last executing test programs: 21m20.374429333s ago: executing program 2 (id=128): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x12, 0xa, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 21m20.111497617s ago: executing program 2 (id=130): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000006800090300000000000000000a00000000001a000400040008000100010000003f6c51a27d6544220fc091bf1e9a7954f10249a844dc45d6c88591767a1dd1b8998aed349486262c8d42248ca90dee62e96b9c26efeaeccdcf151037d484a7d2a69a5d00bb983b3edaf370d4ddbac00fd8dcc46c4a772d360cbf1024d220c4598b63b003a590d9fd9ab1923a733bf371a7ab220e4cd46004cc1ac34003317b29d0a126928af7d5ca6b12c2a5deaa229f622cac75a910dbf4a1fad87fe51ba60af65c8cdf34c2da"], 0x24}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000d6bd520d919a38f580fd41bb00000000000400000080000000000000a0cd9d80c06469aca2b414e7f4f2e18b0d5d68c4b9e5f7755ec1dff9578aa0a1124891ac74312b616bdcc2241c0e67e280bc764b78a3fe88e8a67e5ebbdd0ddc4347edf4eb87014e73d065c119a1d6aac664dd8bfadf3c50e4e9afab38061541c64251c600f5239ee5e9e33a5ff8bf5d8a3fe1a4ce3bb97caca2652623ec5b8c310c68a2f307ffde6a54515f78935b87cc383558264e80454d496a35d42267a9e67e4afba40f1b0ae1579d6443600cadf0c0547db942fd10a87c7343f3917ea356153f20d287471bac412ce569ccd0de0abcf9e563c55f833fcb42783a7da64b8e3e2477a35dde5fa97cc9af2a85555ce3a2f5f33c067732735b4ee85ee18f9368b43924b12cbb28c11218", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 21m19.098432213s ago: executing program 2 (id=135): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") 21m18.893080716s ago: executing program 2 (id=138): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 21m18.843020007s ago: executing program 2 (id=139): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9ff060000000000000014f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x12) 21m18.369106764s ago: executing program 2 (id=143): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000026c0)={{r0}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 21m18.234972246s ago: executing program 32 (id=143): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000026c0)={{r0}, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) 26.729004858s ago: executing program 0 (id=7323): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0xffffffffffffff38) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2048c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xb, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 26.548834961s ago: executing program 0 (id=7328): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 26.506872402s ago: executing program 0 (id=7329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400000045000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) close(r0) 26.434192883s ago: executing program 0 (id=7331): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005f40)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0xffffffff, @loopback={0xff00000000000000}, 0x7}, 0x1c, 0x0}}], 0x1, 0x4040845) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) 25.541721586s ago: executing program 0 (id=7345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r4}, 0x10) write$cgroup_int(r3, 0x0, 0x0) 25.436936228s ago: executing program 0 (id=7346): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/208, 0xd0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2040400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r5) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nouid32}], [{@hash}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r7 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) open(0x0, 0x145142, 0x0) sendfile(r7, r6, 0x0, 0x800000009) 10.38881427s ago: executing program 33 (id=7346): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r0, &(0x7f0000000200)=""/208, 0xd0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @time={0x80, 0xff}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x2040400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3000000000080041007278650014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x24004000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r5) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nouid32}], [{@hash}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r7 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) open(0x0, 0x145142, 0x0) sendfile(r7, r6, 0x0, 0x800000009) 3.30605507s ago: executing program 3 (id=7745): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 3.24636162s ago: executing program 3 (id=7750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setuid(0x0) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") 2.878947656s ago: executing program 3 (id=7753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f00000007c0), &(0x7f0000000280)=""/89}, 0x20) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 2.820770277s ago: executing program 3 (id=7755): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000000000020000e60000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x4e, 0x0, 0x7, 0x7, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006301be00000000000000000000050000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 2.762035188s ago: executing program 3 (id=7757): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) brk(0x400000ffc020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r3, 0x611c, 0x7, 0x4}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.933033731s ago: executing program 5 (id=7768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 1.869527171s ago: executing program 5 (id=7770): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000278000/0x2000)=nil, 0x2000, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r2}}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, &(0x7f00000000c0), &(0x7f0000000040)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) 1.785005933s ago: executing program 1 (id=7771): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r1}, 0x18) lsm_get_self_attr(0x64, &(0x7f0000000300)={0x0, 0x0, 0x90, 0x70, ""/112}, &(0x7f0000000400)=0x90, 0x0) 1.707223004s ago: executing program 1 (id=7772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) acct(&(0x7f0000000140)='./file0\x00') 1.580965296s ago: executing program 1 (id=7774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) 1.470238318s ago: executing program 1 (id=7776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x400002, 0x333}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000000)={0x5, 0x1000, 0x6, 0xd, 0x1, 0x9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x4080, 0x1}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x10, 0x1, 0x2ef}, 0x0, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.395838469s ago: executing program 6 (id=7777): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000000000020000e60000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x4e, 0x0, 0x7, 0x7, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006301be00000000000000000000050000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.33236398s ago: executing program 5 (id=7779): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x10, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000280)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000278000/0x2000)=nil, 0x2000, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) 1.30084892s ago: executing program 4 (id=7780): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000000000020000e60000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x4e, 0x0, 0x7, 0x7, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) clock_getres(0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006301be00000000000000000000050000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.165190293s ago: executing program 6 (id=7781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xd74d4000) socketpair(0xa, 0x800, 0x3, &(0x7f0000000280)) mbind(&(0x7f00002fb000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.119871323s ago: executing program 4 (id=7782): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0xfdb46d6c8a435526) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, {0x2a00, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000008ee07131df341d2a", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x2, 0xffff8001, 0x117, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180)=r1, 0xfffffffffffffd23) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r10, 0x0, 0x9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioperm(0x4, 0x9, 0x1) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") 1.035367105s ago: executing program 6 (id=7783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x12) 808.874148ms ago: executing program 6 (id=7784): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000180), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000c07c8272cd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007bd08af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300ff009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000200)={0x0, 0x0}) r4 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flistxattr(r6, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r8, r1, &(0x7f0000000080)=0x3e, 0x0) r9 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000001f00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast2, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x6, 0x10, 0xa0}], @param_prob={0x4, 0x2, 0x0, 0xffffffff, {0x9, 0x6, "fcbabc", 0x80, 0x62, 0xff, @mcast1, @mcast2}}}}}}}, 0x0) write$cgroup_pid(r11, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r9, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6) 793.377388ms ago: executing program 5 (id=7785): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4f36, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12141, 0x0) 752.711509ms ago: executing program 4 (id=7786): sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0xfdb46d6c8a435526) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x3, {0x2a00, 0x80010000, 0x0, 0x8, 0x1, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000008ee07131df341d2a", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x2, 0xffff8001, 0x117, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180)=r1, 0xfffffffffffffd23) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee88475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r10, 0x0, 0x9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioperm(0x4, 0x9, 0x1) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") 712.16072ms ago: executing program 6 (id=7787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@errors_continue}, {@noinit_itable}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x40) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r4, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 685.91568ms ago: executing program 5 (id=7788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 614.431071ms ago: executing program 5 (id=7789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=0x0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x104, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd4, 0x2, {{0x8, 0x2, 0x7, 0x2c, 0xfffffffa, 0xa7b6}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x81}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x4, 0x7, 0x80, 0x7, 0x9}}, @TCA_NETEM_DELAY_DIST={0x67, 0x2, "4f7da7137e3cc04b9606f9091dbfc9f10c685d7d0c08d7f8b02dbabcffdb12435d5254028aa77904e92975bfa755f4c62dbd791c6fab4ed4e609595cc1fd0915bfbb8369597afc2db7c4b111181b60bc9737236c1e511bcd76da782f9516bc2aa12cf1"}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2, 0x4}}]}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40088d0}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000001fd92f494b46f3e73d444e3ce6f1d79d964d6ad16d02aed043e9ee05d615ee42f6bb82b1e83f2f01acbea05e5e72a6ead58a21bd34edc3b03afd7043e5ae1dbf881abd5f2ac20b665b67bb4e1203ff4a8028e08ce091ad37c19856b6673a2d5699ce2736833d4d7d9466d2f65"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r8}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x301}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r9) 340.358306ms ago: executing program 1 (id=7790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 314.462736ms ago: executing program 3 (id=7791): lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 313.681016ms ago: executing program 4 (id=7792): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000000000020000e60000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0x4e, 0x0, 0x7, 0x7, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) clock_getres(0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) setuid(0xee00) setpriority(0x1, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000006301be00000000000000000000050000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x42a00180, 0x0, 0x0, 0x0, 0x0, 0x0) 269.222636ms ago: executing program 1 (id=7793): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005f40)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0xffffffff, @loopback={0xff00000000000000}, 0x7}, 0x1c, 0x0}}], 0x1, 0x4040845) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) 209.251627ms ago: executing program 6 (id=7794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@errors_continue}, {@noinit_itable}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x40) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 198.801627ms ago: executing program 4 (id=7795): time(0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) time(&(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e000100776972656775617264"], 0x40}}, 0x4000) 0s ago: executing program 4 (id=7796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x0, 0xd, 0xfff9}]}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}}, 0x0) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r1, 0x0, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00', r3, 0x0, 0x800000000000000}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): end of block bitmap is not set [ 1270.718227][T26452] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1270.731744][T26453] Quota error (device loop0): write_blk: dquota write failed [ 1270.738676][T26452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6814: bg 0: block 248: padding at end of block bitmap is not set [ 1270.745236][T26453] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1270.763929][T26452] Quota error (device loop4): write_blk: dquota write failed [ 1270.769453][T26453] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6815: Failed to acquire dquot type 1 [ 1270.776763][T26452] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1270.798047][T26452] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6814: Failed to acquire dquot type 1 [ 1270.810393][T26453] EXT4-fs (loop0): 1 truncate cleaned up [ 1270.816473][T26452] EXT4-fs (loop4): 1 truncate cleaned up [ 