5bf574dd2596ac48829130d6e30c56b48869325f69014202155c60154dc3abc16012986e9a0ee371056536ec03414b7cb1220f73fb2fd1c0e26c2d5ab1aff5b663c96bf7caa01b1c769481cfbd3ea25d58f425088c25dd55d45fb72dacbbc57791112259b14c247bbaf22c9c7d4f52d056daf2970cff28f75b474fbb6d4e379849575ac728de163c8da99497cab017cad0de91824d00e258a23691570431c018c5d0d37b1644c41baf7d94a7531d392ecdbbb80f44bc8e4407ed73549b855a4e5366404e16c0f11f27fd851b614cb1f8be3fb2cc54a5fb73eb42f334de74d2cb9f95be18de76e1bd6c11dd6bc8824765cf0985366469a7bd35cc35be2a43059a5c210d8a6bccfbf4012abc3761b7ee1da38c1be4b95e32c0a8f73329776594faa56dec50c4ea1ff6c48c58d98724c2a3b7da11708fdc6b3b5765de11e2690f0d2d5545667bdd12bf2b6eb27952f50b27d15afedab1d0d7ef1e3661cd70112b1585f089427cd143ec0cdda4a0899f5e856705b1456d70550dba84a81228aaa43261900dcec6b39abb32c5a0c4112fa7947f80c86e97c25e2bb294277cced8fc2a865a21c793effa06ebb896a87e041cba1edae06da585843b618fbdd2d70a147a91fc27e25408f6819cb4d2f95a643535e4a15c4b3977737bff04b68772f261502222ce40305ac30eec52fe7846a7901f0316081f591efb0515fa4b65b35e1b7975d91e55fc087bcbeffcf0d030c9543cba5fd895a2eaf979af7436823f21412cc0a00020026272b7d2e0000000800a200", @ANYRES32=r5, @ANYBLOB="0a022c800900b400f0d54d9d6c00000004000d807ff744b5450e16a62e170bb6364176554611408fe98848d176010626406d61b6ddb88931ea2eec4c04463d4bb7136451ebb52bded6135ce66a2e64354437badcb3134a1a9ca013f3d9e2c2b2229da7b55848324e18d0041c8ec703037920c7e9d4f7885195fb40125839c81478acd323eb3b51b4112a375358dba02aa06b055efd6911e541d2a9a82baa1ae72fc8cd9253de853028a5c83b963518c659b17a7a30a9dff66a3fa1177249f97cef12a0f6c7b6f19c02738bc729ff2f2cdf751821b09d219107d04b250705770a9673d6383a06e688f389f47ae68374d72d93e6790fca98162cd7990c56040050801b37884ca6ec17b116b1904cc53c5a7e591468a1736e918a8b97ff417bf9c38c041035314608004600", @ANYRES32=r0, @ANYBLOB="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"], 0x123c}}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x9, &(0x7f0000000040)={0x5, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 765.679867ms ago: executing program 2 (id=1195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x648, 0x15}, 0xb28, 0x6, 0x0, 0x1, 0x8, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x800000, &(0x7f0000000a40)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@norecovery}, {@lazytime}]}, 0xfd, 0x4be, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000b40)=@nullb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xfffffffffffffccc, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000240)=@nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="c54ff8bbfbff3ae734bf204724b1ef294a1163106dbbdf33ee805a6e8434e511c4f5627b67f91efb8e58b86c7c0280d0c5f07cf9e6f20ab639181495be982dd9dfc9f268f2e65bb86c8d4f1c3a5cc30e1bff467cec731387c436b6105be400baa83b56e98970038bd921a5f83532bb88e824c6606810255f175fd3698c81b0e51e0ce44d1647d71ddf563932b1c2e0adba5c7d7a74", 0x95}, {&(0x7f00000007c0)="669eb6aea36803c0cccdc3340d084ffe4259625463678e42fc72c6d9c9587e52489bab2869763bbb22b852e5ce303d6e202fd1d967f07dafe65191aa49eb903c99f6a606a667b2dfbd0d5c274971a356a9aa82e2ea022273e7dbe24287e41225bc5389bca98c8bcbc66be5acdbde0a11c8077e3463043a4d8e4f05f602abcf4f7d88e9856297a908b9795efdb9e63b947d9c3b12000917ff3f3ed1f1f18f0bccad4e208d78163d0c5673991777f42e151c", 0xb1}, {&(0x7f0000000880)="18ccf1e3567b2b280d85c0c0edad6ff1089ddb2b2d85808e6f348694c933986e9750d0de29951f11c254003de806210699545b6e49b5572f85864f71c0c3af83aa8d5ae08cecdb3541c10ae84f01275568db59b9a7ca44f502e98a1597d73890", 0x60}], 0x3}, 0x400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r4}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmmsg$sock(r3, &(0x7f0000000640)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="978207465f6143bd49dc3befdb498e45437f88c33155f98b799bd9c9b45766b71766d9fb935eb96fe71fa680f8f487", 0x2f}, {&(0x7f00000002c0)="ca9993447a14af3750d2b34d876d997b2098c895545a5aeb06410f03c5caa943a6ec73ecebdcff18ff217d5e1dd718f38e833e4530fe1e5c3f7ca0deb09b3dbb2cb389e599faccb3e96ee9ecd906994b992394670da97b1df969408de484264d6c04fb8b11f108d09fc00a262533ddaacc8e40f8008a", 0x76}, {&(0x7f0000000140)="85bcce9a917d46210a7558c9ccf0fc73b48d1fbf09037f589ea3bb5efb", 0x1d}, {&(0x7f0000000340)="8a8fbbdb94e29254888d4a00b76905ffbbb385329df59f3aaada888d3509546fb236721d3aa0fb59d121d5102b99044665da6435daa83195df43201952039352b2feb27f6de67c2eb8ee3294a6684794164e737bbbcfff189161d75836a053fc637db789fc40b0ae330def50dbd1f4eb4343bdcaa42496af", 0x78}, {&(0x7f00000004c0)="4e3fb6c497b2a03b7cf989b6fe46b0d015955329641b72f719902f4c9aa8787fb54aadbbb79285e31a2d7adb8f762712aeb1bfc8d50b9a3a8c86ada89b7d0e3c0a6560924c830e58b57c9b6236a593d9643441e2a1ec637f681f698048f3471280426e62b787f4ecdd6fece4bad9cb8f395c2c0061a11f29b2c1cd3268241d3f4b61ab4faf4000d92fa7cecf51f4aac2113222d01c352a97d9f910e8788875d32de5709ad9da94755eac1cfb300a8b4f290edaaf75eded56a77f3f5e9bcc954b6ed7f6d8f39126140964f478a41bbee32c17b9273324d22579ea25", 0xdb}], 0x5, &(0x7f00000003c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x4008000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r9, 0x2007ffb) sendfile(r9, r9, 0x0, 0x1000000201005) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x59d302, 0x0) poll(&(0x7f0000000380)=[{r10, 0x201}, {r10, 0x8228}], 0x2, 0x80000001) 641.342732ms ago: executing program 3 (id=1198): preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4078, 0xe0}], 0x1, 0xf3, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000280)=@tcp, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") 568.374366ms ago: executing program 3 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1a0, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 550.610097ms ago: executing program 3 (id=1202): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) 439.163731ms ago: executing program 5 (id=1204): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000400081e0000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 262.048019ms ago: executing program 1 (id=1208): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000002}, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x1000, 0x1, 0x2bf}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x6000}) io_uring_enter(r3, 0x1b96, 0x106a, 0x22, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0xa, 0xa, 0x9, 0x100000001, 0x2, r2}) waitid(0x1, r8, &(0x7f0000000280), 0x1, &(0x7f0000000300)) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES16=r2, @ANYRES64, @ANYRES64, @ANYRES32], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000000), &(0x7f0000000180)=r13}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000000004000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r14 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r14, 0xc0105512, &(0x7f0000000200)) 227.55826ms ago: executing program 1 (id=1209): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf21670000000800c400020000000800c3"], 0x24}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x600000000000, 0x2c0000) ioctl$BLKOPENZONE(r5, 0x40101286, &(0x7f0000000140)={0x3, 0x3}) write$tun(0xffffffffffffffff, 0x0, 0x46) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r6, 0x4b72, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x5, 0xb, "0060930000efa4890205000000000100f16200"}) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000080)) 174.319813ms ago: executing program 1 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000002}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a000700726f"], 0xf4}}, 0x10) 173.550272ms ago: executing program 1 (id=1211): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x8c, 0x30, 0x1, 0x1000, 0x25dfdbfc, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 141.121043ms ago: executing program 1 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 114.468525ms ago: executing program 1 (id=1213): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x0, 0x0, 0x192}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r7, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000280)) fcntl$setownex(r2, 0xf, 0x0) ioctl$TIOCGETD(r9, 0x5424, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x72d) 64.534227ms ago: executing program 0 (id=1214): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000dc0)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='\"', 0x1, 0x3) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xdb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 0s ago: executing program 0 (id=1215): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a0, &(0x7f0000000e00)="$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") (fail_nth: 9) kernel console output (not intermixed with test programs): ty change from 0 to 512 [ 82.524672][ T5481] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.525832][ T5479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.725055][ T5486] loop5: detected capacity change from 0 to 1024 [ 82.734946][ T5486] EXT4-fs: inline encryption not supported [ 82.742101][ T5486] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.754114][ T5486] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 82.763135][ T5486] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.602: lblock 2 mapped to illegal pblock 2 (length 1) [ 82.777531][ T5486] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.602: lblock 0 mapped to illegal pblock 48 (length 1) [ 82.792422][ T5486] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.602: Failed to acquire dquot type 0 [ 82.804475][ T5486] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 82.814405][ T5486] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.602: mark_inode_dirty error [ 82.826569][ T5486] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 82.920517][ T5495] lo speed is unknown, defaulting to 1000 [ 82.926840][ T5495] wg1 speed is unknown, defaulting to 1000 [ 83.057231][ T5486] EXT4-fs (loop5): 1 orphan inode deleted [ 83.071369][ T786] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.181296][ T786] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 83.199289][ T5486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.237890][ T5486] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.602: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.479828][ T5504] loop0: detected capacity change from 0 to 1024 [ 83.501967][ T5504] EXT4-fs: inline encryption not supported [ 83.516433][ T5503] siw: device registration error -23 [ 83.527920][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.542143][ T5504] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.581085][ T5504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 83.591926][ T5504] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.604: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.606575][ T5504] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.604: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.621692][ T5504] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.604: Failed to acquire dquot type 0 [ 83.633344][ T5504] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 83.643580][ T5504] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.604: mark_inode_dirty error [ 83.646816][ T5507] xt_hashlimit: max too large, truncated to 1048576 [ 83.696528][ T5504] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 83.717144][ T5504] EXT4-fs (loop0): 1 orphan inode deleted [ 83.730545][ T5504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.743070][ T41] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.806128][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 83.820938][ T5493] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.604: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.837128][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.951755][ T5518] loop5: detected capacity change from 0 to 512 [ 83.966514][ T5518] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 83.987545][ T5518] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.610: bg 0: block 104: invalid block bitmap [ 84.021518][ T5518] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 84.032185][ T5518] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.610: invalid indirect mapped block 1 (level 1) [ 84.047200][ T5518] EXT4-fs (loop5): 1 truncate cleaned up [ 84.049490][ T5525] bridge0: entered allmulticast mode [ 84.062091][ T5518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.082192][ T5525] pim6reg: entered allmulticast mode [ 84.089921][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.113477][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 84.113505][ T29] audit: type=1326 audit(84.100:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.115142][ T5509] lo speed is unknown, defaulting to 1000 [ 84.122327][ T29] audit: type=1326 audit(84.100:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.163815][ T5509] wg1 speed is unknown, defaulting to 1000 [ 84.170584][ T29] audit: type=1326 audit(84.100:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.198951][ T29] audit: type=1326 audit(84.100:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.221606][ T29] audit: type=1326 audit(84.100:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.244187][ T29] audit: type=1400 audit(84.100:2773): avc: denied { getopt } for pid=5524 comm="syz.2.611" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.263762][ T29] audit: type=1326 audit(84.100:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.286389][ T29] audit: type=1326 audit(84.100:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.309082][ T29] audit: type=1326 audit(84.100:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.331696][ T29] audit: type=1326 audit(84.100:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5524 comm="syz.2.611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 