1270.816867][T26453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1270.835059][T26453] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.845258][T26452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1271.384590][T22825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1271.571994][T26472] loop0: detected capacity change from 0 to 512 [ 1271.594716][T26472] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1271.649969][T26472] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1271.676807][T26472] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6820: bg 0: block 248: padding at end of block bitmap is not set [ 1271.720277][T26472] Quota error (device loop0): write_blk: dquota write failed [ 1271.727729][T26472] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1271.737757][T26472] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6820: Failed to acquire dquot type 1 [ 1271.795849][T26472] EXT4-fs (loop0): 1 truncate cleaned up [ 1271.818923][T26472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1271.980599][T23561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.250553][T26489] loop3: detected capacity change from 0 to 512 [ 1272.402340][T26482] netlink: 'syz.1.6824': attribute type 4 has an invalid length. [ 1272.410151][T26482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1272.605138][T26489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.617801][T26489] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1273.786273][T23561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1273.957269][T26511] loop3: detected capacity change from 0 to 512 [ 1273.964341][T26511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1273.974384][T26511] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1273.982079][T26511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6831: bg 0: block 248: padding at end of block bitmap is not set [ 1273.999049][T26511] Quota error (device loop3): write_blk: dquota write failed [ 1274.006458][T26511] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1274.016487][T26511] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6831: Failed to acquire dquot type 1 [ 1274.028514][T26511] EXT4-fs (loop3): 1 truncate cleaned up [ 1274.035113][T26511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1274.048140][T26511] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.484965][T26523] loop1: detected capacity change from 0 to 512 [ 1274.546456][T26523] EXT4-fs (loop1): 1 orphan inode deleted [ 1274.566367][T26523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.584041][ T4632] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 1274.606126][T26523] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.200581][T24575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.399641][T26543] netlink: 'syz.5.6842': attribute type 4 has an invalid length. [ 1275.407423][T26543] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6842'. [ 1275.489255][T26562] hub 2-0:1.0: USB hub found [ 1275.493982][T26562] hub 2-0:1.0: 8 ports detected [ 1276.227402][T26582] hub 2-0:1.0: USB hub found [ 1276.249572][T26582] hub 2-0:1.0: 8 ports detected [ 1277.149784][T26611] loop4: detected capacity change from 0 to 512 [ 1277.172515][T26611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1277.187541][T26611] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1277.195751][T26611] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6865: bg 0: block 248: padding at end of block bitmap is not set [ 1277.210754][T26611] __quota_error: 1 callbacks suppressed [ 1277.210768][T26611] Quota error (device loop4): write_blk: dquota write failed [ 1277.223873][T26611] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1277.233836][T26611] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6865: Failed to acquire dquot type 1 [ 1277.246525][T26611] EXT4-fs (loop4): 1 truncate cleaned up [ 1277.256409][T26611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1277.269748][T26611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.575595][T26616] loop5: detected capacity change from 0 to 512 [ 1277.633684][T26616] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1277.711318][T26616] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1277.814652][T26616] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6866: bg 0: block 248: padding at end of block bitmap is not set [ 1278.078764][T26616] Quota error (device loop5): write_blk: dquota write failed [ 1278.086260][T26616] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1278.096209][T26616] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.6866: Failed to acquire dquot type 1 [ 1278.173864][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.336649][T26616] EXT4-fs (loop5): 1 truncate cleaned up [ 1278.808338][T26616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1278.870324][T26616] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.902735][T26622] loop1: detected capacity change from 0 to 512 [ 1278.910317][T26622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1278.923141][T26622] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1278.939788][T26622] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6867: bg 0: block 248: padding at end of block bitmap is not set [ 1278.957418][T26622] Quota error (device loop1): write_blk: dquota write failed [ 1278.964898][T26622] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1278.974845][T26622] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.6867: Failed to acquire dquot type 1 [ 1278.989575][T26622] EXT4-fs (loop1): 1 truncate cleaned up [ 1278.995951][T26622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1279.008888][T26622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.324902][T26647] loop4: detected capacity change from 0 to 128 [ 1279.517523][T26657] loop0: detected capacity change from 0 to 512 [ 1279.720732][T26657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.733622][T26657] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.771631][T26662] hub 2-0:1.0: USB hub found [ 1279.776460][T26662] hub 2-0:1.0: 8 ports detected [ 1280.697416][T26667] loop4: detected capacity change from 0 to 512 [ 1280.705543][T26667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1280.736649][T26667] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1280.744331][T26667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6882: bg 0: block 248: padding at end of block bitmap is not set [ 1280.772639][T26667] Quota error (device loop4): write_blk: dquota write failed [ 1280.780103][T26667] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1280.790077][T26667] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6882: Failed to acquire dquot type 1 [ 1280.802914][T26667] EXT4-fs (loop4): 1 truncate cleaned up [ 1281.074881][T26667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1281.088009][T26667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.738069][T24575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1281.941317][T26716] loop0: detected capacity change from 0 to 512 [ 1281.965582][T26716] EXT4-fs (loop0): 1 orphan inode deleted [ 1281.971822][T26716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1281.988016][ T59] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1281.988898][T26716] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.997883][ T59] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 1282.357737][T26734] loop3: detected capacity change from 0 to 512 [ 1282.475921][T26735] hub 2-0:1.0: USB hub found [ 1282.480792][T26735] hub 2-0:1.0: 8 ports detected [ 1282.526575][T26734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1282.539292][T26734] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.943223][T24575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.271726][T26739] loop5: detected capacity change from 0 to 512 [ 1284.311108][T26739] EXT4-fs (loop5): 1 orphan inode deleted [ 1284.317359][T26739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.330297][ T59] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1284.340218][ T59] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 1284.371311][T26746] loop4: detected capacity change from 0 to 512 [ 1285.331796][T26753] loop0: detected capacity change from 0 to 512 [ 1285.353159][T26739] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.759952][T26753] EXT4-fs (loop0): 1 orphan inode deleted [ 1285.767552][T26753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.785414][T26746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.798004][T26746] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.872446][T26753] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1285.884228][T25254] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1285.894070][T25254] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 1285.913165][T23561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.925158][T24243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.045705][T22825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.075504][T24575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.107664][T26768] loop5: detected capacity change from 0 to 128 [ 1286.842571][T26808] netlink: 'syz.3.6927': attribute type 4 has an invalid length. [ 1287.273188][T26845] loop4: detected capacity change from 0 to 128 [ 1287.796450][T26856] netlink: 'syz.1.6947': attribute type 4 has an invalid length. [ 1287.984365][T26869] loop1: detected capacity change from 0 to 512 [ 1288.030843][T26869] EXT4-fs (loop1): 1 orphan inode deleted [ 1288.048911][ T59] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1288.052925][T26869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1288.058707][ T59] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 1288.084193][T26869] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1288.098408][T26877] loop0: detected capacity change from 0 to 512 [ 1288.105562][T26877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1288.118797][T26877] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1288.125711][T26877] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6951: bg 0: block 248: padding at end of block bitmap is not set [ 1288.143814][T26877] Quota error (device loop0): write_blk: dquota write failed [ 1288.151306][T26877] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1288.161451][T26877] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6951: Failed to acquire dquot type 1 [ 1288.176543][T26877] EXT4-fs (loop0): 1 truncate cleaned up [ 1288.182972][T26877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1288.195950][T26877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1288.533977][T26908] loop4: detected capacity change from 0 to 128 [ 1288.556310][T26910] loop3: detected capacity change from 0 to 512 [ 1288.611182][T26910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1288.639634][T26910] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1288.647303][T26910] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6964: bg 0: block 248: padding at end of block bitmap is not set [ 1288.662523][T26910] Quota error (device loop3): write_blk: dquota write failed [ 1288.670015][T26910] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1288.679995][T26910] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.6964: Failed to acquire dquot type 1 [ 1288.692370][T26910] EXT4-fs (loop3): 1 truncate cleaned up [ 1288.699300][T26910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1288.712469][T26910] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.477130][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.494147][T26916] loop0: detected capacity change from 0 to 512 [ 1290.511140][T26916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.524000][T26916] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.691352][T24575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.772401][T26961] netlink: 'syz.3.6975': attribute type 4 has an invalid length. [ 1291.800285][T26962] netlink: 'syz.1.6976': attribute type 4 has an invalid length. [ 1291.882374][T26957] netlink: 'syz.5.6977': attribute type 4 has an invalid length. [ 1292.505721][T26977] loop0: detected capacity change from 0 to 512 [ 1292.551908][T26977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1292.581271][T26977] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1292.678750][T26977] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6981: bg 0: block 248: padding at end of block bitmap is not set [ 1292.755499][T26977] Quota error (device loop0): write_blk: dquota write failed [ 1292.763121][T26977] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1292.773234][T26977] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.6981: Failed to acquire dquot type 1 [ 1292.833733][T26977] EXT4-fs (loop0): 1 truncate cleaned up [ 1292.843934][T26977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1292.860295][T26995] loop1: detected capacity change from 0 to 512 [ 1293.120262][T26995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.132952][T26995] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1293.782373][T27011] loop4: detected capacity change from 0 to 512 [ 1293.793421][T27011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1293.814316][T27011] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1293.829112][T27011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6994: bg 0: block 248: padding at end of block bitmap is not set [ 1293.865941][T27011] Quota error (device loop4): write_blk: dquota write failed [ 1293.873481][T27011] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1293.883494][T27011] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.6994: Failed to acquire dquot type 1 [ 1293.982565][T27011] EXT4-fs (loop4): 1 truncate cleaned up [ 1294.004587][T27011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1294.050294][T27011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.353676][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.494519][T27085] loop3: detected capacity change from 0 to 512 [ 1295.511595][T27085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.524227][T27085] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1297.079585][T23561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.366908][T24575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.506870][T27133] hub 2-0:1.0: USB hub found [ 1297.511866][T27133] hub 2-0:1.0: 8 ports detected [ 1297.689381][T27136] program syz.0.7038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1297.963650][T27154] program syz.1.7046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1298.275053][T27179] loop3: detected capacity change from 0 to 512 [ 1298.282421][T27179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1298.294288][T27179] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1298.301733][T27179] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7054: bg 0: block 248: padding at end of block bitmap is not set [ 1298.317055][T27179] Quota error (device loop3): write_blk: dquota write failed [ 1298.324514][T27179] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1298.334582][T27179] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7054: Failed to acquire dquot type 1 [ 1298.346437][T27179] EXT4-fs (loop3): 1 truncate cleaned up [ 1298.354594][T27179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1298.391344][T27184] hub 2-0:1.0: USB hub found [ 1298.419312][T27184] hub 2-0:1.0: 8 ports detected [ 1298.615896][T27191] hub 2-0:1.0: USB hub found [ 1298.626962][T27191] hub 2-0:1.0: 8 ports detected [ 1299.065673][T23561] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.296135][T27210] netlink: 'syz.0.7061': attribute type 4 has an invalid length. [ 1299.303942][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7061'. [ 1299.987400][T27233] loop5: detected capacity change from 0 to 512 [ 1300.023172][T27233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1300.068992][T27233] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1301.216210][T27252] netlink: 'syz.3.7077': attribute type 4 has an invalid length. [ 1301.726125][T27261] loop1: detected capacity change from 0 to 512 [ 1301.833744][T27261] EXT4-fs (loop1): 1 orphan inode deleted [ 1301.851832][T25254] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1301.861773][T25254] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 1301.879124][T27261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.922814][T27261] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1302.543745][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.898302][T27289] loop1: detected capacity change from 0 to 512 [ 1302.905542][T27289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1302.916594][T27289] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1302.937984][T27277] netlink: 'syz.3.7085': attribute type 4 has an invalid length. [ 1302.961806][T27289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7089: bg 0: block 248: padding at end of block bitmap is not set [ 1302.979310][T27289] Quota error (device loop1): write_blk: dquota write failed [ 1302.986725][T27289] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1302.996704][T27289] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7089: Failed to acquire dquot type 1 [ 1303.068680][T27294] loop4: detected capacity change from 0 to 512 [ 1303.084242][T27289] EXT4-fs (loop1): 1 truncate cleaned up [ 1303.141320][T27294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.154125][T27294] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.962187][T27289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1304.004898][T27289] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.104369][T24243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.503265][T27312] loop1: detected capacity change from 0 to 512 [ 1304.557773][T27312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1304.598213][T27312] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1304.627694][T22825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.652984][T27312] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7095: bg 0: block 248: padding at end of block bitmap is not set [ 1304.733074][T27312] Quota error (device loop1): write_blk: dquota write failed [ 1304.740595][T27312] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1304.750701][T27312] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7095: Failed to acquire dquot type 1 [ 1304.763385][T27321] program syz.4.7097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1304.766800][T27312] EXT4-fs (loop1): 1 truncate cleaned up [ 1304.810778][T27312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1304.829253][T27312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.406724][T27368] loop1: detected capacity change from 0 to 512 [ 1306.457873][T27368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.470624][T27368] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.499044][T27389] loop4: detected capacity change from 0 to 512 [ 1307.528421][T27389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1307.554060][T27389] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1307.564877][T27389] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7120: bg 0: block 248: padding at end of block bitmap is not set [ 1307.632717][T27397] netlink: 'syz.3.7116': attribute type 4 has an invalid length. [ 1307.904223][T27389] Quota error (device loop4): write_blk: dquota write failed [ 1307.911754][T27389] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1307.921746][T27389] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7120: Failed to acquire dquot type 1 [ 1308.081096][T27389] EXT4-fs (loop4): 1 truncate cleaned up [ 1308.112364][T27389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1308.127848][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.159673][T27389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.894155][T27408] hub 2-0:1.0: USB hub found [ 1308.964572][T27408] hub 2-0:1.0: 8 ports detected [ 1309.471306][T27434] hub 2-0:1.0: USB hub found [ 1309.476059][T27434] hub 2-0:1.0: 8 ports detected [ 1310.046446][T27440] loop1: detected capacity change from 0 to 512 [ 1310.061788][T27440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1310.076342][T27440] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1310.099171][T27440] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7137: bg 0: block 248: padding at end of block bitmap is not set [ 1310.114086][T27440] Quota error (device loop1): write_blk: dquota write failed [ 1310.122009][T27440] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1310.132000][T27440] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7137: Failed to acquire dquot type 1 [ 1310.152002][T27440] EXT4-fs (loop1): 1 truncate cleaned up [ 1310.177083][T27440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1310.234906][T27440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.379930][T27452] netlink: 'syz.0.7136': attribute type 4 has an invalid length. [ 1310.597079][T27459] loop5: detected capacity change from 0 to 512 [ 1310.838009][T27459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.851107][T27459] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.849565][T27479] loop1: detected capacity change from 0 to 128 [ 1312.060577][T24243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.693000][T27496] hub 2-0:1.0: USB hub found [ 1312.697958][T27496] hub 2-0:1.0: 8 ports detected [ 1313.263000][T27506] hub 2-0:1.0: USB hub found [ 1313.286489][T27506] hub 2-0:1.0: 8 ports detected [ 1314.334257][T27539] loop5: detected capacity change from 0 to 512 [ 1314.352074][T27539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1314.364550][T27539] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1314.371465][T27539] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7162: bg 0: block 248: padding at end of block bitmap is not set [ 1314.386154][T27539] Quota error (device loop5): write_blk: dquota write failed [ 1314.393669][T27539] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1314.403727][T27539] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.7162: Failed to acquire dquot type 1 [ 1314.415787][T27539] EXT4-fs (loop5): 1 truncate cleaned up [ 1314.451135][T27539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1314.464004][T27539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.637272][T27551] loop3: detected capacity change from 0 to 512 [ 1314.644521][T27551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1314.654043][T27551] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1314.661534][T27551] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7175: bg 0: block 248: padding at end of block bitmap is not set [ 1314.676224][T27551] Quota error (device loop3): write_blk: dquota write failed [ 1314.683832][T27551] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1314.693806][T27551] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7175: Failed to acquire dquot type 1 [ 1314.705681][T27551] EXT4-fs (loop3): 1 truncate cleaned up [ 1314.712090][T27551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1314.724966][T27551] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.565800][T27603] netlink: 'syz.1.7184': attribute type 4 has an invalid length. [ 1316.263477][T27638] program syz.3.7210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1316.294143][T27634] loop1: detected capacity change from 0 to 128 [ 1316.578227][T27667] loop4: detected capacity change from 0 to 512 [ 1316.585713][T27667] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1316.595348][T27667] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1316.602192][T27667] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7220: bg 0: block 248: padding at end of block bitmap is not set [ 1316.617034][T27667] Quota error (device loop4): write_blk: dquota write failed [ 1316.624542][T27667] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1316.634569][T27667] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7220: Failed to acquire dquot type 1 [ 1316.646571][T27667] EXT4-fs (loop4): 1 truncate cleaned up [ 1316.656491][T27667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1316.669517][T27667] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.701008][T27673] program syz.0.7222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1317.048905][T27695] loop3: detected capacity change from 0 to 512 [ 1317.055936][T27695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1317.075723][T27695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1317.082778][T27695] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7230: bg 0: block 248: padding at end of block bitmap is not set [ 1317.097574][T27695] Quota error (device loop3): write_blk: dquota write failed [ 1317.105045][T27695] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1317.115006][T27695] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7230: Failed to acquire dquot type 1 [ 1317.126719][T27695] EXT4-fs (loop3): 1 truncate cleaned up [ 1317.133202][T27695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1317.146197][T27695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.605673][T27709] loop4: detected capacity change from 0 to 128 [ 1317.665845][T27722] program syz.1.7243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1317.926206][T27748] program syz.3.7255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1318.515552][T27787] loop5: detected capacity change from 0 to 512 [ 1318.523263][T27787] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1318.546367][T27787] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1318.553279][T27787] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7269: bg 0: block 248: padding at end of block bitmap is not set [ 1318.568239][T27787] Quota error (device loop5): write_blk: dquota write failed [ 1318.575833][T27787] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1318.585946][T27787] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.7269: Failed to acquire dquot type 1 [ 1318.598254][T27787] EXT4-fs (loop5): 1 truncate cleaned up [ 1318.615354][T27787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1318.628489][T27787] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.960836][T27827] loop1: detected capacity change from 0 to 512 [ 1318.973152][T27827] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1318.983482][T27827] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1318.991551][T27827] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7283: bg 0: block 248: padding at end of block bitmap is not set [ 1319.006717][T27827] Quota error (device loop1): write_blk: dquota write failed [ 1319.014287][T27827] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1319.024274][T27827] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7283: Failed to acquire dquot type 1 [ 1319.036631][T27827] EXT4-fs (loop1): 1 truncate cleaned up [ 1319.043079][T27827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1319.055984][T27827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.244240][T27842] loop0: detected capacity change from 0 to 512 [ 1319.251488][T27842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1319.261519][T27842] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1319.268389][T27842] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7293: bg 0: block 248: padding at end of block bitmap is not set [ 1319.283224][T27842] Quota error (device loop0): write_blk: dquota write failed [ 1319.290684][T27842] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1319.300755][T27842] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7293: Failed to acquire dquot type 1 [ 1319.314340][T27842] EXT4-fs (loop0): 1 truncate cleaned up [ 1319.321420][T27842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1319.334486][T27842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.403655][T27846] loop5: detected capacity change from 0 to 512 [ 1319.410844][T27846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1319.421143][T27846] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1319.428100][T27846] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7294: bg 0: block 248: padding at end of block bitmap is not set [ 1319.443092][T27846] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.7294: Failed to acquire dquot type 1 [ 1319.455184][T27846] EXT4-fs (loop5): 1 truncate cleaned up [ 1319.461525][T27846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1319.474465][T27846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.095551][T27867] loop4: detected capacity change from 0 to 512 [ 1320.219481][T27867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.232261][T27867] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.135201][T27896] program syz.0.7314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1321.672449][T22825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.944778][T27935] program syz.0.7328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.222173][T27956] loop1: detected capacity change from 0 to 512 [ 1322.244335][T27956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1322.261979][T27956] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.502374][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.534629][T27964] program syz.1.7338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.564201][T27966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7339'. [ 1322.573452][T27966] IPVS: Error joining to the multicast group [ 1322.580341][T27966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1322.645137][T27970] FAULT_INJECTION: forcing a failure. [ 1322.645137][T27970] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1322.658323][T27970] CPU: 