84.358153][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.406999][ T5529] netlink: 'syz.5.612': attribute type 83 has an invalid length. [ 84.439746][ T5543] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.495705][ T5549] serio: Serial port ptm1 [ 84.539330][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 84.600867][ T5558] netlink: 'syz.1.623': attribute type 21 has an invalid length. [ 84.608717][ T5558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.623'. [ 84.617745][ T5558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 84.923526][ T5569] loop0: detected capacity change from 0 to 512 [ 84.941544][ T5569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.021500][ T5569] lo speed is unknown, defaulting to 1000 [ 85.027835][ T5569] wg1 speed is unknown, defaulting to 1000 [ 85.102615][ T5576] loop5: detected capacity change from 0 to 512 [ 85.109365][ T5576] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 85.142678][ T5576] netlink: 'syz.5.628': attribute type 21 has an invalid length. [ 85.160240][ T5576] netlink: 132 bytes leftover after parsing attributes in process `syz.5.628'. [ 85.169235][ T5576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.628'. [ 85.346190][ T5579] xt_connbytes: Forcing CT accounting to be enabled [ 85.360417][ T5579] Cannot find set identified by id 0 to match [ 85.574108][ T5590] xt_hashlimit: max too large, truncated to 1048576 [ 85.617077][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 85.938297][ T5608] loop3: detected capacity change from 0 to 512 [ 85.945301][ T5608] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.413849][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.473560][ T5627] set match dimension is over the limit! [ 86.495491][ T5629] loop5: detected capacity change from 0 to 512 [ 86.507411][ T5629] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.698097][ T5639] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.710438][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.651'. [ 86.748652][ T5643] loop5: detected capacity change from 0 to 128 [ 86.759909][ T5643] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 86.783177][ T5646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.655'. [ 86.865222][ T5652] netlink: 'syz.5.654': attribute type 2 has an invalid length. [ 87.045159][ T5660] loop1: detected capacity change from 0 to 1024 [ 87.057303][ T5660] EXT4-fs: inline encryption not supported [ 87.068496][ T5660] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.108944][ T5660] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 87.130812][ T5660] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.656: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.186918][ T5660] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.656: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.210790][ T5660] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.656: Failed to acquire dquot type 0 [ 87.214019][ T5661] loop3: detected capacity change from 0 to 1024 [ 87.238607][ T5660] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 87.253808][ T5670] loop5: detected capacity change from 0 to 1024 [ 87.260338][ T5660] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.656: mark_inode_dirty error [ 87.260704][ T5661] EXT4-fs: inline encryption not supported [ 87.287909][ T5660] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 87.308847][ T5670] EXT4-fs: Ignoring removed bh option [ 87.315276][ T5660] EXT4-fs (loop1): 1 orphan inode deleted [ 87.326378][ T5661] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.327561][ T5660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.349461][ T58] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.386167][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 87.400608][ T5670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.419228][ T5675] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.429731][ T5661] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 87.440133][ T5661] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.658: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.466877][ T5661] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.658: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.493163][ T5653] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.656: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.510790][ T5661] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.658: Failed to acquire dquot type 0 [ 87.608242][ T5661] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 87.618192][ T5661] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.658: mark_inode_dirty error [ 87.629747][ T5661] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 87.641925][ T5661] EXT4-fs (loop3): 1 orphan inode deleted [ 87.648182][ T5661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.660969][ T58] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.677011][ T58] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 87.706518][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.719661][ T5661] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.658: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.761601][ T5685] netlink: 44 bytes leftover after parsing attributes in process `syz.5.667'. [ 87.880900][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.943076][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.026994][ T5706] serio: Serial port ptm0 [ 88.212368][ T5709] loop3: detected capacity change from 0 to 512 [ 88.233671][ T5709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.303002][ T5714] EXT4-fs error (device loop3): ext4_get_first_dir_block:3537: inode #12: block 32: comm syz.3.674: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 88.323947][ T5714] EXT4-fs error (device loop3): ext4_get_first_dir_block:3540: inode #12: comm syz.3.674: directory missing '.' [ 88.452946][ T5716] loop0: detected capacity change from 0 to 512 [ 88.503023][ T5716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.521542][ T5716] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz.0.676: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 88.541465][ T5716] EXT4-fs (loop0): Remounting filesystem read-only [ 88.548079][ T5716] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #12: comm syz.0.676: directory missing '.' [ 88.596846][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.849425][ T5739] Cannot find set identified by id 0 to match [ 89.293633][ T5759] loop3: detected capacity change from 0 to 512 [ 89.306437][ T5759] SELinux: security_context_str_to_sid () failed with errno=-22 [ 89.343733][ T5759] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 89.347948][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 89.347961][ T29] audit: type=1400 audit(89.270:2938): avc: denied { nlmsg_write } for pid=5758 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 89.350215][ T5759] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 89.424876][ T5759] lo speed is unknown, defaulting to 1000 [ 89.430931][ T5759] wg1 speed is unknown, defaulting to 1000 [ 89.528392][ T5762] xt_hashlimit: max too large, truncated to 1048576 [ 89.610959][ T5767] openvswitch: netlink: Missing key (keys=40, expected=80) [ 89.737223][ T29] audit: type=1326 audit(89.720:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.3.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf9933f749 code=0x0 [ 89.800247][ T29] audit: type=1326 audit(89.780:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.822910][ T29] audit: type=1326 audit(89.780:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.845539][ T29] audit: type=1326 audit(89.780:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.852629][ T5778] Cannot find set identified by id 0 to match [ 89.868301][ T29] audit: type=1326 audit(89.780:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.897097][ T29] audit: type=1326 audit(89.780:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.919882][ T29] audit: type=1326 audit(89.780:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.942740][ T29] audit: type=1326 audit(89.790:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 89.965364][ T29] audit: type=1326 audit(89.790:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.5.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 90.033414][ T5787] loop5: detected capacity change from 0 to 1024 [ 90.054305][ T5787] EXT4-fs: Ignoring removed bh option [ 90.121422][ T5796] loop5: detected capacity change from 0 to 1024 [ 90.131423][ T5796] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 90.201559][ T5798] loop5: detected capacity change from 0 to 1024 [ 90.210976][ T5798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.219481][ T5798] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.230011][ T5798] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 90.238129][ T5798] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.244694][ T5798] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 90.259399][ T5798] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 90.266205][ T5798] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.703: Freeing blocks not in datazone - block = 0, count = 4096 [ 90.279632][ T5798] EXT4-fs (loop5): 1 orphan inode deleted [ 90.286800][ T5798] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.703: iget: bad extended attribute block 6 [ 90.299595][ T5798] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 90.309237][ T5798] SELinux: failed to load policy [ 90.933932][ T5812] bridge: RTM_NEWNEIGH with invalid ether address [ 91.037827][ T5822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.711'. [ 91.117331][ T5825] lo speed is unknown, defaulting to 1000 [ 91.124385][ T5825] wg1 speed is unknown, defaulting to 1000 [ 91.344587][ T5833] loop1: detected capacity change from 0 to 1024 [ 91.351579][ T5833] EXT4-fs: Ignoring removed bh option [ 91.410029][ T5838] tmpfs: Bad value for 'mpol' [ 91.508459][ T5850] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 91.559551][ T5856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.722'. [ 91.617751][ T5863] loop1: detected capacity change from 0 to 1024 [ 91.632569][ T5863] EXT4-fs: Ignoring removed bh option [ 91.723550][ T5866] FAULT_INJECTION: forcing a failure. [ 91.723550][ T5866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.736780][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.736809][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.736821][ T5866] Call Trace: [ 91.736827][ T5866] [ 91.736835][ T5866] __dump_stack+0x1d/0x30 [ 91.736855][ T5866] dump_stack_lvl+0xe8/0x140 [ 91.736872][ T5866] dump_stack+0x15/0x1b [ 91.736966][ T5866] should_fail_ex+0x265/0x280 [ 91.736997][ T5866] should_fail+0xb/0x20 [ 91.737010][ T5866] should_fail_usercopy+0x1a/0x20 [ 91.737029][ T5866] _copy_from_user+0x1c/0xb0 [ 91.737053][ T5866] kstrtouint_from_user+0x69/0xf0 [ 91.737135][ T5866] ? 0xffffffff81000000 [ 91.737145][ T5866] ? selinux_file_permission+0x1e4/0x320 [ 91.737175][ T5866] proc_fail_nth_write+0x50/0x160 [ 91.737267][ T5866] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 91.737297][ T5866] vfs_write+0x269/0x960 [ 91.737321][ T5866] ? vfs_read+0x4e6/0x770 [ 91.737343][ T5866] ? __rcu_read_unlock+0x4f/0x70 [ 91.737434][ T5866] ? __fget_files+0x184/0x1c0 [ 91.737459][ T5866] ksys_write+0xda/0x1a0 [ 91.737485][ T5866] __x64_sys_write+0x40/0x50 [ 91.737509][ T5866] x64_sys_call+0x2802/0x3000 [ 91.737531][ T5866] do_syscall_64+0xd2/0x200 [ 91.737549][ T5866] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 91.737572][ T5866] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 91.737617][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.737637][ T5866] RIP: 0033:0x7f291e68e1ff [ 91.737652][ T5866] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 91.737671][ T5866] RSP: 002b:00007f291d0d6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 91.737691][ T5866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f291e68e1ff [ 91.737704][ T5866] RDX: 0000000000000001 RSI: 00007f291d0d60a0 RDI: 0000000000000007 [ 91.737781][ T5866] RBP: 00007f291d0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 91.737793][ T5866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 91.737806][ T5866] R13: 00007f291e8e6128 R14: 00007f291e8e6090 R15: 00007fff6f842338 [ 91.737823][ T5866] [ 92.016360][ T5870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.727'. [ 92.183885][ T5880] loop9: detected capacity change from 0 to 7 [ 92.183890][ T5881] program syz.2.