0 UID: 0 PID: 27970 Comm: syz.4.7341 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1322.658394][T27970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1322.658416][T27970] Call Trace: [ 1322.658451][T27970] [ 1322.658458][T27970] dump_stack_lvl+0xf6/0x150 [ 1322.658484][T27970] dump_stack+0x15/0x1a [ 1322.658501][T27970] should_fail_ex+0x261/0x270 [ 1322.658604][T27970] should_fail+0xb/0x10 [ 1322.658634][T27970] should_fail_usercopy+0x1a/0x20 [ 1322.658667][T27970] _copy_to_user+0x20/0xa0 [ 1322.658757][T27970] simple_read_from_buffer+0xb2/0x130 [ 1322.658790][T27970] proc_fail_nth_read+0x103/0x140 [ 1322.658815][T27970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1322.658896][T27970] vfs_read+0x1b2/0x710 [ 1322.658928][T27970] ? __rcu_read_unlock+0x4e/0x70 [ 1322.659029][T27970] ? __fget_files+0x186/0x1c0 [ 1322.659050][T27970] ksys_read+0xeb/0x1b0 [ 1322.659081][T27970] __x64_sys_read+0x42/0x50 [ 1322.659155][T27970] x64_sys_call+0x2a3b/0x2e10 [ 1322.659198][T27970] do_syscall_64+0xc9/0x1c0 [ 1322.659232][T27970] ? clear_bhb_loop+0x25/0x80 [ 1322.659263][T27970] ? clear_bhb_loop+0x25/0x80 [ 1322.659326][T27970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.659352][T27970] RIP: 0033:0x7ff4aa7cbb7c [ 1322.659371][T27970] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1322.659393][T27970] RSP: 002b:00007ff4a8e2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1322.659412][T27970] RAX: ffffffffffffffda RBX: 00007ff4aa9e5fa0 RCX: 00007ff4aa7cbb7c [ 1322.659535][T27970] RDX: 000000000000000f RSI: 00007ff4a8e2f0a0 RDI: 0000000000000003 [ 1322.659550][T27970] RBP: 00007ff4a8e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.659564][T27970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.659576][T27970] R13: 0000000000000000 R14: 00007ff4aa9e5fa0 R15: 00007fff0c0228c8 [ 1322.659594][T27970] [ 1322.898274][T27974] loop1: detected capacity change from 0 to 1024 [ 1322.947458][T27974] ext4: Bad value for 'mb_optimize_scan' [ 1322.956911][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1322.956929][ T29] audit: type=1400 audit(1744313900.777:2160): avc: denied { create } for pid=27977 comm="syz.4.7344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1323.164863][ T29] audit: type=1400 audit(1744313900.997:2161): avc: denied { read } for pid=27983 comm="syz.0.7346" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1323.188302][ T29] audit: type=1400 audit(1744313900.997:2162): avc: denied { open } for pid=27983 comm="syz.0.7346" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1323.212124][ T29] audit: type=1400 audit(1744313900.997:2163): avc: denied { ioctl } for pid=27983 comm="syz.0.7346" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1323.245456][T28001] loop0: detected capacity change from 0 to 1024 [ 1323.253643][T28001] EXT4-fs: Ignoring removed nobh option [ 1323.259381][T28001] EXT4-fs: Ignoring removed bh option [ 1323.264824][T28001] ext3: Unknown parameter 'hash' [ 1323.291205][T27998] infiniband syz0: set active [ 1323.295965][T27998] infiniband syz0: added bond0 [ 1323.362245][T27998] RDS/IB: syz0: added [ 1323.366292][T27998] smc: adding ib device syz0 with port count 1 [ 1323.376166][T27998] smc: ib device syz0 port 1 has pnetid [ 1323.591589][ T29] audit: type=1400 audit(1744313901.427:2164): avc: denied { create } for pid=28015 comm="syz.3.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1323.611289][ T29] audit: type=1400 audit(1744313901.427:2165): avc: denied { ioctl } for pid=28015 comm="syz.3.7356" path="socket:[80750]" dev="sockfs" ino=80750 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1323.692637][T28027] FAULT_INJECTION: forcing a failure. [ 1323.692637][T28027] name failslab, interval 1, probability 0, space 0, times 1 [ 1323.705370][T28027] CPU: 0 UID: 0 PID: 28027 Comm: syz.3.7359 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1323.705397][T28027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1323.705410][T28027] Call Trace: [ 1323.705418][T28027] [ 1323.705479][T28027] dump_stack_lvl+0xf6/0x150 [ 1323.705525][T28027] dump_stack+0x15/0x1a [ 1323.705541][T28027] should_fail_ex+0x261/0x270 [ 1323.705568][T28027] should_failslab+0x8f/0xb0 [ 1323.705605][T28027] __kvmalloc_node_noprof+0x12c/0x520 [ 1323.705679][T28027] ? io_sqe_buffers_register+0xcf/0x550 [ 1323.705709][T28027] io_sqe_buffers_register+0xcf/0x550 [ 1323.705741][T28027] __se_sys_io_uring_register+0xb04/0x1f50 [ 1323.705845][T28027] ? kstrtouint_from_user+0xbf/0x100 [ 1323.705872][T28027] ? bpf_ringbuf_discard+0xcd/0xf0 [ 1323.705927][T28027] ? 0xffffffff81000000 [ 1323.705943][T28027] ? __rcu_read_unlock+0x4e/0x70 [ 1323.706021][T28027] ? get_pid_task+0x94/0xd0 [ 1323.706126][T28027] ? proc_fail_nth_write+0x12d/0x160 [ 1323.706147][T28027] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1323.706178][T28027] ? bloom_map_push_elem+0x30/0xd0 [ 1323.706219][T28027] ? __rcu_read_unlock+0x4e/0x70 [ 1323.706287][T28027] ? bpf_trace_run2+0x12c/0x1d0 [ 1323.706321][T28027] ? __bpf_trace_sys_enter+0x10/0x30 [ 1323.706357][T28027] ? trace_sys_enter+0xcd/0x110 [ 1323.706395][T28027] __x64_sys_io_uring_register+0x55/0x70 [ 1323.706442][T28027] x64_sys_call+0xb9d/0x2e10 [ 1323.706503][T28027] do_syscall_64+0xc9/0x1c0 [ 1323.706539][T28027] ? clear_bhb_loop+0x25/0x80 [ 1323.706565][T28027] ? clear_bhb_loop+0x25/0x80 [ 1323.706591][T28027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.706617][T28027] RIP: 0033:0x7f055005d169 [ 1323.706633][T28027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.706719][T28027] RSP: 002b:00007f054e6bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1323.706742][T28027] RAX: ffffffffffffffda RBX: 00007f0550275fa0 RCX: 00007f055005d169 [ 1323.706785][T28027] RDX: 0000200000000540 RSI: 0000000000000000 RDI: 0000000000000006 [ 1323.706812][T28027] RBP: 00007f054e6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.706825][T28027] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1323.706841][T28027] R13: 0000000000000000 R14: 00007f0550275fa0 R15: 00007fffc40da928 [ 1323.706864][T28027] [ 1324.032504][T28039] FAULT_INJECTION: forcing a failure. [ 1324.032504][T28039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.045684][T28039] CPU: 1 UID: 0 PID: 28039 Comm: syz.4.7365 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1324.045719][T28039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1324.045734][T28039] Call Trace: [ 1324.045743][T28039] [ 1324.045752][T28039] dump_stack_lvl+0xf6/0x150 [ 1324.045812][T28039] dump_stack+0x15/0x1a [ 1324.045830][T28039] should_fail_ex+0x261/0x270 [ 1324.045864][T28039] should_fail+0xb/0x10 [ 1324.045923][T28039] should_fail_usercopy+0x1a/0x20 [ 1324.045958][T28039] _copy_to_user+0x20/0xa0 [ 1324.046058][T28039] ucma_destroy_id+0x190/0x1c0 [ 1324.046093][T28039] ucma_write+0x1b6/0x250 [ 1324.046198][T28039] ? __pfx_ucma_write+0x10/0x10 [ 1324.046250][T28039] vfs_write+0x295/0x950 [ 1324.046279][T28039] ? putname+0xe1/0x100 [ 1324.046298][T28039] ? __fget_files+0x186/0x1c0 [ 1324.046324][T28039] ksys_write+0xeb/0x1b0 [ 1324.046366][T28039] __x64_sys_write+0x42/0x50 [ 1324.046394][T28039] x64_sys_call+0x2a45/0x2e10 [ 1324.046420][T28039] do_syscall_64+0xc9/0x1c0 [ 1324.046458][T28039] ? clear_bhb_loop+0x25/0x80 [ 1324.046554][T28039] ? clear_bhb_loop+0x25/0x80 [ 1324.046576][T28039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.046668][T28039] RIP: 0033:0x7ff4aa7cd169 [ 1324.046684][T28039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.046756][T28039] RSP: 002b:00007ff4a8e2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1324.046799][T28039] RAX: ffffffffffffffda RBX: 00007ff4aa9e5fa0 RCX: 00007ff4aa7cd169 [ 1324.046814][T28039] RDX: 0000000000000018 RSI: 0000200000000380 RDI: 0000000000000003 [ 1324.046830][T28039] RBP: 00007ff4a8e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.046844][T28039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.046857][T28039] R13: 0000000000000000 R14: 00007ff4aa9e5fa0 R15: 00007fff0c0228c8 [ 1324.046880][T28039] [ 1324.287720][ T29] audit: type=1326 audit(1744313902.117:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.5.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1324.311429][ T29] audit: type=1326 audit(1744313902.117:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.5.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1324.335079][ T29] audit: type=1326 audit(1744313902.117:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.5.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1324.358867][ T29] audit: type=1326 audit(1744313902.117:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28046 comm="syz.5.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1324.387254][T28050] loop4: detected capacity change from 0 to 512 [ 1324.394948][T28050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1324.404360][T28050] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1324.412632][T28050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7368: bg 0: block 248: padding at end of block bitmap is not set [ 1324.427416][T28050] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7368: Failed to acquire dquot type 1 [ 1324.439518][T28050] EXT4-fs (loop4): 1 truncate cleaned up [ 1324.449329][T28050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1324.462343][T28050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1324.744482][T28075] FAULT_INJECTION: forcing a failure. [ 1324.744482][T28075] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.757247][T28075] CPU: 1 UID: 0 PID: 28075 Comm: syz.3.7378 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1324.757279][T28075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1324.757294][T28075] Call Trace: [ 1324.757302][T28075] [ 1324.757312][T28075] dump_stack_lvl+0xf6/0x150 [ 1324.757341][T28075] dump_stack+0x15/0x1a [ 1324.757382][T28075] should_fail_ex+0x261/0x270 [ 1324.757444][T28075] should_failslab+0x8f/0xb0 [ 1324.757497][T28075] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 1324.757527][T28075] ? __alloc_skb+0x10d/0x320 [ 1324.757595][T28075] __alloc_skb+0x10d/0x320 [ 1324.757623][T28075] netlink_alloc_large_skb+0xad/0xe0 [ 1324.757734][T28075] netlink_sendmsg+0x3da/0x720 [ 1324.757798][T28075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1324.757828][T28075] __sock_sendmsg+0x140/0x180 [ 1324.757898][T28075] ____sys_sendmsg+0x350/0x4e0 [ 1324.757937][T28075] __sys_sendmsg+0x1a0/0x240 [ 1324.758055][T28075] __x64_sys_sendmsg+0x46/0x50 [ 1324.758089][T28075] x64_sys_call+0x26f3/0x2e10 [ 1324.758180][T28075] do_syscall_64+0xc9/0x1c0 [ 1324.758214][T28075] ? clear_bhb_loop+0x25/0x80 [ 1324.758236][T28075] ? clear_bhb_loop+0x25/0x80 [ 1324.758259][T28075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.758344][T28075] RIP: 0033:0x7f055005d169 [ 1324.758363][T28075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.758385][T28075] RSP: 002b:00007f054e6bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1324.758405][T28075] RAX: ffffffffffffffda RBX: 00007f0550275fa0 RCX: 00007f055005d169 [ 1324.758434][T28075] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1324.758449][T28075] RBP: 00007f054e6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.758464][T28075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.758546][T28075] R13: 0000000000000000 R14: 00007f0550275fa0 R15: 00007fffc40da928 [ 1324.758570][T28075] [ 1325.019635][T28077] program syz.1.7380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1325.179277][T28095] loop5: detected capacity change from 0 to 512 [ 1325.186428][T28095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1325.196447][T28095] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1325.203755][T28095] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7384: bg 0: block 248: padding at end of block bitmap is not set [ 1325.221570][T28098] loop3: detected capacity change from 0 to 512 [ 1325.228789][T28095] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.7384: Failed to acquire dquot type 1 [ 1325.230256][T28098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1325.247193][T28095] EXT4-fs (loop5): 1 truncate cleaned up [ 1325.255958][T28098] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1325.257823][T28095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1325.275302][T28095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.293199][T28098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7387: bg 0: block 248: padding at end of block bitmap is not set [ 1325.315011][T28098] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7387: Failed to acquire dquot type 1 [ 1325.327623][T28098] EXT4-fs (loop3): 1 truncate cleaned up [ 1325.337775][T28098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1325.350635][T28098] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1325.789378][T28116] loop4: detected capacity change from 0 to 1024 [ 1325.796623][T28116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1326.044922][T28125] FAULT_INJECTION: forcing a failure. [ 1326.044922][T28125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.058135][T28125] CPU: 1 UID: 0 PID: 28125 Comm: syz.5.7398 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1326.058170][T28125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1326.058206][T28125] Call Trace: [ 1326.058213][T28125] [ 1326.058221][T28125] dump_stack_lvl+0xf6/0x150 [ 1326.058251][T28125] dump_stack+0x15/0x1a [ 1326.058323][T28125] should_fail_ex+0x261/0x270 [ 1326.058357][T28125] should_fail+0xb/0x10 [ 1326.058402][T28125] should_fail_usercopy+0x1a/0x20 [ 1326.058434][T28125] _copy_from_user+0x1c/0xa0 [ 1326.058474][T28125] copy_msghdr_from_user+0x54/0x2b0 [ 1326.058586][T28125] ? __fget_files+0x186/0x1c0 [ 1326.058614][T28125] __sys_sendmsg+0x141/0x240 [ 1326.058655][T28125] __x64_sys_sendmsg+0x46/0x50 [ 1326.058685][T28125] x64_sys_call+0x26f3/0x2e10 [ 1326.058726][T28125] do_syscall_64+0xc9/0x1c0 [ 1326.058756][T28125] ? clear_bhb_loop+0x25/0x80 [ 1326.058784][T28125] ? clear_bhb_loop+0x25/0x80 [ 1326.058809][T28125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.058834][T28125] RIP: 0033:0x7f93f736d169 [ 1326.058880][T28125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.058902][T28125] RSP: 002b:00007f93f59d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1326.058931][T28125] RAX: ffffffffffffffda RBX: 00007f93f7585fa0 RCX: 00007f93f736d169 [ 1326.058944][T28125] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1326.058956][T28125] RBP: 00007f93f59d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.058969][T28125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.058983][T28125] R13: 0000000000000000 R14: 00007f93f7585fa0 R15: 00007ffd58b83538 [ 1326.059005][T28125] [ 1326.357011][T28135] loop5: detected capacity change from 0 to 512 [ 1326.392492][T28137] SELinux: failed to load policy [ 1326.417087][T28135] EXT4-fs: Invalid want_extra_isize 3 [ 1326.464481][T28144] FAULT_INJECTION: forcing a failure. [ 1326.464481][T28144] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1326.477854][T28144] CPU: 0 UID: 0 PID: 28144 Comm: syz.5.7407 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1326.477941][T28144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1326.478031][T28144] Call Trace: [ 1326.478039][T28144] [ 1326.478048][T28144] dump_stack_lvl+0xf6/0x150 [ 1326.478077][T28144] dump_stack+0x15/0x1a [ 1326.478094][T28144] should_fail_ex+0x261/0x270 [ 1326.478129][T28144] should_fail_alloc_page+0xfd/0x110 [ 1326.478177][T28144] __alloc_frozen_pages_noprof+0x11d/0x360 [ 1326.478211][T28144] alloc_pages_mpol+0xb6/0x260 [ 1326.478238][T28144] alloc_pages_noprof+0xe8/0x130 [ 1326.478339][T28144] __pud_alloc+0x4d/0x450 [ 1326.478374][T28144] handle_mm_fault+0x1741/0x2e80 [ 1326.478521][T28144] exc_page_fault+0x296/0x6a0 [ 1326.478608][T28144] ? avc_has_perm+0xd6/0x150 [ 1326.478643][T28144] asm_exc_page_fault+0x26/0x30 [ 1326.478673][T28144] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1326.478696][T28144] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1326.478715][T28144] RSP: 0018:ffffc900127cbdc8 EFLAGS: 00050206 [ 1326.478730][T28144] RAX: ffff88810359bc18 RBX: 0000200000000530 RCX: 0000000000000070 [ 1326.478743][T28144] RDX: 0000000000000000 RSI: ffffc900127cbe48 RDI: 00002000000004c0 [ 1326.478756][T28144] RBP: ffff8881002dccf0 R08: 0000000080000000 R09: 0000000000000000 [ 1326.478799][T28144] R10: 0001c900127cbe48 R11: 0001c900127cbeb7 R12: 0000000000000070 [ 1326.478814][T28144] R13: 00007ffffffff000 R14: 00002000000004c0 R15: ffffc900127cbe48 [ 1326.478838][T28144] _copy_to_user+0x7c/0xa0 [ 1326.478879][T28144] __se_sys_shmctl+0x1e5/0x400 [ 1326.478914][T28144] ? __fget_files+0x186/0x1c0 [ 1326.478988][T28144] __x64_sys_shmctl+0x43/0x50 [ 1326.479073][T28144] x64_sys_call+0x152f/0x2e10 [ 1326.479096][T28144] do_syscall_64+0xc9/0x1c0 [ 1326.479131][T28144] ? clear_bhb_loop+0x25/0x80 [ 1326.479218][T28144] ? clear_bhb_loop+0x25/0x80 [ 1326.479239][T28144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.479260][T28144] RIP: 0033:0x7f93f736d169 [ 1326.479342][T28144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1326.479360][T28144] RSP: 002b:00007f93f59d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 1326.479377][T28144] RAX: ffffffffffffffda RBX: 00007f93f7585fa0 RCX: 00007f93f736d169 [ 1326.479398][T28144] RDX: 00002000000004c0 RSI: 0000000000000002 RDI: 0000000000000000 [ 1326.479413][T28144] RBP: 00007f93f59d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.479443][T28144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1326.479458][T28144] R13: 0000000000000000 R14: 00007f93f7585fa0 R15: 00007ffd58b83538 [ 1326.479480][T28144] [ 1326.828242][T28152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7410'. [ 1326.845122][T28152] loop4: detected capacity change from 0 to 1024 [ 1326.867469][T28152] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1326.878448][T28152] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1326.891133][T28152] JBD2: no valid journal superblock found [ 1326.896911][T28152] EXT4-fs (loop4): Could not load journal inode [ 1327.485207][T28201] sd 0:0:1:0: device reset [ 1327.527260][T28201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.537123][T28201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.562472][T28205] loop5: detected capacity change from 0 to 164 [ 1327.573576][T28205] syz.5.7434: attempt to access beyond end of device [ 1327.573576][T28205] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1327.588397][T28205] syz.5.7434: attempt to access beyond end of device [ 1327.588397][T28205] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1327.680913][T28211] FAULT_INJECTION: forcing a failure. [ 1327.680913][T28211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.694110][T28211] CPU: 0 UID: 0 PID: 28211 Comm: syz.1.7437 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1327.694174][T28211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1327.694189][T28211] Call Trace: [ 1327.694196][T28211] [ 1327.694205][T28211] dump_stack_lvl+0xf6/0x150 [ 1327.694234][T28211] dump_stack+0x15/0x1a [ 1327.694252][T28211] should_fail_ex+0x261/0x270 [ 1327.694305][T28211] should_fail+0xb/0x10 [ 1327.694332][T28211] should_fail_usercopy+0x1a/0x20 [ 1327.694368][T28211] _copy_from_user+0x1c/0xa0 [ 1327.694408][T28211] kstrtouint_from_user+0x84/0x100 [ 1327.694441][T28211] ? 0xffffffff81000000 [ 1327.694517][T28211] ? selinux_file_permission+0x22d/0x360 [ 1327.694547][T28211] proc_fail_nth_write+0x54/0x160 [ 1327.694608][T28211] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1327.694633][T28211] vfs_write+0x295/0x950 [ 1327.694704][T28211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.694798][T28211] ? __fget_files+0x186/0x1c0 [ 1327.694819][T28211] ksys_write+0xeb/0x1b0 [ 1327.694853][T28211] __x64_sys_write+0x42/0x50 [ 1327.694926][T28211] x64_sys_call+0x2a45/0x2e10 [ 1327.694949][T28211] do_syscall_64+0xc9/0x1c0 [ 1327.695001][T28211] ? clear_bhb_loop+0x25/0x80 [ 1327.695078][T28211] ? clear_bhb_loop+0x25/0x80 [ 1327.695104][T28211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.695127][T28211] RIP: 0033:0x7fe0f050bc1f [ 1327.695145][T28211] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1327.695207][T28211] RSP: 002b:00007fe0eeb77030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1327.695226][T28211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe0f050bc1f [ 1327.695238][T28211] RDX: 0000000000000001 RSI: 00007fe0eeb770a0 RDI: 0000000000000004 [ 1327.695251][T28211] RBP: 00007fe0eeb77090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.695266][T28211] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1327.695280][T28211] R13: 0000000000000000 R14: 00007fe0f0725fa0 R15: 00007ffef0da4a68 [ 1327.695303][T28211] [ 1327.943763][T28213] geneve2: entered promiscuous mode [ 1327.949063][T28213] geneve2: entered allmulticast mode [ 1328.043983][T28219] geneve2: entered promiscuous mode [ 1328.049355][T28219] geneve2: entered allmulticast mode [ 1328.071972][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1328.071990][ T29] audit: type=1400 audit(1744313905.907:2222): avc: denied { unmount } for pid=24243 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1328.106024][T28220] SELinux: failed to load policy [ 1328.221973][T28230] FAULT_INJECTION: forcing a failure. [ 1328.221973][T28230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1328.235536][T28230] CPU: 0 UID: 0 PID: 28230 Comm: syz.5.7446 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1328.235607][T28230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1328.235620][T28230] Call Trace: [ 1328.235626][T28230] [ 1328.235633][T28230] dump_stack_lvl+0xf6/0x150 [ 1328.235661][T28230] dump_stack+0x15/0x1a [ 1328.235712][T28230] should_fail_ex+0x261/0x270 [ 1328.235741][T28230] should_fail+0xb/0x10 [ 1328.235765][T28230] should_fail_usercopy+0x1a/0x20 [ 1328.235799][T28230] _copy_to_user+0x20/0xa0 [ 1328.235877][T28230] simple_read_from_buffer+0xb2/0x130 [ 1328.235910][T28230] proc_fail_nth_read+0x103/0x140 [ 1328.235941][T28230] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1328.235992][T28230] vfs_read+0x1b2/0x710 [ 1328.236135][T28230] ? __rcu_read_unlock+0x4e/0x70 [ 1328.236163][T28230] ? __fget_files+0x186/0x1c0 [ 1328.236185][T28230] ksys_read+0xeb/0x1b0 [ 1328.236219][T28230] __x64_sys_read+0x42/0x50 [ 1328.236302][T28230] x64_sys_call+0x2a3b/0x2e10 [ 1328.236325][T28230] do_syscall_64+0xc9/0x1c0 [ 1328.236380][T28230] ? clear_bhb_loop+0x25/0x80 [ 1328.236408][T28230] ? clear_bhb_loop+0x25/0x80 [ 1328.236434][T28230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.236460][T28230] RIP: 0033:0x7f93f736bb7c [ 1328.236478][T28230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1328.236496][T28230] RSP: 002b:00007f93f59d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1328.236576][T28230] RAX: ffffffffffffffda RBX: 00007f93f7585fa0 RCX: 00007f93f736bb7c [ 1328.236589][T28230] RDX: 000000000000000f RSI: 00007f93f59d70a0 RDI: 0000000000000006 [ 1328.236671][T28230] RBP: 00007f93f59d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.236687][T28230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.236701][T28230] R13: 0000000000000000 R14: 00007f93f7585fa0 R15: 00007ffd58b83538 [ 1328.236842][T28230] [ 1328.551525][T28237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7448'. [ 1328.561086][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7448'. [ 1328.624153][ T29] audit: type=1400 audit(1744313906.457:2223): avc: denied { write } for pid=28221 comm="syz.3.7443" path="socket:[82292]" dev="sockfs" ino=82292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1328.634024][T28231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7445'. [ 1328.688498][ T29] audit: type=1400 audit(1744313906.467:2224): avc: denied { read } for pid=28221 comm="syz.3.7443" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1328.712117][ T29] audit: type=1400 audit(1744313906.467:2225): avc: denied { open } for pid=28221 comm="syz.3.7443" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1328.736083][ T29] audit: type=1400 audit(1744313906.497:2226): avc: denied { ioctl } for pid=28221 comm="syz.3.7443" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1328.911651][T28252] FAULT_INJECTION: forcing a failure. [ 1328.911651][T28252] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.924723][T28252] CPU: 1 UID: 0 PID: 28252 Comm: syz.3.7452 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1328.924756][T28252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1328.924846][T28252] Call Trace: [ 1328.924863][T28252] [ 1328.924872][T28252] dump_stack_lvl+0xf6/0x150 [ 1328.924901][T28252] dump_stack+0x15/0x1a [ 1328.924923][T28252] should_fail_ex+0x261/0x270 [ 1328.925011][T28252] should_failslab+0x8f/0xb0 [ 1328.925045][T28252] __kmalloc_cache_noprof+0x55/0x320 [ 1328.925143][T28252] ? alloc_mnt_ns+0x71/0x270 [ 1328.925178][T28252] alloc_mnt_ns+0x71/0x270 [ 1328.925268][T28252] __se_sys_fsmount+0x399/0x570 [ 1328.925307][T28252] __x64_sys_fsmount+0x43/0x50 [ 1328.925342][T28252] x64_sys_call+0x2d0b/0x2e10 [ 1328.925416][T28252] do_syscall_64+0xc9/0x1c0 [ 1328.925451][T28252] ? clear_bhb_loop+0x25/0x80 [ 1328.925493][T28252] ? clear_bhb_loop+0x25/0x80 [ 1328.925519][T28252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.925544][T28252] RIP: 0033:0x7f055005d169 [ 1328.925623][T28252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.925641][T28252] RSP: 002b:00007f054e6bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 1328.925660][T28252] RAX: ffffffffffffffda RBX: 00007f0550275fa0 RCX: 00007f055005d169 [ 1328.925676][T28252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1328.925690][T28252] RBP: 00007f054e6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.925705][T28252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.925720][T28252] R13: 0000000000000000 R14: 00007f0550275fa0 R15: 00007fffc40da928 [ 1328.925742][T28252] [ 1329.166061][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7451'. [ 1329.181384][T28260] FAULT_INJECTION: forcing a failure. [ 1329.181384][T28260] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.194102][T28260] CPU: 1 UID: 0 PID: 28260 Comm: syz.3.7457 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1329.194134][T28260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1329.194147][T28260] Call Trace: [ 1329.194183][T28260] [ 1329.194190][T28260] dump_stack_lvl+0xf6/0x150 [ 1329.194282][T28260] dump_stack+0x15/0x1a [ 1329.194299][T28260] should_fail_ex+0x261/0x270 [ 1329.194327][T28260] should_failslab+0x8f/0xb0 [ 1329.194432][T28260] __kmalloc_cache_noprof+0x55/0x320 [ 1329.194503][T28260] ? alloc_mnt_ns+0x71/0x270 [ 1329.194537][T28260] alloc_mnt_ns+0x71/0x270 [ 1329.194570][T28260] __se_sys_fsmount+0x399/0x570 [ 1329.194661][T28260] __x64_sys_fsmount+0x43/0x50 [ 1329.194696][T28260] x64_sys_call+0x2d0b/0x2e10 [ 1329.194745][T28260] do_syscall_64+0xc9/0x1c0 [ 1329.194775][T28260] ? clear_bhb_loop+0x25/0x80 [ 1329.194797][T28260] ? clear_bhb_loop+0x25/0x80 [ 1329.194891][T28260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.194912][T28260] RIP: 0033:0x7f055005d169 [ 1329.194928][T28260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.194945][T28260] RSP: 002b:00007f054e6bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 1329.195035][T28260] RAX: ffffffffffffffda RBX: 00007f0550275fa0 RCX: 00007f055005d169 [ 1329.195048][T28260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1329.195060][T28260] RBP: 00007f054e6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.195072][T28260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1329.195084][T28260] R13: 0000000000000000 R14: 00007f0550275fa0 R15: 00007fffc40da928 [ 1329.195132][T28260] [ 1329.373514][T28251] loop5: detected capacity change from 0 to 1024 [ 1329.429286][ T29] audit: type=1326 audit(1744313907.237:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28264 comm="syz.3.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055005d169 code=0x7ffc0000 [ 1329.453019][ T29] audit: type=1326 audit(1744313907.237:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28264 comm="syz.3.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055005d169 code=0x7ffc0000 [ 1329.476697][ T29] audit: type=1326 audit(1744313907.237:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28264 comm="syz.3.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f055005d169 code=0x7ffc0000 [ 1329.482816][T28251] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1329.500233][ T29] audit: type=1326 audit(1744313907.237:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28264 comm="syz.3.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055005d169 code=0x7ffc0000 [ 1329.500271][ T29] audit: type=1326 audit(1744313907.237:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28264 comm="syz.3.