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.199390][ T5880] buffer_io_error: 16 callbacks suppressed [ 92.199404][ T5880] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.213323][ T5880] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.221149][ T5880] loop9: unable to read partition table [ 92.226785][ T5880] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 92.226785][ T5880] ) failed (rc=-5) [ 92.228431][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.261286][ T5882] loop2: detected capacity change from 0 to 128 [ 92.285050][ T5882] bio_check_eod: 30 callbacks suppressed [ 92.285117][ T5882] syz.2.730: attempt to access beyond end of device [ 92.285117][ T5882] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 92.309992][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.327302][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.356650][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.386910][ T3305] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.616106][ T5893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 93.400575][ T5916] loop1: detected capacity change from 0 to 512 [ 93.675484][ T5916] lo speed is unknown, defaulting to 1000 [ 93.702924][ T5916] wg1 speed is unknown, defaulting to 1000 [ 93.740002][ T5926] loop2: detected capacity change from 0 to 256 [ 93.832534][ T5925] lo speed is unknown, defaulting to 1000 [ 93.844932][ T5925] wg1 speed is unknown, defaulting to 1000 [ 93.995948][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.746'. [ 94.250537][ T5942] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.751' sets config #1 [ 94.276941][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.751'. [ 94.532970][ T5955] loop2: detected capacity change from 0 to 1024 [ 94.539719][ T5955] SELinux: security_context_str_to_sid (sysad) failed with errno=-22 [ 94.554916][ T5955] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 95.072892][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 95.072907][ T29] audit: type=1326 audit(95.068:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.175666][ T29] audit: type=1326 audit(95.098:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.198218][ T29] audit: type=1326 audit(95.098:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.220913][ T29] audit: type=1326 audit(95.098:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.243548][ T29] audit: type=1326 audit(95.098:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.266289][ T29] audit: type=1326 audit(95.098:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.288983][ T29] audit: type=1326 audit(95.098:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.311705][ T29] audit: type=1326 audit(95.098:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.334312][ T29] audit: type=1326 audit(95.098:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.356470][ T29] audit: type=1326 audit(95.098:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 95.401839][ T5964] loop2: detected capacity change from 0 to 1024 [ 95.426114][ T5964] EXT4-fs: Ignoring removed bh option [ 95.470970][ T5957] loop0: detected capacity change from 0 to 8192 [ 95.504154][ T5969] Cannot find set identified by id 0 to match [ 95.522855][ T5967] loop0: p1 p2 p3 p4 [ 95.527132][ T5967] loop0: p1 size 196608 extends beyond EOD, truncated [ 95.554845][ T5967] loop0: p2 start 164919041 is beyond EOD, truncated [ 95.561595][ T5967] loop0: p3 size 66846464 extends beyond EOD, truncated [ 95.620505][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.5.758'. [ 95.655344][ T5967] loop0: p4 size 37048832 extends beyond EOD, truncated [ 95.669479][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 95.678461][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 95.687410][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 95.740344][ T5957] loop0: p1 p2 p3 p4 [ 95.744394][ T5957] loop0: p1 size 196608 extends beyond EOD, truncated [ 95.760447][ T5957] loop0: p2 start 164919041 is beyond EOD, truncated [ 95.767152][ T5957] loop0: p3 size 66846464 extends beyond EOD, truncated [ 95.794789][ T5957] loop0: p4 size 37048832 extends beyond EOD, truncated [ 95.892535][ T5988] hsr_slave_1 (unregistering): left promiscuous mode [ 95.911039][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 95.933977][ T5991] loop5: detected capacity change from 0 to 512 [ 95.936011][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 95.953372][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 95.973032][ T5991] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.762: corrupted inode contents [ 95.992476][ T5993] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 96.012232][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.013604][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 96.023830][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 96.051700][ T5991] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 96.063124][ T5991] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.762: corrupted inode contents [ 96.106292][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 96.106462][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 96.117353][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 96.136876][ T5991] EXT4-fs error (device loop5): ext4_evict_inode:302: inode #15: comm syz.5.762: mark_inode_dirty error [ 96.155734][ T5991] EXT4-fs (loop5): 1 orphan inode deleted [ 96.211004][ T6006] xt_hashlimit: max too large, truncated to 1048576 [ 96.267254][ T6011] __nla_validate_parse: 7 callbacks suppressed [ 96.267288][ T6011] netlink: 60 bytes leftover after parsing attributes in process `syz.0.770'. [ 96.295971][ T6008] Cannot find set identified by id 0 to match [ 96.365330][ T6018] ±ÿ: renamed from team_slave_1 (while UP) [ 96.433428][ T6022] loop0: detected capacity change from 0 to 2048 [ 96.471491][ T6022] Alternate GPT is invalid, using primary GPT. [ 96.477749][ T6022] loop0: p1 p2 p3 [ 96.481528][ T6022] loop0: partition table partially beyond EOD, truncated [ 96.559754][ T3535] udevd[3535]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 96.570043][ T6028] loop0: detected capacity change from 0 to 1024 [ 96.593876][ T6028] vlan0: entered allmulticast mode [ 96.599177][ T6028] hsr0: entered allmulticast mode [ 96.604354][ T6028] hsr_slave_0: entered allmulticast mode [ 96.610117][ T6028] hsr_slave_1: entered allmulticast mode [ 96.640979][ T6035] syz.0.776 uses obsolete (PF_INET,SOCK_PACKET) [ 96.966901][ T6039] loop3: detected capacity change from 0 to 1024 [ 96.982628][ T6049] loop0: detected capacity change from 0 to 1024 [ 96.991891][ T6039] EXT4-fs: inline encryption not supported [ 97.293513][ T6052] netlink: 'syz.5.784': attribute type 4 has an invalid length. [ 97.305196][ T6052] netlink: 152 bytes leftover after parsing attributes in process `syz.5.784'. [ 97.323895][ T6049] EXT4-fs: Ignoring removed bh option [ 97.334984][ T6039] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.360987][ T6039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 97.385098][ T6039] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.780: lblock 2 mapped to illegal pblock 2 (length 1) [ 97.410563][ T6039] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.780: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.437288][ T6057] loop5: detected capacity change from 0 to 512 [ 97.444783][ T6039] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.780: Failed to acquire dquot type 0 [ 97.543315][ T6039] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 97.552993][ T6057] EXT4-fs: inline encryption not supported [ 97.558908][ T6057] EXT4-fs: Ignoring removed i_version option [ 97.581602][ T6039] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.780: mark_inode_dirty error [ 97.601925][ T6057] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.786: inode has both inline data and extents flags [ 97.635601][ T6039] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 97.668314][ T6057] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.786: couldn't read orphan inode 15 (err -117) [ 97.697058][ T6039] EXT4-fs (loop3): 1 orphan inode deleted [ 97.731579][ T41] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 97.760698][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 97.785197][ T6039] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.780: lblock 0 mapped to illegal pblock 48 (length 1) [ 97.791822][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 97.808584][ T6066] loop5: detected capacity change from 0 to 512 [ 97.827045][ T6066] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.788: couldn't read orphan inode 26 (err -116) [ 97.860282][ T6066] FAULT_INJECTION: forcing a failure. [ 97.860282][ T6066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.873480][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.5.788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.873506][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.873519][ T6066] Call Trace: [ 97.873527][ T6066] [ 97.873535][ T6066] __dump_stack+0x1d/0x30 [ 97.873561][ T6066] dump_stack_lvl+0xe8/0x140 [ 97.873577][ T6066] dump_stack+0x15/0x1b [ 97.873619][ T6066] should_fail_ex+0x265/0x280 [ 97.873656][ T6066] should_fail+0xb/0x20 [ 97.873673][ T6066] should_fail_usercopy+0x1a/0x20 [ 97.873695][ T6066] strncpy_from_user+0x25/0x230 [ 97.873726][ T6066] ? kmem_cache_alloc_noprof+0x242/0x480 [ 97.873770][ T6066] ? getname_flags+0x80/0x3b0 [ 97.873799][ T6066] getname_flags+0xae/0x3b0 [ 97.873825][ T6066] __se_sys_quotactl+0x16a/0x670 [ 97.873846][ T6066] ? fput+0x8f/0xc0 [ 97.873893][ T6066] __x64_sys_quotactl+0x55/0x70 [ 97.873912][ T6066] x64_sys_call+0x15d6/0x3000 [ 97.873929][ T6066] do_syscall_64+0xd2/0x200 [ 97.873946][ T6066] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 97.874014][ T6066] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 97.874044][ T6066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.874064][ T6066] RIP: 0033:0x7ff79ccaf749 [ 97.874105][ T6066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.874122][ T6066] RSP: 002b:00007ff79b717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 97.874214][ T6066] RAX: ffffffffffffffda RBX: 00007ff79cf05fa0 RCX: 00007ff79ccaf749 [ 97.874226][ T6066] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000600 [ 97.874237][ T6066] RBP: 00007ff79b717090 R08: 0000000000000000 R09: 0000000000000000 [ 97.874250][ T6066] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 97.874284][ T6066] R13: 00007ff79cf06038 R14: 00007ff79cf05fa0 R15: 00007fffbe409408 [ 97.874300][ T6066] [ 98.233140][ T6074] usb usb5: usbfs: process 6074 (syz.5.790) did not claim interface 0 before use [ 98.410218][ T6074] mmap: syz.5.790 (6074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.463308][ T6081] loop3: detected capacity change from 0 to 512 [ 98.493003][ T6081] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.574927][ T6102] loop3: detected capacity change from 0 to 512 [ 99.756960][ T6102] EXT4-fs mount: 25 callbacks suppressed [ 99.756978][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.822168][ T6102] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #12: block 32: comm syz.3.800: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 99.913778][ T6102] EXT4-fs (loop3): Remounting filesystem read-only [ 99.920342][ T6102] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #12: comm syz.3.800: directory missing '.' [ 100.121882][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.149828][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 100.149925][ T29] audit: type=1400 audit(100.138:3312): avc: denied { read } for pid=6109 comm="syz.0.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 100.218693][ T29] audit: type=1326 audit(100.208:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6116 comm="syz.5.805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x0 [ 100.260798][ T6121] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 100.273943][ T6122] netlink: 552 bytes leftover after parsing attributes in process `syz.1.807'. [ 100.285860][ T6122] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 100.456382][ T29] audit: type=1326 audit(100.448:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.479120][ T29] audit: type=1326 audit(100.448:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.507545][ T29] audit: type=1326 audit(100.448:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.530519][ T29] audit: type=1326 audit(100.448:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.553289][ T29] audit: type=1326 audit(100.448:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.576305][ T29] audit: type=1326 audit(100.498:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.599063][ T29] audit: type=1326 audit(100.498:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.621968][ T29] audit: type=1326 audit(100.498:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6136 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 100.878769][ T6154] loop1: detected capacity change from 0 to 1024 [ 100.896243][ T6154] EXT4-fs: inline encryption not supported [ 100.920470][ T6154] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.947362][ T6154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 100.971836][ T6159] xt_hashlimit: max too large, truncated to 1048576 [ 100.976378][ T6154] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.815: lblock 2 mapped to illegal pblock 2 (length 1) [ 101.016630][ T6154] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.815: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.089931][ T6154] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.815: Failed to acquire dquot type 0 [ 101.112433][ T6154] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 101.124896][ T6154] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.815: mark_inode_dirty error [ 101.168776][ T6154] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 101.200630][ T6154] EXT4-fs (loop1): 1 orphan inode deleted [ 101.219343][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.232022][ T58] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 101.256630][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 101.279612][ T6151] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.815: lblock 0 mapped to illegal pblock 48 (length 1) [ 101.284525][ T6177] loop5: detected capacity change from 0 to 1024 [ 101.304806][ T6177] EXT4-fs: Ignoring removed bh option [ 101.331320][ T6177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.363846][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.422626][ T6185] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 101.481587][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 101.527395][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.050103][ T6206] loop3: detected capacity change from 0 to 2048 [ 102.107262][ T3513] Alternate GPT is invalid, using primary GPT. [ 102.113646][ T3513] loop3: p2 p3 p7 [ 102.165904][ T6206] Alternate GPT is invalid, using primary GPT. [ 102.172365][ T6206] loop3: p2 p3 p7 [ 102.632632][ T6224] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 102.705453][ T6232] FAULT_INJECTION: forcing a failure. [ 102.705453][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 102.718173][ T6232] CPU: 0 UID: 0 PID: 6232 Comm: syz.5.844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.718243][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.718255][ T6232] Call Trace: [ 102.718262][ T6232] [ 102.718270][ T6232] __dump_stack+0x1d/0x30 [ 102.718293][ T6232] dump_stack_lvl+0xe8/0x140 [ 102.718319][ T6232] dump_stack+0x15/0x1b [ 102.718333][ T6232] should_fail_ex+0x265/0x280 [ 102.718364][ T6232] should_failslab+0x8c/0xb0 [ 102.718462][ T6232] __kvmalloc_node_noprof+0x12e/0x670 [ 102.718528][ T6232] ? __nf_hook_entries_try_shrink+0x265/0x460 [ 102.718547][ T6232] __nf_hook_entries_try_shrink+0x265/0x460 [ 102.718568][ T6232] __nf_unregister_net_hook+0x2d1/0x3b0 [ 102.718609][ T6232] nf_unregister_net_hooks+0xab/0xe0 [ 102.718628][ T6232] nf_ct_netns_do_put+0x1c6/0x260 [ 102.718645][ T6232] nf_ct_netns_put+0xea/0x1f0 [ 102.718660][ T6232] xt_ct_tg_destroy+0x103/0x190 [ 102.718704][ T6232] xt_ct_tg_destroy_v0+0xbb/0xe0 [ 102.718733][ T6232] ? __pfx_xt_ct_tg_destroy_v0+0x10/0x10 [ 102.718775][ T6232] cleanup_entry+0x15c/0x1b0 [ 102.718798][ T6232] translate_table+0xf3a/0xf90 [ 102.718841][ T6232] do_ipt_set_ctl+0x66f/0x820 [ 102.718860][ T6232] ? lock_sock_nested+0x112/0x140 [ 102.718891][ T6232] nf_setsockopt+0x199/0x1b0 [ 102.718943][ T6232] ip_setsockopt+0x102/0x110 [ 102.718974][ T6232] udp_setsockopt+0x99/0xb0 [ 102.719005][ T6232] sock_common_setsockopt+0x69/0x80 [ 102.719069][ T6232] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.719090][ T6232] __sys_setsockopt+0x184/0x200 [ 102.719127][ T6232] __x64_sys_setsockopt+0x64/0x80 [ 102.719158][ T6232] x64_sys_call+0x20ec/0x3000 [ 102.719235][ T6232] do_syscall_64+0xd2/0x200 [ 102.719257][ T6232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.719285][ T6232] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.719453][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.719470][ T6232] RIP: 0033:0x7ff79ccaf749 [ 102.719532][ T6232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.719612][ T6232] RSP: 002b:00007ff79b717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.719628][ T6232] RAX: ffffffffffffffda RBX: 00007ff79cf05fa0 RCX: 00007ff79ccaf749 [ 102.719640][ T6232] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 102.719654][ T6232] RBP: 00007ff79b717090 R08: 0000000000000290 R09: 0000000000000000 [ 102.719667][ T6232] R10: 0000200000000b80 R11: 0000000000000246 R12: 0000000000000002 [ 102.719680][ T6232] R13: 00007ff79cf06038 R14: 00007ff79cf05fa0 R15: 00007fffbe409408 [ 102.719699][ T6232] [ 102.889044][ T6233] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 102.999689][ T6229] loop1: detected capacity change from 0 to 1024 [ 103.034752][ T6229] EXT4-fs: inline encryption not supported [ 103.059245][ T6237] loop0: detected capacity change from 0 to 1024 [ 103.060531][ T6229] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.077656][ T6229] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 103.087056][ T6229] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.842: lblock 2 mapped to illegal pblock 2 (length 1) [ 103.101338][ T6229] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.842: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.116552][ T6229] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.842: Failed to acquire dquot type 0 [ 103.128156][ T6229] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 103.138020][ T6229] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.842: mark_inode_dirty error [ 103.149378][ T6229] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 103.152966][ T6237] EXT4-fs: Ignoring removed bh option [ 103.159696][ T6229] EXT4-fs (loop1): 1 orphan inode deleted [ 103.170931][ T41] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 103.185680][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.198669][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 103.230362][ T6229] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.842: lblock 0 mapped to illegal pblock 48 (length 1) [ 103.230666][ T6237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.345874][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.509052][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.657138][ T6261] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 103.696789][ T6265] xt_hashlimit: max too large, truncated to 1048576 [ 103.835714][ T6276] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 103.840648][ T6278] xt_hashlimit: max too large, truncated to 1048576 [ 104.151912][ T6283] loop1: detected capacity change from 0 to 1024 [ 104.159974][ T6283] EXT4-fs: inline encryption not supported [ 104.195272][ T6283] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 104.196654][ T6294] loop3: detected capacity change from 0 to 512 [ 104.206428][ T6283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 104.223086][ T6283] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.862: lblock 2 mapped to illegal pblock 2 (length 1) [ 104.245977][ T6283] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.862: lblock 0 mapped to illegal pblock 48 (length 1) [ 104.279432][ T6283] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.862: Failed to acquire dquot type 0 [ 104.585687][ T6307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.664221][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.718057][ T6294] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #12: block 32: comm syz.3.868: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 104.801089][ T6311] netlink: 'gtp': attribute type 1 has an invalid length. [ 104.808280][ T6311] netlink: 224 bytes leftover after parsing attributes in process `gtp'. [ 104.921105][ T6283] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 104.926030][ T6294] EXT4-fs (loop3): Remounting filesystem read-only [ 104.930596][ T6283] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.862: mark_inode_dirty error [ 104.937062][ T6294] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #12: comm syz.3.868: directory missing '.' [ 104.948511][ T6283] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 104.969542][ T6283] EXT4-fs (loop1): 1 orphan inode deleted [ 104.975683][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.989552][ T52] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.017216][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 105.065696][ T6321] loop0: detected capacity change from 0 to 512 [ 105.077767][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.097496][ T6321] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.152343][ T6283] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.862: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.182627][ T6327] loop3: detected capacity change from 0 to 512 [ 105.200433][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 105.200447][ T29] audit: type=1326 audit(105.183:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6325 comm="syz.5.880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x0 [ 105.229173][ T6283] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 105.243849][ T6327] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.255368][ T6327] EXT4-fs (loop3): 1 truncate cleaned up [ 105.257018][ T29] audit: type=1326 audit(105.253:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.287601][ T6327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.289010][ T29] audit: type=1326 audit(105.283:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.322378][ T29] audit: type=1326 audit(105.283:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.345176][ T29] audit: type=1326 audit(105.283:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.367944][ T29] audit: type=1326 audit(105.283:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.390610][ T29] audit: type=1326 audit(105.283:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.413351][ T29] audit: type=1326 audit(105.283:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.436041][ T29] audit: type=1326 audit(105.283:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6279 comm="syz.1.862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 105.474645][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.568513][ T6344] loop3: detected capacity change from 0 to 512 [ 105.587838][ T6344] EXT4-fs: Ignoring removed bh option [ 105.631140][ T6344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.644253][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.733511][ T6335] loop0: detected capacity change from 0 to 1024 [ 105.754534][ T6335] EXT4-fs: inline encryption not supported [ 105.777736][ T6335] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.789925][ T6354] loop1: detected capacity change from 0 to 512 [ 105.815373][ T6335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 105.824040][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.837506][ T6335] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.882: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.854448][ T6354] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz.1.889: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 105.873959][ T6335] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.882: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.888455][ T6335] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.882: Failed to acquire dquot type 0 [ 105.899959][ T6354] EXT4-fs (loop1): Remounting filesystem read-only [ 105.906624][ T6354] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #12: comm syz.1.889: directory missing '.' [ 105.927571][ T6335] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 105.949021][ T6335] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.882: mark_inode_dirty error [ 105.976086][ T6335] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 105.990353][ T6335] EXT4-fs (loop0): 1 orphan inode deleted [ 105.991094][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.996740][ T6335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.028134][ T1743] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.048553][ T1743] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 106.077081][ T6335] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.882: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.113276][ T6365] ip6gretap0: entered promiscuous mode [ 106.120369][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.892'. [ 106.317062][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.343460][ T6372] loop0: detected capacity change from 0 to 128 [ 106.404057][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.463804][ T6372] syz.0.894: attempt to access beyond end of device [ 106.463804][ T6372] loop0: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 106.477608][ T6372] syz.0.894: attempt to access beyond end of device [ 106.477608][ T6372] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 106.491887][ T6372] syz.0.894: attempt to access beyond end of device [ 106.491887][ T6372] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 106.510059][ T6372] syz.0.894: attempt to access beyond end of device [ 106.510059][ T6372] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 106.515060][ T6383] loop5: detected capacity change from 0 to 512 [ 106.524972][ T6372] syz.0.894: attempt to access beyond end of device [ 106.524972][ T6372] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 106.545462][ T6372] syz.0.894: attempt to access beyond end of device [ 106.545462][ T6372] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 106.559407][ T6372] syz.0.894: attempt to access beyond end of device [ 106.559407][ T6372] loop0: rw=2049, sector=273, nr_sectors = 9 limit=128 [ 106.575364][ T6383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.599992][ T6383] EXT4-fs error (device loop5): ext4_empty_dir:3086: inode #12: block 32: comm syz.5.900: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 106.620299][ T6383] EXT4-fs (loop5): Remounting filesystem read-only [ 106.626838][ T6383] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #12: comm syz.5.900: directory missing '.' [ 106.656479][ T1743] kworker/u8:7: attempt to access beyond end of device [ 106.656479][ T1743] loop0: rw=1, sector=289, nr_sectors = 80 limit=128 [ 106.679233][ T1743] kworker/u8:7: attempt to access beyond end of device [ 106.679233][ T1743] loop0: rw=1, sector=377, nr_sectors = 8 limit=128 [ 106.693327][ T1743] kworker/u8:7: attempt to access beyond end of device [ 106.693327][ T1743] loop0: rw=1, sector=393, nr_sectors = 8 limit=128 [ 106.707724][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.809451][ T6396] xt_hashlimit: max too large, truncated to 1048576 [ 107.156073][ T6401] loop5: detected capacity change from 0 to 1024 [ 107.180665][ T6401] EXT4-fs: inline encryption not supported [ 107.201453][ T6401] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.244865][ T6401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 107.253632][ T6412] loop0: detected capacity change from 0 to 1024 [ 107.260355][ T6412] EXT4-fs: inline encryption not supported [ 107.297668][ T6401] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.905: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.315701][ T6401] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.905: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.336723][ T6401] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.905: Failed to acquire dquot type 0 [ 107.343515][ T6412] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.360311][ T6401] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.390256][ T6401] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.905: mark_inode_dirty error [ 107.421747][ T6401] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.435479][ T6416] loop1: detected capacity change from 0 to 1024 [ 107.450218][ T6412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 107.451973][ T6401] EXT4-fs (loop5): 1 orphan inode deleted [ 107.465068][ T6416] EXT4-fs: inline encryption not supported [ 107.471032][ T1743] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.491860][ T6401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.496130][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.908: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.520243][ T1743] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 107.533445][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.2.916'. [ 107.542949][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.908: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.544724][ T6416] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.567975][ T6412] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.908: Failed to acquire dquot type 0 [ 107.579974][ T6401] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.905: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.601681][ T6412] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.608844][ T6416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 107.619696][ T6412] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.908: mark_inode_dirty error [ 107.620695][ T6416] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.912: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.645013][ T6416] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.912: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.659590][ T6416] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.912: Failed to acquire dquot type 0 [ 107.671313][ T6416] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.681078][ T6416] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.912: mark_inode_dirty error [ 107.692486][ T6416] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.692584][ T6412] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.702918][ T6416] EXT4-fs (loop1): 1 orphan inode deleted [ 107.719200][ T6416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.731716][ T1743] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.745981][ T6412] EXT4-fs (loop0): 1 orphan inode deleted [ 107.752014][ T1743] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 107.781210][ T1743] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.795875][ T6412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.816160][ T1743] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 107.837166][ T6412] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.908: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.851708][ T6416] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.912: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.901993][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.075251][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.154978][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.183596][ T6447] FAULT_INJECTION: forcing a failure. [ 108.183596][ T6447] name failslab, interval 1, probability 0, space 0, times 0 [ 108.196248][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.196276][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.196288][ T6447] Call Trace: [ 108.196295][ T6447] [ 108.196303][ T6447] __dump_stack+0x1d/0x30 [ 108.196325][ T6447] dump_stack_lvl+0xe8/0x140 [ 108.196372][ T6447] dump_stack+0x15/0x1b [ 108.196390][ T6447] should_fail_ex+0x265/0x280 [ 108.196493][ T6447] should_failslab+0x8c/0xb0 [ 108.196594][ T6447] kmem_cache_alloc_noprof+0x50/0x480 [ 108.196640][ T6447] ? audit_log_start+0x342/0x720 [ 108.196660][ T6447] audit_log_start+0x342/0x720 [ 108.196679][ T6447] ? kstrtouint+0x76/0xc0 [ 108.196709][ T6447] audit_seccomp+0x48/0x100 [ 108.196862][ T6447] ? __seccomp_filter+0x82d/0x1250 [ 108.196948][ T6447] __seccomp_filter+0x83e/0x1250 [ 108.196985][ T6447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.197022][ T6447] ? vfs_write+0x7e8/0x960 [ 108.197045][ T6447] ? __rcu_read_unlock+0x4f/0x70 [ 108.197195][ T6447] ? __fget_files+0x184/0x1c0 [ 108.197219][ T6447] __secure_computing+0x82/0x150 [ 108.197245][ T6447] syscall_trace_enter+0xcf/0x1e0 [ 108.197342][ T6447] do_syscall_64+0xac/0x200 [ 108.197363][ T6447] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 108.197392][ T6447] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 108.197421][ T6447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.197471][ T6447] RIP: 0033:0x7fd123f2f749 [ 108.197486][ T6447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.197503][ T6447] RSP: 002b:00007fd12298f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 108.197584][ T6447] RAX: ffffffffffffffda RBX: 00007fd124185fa0 RCX: 00007fd123f2f749 [ 108.197596][ T6447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000201 [ 108.197608][ T6447] RBP: 00007fd12298f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.197680][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.197690][ T6447] R13: 00007fd124186038 R14: 00007fd124185fa0 R15: 00007ffdb76ab0e8 [ 108.197705][ T6447] [ 108.467789][ T6458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.927'. [ 108.479034][ T6460] usb usb5: usbfs: process 6460 (syz.5.928) did not claim interface 0 before use [ 108.604013][ T6472] usb usb5: usbfs: process 6472 (syz.0.933) did not claim interface 0 before use [ 108.692148][ T6474] loop1: detected capacity change from 0 to 1024 [ 108.700047][ T6474] EXT4-fs: inline encryption not supported [ 108.718032][ T6474] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 108.738884][ T6474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 108.780960][ T6474] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.929: lblock 2 mapped to illegal pblock 2 (length 1) [ 108.818948][ T6474] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.929: lblock 0 mapped to illegal pblock 48 (length 1) [ 108.835324][ T6474] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.929: Failed to acquire dquot type 0 [ 108.847650][ T6474] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 108.857383][ T6474] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.929: mark_inode_dirty error [ 108.869556][ T6474] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 108.880790][ T6474] EXT4-fs (loop1): 1 orphan inode deleted [ 108.887059][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.920589][ T41] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.952311][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 109.010829][ T6470] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.929: lblock 0 mapped to illegal pblock 48 (length 1) [ 109.096223][ T6482] macvtap0: refused to change device tx_queue_len [ 109.302367][ T6495] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'. [ 109.395701][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.421360][ T6497] tap0: tun_chr_ioctl cmd 1074025677 [ 109.430596][ T6497] tap0: linktype set to 769 [ 109.432720][ T6508] usb usb5: usbfs: process 6508 (syz.1.945) did not claim interface 0 before use [ 109.515404][ T6515] SELinux: syz.2.948 (6515) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 110.035719][ T6529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.952'. [ 110.085771][ T6531] loop5: detected capacity change from 0 to 8192 [ 110.136514][ T6535] loop0: detected capacity change from 0 to 512 [ 110.145690][ T6535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.151477][ T3513] loop5: p1 p2 p4 < > [ 110.162300][ T3513] loop5: partition table partially beyond EOD, truncated [ 110.170594][ T3513] loop5: p1 start 16777216 is beyond EOD, truncated [ 110.177631][ T3513] loop5: p4 start 16777216 is beyond EOD, truncated [ 110.185825][ T6535] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz.0.955: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 110.186181][ T6531] loop5: p1 p2 p4 < > [ 110.208987][ T6531] loop5: partition table partially beyond EOD, truncated [ 110.214981][ T6535] EXT4-fs (loop0): Remounting filesystem read-only [ 110.216092][ T6531] loop5: p1 start 16777216 is beyond EOD, truncated [ 110.222545][ T6535] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #12: comm syz.0.955: directory missing '.' [ 110.240474][ T6531] loop5: p4 start 16777216 is beyond EOD, truncated [ 110.247484][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 110.247497][ T29] audit: type=1326 audit(110.238:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.278345][ T29] audit: type=1326 audit(110.268:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.301117][ T29] audit: type=1326 audit(110.268:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7ff79ccaecc7 code=0x7ffc0000 [ 110.323843][ T29] audit: type=1326 audit(110.268:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.346671][ T29] audit: type=1326 audit(110.268:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.369510][ T29] audit: type=1326 audit(110.268:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.392409][ T29] audit: type=1326 audit(110.268:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.415210][ T29] audit: type=1326 audit(110.268:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7ff79ccade3a code=0x7ffc0000 [ 110.437924][ T29] audit: type=1326 audit(110.268:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff79ccae3aa code=0x7ffc0000 [ 110.460459][ T29] audit: type=1326 audit(110.268:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6530 comm="syz.5.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ccaf749 code=0x7ffc0000 [ 110.498169][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 110.520494][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 110.560834][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.628249][ T6547] loop0: detected capacity change from 0 to 1024 [ 110.635144][ T6547] EXT4-fs: Ignoring removed orlov option [ 110.642442][ T6551] netlink: 'syz.3.961': attribute type 16 has an invalid length. [ 110.650266][ T6551] netlink: 'syz.3.961': attribute type 17 has an invalid length. [ 110.658154][ T6552] loop5: detected capacity change from 0 to 512 [ 110.669850][ T6547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.693230][ T6552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 110.707295][ T6556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5133 sclass=netlink_route_socket pid=6556 comm=syz.3.961 [ 110.726361][ T6552] EXT4-fs (loop5): shut down requested (1) [ 110.734569][ T6551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.734813][ T6552] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 110.770827][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.780582][ T3970] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 110.888701][ T6565] lo speed is unknown, defaulting to 1000 [ 110.894753][ T6565] wg1 speed is unknown, defaulting to 1000 [ 110.912959][ T6567] netlink: 100 bytes leftover after parsing attributes in process `syz.5.964'. [ 110.953270][ T6565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6565 comm=syz.5.964 [ 110.982621][ T6565] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=56999 sclass=netlink_audit_socket pid=6565 comm=syz.5.964 [ 111.402869][ T6577] Illegal XDP return value 4294967274 on prog (id 691) dev N/A, expect packet loss! [ 111.674347][ T6589] loop0: detected capacity change from 0 to 512 [ 111.684470][ T6589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.704229][ T6589] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz.0.970: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 111.723713][ T6589] EXT4-fs (loop0): Remounting filesystem read-only [ 111.730259][ T6589] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #12: comm syz.0.970: directory missing '.' [ 111.770324][ T6599] FAULT_INJECTION: forcing a failure. [ 111.770324][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 111.783056][ T6599] CPU: 0 UID: 0 PID: 6599 Comm: syz.5.974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.783079][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.783091][ T6599] Call Trace: [ 111.783098][ T6599] [ 111.783105][ T6599] __dump_stack+0x1d/0x30 [ 111.783185][ T6599] dump_stack_lvl+0xe8/0x140 [ 111.783206][ T6599] dump_stack+0x15/0x1b [ 111.783220][ T6599] should_fail_ex+0x265/0x280 [ 111.783249][ T6599] should_failslab+0x8c/0xb0 [ 111.783298][ T6599] __kmalloc_noprof+0xa5/0x570 [ 111.783328][ T6599] ? bpf_test_init+0x86/0x140 [ 111.783355][ T6599] bpf_test_init+0x86/0x140 [ 111.783410][ T6599] bpf_prog_test_run_xdp+0x305/0x970 [ 111.783457][ T6599] ? __pfx_kstrtouint+0x1/0x10 [ 111.783559][ T6599] ? __rcu_read_unlock+0x4f/0x70 [ 111.783707][ T6599] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 111.783738][ T6599] bpf_prog_test_run+0x22a/0x390 [ 111.783788][ T6599] __sys_bpf+0x4c0/0x7c0 [ 111.783872][ T6599] __x64_sys_bpf+0x41/0x50 [ 111.783915][ T6599] x64_sys_call+0x2aee/0x3000 [ 111.783937][ T6599] do_syscall_64+0xd2/0x200 [ 111.783958][ T6599] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.784044][ T6599] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.784136][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.784195][ T6599] RIP: 0033:0x7ff79ccaf749 [ 111.784208][ T6599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.784266][ T6599] RSP: 002b:00007ff79b717038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.784285][ T6599] RAX: ffffffffffffffda RBX: 00007ff79cf05fa0 RCX: 00007ff79ccaf749 [ 111.784296][ T6599] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 111.784308][ T6599] RBP: 00007ff79b717090 R08: 0000000000000000 R09: 0000000000000000 [ 111.784318][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.784330][ T6599] R13: 00007ff79cf06038 R14: 00007ff79cf05fa0 R15: 00007fffbe409408 [ 111.784430][ T6599] [ 111.993755][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.051630][ T6607] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 112.059375][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.977'. [ 112.165328][ T6611] loop5: detected capacity change from 0 to 764 [ 112.216311][ T6611] loop5: detected capacity change from 0 to 8192 [ 112.337349][ T6620] loop3: detected capacity change from 0 to 512 [ 112.344362][ T6620] EXT4-fs: Ignoring removed oldalloc option [ 112.356484][ T6620] EXT4-fs (loop3): 1 truncate cleaned up [ 112.365156][ T6620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.387726][ T6625] usb usb5: usbfs: process 6625 (syz.1.983) did not claim interface 0 before use [ 112.414027][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.649470][ T6647] veth4: entered promiscuous mode [ 112.654618][ T6647] veth4: entered allmulticast mode [ 112.684202][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.990'. [ 112.698124][ T6651] loop3: detected capacity change from 0 to 512 [ 112.721481][ T6651] EXT4-fs (loop3): too many log groups per flexible block group [ 112.729222][ T6651] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 112.736207][ T6651] EXT4-fs (loop3): mount failed [ 113.584166][ T6673] loop1: detected capacity change from 0 to 1024 [ 113.591096][ T6673] EXT4-fs: Ignoring removed bh option [ 113.612617][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.646563][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.747586][ T6684] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.765938][ T6683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.775420][ T6683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.853715][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1003'. [ 113.921904][ T6691] set match dimension is over the limit! [ 114.558713][ T6706] loop3: detected capacity change from 0 to 512 [ 114.566013][ T6706] EXT4-fs: Ignoring removed oldalloc option [ 114.574675][ T6706] EXT4-fs (loop3): 1 truncate cleaned up [ 114.587323][ T6706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.620678][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.642409][ T6713] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1014'. [ 114.733905][ T6720] netlink: 'syz.5.1016': attribute type 32 has an invalid length. [ 114.741827][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1016'. [ 114.828807][ T6723] set match dimension is over the limit! [ 114.898465][ T6733] loop3: detected capacity change from 0 to 512 [ 114.924923][ T6733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.950800][ T6733] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #12: block 32: comm syz.3.1020: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.991552][ T6729] lo speed is unknown, defaulting to 1000 [ 115.000921][ T6733] EXT4-fs (loop3): Remounting filesystem read-only [ 115.007102][ T6729] wg1 speed is unknown, defaulting to 1000 [ 115.008053][ T6733] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #12: comm syz.3.1020: directory missing '.' [ 115.119199][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.156234][ T6743] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 115.166889][ T6742] loop5: detected capacity change from 0 to 1024 [ 115.188648][ T6742] ext4: Bad value for 'barrier' [ 115.257788][ T6748] loop5: detected capacity change from 0 to 128 [ 115.267752][ T6748] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.295202][ T6748] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.317489][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 115.324599][ T41] Bluetooth: hci1: Frame reassembly failed (-84) [ 115.324836][ T6752] loop3: detected capacity change from 0 to 1024 [ 115.350539][ T6752] EXT4-fs: Ignoring removed bh option [ 115.356024][ T6752] EXT4-fs: inline encryption not supported [ 115.370558][ T6752] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.382139][ T6752] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 115.392622][ T6752] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1027: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.406993][ T6752] __quota_error: 383 callbacks suppressed [ 115.407006][ T6752] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 115.421397][ T6752] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1027: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.436034][ T6752] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 115.444887][ T6752] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1027: Failed to acquire dquot type 0 [ 115.457088][ T6752] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 115.467025][ T6752] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1027: mark_inode_dirty error [ 115.480043][ T6752] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 115.490625][ T6752] EXT4-fs (loop3): 1 orphan inode deleted [ 115.497118][ T6752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.517810][ T58] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.532419][ T58] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 115.540930][ T58] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 115.568685][ T29] audit: type=1400 audit(115.558:4237): avc: denied { ioctl } for pid=6751 comm="syz.3.1027" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.643435][ T6755] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.1027: lblock 0 mapped to illegal pblock 16 (length 1) [ 115.658412][ T6755] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.1027: lblock 0 mapped to illegal pblock 16 (length 1) [ 115.675717][ T6755] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.1027: lblock 0 mapped to illegal pblock 16 (length 1) [ 115.697742][ T6755] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.1027: lblock 0 mapped to illegal pblock 16 (length 1) [ 115.772670][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.782729][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.796568][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 115.806993][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 115.845711][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 115.903935][ T6765] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1031'. [ 115.936418][ T29] audit: type=1326 audit(115.928:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 115.959356][ T29] audit: type=1326 audit(115.928:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 115.988204][ T6769] loop3: detected capacity change from 0 to 512 [ 115.997024][ T29] audit: type=1326 audit(115.978:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 116.019906][ T29] audit: type=1326 audit(115.978:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 116.042791][ T29] audit: type=1326 audit(115.978:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6766 comm="syz.0.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 116.073340][ T6769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.092446][ T6769] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #12: block 32: comm syz.3.1033: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 116.112450][ T6769] EXT4-fs (loop3): Remounting filesystem read-only [ 116.118957][ T6769] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #12: comm syz.3.1033: directory missing '.' [ 116.187177][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.632131][ T29] audit: type=1326 audit(116.628:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6785 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 116.880935][ T6792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.953511][ T6792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.013829][ T6792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.074973][ T6792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.139691][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.170350][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.187466][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.198365][ T6795] loop3: detected capacity change from 0 to 512 [ 117.208769][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.219680][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1043'. [ 117.220213][ T6795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.229106][ T3521] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.289889][ T6795] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #12: block 32: comm syz.3.1042: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 117.290478][ T6801] netlink: 'syz.0.1044': attribute type 7 has an invalid length. [ 117.316829][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'. [ 117.332175][ T6795] EXT4-fs (loop3): Remounting filesystem read-only [ 117.338708][ T6795] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #12: comm syz.3.1042: directory missing '.' [ 117.380294][ T3925] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 117.447556][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.481456][ T6819] Cannot find set identified by id 0 to match [ 117.495280][ T6817] loop3: detected capacity change from 0 to 1024 [ 117.502717][ T6817] EXT4-fs: Ignoring removed bh option [ 117.521749][ T6817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.534817][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1051'. [ 117.549897][ T6827] loop5: detected capacity change from 0 to 512 [ 117.572134][ T6827] EXT4-fs (loop5): too many log groups per flexible block group [ 117.580077][ T6827] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 117.587688][ T6827] EXT4-fs (loop5): mount failed [ 117.588090][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.604677][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'. [ 117.772522][ T6836] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.782401][ T6836] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.832170][ T6836] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.841984][ T6836] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.842822][ T6841] loop3: detected capacity change from 0 to 1024 [ 117.858978][ T6841] EXT4-fs: inline encryption not supported [ 117.865313][ T6841] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.876890][ T6841] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 117.885829][ T6841] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1057: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.900708][ T6841] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1057: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.915102][ T6841] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1057: Failed to acquire dquot type 0 [ 117.926895][ T6841] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 117.927931][ T6836] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.936881][ T6841] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1057: mark_inode_dirty error [ 117.946124][ T6836] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.968297][ T6841] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.978885][ T6841] EXT4-fs (loop3): 1 orphan inode deleted [ 117.985506][ T6841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.998156][ T52] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.012938][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 118.032943][ T6841] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1057: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.048187][ T6836] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.057950][ T6836] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.128915][ T1743] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.137171][ T1743] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.156835][ T1743] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.165158][ T1743] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.180956][ T1743] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.189176][ T1743] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.203771][ T1743] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.212053][ T1743] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.362710][ T6855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.386793][ T6864] FAULT_INJECTION: forcing a failure. [ 119.386793][ T6864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.400074][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.5.1062 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.400138][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.400277][ T6864] Call Trace: [ 119.400285][ T6864] [ 119.400338][ T6864] __dump_stack+0x1d/0x30 [ 119.400361][ T6864] dump_stack_lvl+0xe8/0x140 [ 119.400382][ T6864] dump_stack+0x15/0x1b [ 119.400405][ T6864] should_fail_ex+0x265/0x280 [ 119.400442][ T6864] should_fail_alloc_page+0xf2/0x100 [ 119.400472][ T6864] __alloc_frozen_pages_noprof+0xff/0x360 [ 119.400550][ T6864] alloc_pages_mpol+0xb3/0x260 [ 119.400573][ T6864] vma_alloc_folio_noprof+0x1aa/0x300 [ 119.400598][ T6864] do_wp_page+0xf60/0x2510 [ 119.400641][ T6864] ? __rcu_read_lock+0x37/0x50 [ 119.400683][ T6864] ? css_rstat_updated+0xb7/0x240 [ 119.400703][ T6864] ? __rcu_read_lock+0x37/0x50 [ 119.400796][ T6864] handle_mm_fault+0x77d/0x2be0 [ 119.400817][ T6864] ? vma_start_read+0x141/0x1f0 [ 119.400879][ T6864] do_user_addr_fault+0x630/0x1080 [ 119.400902][ T6864] ? arch_exit_work+0x30/0x40 [ 119.400926][ T6864] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 119.401004][ T6864] exc_page_fault+0x62/0xa0 [ 119.401111][ T6864] asm_exc_page_fault+0x26/0x30 [ 119.401130][ T6864] RIP: 0033:0x7ff79cb709f0 [ 119.401203][ T6864] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 119.401221][ T6864] RSP: 002b:00007ff79b7164a0 EFLAGS: 00010202 [ 119.401237][ T6864] RAX: 0000000000005005 RBX: 00007ff79b716540 RCX: 0000000000000013 [ 119.401247][ T6864] RDX: 0000000000003fff RSI: 0000000000000800 RDI: 00007ff79b7165e0 [ 119.401257][ T6864] RBP: 0000000000000014 R08: 00007ff7932f7000 R09: 0000000000000004 [ 119.401342][ T6864] R10: 0000200000000c42 R11: 0000000000000448 R12: 0000000000000601 [ 119.401355][ T6864] R13: 00007ff79cd4fc40 R14: 0000000000000015 R15: 00007ff79b7165e0 [ 119.401374][ T6864] [ 119.593057][ T6864] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 119.662558][ T6864] loop5: detected capacity change from 0 to 512 [ 119.668942][ T6867] loop1: detected capacity change from 0 to 1024 [ 119.683780][ T6864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 119.700722][ T6867] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.712363][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.722467][ T6864] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 119.734435][ T6870] loop0: detected capacity change from 0 to 1024 [ 119.738240][ T6864] EXT4-fs (loop5): 1 truncate cleaned up [ 119.747617][ T6870] EXT4-fs: Ignoring removed bh option [ 119.755407][ T6864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.768334][ T6864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.786876][ T6867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.800432][ T6870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.848064][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.857859][ T6867] netlink: '': attribute type 30 has an invalid length. [ 119.868770][ T6879] __nla_validate_parse: 2 callbacks suppressed [ 119.868783][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'. [ 119.884092][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1067'. [ 119.894175][ T6881] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.904135][ T6881] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.981688][ T6881] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.991554][ T6881] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.045048][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.064350][ T6893] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1072'. [ 120.075180][ T6881] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.084996][ T6881] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.090927][ T6895] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.162613][ T6881] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.172441][ T6881] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.868377][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 120.868392][ T29] audit: type=1326 audit(120.858:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 120.901444][ T29] audit: type=1326 audit(120.868:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 120.924454][ T29] audit: type=1326 audit(120.868:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 120.947328][ T29] audit: type=1326 audit(120.868:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 120.970377][ T29] audit: type=1326 audit(120.868:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 121.004433][ T29] audit: type=1326 audit(120.988:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 121.027255][ T29] audit: type=1326 audit(120.988:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 121.050130][ T29] audit: type=1326 audit(120.988:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 121.073075][ T29] audit: type=1326 audit(120.988:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 121.096160][ T29] audit: type=1326 audit(120.988:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6909 comm="syz.2.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b265ff749 code=0x7ffc0000 [ 121.135534][ T6934] loop1: detected capacity change from 0 to 256 [ 121.141516][ T6936] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.154795][ T6934] FAT-fs (loop1): Directory bread(block 1285) failed [ 121.172029][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 121.224810][ T6947] loop0: detected capacity change from 0 to 512 [ 121.241332][ T6951] usb usb5: usbfs: process 6951 (syz.2.1089) did not claim interface 0 before use [ 121.256862][ T6947] EXT4-fs: Ignoring removed oldalloc option [ 121.268040][ T6947] EXT4-fs (loop0): 1 truncate cleaned up [ 121.288138][ T6954] loop1: detected capacity change from 0 to 1024 [ 121.298215][ T6954] EXT4-fs: Ignoring removed orlov option [ 121.323068][ T6954] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 121.341502][ T6960] FAULT_INJECTION: forcing a failure. [ 121.341502][ T6960] name failslab, interval 1, probability 0, space 0, times 0 [ 121.354199][ T6960] CPU: 1 UID: 0 PID: 6960 Comm: syz.0.1088 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.354230][ T6960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.354242][ T6960] Call Trace: [ 121.354249][ T6960] [ 121.354257][ T6960] __dump_stack+0x1d/0x30 [ 121.354280][ T6960] dump_stack_lvl+0xe8/0x140 [ 121.354298][ T6960] dump_stack+0x15/0x1b [ 121.354312][ T6960] should_fail_ex+0x265/0x280 [ 121.354422][ T6960] should_failslab+0x8c/0xb0 [ 121.354449][ T6960] kmem_cache_alloc_noprof+0x50/0x480 [ 121.354508][ T6960] ? __es_insert_extent+0x508/0xee0 [ 121.354543][ T6960] __es_insert_extent+0x508/0xee0 [ 121.354603][ T6960] ext4_es_insert_extent+0x435/0x1c10 [ 121.354636][ T6960] ext4_punch_hole+0x593/0x770 [ 121.354686][ T6960] ext4_fallocate+0x2d7/0x2f0 [ 121.354716][ T6960] vfs_fallocate+0x3b6/0x400 [ 121.354745][ T6960] __x64_sys_fallocate+0x7a/0xd0 [ 121.354773][ T6960] x64_sys_call+0x2518/0x3000 [ 121.354867][ T6960] do_syscall_64+0xd2/0x200 [ 121.354887][ T6960] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.354921][ T6960] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.354950][ T6960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.355024][ T6960] RIP: 0033:0x7f291e68f749 [ 121.355040][ T6960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.355055][ T6960] RSP: 002b:00007f291d0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 121.355074][ T6960] RAX: ffffffffffffffda RBX: 00007f291e8e6090 RCX: 00007f291e68f749 [ 121.355119][ T6960] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 0000000000000004 [ 121.355130][ T6960] RBP: 00007f291d0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.355142][ T6960] R10: 0000000008000c62 R11: 0000000000000246 R12: 0000000000000001 [ 121.355171][ T6960] R13: 00007f291e8e6128 R14: 00007f291e8e6090 R15: 00007fff6f842338 [ 121.355189][ T6960] [ 121.618610][ T6973] loop0: detected capacity change from 0 to 512 [ 121.642952][ T6973] EXT4-fs (loop0): too many log groups per flexible block group [ 121.657031][ T6973] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 121.669856][ T6973] EXT4-fs (loop0): mount failed [ 121.681811][ T6975] Cannot find set identified by id 0 to match [ 121.726847][ T6985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1094'. [ 121.776824][ T6993] usb usb5: usbfs: process 6993 (syz.1.1097) did not claim interface 0 before use [ 121.785975][ T6995] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.818974][ T6997] loop0: detected capacity change from 0 to 512 [ 121.839942][ T6997] EXT4-fs error (device loop0): ext4_empty_dir:3086: inode #12: block 32: comm syz.0.1100: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 121.883840][ T6997] EXT4-fs (loop0): Remounting filesystem read-only [ 121.890406][ T6997] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #12: comm syz.0.1100: directory missing '.' [ 122.145823][ T7006] set match dimension is over the limit! [ 122.235044][ T7011] loop0: detected capacity change from 0 to 1024 [ 122.251671][ T7011] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.290584][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'. [ 122.335270][ T7017] loop1: detected capacity change from 0 to 128 [ 122.353221][ T7017] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 122.382240][ T7017] FAULT_INJECTION: forcing a failure. [ 122.382240][ T7017] name failslab, interval 1, probability 0, space 0, times 0 [ 122.394917][ T7017] CPU: 1 UID: 0 PID: 7017 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.394945][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.394955][ T7017] Call Trace: [ 122.394961][ T7017] [ 122.394969][ T7017] __dump_stack+0x1d/0x30 [ 122.394999][ T7017] dump_stack_lvl+0xe8/0x140 [ 122.395040][ T7017] dump_stack+0x15/0x1b [ 122.395054][ T7017] should_fail_ex+0x265/0x280 [ 122.395082][ T7017] should_failslab+0x8c/0xb0 [ 122.395105][ T7017] kmem_cache_alloc_noprof+0x50/0x480 [ 122.395165][ T7017] ? audit_log_start+0x342/0x720 [ 122.395188][ T7017] audit_log_start+0x342/0x720 [ 122.395205][ T7017] ? kstrtouint+0x76/0xc0 [ 122.395232][ T7017] audit_seccomp+0x48/0x100 [ 122.395275][ T7017] ? __seccomp_filter+0x82d/0x1250 [ 122.395366][ T7017] __seccomp_filter+0x83e/0x1250 [ 122.395394][ T7017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.395483][ T7017] ? vfs_write+0x7e8/0x960 [ 122.395507][ T7017] ? __rcu_read_unlock+0x4f/0x70 [ 122.395531][ T7017] ? __fget_files+0x184/0x1c0 [ 122.395603][ T7017] __secure_computing+0x82/0x150 [ 122.395630][ T7017] syscall_trace_enter+0xcf/0x1e0 [ 122.395668][ T7017] do_syscall_64+0xac/0x200 [ 122.395700][ T7017] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.395726][ T7017] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.395752][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.395771][ T7017] RIP: 0033:0x7fd123f2f749 [ 122.395792][ T7017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.395818][ T7017] RSP: 002b:00007fd12298f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 122.395841][ T7017] RAX: ffffffffffffffda RBX: 00007fd124185fa0 RCX: 00007fd123f2f749 [ 122.395852][ T7017] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000000300 [ 122.395935][ T7017] RBP: 00007fd12298f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.395947][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.395963][ T7017] R13: 00007fd124186038 R14: 00007fd124185fa0 R15: 00007ffdb76ab0e8 [ 122.395983][ T7017] [ 122.661305][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1108'. [ 122.687919][ T7004] random: crng reseeded on system resumption [ 122.740283][ T7024] loop0: detected capacity change from 0 to 512 [ 122.771079][ T7028] usb usb5: usbfs: process 7028 (syz.1.1110) did not claim interface 0 before use [ 122.781617][ T7024] EXT4-fs (loop0): too many log groups per flexible block group [ 122.789347][ T7024] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 122.806751][ T7024] EXT4-fs (loop0): mount failed [ 122.860745][ T7037] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.945551][ T7043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7043 comm=syz.3.1114 [ 122.994009][ T7039] loop3: detected capacity change from 0 to 8192 [ 123.051302][ T7039] loop3: p1 p2 p3 p4 [ 123.055472][ T7039] loop3: p1 size 196608 extends beyond EOD, truncated [ 123.064074][ T7039] loop3: p2 start 164919041 is beyond EOD, truncated [ 123.070917][ T7039] loop3: p3 size 66846464 extends beyond EOD, truncated [ 123.078316][ T7039] loop3: p4 size 37048832 extends beyond EOD, truncated [ 123.091002][ T7046] netlink: 'syz.1.1115': attribute type 12 has an invalid length. [ 123.098896][ T7046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1115'. [ 123.110115][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 123.111435][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 123.130323][ T3513] udevd[3513]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 123.156185][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 123.179937][ T7050] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.194144][ T7039] loop3: detected capacity change from 0 to 1024 [ 123.221200][ T7052] netlink: 'syz.1.1118': attribute type 21 has an invalid length. [ 123.236605][ T7054] loop3: detected capacity change from 0 to 512 [ 123.252233][ T7054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.261060][ T7054] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.263031][ T41] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.278418][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.287364][ T41] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.295631][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.306210][ T7054] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1119: Allocating blocks 41-42 which overlap fs metadata [ 123.320061][ T41] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.328501][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.337329][ T41] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.338533][ T7060] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1121'. [ 123.345609][ T41] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.362981][ T7054] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1119: Allocating blocks 41-42 which overlap fs metadata [ 123.377257][ T7054] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1119: Failed to acquire dquot type 1 [ 123.392578][ T7054] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 123.407318][ T7054] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1119: corrupted inode contents [ 123.407424][ T7054] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.1119: mark_inode_dirty error [ 123.407591][ T7054] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1119: corrupted inode contents [ 123.407730][ T7054] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.1119: mark_inode_dirty error [ 123.407871][ T7054] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1119: corrupted inode contents [ 123.408002][ T7054] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 123.408099][ T7054] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.1119: corrupted inode contents [ 123.408187][ T7054] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.1119: mark_inode_dirty error [ 123.408340][ T7054] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 123.408560][ T7054] EXT4-fs (loop3): 1 truncate cleaned up [ 123.435457][ T7064] loop1: detected capacity change from 0 to 164 [ 123.523759][ T7064] rock: directory entry would overflow storage [ 123.529927][ T7064] rock: sig=0x66, size=4, remaining=3 [ 123.538995][ T7064] rock: directory entry would overflow storage [ 123.545338][ T7064] rock: sig=0x66, size=4, remaining=3 [ 123.570249][ T7068] usb usb5: usbfs: process 7068 (syz.5.1125) did not claim interface 0 before use [ 123.614513][ T7070] Cannot find set identified by id 0 to match [ 123.623528][ T7076] batadv_slave_1: entered promiscuous mode [ 124.182586][ T7090] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.192386][ T7090] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.209082][ T7092] loop0: detected capacity change from 0 to 512 [ 124.222599][ T7092] EXT4-fs (loop0): too many log groups per flexible block group [ 124.230541][ T7092] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 124.237418][ T7092] EXT4-fs (loop0): mount failed [ 124.238171][ T7095] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 124.252652][ T7090] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.262453][ T7090] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.311898][ T7090] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.321874][ T7090] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.336907][ T7104] loop0: detected capacity change from 0 to 512 [ 124.382588][ T7090] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.392512][ T7090] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.455648][ T7075] batadv_slave_1: left promiscuous mode [ 124.949833][ T7137] FAULT_INJECTION: forcing a failure. [ 124.949833][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.962958][ T7137] CPU: 0 UID: 0 PID: 7137 Comm: syz.2.1145 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.962985][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.962996][ T7137] Call Trace: [ 124.963002][ T7137] [ 124.963009][ T7137] __dump_stack+0x1d/0x30 [ 124.963029][ T7137] dump_stack_lvl+0xe8/0x140 [ 124.963046][ T7137] dump_stack+0x15/0x1b [ 124.963060][ T7137] should_fail_ex+0x265/0x280 [ 124.963094][ T7137] should_fail+0xb/0x20 [ 124.963166][ T7137] should_fail_usercopy+0x1a/0x20 [ 124.963187][ T7137] strncpy_from_user+0x25/0x230 [ 124.963257][ T7137] ? __fget_files+0x184/0x1c0 [ 124.963378][ T7137] __se_sys_request_key+0x57/0x290 [ 124.963406][ T7137] ? fput+0x8f/0xc0 [ 124.963494][ T7137] __x64_sys_request_key+0x55/0x70 [ 124.963524][ T7137] x64_sys_call+0x1d98/0x3000 [ 124.963543][ T7137] do_syscall_64+0xd2/0x200 [ 124.963588][ T7137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.963613][ T7137] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.963645][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.963721][ T7137] RIP: 0033:0x7f9b265ff749 [ 124.963734][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.963749][ T7137] RSP: 002b:00007f9b2505f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 124.963768][ T7137] RAX: ffffffffffffffda RBX: 00007f9b26855fa0 RCX: 00007f9b265ff749 [ 124.963781][ T7137] RDX: 0000200000000740 RSI: 0000200000000780 RDI: 0000200000000240 [ 124.963794][ T7137] RBP: 00007f9b2505f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.963846][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.963858][ T7137] R13: 00007f9b26856038 R14: 00007f9b26855fa0 R15: 00007ffffacdce38 [ 124.963878][ T7137] [ 125.324986][ T7150] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 125.335772][ T7150] bond1 (unregistering): Released all slaves [ 125.431484][ T7162] xt_hashlimit: max too large, truncated to 1048576 [ 125.438139][ T7160] pim6reg1: entered allmulticast mode [ 125.446272][ T7160] loop1: detected capacity change from 0 to 128 [ 125.584206][ T7178] loop3: detected capacity change from 0 to 1024 [ 125.591467][ T7178] EXT4-fs: Ignoring removed bh option [ 126.164984][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 126.164998][ T29] audit: type=1326 audit(126.150:5519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 126.194179][ T29] audit: type=1326 audit(126.150:5520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 126.199368][ T7199] loop0: detected capacity change from 0 to 1024 [ 126.217070][ T29] audit: type=1326 audit(126.150:5521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7196 comm="syz.0.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291e68f749 code=0x7ffc0000 [ 126.249402][ T7199] EXT4-fs: Ignoring removed bh option [ 126.287044][ T29] audit: type=1400 audit(126.270:5522): avc: denied { setopt } for pid=7202 comm="syz.2.1169" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.340694][ T29] audit: type=1400 audit(126.330:5523): avc: denied { read } for pid=7204 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.417637][ T7214] __nla_validate_parse: 2 callbacks suppressed [ 126.417653][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 126.474781][ T29] audit: type=1326 audit(126.460:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 126.497627][ T29] audit: type=1326 audit(126.460:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 126.584620][ T29] audit: type=1326 audit(126.510:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 126.607448][ T29] audit: type=1326 audit(126.510:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 126.630386][ T29] audit: type=1326 audit(126.510:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.1.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd123f2f749 code=0x7ffc0000 [ 126.860263][ T7218] lo speed is unknown, defaulting to 1000 [ 126.885064][ T7218] wg1 speed is unknown, defaulting to 1000 [ 126.938245][ T7226] lo speed is unknown, defaulting to 1000 [ 126.957886][ T7226] wg1 speed is unknown, defaulting to 1000 [ 127.071398][ T5506] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.079610][ T5506] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.141467][ T58] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.149677][ T58] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.186309][ T58] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.194688][ T58] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.241166][ T58] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.249432][ T58] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.299251][ T7243] loop5: detected capacity change from 0 to 512 [ 127.337710][ T7243] EXT4-fs error (device loop5): ext4_empty_dir:3086: inode #12: block 32: comm syz.5.1183: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.377358][ T7243] EXT4-fs (loop5): Remounting filesystem read-only [ 127.383942][ T7243] EXT4-fs warning (device loop5): ext4_empty_dir:3089: inode #12: comm syz.5.1183: directory missing '.' [ 127.547327][ T7247] lo speed is unknown, defaulting to 1000 [ 127.590258][ T7257] netlink: 'syz.2.1187': attribute type 12 has an invalid length. [ 127.598215][ T7257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1187'. [ 127.638875][ T7247] wg1 speed is unknown, defaulting to 1000 [ 127.739005][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 127.763635][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1191'. [ 128.218455][ T7282] FAT-fs (loop7): unable to read boot sector [ 128.308026][ T7289] loop3: detected capacity change from 0 to 512 [ 128.333404][ T7289] EXT4-fs (loop3): too many log groups per flexible block group [ 128.348012][ T7289] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 128.355039][ T7289] EXT4-fs (loop3): mount failed [ 128.406874][ T7300] netlink: 'syz.1.1200': attribute type 12 has an invalid length. [ 128.414768][ T7300] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1200'. [ 128.522891][ T7302] loop1: detected capacity change from 0 to 512 [ 128.531979][ T7302] EXT4-fs (loop1): too many log groups per flexible block group [ 128.539747][ T7302] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 128.551577][ T7302] EXT4-fs (loop1): mount failed [ 128.596757][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 128.634516][ T7313] loop1: detected capacity change from 0 to 512 [ 128.897002][ T7332] loop0: detected capacity change from 0 to 512 [ 128.923975][ T7336] netlink: 'syz.1.1213': attribute type 12 has an invalid length. [ 128.931943][ T7336] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1213'. [ 128.953971][ T3005] ================================================================== [ 128.961396][ T7338] FAULT_INJECTION: forcing a failure. [ 128.961396][ T7338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 128.962067][ T3005] BUG: KCSAN: data-race in set_nlink / set_nlink [ 128.975305][ T7338] CPU: 1 UID: 0 PID: 7338 Comm: syz.0.1215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.975332][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.975362][ T7338] Call Trace: [ 128.975368][ T7338] [ 128.975375][ T7338] __dump_stack+0x1d/0x30 [ 128.975395][ T7338] dump_stack_lvl+0xe8/0x140 [ 128.975423][ T7338] dump_stack+0x15/0x1b [ 128.975440][ T7338] should_fail_ex+0x265/0x280 [ 128.975471][ T7338] should_fail_alloc_page+0xf2/0x100 [ 128.975580][ T7338] __alloc_frozen_pages_noprof+0xff/0x360 [ 128.975614][ T7338] alloc_pages_mpol+0xb3/0x260 [ 128.975634][ T7338] alloc_pages_noprof+0x90/0x130 [ 128.975655][ T7338] pte_alloc_one+0x1e/0xd0 [ 128.975715][ T7338] __pte_alloc+0x32/0x290 [ 128.975746][ T7338] handle_mm_fault+0x1c18/0x2be0 [ 128.975770][ T7338] ? vma_start_read+0x141/0x1f0 [ 128.975803][ T7338] do_user_addr_fault+0x630/0x1080 [ 128.975900][ T7338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.975925][ T7338] exc_page_fault+0x62/0xa0 [ 128.975954][ T7338] asm_exc_page_fault+0x26/0x30 [ 128.975973][ T7338] RIP: 0033:0x7f291e5509e6 [ 128.975987][ T7338] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 128.976088][ T7338] RSP: 002b:00007f291d0f64a0 EFLAGS: 00010246 [ 128.976103][ T7338] RAX: 0000000000000001 RBX: 00007f291d0f6540 RCX: 0000000000000101 [ 128.976115][ T7338] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f291d0f65e0 [ 128.976127][ T7338] RBP: 0000000000000102 R08: 00007f2914cd7000 R09: 0000000000000000 [ 128.976138][ T7338] R10: 0000000000000000 R11: 00007f291d0f6550 R12: 0000000000000001 [ 128.976150][ T7338] R13: 00007f291e72fc40 R14: 0000000000000000 R15: 00007f291d0f65e0 [ 128.976168][ T7338] [ 128.976245][ T7338] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 128.981574][ T3005] [ 128.981581][ T3005] read to 0xffff888106d73858 of 4 bytes by task 3513 on cpu 1: [ 128.981595][ T3005] set_nlink+0x29/0xb0 [ 128.981616][ T3005] kernfs_iop_permission+0x1e2/0x220 [ 128.981638][ T3005] inode_permission+0x1ca/0x310 [ 128.981663][ T3005] link_path_walk+0x162/0x900 [ 129.193551][ T3005] path_openat+0x1de/0x2170 [ 129.198053][ T3005] do_filp_open+0x109/0x230 [ 129.202548][ T3005] do_sys_openat2+0xa6/0x110 [ 129.207130][ T3005] __x64_sys_openat+0xf2/0x120 [ 129.211965][ T3005] x64_sys_call+0x2eab/0x3000 [ 129.216640][ T3005] do_syscall_64+0xd2/0x200 [ 129.221139][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.227021][ T3005] [ 129.229334][ T3005] write to 0xffff888106d73858 of 4 bytes by task 3005 on cpu 0: [ 129.236946][ T3005] set_nlink+0x99/0xb0 [ 129.241012][ T3005] kernfs_iop_permission+0x1e2/0x220 [ 129.246295][ T3005] inode_permission+0x1ca/0x310 [ 129.251152][ T3005] link_path_walk+0x162/0x900 [ 129.255830][ T3005] path_lookupat+0x63/0x2a0 [ 129.260328][ T3005] filename_lookup+0x147/0x340 [ 129.265083][ T3005] vfs_statx+0x9d/0x390 [ 129.269220][ T3005] vfs_fstatat+0x115/0x170 [ 129.273614][ T3005] __se_sys_newfstatat+0x55/0x260 [ 129.278637][ T3005] __x64_sys_newfstatat+0x55/0x70 [ 129.283642][ T3005] x64_sys_call+0x135a/0x3000 [ 129.288296][ T3005] do_syscall_64+0xd2/0x200 [ 129.292774][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.298641][ T3005] [ 129.301082][ T3005] value changed: 0x00000009 -> 0x00000008 [ 129.306774][ T3005] [ 129.309077][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 129.315200][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.324455][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.334486][ T3005] ================================================================== [ 129.344917][ T7338] loop0: detected capacity change from 0 to 512 [ 129.363621][ T7338] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.1215: corrupted xattr block 95: invalid header [ 129.399017][ T7338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1215: bg 0: block 7: invalid block bitmap [ 129.432151][ T7338] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 129.461180][ T7338] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2967: inode #11: comm syz.0.1215: corrupted xattr block 95: invalid header [ 129.478573][ T7338] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 129.489335][ T7338] EXT4-fs (loop0): 1 orphan inode deleted