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f055005d169 code=0x7ffc0000 [ 1329.558381][T28251] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1329.612706][T28251] JBD2: no valid journal superblock found [ 1329.618501][T28251] EXT4-fs (loop5): Could not load journal inode [ 1329.670907][T28279] loop1: detected capacity change from 0 to 1024 [ 1329.705344][T28286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7467'. [ 1329.744822][T28279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1329.846925][T28294] FAULT_INJECTION: forcing a failure. [ 1329.846925][T28294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1329.860183][T28294] CPU: 0 UID: 0 PID: 28294 Comm: syz.4.7471 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1329.860245][T28294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1329.860259][T28294] Call Trace: [ 1329.860266][T28294] [ 1329.860274][T28294] dump_stack_lvl+0xf6/0x150 [ 1329.860302][T28294] dump_stack+0x15/0x1a [ 1329.860323][T28294] should_fail_ex+0x261/0x270 [ 1329.860357][T28294] should_fail+0xb/0x10 [ 1329.860386][T28294] should_fail_usercopy+0x1a/0x20 [ 1329.860462][T28294] _copy_from_user+0x1c/0xa0 [ 1329.860526][T28294] vmemdup_user+0x66/0xd0 [ 1329.860563][T28294] path_setxattrat+0x1cd/0x320 [ 1329.860609][T28294] __x64_sys_fsetxattr+0x6d/0x80 [ 1329.860634][T28294] x64_sys_call+0x2bad/0x2e10 [ 1329.860659][T28294] do_syscall_64+0xc9/0x1c0 [ 1329.860760][T28294] ? clear_bhb_loop+0x25/0x80 [ 1329.860824][T28294] ? clear_bhb_loop+0x25/0x80 [ 1329.860852][T28294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.860878][T28294] RIP: 0033:0x7ff4aa7cd169 [ 1329.860899][T28294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1329.860921][T28294] RSP: 002b:00007ff4a8e2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1329.860943][T28294] RAX: ffffffffffffffda RBX: 00007ff4aa9e5fa0 RCX: 00007ff4aa7cd169 [ 1329.860955][T28294] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1329.860967][T28294] RBP: 00007ff4a8e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1329.860980][T28294] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 1329.860995][T28294] R13: 0000000000000000 R14: 00007ff4aa9e5fa0 R15: 00007fff0c0228c8 [ 1329.861016][T28294] [ 1330.059973][ T3449] IPVS: starting estimator thread 0... [ 1330.069419][T28296] netlink: 'syz.5.7472': attribute type 1 has an invalid length. [ 1330.148606][T28300] IPVS: using max 2064 ests per chain, 103200 per kthread [ 1330.262341][T28309] loop3: detected capacity change from 0 to 1024 [ 1330.271376][T28309] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1330.283520][T28309] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1330.291611][T28309] EXT4-fs (loop3): too many log groups per flexible block group [ 1330.299321][T28309] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 1330.299660][T28308] loop5: detected capacity change from 0 to 8192 [ 1330.306112][T28309] EXT4-fs (loop3): mount failed [ 1330.311147][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1330.326494][T28313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7479'. [ 1330.341939][T28309] random: crng reseeded on system resumption [ 1330.405576][T28308] loop5: p2 p3 p4 [ 1330.415940][T28308] loop5: p2 start 452985600 is beyond EOD, truncated [ 1330.422829][T28308] loop5: p3 size 33554432 extends beyond EOD, truncated [ 1330.446473][T28308] loop5: p4 start 8388607 is beyond EOD, truncated [ 1330.576974][T28324] pimreg: entered allmulticast mode [ 1330.579953][T28329] program syz.1.7486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1330.604902][T28324] pimreg: left allmulticast mode [ 1330.714200][T28334] SELinux: failed to load policy [ 1331.003055][T28346] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 1331.081290][T28353] program syz.4.7497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1331.123644][T28358] netlink: 'syz.5.7498': attribute type 13 has an invalid length. [ 1331.187105][T28364] SELinux: failed to load policy [ 1331.223165][T28358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.230658][T28358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.291240][T28358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.302974][T28358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.342342][T28369] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 1331.351925][T28358] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.361071][T28358] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.370157][T28358] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.379211][T28358] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.410902][T28371] usb usb8: usbfs: process 28371 (syz.3.7502) did not claim interface 0 before use [ 1331.438944][T28371] usb usb8: selecting invalid altsetting 16777216 [ 1331.447666][T28369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7502'. [ 1331.475982][T28369] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1331.665559][T28383] FAULT_INJECTION: forcing a failure. [ 1331.665559][T28383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.678712][T28383] CPU: 1 UID: 0 PID: 28383 Comm: syz.4.7507 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1331.678747][T28383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1331.678762][T28383] Call Trace: [ 1331.678817][T28383] [ 1331.678826][T28383] dump_stack_lvl+0xf6/0x150 [ 1331.678876][T28383] dump_stack+0x15/0x1a [ 1331.678925][T28383] should_fail_ex+0x261/0x270 [ 1331.678959][T28383] should_fail+0xb/0x10 [ 1331.678988][T28383] should_fail_usercopy+0x1a/0x20 [ 1331.679023][T28383] _copy_from_user+0x1c/0xa0 [ 1331.679075][T28383] __sys_bpf+0x16a/0x800 [ 1331.679148][T28383] __x64_sys_bpf+0x43/0x50 [ 1331.679170][T28383] x64_sys_call+0x23da/0x2e10 [ 1331.679197][T28383] do_syscall_64+0xc9/0x1c0 [ 1331.679231][T28383] ? clear_bhb_loop+0x25/0x80 [ 1331.679335][T28383] ? clear_bhb_loop+0x25/0x80 [ 1331.679363][T28383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.679397][T28383] RIP: 0033:0x7ff4aa7cd169 [ 1331.679416][T28383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1331.679467][T28383] RSP: 002b:00007ff4a8e2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1331.679491][T28383] RAX: ffffffffffffffda RBX: 00007ff4aa9e5fa0 RCX: 00007ff4aa7cd169 [ 1331.679507][T28383] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1331.679522][T28383] RBP: 00007ff4a8e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.679537][T28383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.679552][T28383] R13: 0000000000000001 R14: 00007ff4aa9e5fa0 R15: 00007fff0c0228c8 [ 1331.679576][T28383] [ 1332.009698][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7512'. [ 1332.018668][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7512'. [ 1332.153389][T28402] loop1: detected capacity change from 0 to 128 [ 1332.193851][T28402] EXT4-fs: Ignoring removed nobh option [ 1332.209657][T28404] loop4: detected capacity change from 0 to 256 [ 1332.269161][T28402] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1332.291436][T28402] ext4 filesystem being mounted at /325/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.484900][T24127] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1332.679659][T28424] FAULT_INJECTION: forcing a failure. [ 1332.679659][T28424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.692960][T28424] CPU: 1 UID: 0 PID: 28424 Comm: syz.3.7522 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1332.692994][T28424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1332.693064][T28424] Call Trace: [ 1332.693071][T28424] [ 1332.693079][T28424] dump_stack_lvl+0xf6/0x150 [ 1332.693103][T28424] dump_stack+0x15/0x1a [ 1332.693149][T28424] should_fail_ex+0x261/0x270 [ 1332.693216][T28424] should_fail+0xb/0x10 [ 1332.693247][T28424] should_fail_usercopy+0x1a/0x20 [ 1332.693283][T28424] _copy_from_user+0x1c/0xa0 [ 1332.693334][T28424] copy_msghdr_from_user+0x54/0x2b0 [ 1332.693377][T28424] ? __fget_files+0x186/0x1c0 [ 1332.693406][T28424] __sys_sendmsg+0x141/0x240 [ 1332.693487][T28424] __x64_sys_sendmsg+0x46/0x50 [ 1332.693515][T28424] x64_sys_call+0x26f3/0x2e10 [ 1332.693540][T28424] do_syscall_64+0xc9/0x1c0 [ 1332.693647][T28424] ? clear_bhb_loop+0x25/0x80 [ 1332.693670][T28424] ? clear_bhb_loop+0x25/0x80 [ 1332.693692][T28424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.693716][T28424] RIP: 0033:0x7f055005d169 [ 1332.693759][T28424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.693778][T28424] RSP: 002b:00007f054e6bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.693797][T28424] RAX: ffffffffffffffda RBX: 00007f0550275fa0 RCX: 00007f055005d169 [ 1332.693809][T28424] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1332.693825][T28424] RBP: 00007f054e6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.693839][T28424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.693862][T28424] R13: 0000000000000000 R14: 00007f0550275fa0 R15: 00007fffc40da928 [ 1332.693886][T28424] [ 1333.014236][T28428] netlink: 'syz.3.7523': attribute type 1 has an invalid length. [ 1333.041822][ T9852] IPVS: starting estimator thread 0... [ 1333.178705][T28429] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1333.553273][T28441] netlink: 'syz.1.7527': attribute type 3 has an invalid length. [ 1333.603863][T28443] loop3: detected capacity change from 0 to 256 [ 1333.653402][ T9852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1333.667753][T28443] SELinux: syz.3.7529 (28443) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1333.717312][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 1333.717327][ T29] audit: type=1326 audit(1744313911.547:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.767517][ T29] audit: type=1326 audit(1744313911.577:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.829248][ T29] audit: type=1326 audit(1744313911.657:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.852932][ T29] audit: type=1326 audit(1744313911.657:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.876445][ T29] audit: type=1326 audit(1744313911.657:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.900370][ T29] audit: type=1326 audit(1744313911.657:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.923910][ T29] audit: type=1326 audit(1744313911.657:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.947501][ T29] audit: type=1326 audit(1744313911.657:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.971136][ T29] audit: type=1326 audit(1744313911.657:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1333.994589][ T29] audit: type=1326 audit(1744313911.657:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.1.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f050d169 code=0x7ffc0000 [ 1334.144347][T28455] SELinux: failed to load policy [ 1334.447178][T28467] loop3: detected capacity change from 0 to 128 [ 1334.484654][T28473] loop5: detected capacity change from 0 to 512 [ 1334.519187][T28473] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1334.534676][T28473] EXT4-fs (loop5): mount failed [ 1334.681544][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.052606][T28497] SELinux: failed to load policy [ 1335.162448][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1335.172998][T28501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7553'. [ 1335.664490][T28521] loop1: detected capacity change from 0 to 512 [ 1335.699226][T28521] EXT4-fs: Ignoring removed oldalloc option [ 1335.728089][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.758816][T28521] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7561: Parent and EA inode have the same ino 15 [ 1335.814555][T28521] EXT4-fs (loop1): Remounting filesystem read-only [ 1335.821259][T28521] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 1335.882351][T28521] EXT4-fs (loop1): 1 orphan inode deleted [ 1335.904979][T28521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1335.989232][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.053118][T28537] bridge0: entered promiscuous mode [ 1336.058581][T28537] macvlan2: entered promiscuous mode [ 1336.065212][T28537] bridge0: port 3(macvlan2) entered blocking state [ 1336.071804][T28537] bridge0: port 3(macvlan2) entered disabled state [ 1336.091036][T28537] macvlan2: entered allmulticast mode [ 1336.096530][T28537] bridge0: entered allmulticast mode [ 1336.121469][T28537] macvlan2: left allmulticast mode [ 1336.126678][T28537] bridge0: left allmulticast mode [ 1336.135901][T28537] bridge0: left promiscuous mode [ 1336.150363][T28540] SELinux: failed to load policy [ 1336.186640][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7571'. [ 1336.196841][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7571'. [ 1336.263279][T28547] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1336.382589][T28554] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1336.664751][T28575] loop3: detected capacity change from 0 to 8192 [ 1336.719253][T28575] loop3: p2 p3 p4 [ 1336.723390][T28575] loop3: p2 start 452985600 is beyond EOD, truncated [ 1336.730133][T28575] loop3: p3 size 33554432 extends beyond EOD, truncated [ 1336.748034][T28575] loop3: p4 start 8388607 is beyond EOD, truncated [ 1336.760437][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1337.194309][T28610] loop5: detected capacity change from 0 to 8192 [ 1337.249103][T28610] loop5: p2 p3 p4 [ 1337.253386][T28610] loop5: p2 start 452985600 is beyond EOD, truncated [ 1337.260232][T28610] loop5: p3 size 33554432 extends beyond EOD, truncated [ 1337.271492][T28610] loop5: p4 start 8388607 is beyond EOD, truncated [ 1337.283816][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7601'. [ 1337.293771][T28616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7601'. [ 1337.516791][T28626] loop1: detected capacity change from 0 to 512 [ 1337.551421][T28635] FAULT_INJECTION: forcing a failure. [ 1337.551421][T28635] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.564156][T28635] CPU: 1 UID: 0 PID: 28635 Comm: syz.4.7609 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1337.564185][T28635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1337.564198][T28635] Call Trace: [ 1337.564206][T28635] [ 1337.564291][T28635] dump_stack_lvl+0xf6/0x150 [ 1337.564315][T28635] dump_stack+0x15/0x1a [ 1337.564336][T28635] should_fail_ex+0x261/0x270 [ 1337.564369][T28635] should_failslab+0x8f/0xb0 [ 1337.564460][T28635] __kmalloc_cache_noprof+0x55/0x320 [ 1337.564484][T28635] ? __se_sys_mount+0xf9/0x2e0 [ 1337.564591][T28635] ? memdup_user+0xa6/0xd0 [ 1337.564621][T28635] __se_sys_mount+0xf9/0x2e0 [ 1337.564660][T28635] ? fput+0x99/0xd0 [ 1337.564684][T28635] ? ksys_write+0x180/0x1b0 [ 1337.564726][T28635] __x64_sys_mount+0x67/0x80 [ 1337.564766][T28635] x64_sys_call+0xd11/0x2e10 [ 1337.564859][T28635] do_syscall_64+0xc9/0x1c0 [ 1337.564893][T28635] ? clear_bhb_loop+0x25/0x80 [ 1337.564927][T28635] ? clear_bhb_loop+0x25/0x80 [ 1337.564951][T28635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1337.565048][T28635] RIP: 0033:0x7ff4aa7cd169 [ 1337.565063][T28635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1337.565081][T28635] RSP: 002b:00007ff4a8e2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1337.565100][T28635] RAX: ffffffffffffffda RBX: 00007ff4aa9e5fa0 RCX: 00007ff4aa7cd169 [ 1337.565112][T28635] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1337.565127][T28635] RBP: 00007ff4a8e2f090 R08: 0000200000000bc0 R09: 0000000000000000 [ 1337.565171][T28635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1337.565185][T28635] R13: 0000000000000000 R14: 00007ff4aa9e5fa0 R15: 00007fff0c0228c8 [ 1337.565210][T28635] [ 1337.777108][T28626] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1337.795722][T28626] EXT4-fs (loop1): mount failed [ 1337.803245][ T9852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1337.937767][T28643] loop1: detected capacity change from 0 to 8192 [ 1337.999146][T28643] loop1: p2 p3 p4 [ 1338.003445][T28643] loop1: p2 start 452985600 is beyond EOD, truncated [ 1338.010321][T28643] loop1: p3 size 33554432 extends beyond EOD, truncated [ 1338.019783][T28649] TCP: TCP_TX_DELAY enabled [ 1338.041344][T28643] loop1: p4 start 8388607 is beyond EOD, truncated [ 1338.049081][T28651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7616'. [ 1338.059225][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7616'. [ 1338.233064][T28659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7620'. [ 1338.264072][T28661] loop5: detected capacity change from 0 to 1024 [ 1338.269821][T28659] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1338.289129][T28661] EXT4-fs: Ignoring removed nobh option [ 1338.294788][T28661] EXT4-fs: Ignoring removed bh option [ 1338.341624][T28661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.415311][T28661] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4115: comm syz.5.7621: Allocating blocks 385-513 which overlap fs metadata [ 1338.446072][T28661] EXT4-fs (loop5): pa ffff888106222700: logic 16, phys. 129, len 24 [ 1338.454616][T28661] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 1338.498659][T28661] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 1338.510914][T28661] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1338.510914][T28661] [ 1338.520627][T28661] EXT4-fs (loop5): Total free blocks count 0 [ 1338.526681][T28661] EXT4-fs (loop5): Free/Dirty block details [ 1338.532621][T28661] EXT4-fs (loop5): free_blocks=128 [ 1338.537756][T28661] EXT4-fs (loop5): dirty_blocks=0 [ 1338.542866][T28661] EXT4-fs (loop5): Block reservation details [ 1338.548879][T28661] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 1338.586519][T28690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7629'. [ 1338.624395][T28661] SELinux: failed to load policy [ 1338.648420][T28688] loop1: detected capacity change from 0 to 8192 [ 1338.691543][T28688] loop1: p2 p3 p4 [ 1338.695568][T28688] loop1: p2 start 452985600 is beyond EOD, truncated [ 1338.702339][T28688] loop1: p3 size 33554432 extends beyond EOD, truncated [ 1338.729709][T28688] loop1: p4 start 8388607 is beyond EOD, truncated [ 1338.738950][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 1338.738968][ T29] audit: type=1326 audit(1744313916.577:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.839034][ T29] audit: type=1326 audit(1744313916.607:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.862675][ T29] audit: type=1326 audit(1744313916.607:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.864273][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1338.886166][ T29] audit: type=1326 audit(1744313916.607:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.920683][ T29] audit: type=1326 audit(1744313916.607:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.944382][ T29] audit: type=1326 audit(1744313916.607:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.967948][ T29] audit: type=1326 audit(1744313916.617:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1338.991508][ T29] audit: type=1326 audit(1744313916.617:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1339.015026][ T29] audit: type=1326 audit(1744313916.617:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1339.038688][ T29] audit: type=1326 audit(1744313916.617:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28692 comm="syz.5.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1339.229017][T28664] chnl_net:caif_netlink_parms(): no params data found [ 1339.242004][T28716] FAULT_INJECTION: forcing a failure. [ 1339.242004][T28716] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.254809][T28716] CPU: 0 UID: 0 PID: 28716 Comm: syz.1.7638 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1339.254941][T28716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1339.254957][T28716] Call Trace: [ 1339.254965][T28716] [ 1339.254974][T28716] dump_stack_lvl+0xf6/0x150 [ 1339.255004][T28716] dump_stack+0x15/0x1a [ 1339.255025][T28716] should_fail_ex+0x261/0x270 [ 1339.255075][T28716] should_failslab+0x8f/0xb0 [ 1339.255180][T28716] __kmalloc_cache_noprof+0x55/0x320 [ 1339.255204][T28716] ? copy_cgroup_ns+0x167/0x370 [ 1339.255231][T28716] copy_cgroup_ns+0x167/0x370 [ 1339.255257][T28716] create_new_namespaces+0x1d8/0x430 [ 1339.255365][T28716] unshare_nsproxy_namespaces+0xe6/0x120 [ 1339.255392][T28716] ksys_unshare+0x3d3/0x700 [ 1339.255424][T28716] __x64_sys_unshare+0x1f/0x30 [ 1339.255475][T28716] x64_sys_call+0x2c93/0x2e10 [ 1339.255501][T28716] do_syscall_64+0xc9/0x1c0 [ 1339.255537][T28716] ? clear_bhb_loop+0x25/0x80 [ 1339.255563][T28716] ? clear_bhb_loop+0x25/0x80 [ 1339.255584][T28716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.255617][T28716] RIP: 0033:0x7fe0f050d169 [ 1339.255633][T28716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.255718][T28716] RSP: 002b:00007fe0eeb77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1339.255737][T28716] RAX: ffffffffffffffda RBX: 00007fe0f0725fa0 RCX: 00007fe0f050d169 [ 1339.255749][T28716] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000400 [ 1339.255763][T28716] RBP: 00007fe0eeb77090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.255778][T28716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.255794][T28716] R13: 0000000000000000 R14: 00007fe0f0725fa0 R15: 00007ffef0da4a68 [ 1339.255818][T28716] [ 1339.440257][ T3547] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 1339.456932][T28720] loop4: detected capacity change from 0 to 128 [ 1339.504119][T28664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.511323][T28664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.522315][T28664] bridge_slave_0: entered allmulticast mode [ 1339.529423][T28664] bridge_slave_0: entered promiscuous mode [ 1339.536675][T28664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.543796][T28664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.551445][T28664] bridge_slave_1: entered allmulticast mode [ 1339.558237][T28664] bridge_slave_1: entered promiscuous mode [ 1339.562613][T28720] syz.4.7640: attempt to access beyond end of device [ 1339.562613][T28720] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1339.596304][T28664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.618430][T28664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.657604][T28664] team0: Port device team_slave_0 added [ 1339.672681][T28720] syz_tun: entered promiscuous mode [ 1339.688342][T28720] macvtap1: entered promiscuous mode [ 1339.693824][T28720] macvtap1: entered allmulticast mode [ 1339.699275][T28720] syz_tun: entered allmulticast mode [ 1339.705045][T28727] loop1: detected capacity change from 0 to 8192 [ 1339.736405][T28664] team0: Port device team_slave_1 added [ 1339.747063][T28728] syz_tun: left allmulticast mode [ 1339.752238][T28728] syz_tun: left promiscuous mode [ 1339.758884][T28727] loop1: p2 p3 p4 [ 1339.767115][T28727] loop1: p2 start 452985600 is beyond EOD, truncated [ 1339.773912][T28727] loop1: p3 size 33554432 extends beyond EOD, truncated [ 1339.796716][T28727] loop1: p4 start 8388607 is beyond EOD, truncated [ 1339.840893][T28664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.847898][T28664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.874693][T28664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.887901][T28664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.888853][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1339.894872][T28664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.931469][T28664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.980711][T28740] netlink: 'syz.3.7645': attribute type 3 has an invalid length. [ 1340.076262][T28664] hsr_slave_0: entered promiscuous mode [ 1340.087743][T28664] hsr_slave_1: entered promiscuous mode [ 1340.113208][T28664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.128583][T28664] Cannot create hsr debugfs directory [ 1340.151270][T28760] bridge0: entered promiscuous mode [ 1340.156673][T28760] macvlan2: entered promiscuous mode [ 1340.163076][T28760] bridge0: port 3(macvlan2) entered blocking state [ 1340.169661][T28760] bridge0: port 3(macvlan2) entered disabled state [ 1340.176620][T28760] macvlan2: entered allmulticast mode [ 1340.182179][T28760] bridge0: entered allmulticast mode [ 1340.197494][T28760] macvlan2: left allmulticast mode [ 1340.199473][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.202927][T28760] bridge0: left allmulticast mode [ 1340.220561][T28760] bridge0: left promiscuous mode [ 1340.283167][T28764] loop1: detected capacity change from 0 to 512 [ 1340.296244][T28764] EXT4-fs: Ignoring removed oldalloc option [ 1340.314053][T28764] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.7655: Parent and EA inode have the same ino 15 [ 1340.381780][T28764] EXT4-fs (loop1): Remounting filesystem read-only [ 1340.388365][T28764] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 1340.398737][T28764] EXT4-fs (loop1): 1 orphan inode deleted [ 1340.404835][T28764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.446215][T28770] __nla_validate_parse: 2 callbacks suppressed [ 1340.446230][T28770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7656'. [ 1340.466890][T24127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.508948][T28770] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1340.610373][T28664] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1340.629822][T28664] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1340.643387][T28664] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1340.659006][T28783] netlink: 'syz.5.7659': attribute type 3 has an invalid length. [ 1340.678612][T28664] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1340.769600][T28785] loop5: detected capacity change from 0 to 8192 [ 1340.821234][T28785] loop5: p2 p3 p4 [ 1340.824340][T28664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.825613][T28785] loop5: p2 start 452985600 is beyond EOD, truncated [ 1340.838669][T28785] loop5: p3 size 33554432 extends beyond EOD, truncated [ 1340.838850][ T3377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.863554][T28785] loop5: p4 start 8388607 is beyond EOD, truncated [ 1340.872568][T28664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.898878][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.905990][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.936823][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.943957][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.994627][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1341.046696][T28801] loop1: detected capacity change from 0 to 128 [ 1341.111385][T28664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.237963][T28825] loop4: detected capacity change from 0 to 512 [ 1341.252131][T28825] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7676: invalid indirect mapped block 256 (level 2) [ 1341.271218][T28823] loop5: detected capacity change from 0 to 512 [ 1341.283041][T28825] EXT4-fs (loop4): 2 truncates cleaned up [ 1341.291650][T28823] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 1341.312170][T28825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1341.331520][T28823] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1341.344779][T28823] EXT4-fs warning (device loop5): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1341.355619][T28823] EXT4-fs (loop5): 1 truncate cleaned up [ 1341.369114][T28823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1341.402002][T28823] EXT4-fs warning (device loop5): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 1341.417527][T28823] EXT4-fs warning (device loop5): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 1341.426641][T28664] veth0_vlan: entered promiscuous mode [ 1341.442372][T28664] veth1_vlan: entered promiscuous mode [ 1341.453789][T24243] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.486382][T28664] veth0_macvtap: entered promiscuous mode [ 1341.498004][T28664] veth1_macvtap: entered promiscuous mode [ 1341.520679][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.531335][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.541385][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.551867][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.561829][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.572401][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.582335][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.592858][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.602750][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.613189][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.623034][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.633503][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.643515][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.654029][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.664006][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.674500][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.684369][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.694848][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.704803][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.715282][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.725234][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.735821][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.745742][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.756212][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.766087][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1341.776557][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.804501][T22825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.834999][T28664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.844150][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.854866][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.864871][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.875386][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.885274][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.895778][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.905749][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.916281][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.926142][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.936643][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.946613][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.957089][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.967866][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.978346][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1341.988224][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1341.998700][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.008610][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.019170][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.029021][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.039637][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.049502][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.060032][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.069893][T28664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.080423][T28664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.094536][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1342.110378][T28664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.140256][T28664] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.149215][T28664] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.157946][T28664] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.166788][T28664] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.236759][T28847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7680'. [ 1342.247389][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7680'. [ 1342.271224][T28853] loop1: detected capacity change from 0 to 2048 [ 1342.353000][T28853] GPT:first_usable_lbas don't match. [ 1342.358330][T28853] GPT:34 != 290 [ 1342.361894][T28853] GPT: Use GNU Parted to correct GPT errors. [ 1342.368061][T28853] loop1: p1 p2 p3 [ 1342.664460][T28875] loop4: detected capacity change from 0 to 128 [ 1342.803037][T28884] openvswitch: netlink: Message has 6 unknown bytes. [ 1342.898446][T28890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7700'. [ 1342.908174][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7700'. [ 1343.046098][T28901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7705'. [ 1343.071137][T28901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1343.163390][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1343.187369][T28899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7704'. [ 1343.197335][T28905] macvlan2: entered promiscuous mode [ 1343.197356][T28905] bridge0: entered promiscuous mode [ 1343.199893][T28905] bridge0: port 3(macvlan2) entered blocking state [ 1343.204650][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7704'. [ 1343.209843][T28905] bridge0: port 3(macvlan2) entered disabled state [ 1343.224418][T28905] macvlan2: entered allmulticast mode [ 1343.238071][T28905] bridge0: entered allmulticast mode [ 1343.246195][T28905] macvlan2: left allmulticast mode [ 1343.251433][T28905] bridge0: left allmulticast mode [ 1343.258705][T28905] bridge0: left promiscuous mode [ 1343.503310][T28912] netlink: 'syz.4.7709': attribute type 3 has an invalid length. [ 1343.532295][T28918] loop3: detected capacity change from 0 to 2048 [ 1343.588906][T28927] bridge0: entered promiscuous mode [ 1343.596923][T28927] macvlan2: entered promiscuous mode [ 1343.605662][T28918] GPT:first_usable_lbas don't match. [ 1343.611045][T28918] GPT:34 != 290 [ 1343.614538][T28918] GPT: Use GNU Parted to correct GPT errors. [ 1343.620785][T28918] loop3: p1 p2 p3 [ 1343.631620][T28927] bridge0: port 3(macvlan2) entered blocking state [ 1343.638311][T28927] bridge0: port 3(macvlan2) entered disabled state [ 1343.647381][T28923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7715'. [ 1343.654531][T28927] macvlan2: entered allmulticast mode [ 1343.656921][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7715'. [ 1343.661915][T28927] bridge0: entered allmulticast mode [ 1343.680824][T28927] macvlan2: left allmulticast mode [ 1343.685997][T28927] bridge0: left allmulticast mode [ 1343.697157][T28927] bridge0: left promiscuous mode [ 1343.758212][T28934] loop1: detected capacity change from 0 to 2048 [ 1343.843153][T28934] GPT:first_usable_lbas don't match. [ 1343.848603][T28934] GPT:34 != 290 [ 1343.852151][T28934] GPT: Use GNU Parted to correct GPT errors. [ 1343.858342][T28934] loop1: p1 p2 p3 [ 1343.955740][T28938] loop3: detected capacity change from 0 to 128 [ 1344.020974][T28946] loop5: detected capacity change from 0 to 2048 [ 1344.095952][T28946] GPT:first_usable_lbas don't match. [ 1344.101311][T28946] GPT:34 != 290 [ 1344.104789][T28946] GPT: Use GNU Parted to correct GPT errors. [ 1344.110966][T28946] loop5: p1 p2 p3 [ 1344.203570][T15338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1344.267603][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 1344.267622][ T29] audit: type=1326 audit(1744313922.097:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.297654][ T29] audit: type=1326 audit(1744313922.097:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.334729][ T29] audit: type=1326 audit(1744313922.097:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.358395][ T29] audit: type=1326 audit(1744313922.097:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.382024][ T29] audit: type=1326 audit(1744313922.097:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.405617][ T29] audit: type=1326 audit(1744313922.097:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.429304][ T29] audit: type=1326 audit(1744313922.097:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.452864][ T29] audit: type=1326 audit(1744313922.097:3231): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28950 comm="syz.5.7726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.724507][ T29] audit: type=1326 audit(1744313922.517:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28961 comm="syz.5.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.748226][ T29] audit: type=1326 audit(1744313922.517:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28961 comm="syz.5.7729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93f736d169 code=0x7ffc0000 [ 1344.988023][T28977] loop5: detected capacity change from 0 to 8192 [ 1345.026264][T28984] loop6: detected capacity change from 0 to 2048 [ 1345.052687][T28977] loop5: p2 p3 p4 [ 1345.056751][T28977] loop5: p2 start 452985600 is beyond EOD, truncated [ 1345.063591][T28977] loop5: p3 size 33554432 extends beyond EOD, truncated [ 1345.083370][T28977] loop5: p4 start 8388607 is beyond EOD, truncated [ 1345.085770][T28984] GPT:first_usable_lbas don't match. [ 1345.095255][T28984] GPT:34 != 290 [ 1345.098819][T28984] GPT: Use GNU Parted to correct GPT errors. [ 1345.104936][T28984] loop6: p1 p2 p3 [ 1345.206177][T29000] FAULT_INJECTION: forcing a failure. [ 1345.206177][T29000] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.218953][T29000] CPU: 0 UID: 0 PID: 29000 Comm: syz.1.7747 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1345.219020][T29000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1345.219091][T29000] Call Trace: [ 1345.219097][T29000] [ 1345.219106][T29000] dump_stack_lvl+0xf6/0x150 [ 1345.219132][T29000] dump_stack+0x15/0x1a [ 1345.219152][T29000] should_fail_ex+0x261/0x270 [ 1345.219184][T29000] should_failslab+0x8f/0xb0 [ 1345.219221][T29000] __kmalloc_cache_noprof+0x55/0x320 [ 1345.219306][T29000] ? assoc_array_insert+0x89/0x19c0 [ 1345.219341][T29000] assoc_array_insert+0x89/0x19c0 [ 1345.219436][T29000] ? keyring_compare_object+0xdb/0x100 [ 1345.219463][T29000] ? assoc_array_delete+0x6ef/0x930 [ 1345.219502][T29000] __key_link_begin+0x9a/0x150 [ 1345.219523][T29000] key_move+0x166/0x5a0 [ 1345.219556][T29000] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1345.219595][T29000] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1345.219624][T29000] keyctl_keyring_move+0xd6/0x110 [ 1345.219667][T29000] __se_sys_keyctl+0x667/0xbe0 [ 1345.219694][T29000] ? putname+0xe1/0x100 [ 1345.219713][T29000] ? __fget_files+0x186/0x1c0 [ 1345.219736][T29000] ? fput+0x99/0xd0 [ 1345.219874][T29000] ? ksys_write+0x180/0x1b0 [ 1345.219909][T29000] __x64_sys_keyctl+0x67/0x80 [ 1345.219942][T29000] x64_sys_call+0x2b21/0x2e10 [ 1345.220016][T29000] do_syscall_64+0xc9/0x1c0 [ 1345.220050][T29000] ? clear_bhb_loop+0x25/0x80 [ 1345.220076][T29000] ? clear_bhb_loop+0x25/0x80 [ 1345.220102][T29000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.220199][T29000] RIP: 0033:0x7fe0f050d169 [ 1345.220214][T29000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.220233][T29000] RSP: 002b:00007fe0eeb77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1345.220251][T29000] RAX: ffffffffffffffda RBX: 00007fe0f0725fa0 RCX: 00007fe0f050d169 [ 1345.220264][T29000] RDX: ffffffffffffffff RSI: 0000000014790233 RDI: 000000000000001e [ 1345.220307][T29000] RBP: 00007fe0eeb77090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.220322][T29000] R10: 000000000d226766 R11: 0000000000000246 R12: 0000000000000001 [ 1345.220337][T29000] R13: 0000000000000000 R14: 00007fe0f0725fa0 R15: 00007ffef0da4a68 [ 1345.220366][T29000] [ 1345.467479][T29002] loop4: detected capacity change from 0 to 512 [ 1345.483144][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1345.500422][T29004] loop3: detected capacity change from 0 to 2048 [ 1345.569581][T29004] GPT:first_usable_lbas don't match. [ 1345.569591][T29004] GPT:34 != 290 [ 1345.569600][T29004] GPT: Use GNU Parted to correct GPT errors. [ 1345.569714][T29004] loop3: p1 p2 p3 [ 1345.586615][T29002] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1345.586799][T29002] EXT4-fs (loop4): mount failed [ 1345.937742][T29035] loop1: detected capacity change from 0 to 2048 [ 1345.993115][T29037] loop4: detected capacity change from 0 to 8192 [ 1346.019448][T29035] GPT:first_usable_lbas don't match. [ 1346.024845][T29035] GPT:34 != 290 [ 1346.028324][T29035] GPT: Use GNU Parted to correct GPT errors. [ 1346.034653][T29035] loop1: p1 p2 p3 [ 1346.038884][T29037] loop4: p2 p3 p4 [ 1346.042852][T29037] loop4: p2 start 452985600 is beyond EOD, truncated [ 1346.050200][T29037] loop4: p3 size 33554432 extends beyond EOD, truncated [ 1346.062378][T29037] loop4: p4 start 8388607 is beyond EOD, truncated [ 1346.152247][T29041] loop1: detected capacity change from 0 to 512 [ 1346.176752][T29041] EXT4-fs: Ignoring removed nobh option [ 1346.204109][T29041] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7764: invalid indirect mapped block 256 (level 2) [ 1346.257013][T29041] EXT4-fs (loop1): 2 truncates cleaned up [ 1346.263386][T29041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.345965][T29041] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7764: bg 0: block 5: invalid block bitmap [ 1346.383612][T29041] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4096 with max blocks 1 with error 28 [ 1346.396168][T29041] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1346.396168][T29041] [ 1346.405862][T29041] EXT4-fs (loop1): Total free blocks count 0 [ 1346.412168][T29041] EXT4-fs (loop1): Free/Dirty block details [ 1346.418255][T29041] EXT4-fs (loop1): free_blocks=0 [ 1346.423249][T29041] EXT4-fs (loop1): dirty_blocks=2 [ 1346.428324][T29041] EXT4-fs (loop1): Block reservation details [ 1346.434425][T29041] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1346.522174][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1346.648826][ T4632] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1347.248646][T15475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.529458][T29085] loop4: detected capacity change from 0 to 8192 [ 1347.564211][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.582350][T29085] loop4: p2 p3 p4 [ 1347.586445][T29085] loop4: p2 start 452985600 is beyond EOD, truncated [ 1347.593319][T29085] loop4: p3 size 33554432 extends beyond EOD, truncated [ 1347.652082][T29085] loop4: p4 start 8388607 is beyond EOD, truncated [ 1347.708422][T29098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.805990][T29102] loop6: detected capacity change from 0 to 512 [ 1347.832702][T29102] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 1347.870253][T29107] netlink: 'syz.5.7789': attribute type 4 has an invalid length. [ 1347.882981][T29102] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1347.915381][T29100] loop4: detected capacity change from 0 to 8192 [ 1347.955415][T29102] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1347.989121][T29100] loop4: p2 p3 p4 [ 1347.993189][T29100] loop4: p2 start 452985600 is beyond EOD, truncated [ 1347.999920][T29100] loop4: p3 size 33554432 extends beyond EOD, truncated [ 1348.018358][T29102] EXT4-fs (loop6): 1 truncate cleaned up [ 1348.034701][T29102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.045492][T29100] loop4: p4 start 8388607 is beyond EOD, truncated [ 1348.122902][T29102] EXT4-fs warning (device loop6): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 1348.209478][T29102] EXT4-fs warning (device loop6): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 1348.268097][T28664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.301367][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7795'. [ 1348.311297][T29117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7795'. [ 1348.354591][T29121] loop6: detected capacity change from 0 to 512 [ 1348.382544][T29121] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 1348.435495][T29121] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1348.482343][T29121] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1348.498951][T29121] EXT4-fs (loop6): 1 truncate cleaned up [ 1348.505445][T29121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.518070][T29124] loop4: detected capacity change from 0 to 512 [ 1348.518154][T29121] ================================================================== [ 1348.518185][T29121] BUG: KCSAN: data-race in desc_read_finalized_seq / prb_reserve [ 1348.518224][T29121] [ 1348.518232][T29121] write to 0xffffffff86918890 of 8 bytes by task 29124 on cpu 0: [ 1348.518250][T29121] prb_reserve+0x750/0xb80 [ 1348.518273][T29121] vprintk_store+0x552/0x860 [ 1348.518300][T29121] vprintk_emit+0x1a0/0x6c0 [ 1348.518327][T29121] vprintk_default+0x26/0x30 [ 1348.518359][T29121] vprintk+0x1d/0x30 [ 1348.518392][T29121] _printk+0x7f/0xb0 [ 1348.518411][T29121] set_capacity_and_notify+0x155/0x200 [ 1348.518444][T29121] loop_set_size+0x2e/0x70 [ 1348.518474][T29121] loop_configure+0x89c/0xa30 [ 1348.518504][T29121] lo_ioctl+0x5fa/0x1570 [ 1348.518531][T29121] blkdev_ioctl+0x35b/0x450 [ 1348.518562][T29121] __se_sys_ioctl+0xc9/0x140 [ 1348.518592][T29121] __x64_sys_ioctl+0x43/0x50 [ 1348.518622][T29121] x64_sys_call+0x168d/0x2e10 [ 1348.518648][T29121] do_syscall_64+0xc9/0x1c0 [ 1348.518681][T29121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.518702][T29121] [ 1348.518707][T29121] read to 0xffffffff86918890 of 8 bytes by task 29121 on cpu 1: [ 1348.518722][T29121] desc_read_finalized_seq+0x163/0x280 [ 1348.518750][T29121] _prb_read_valid+0x142/0x710 [ 1348.518775][T29121] prb_read_valid+0x42/0x70 [ 1348.518799][T29121] printk_get_next_message+0xdc/0x530 [ 1348.518832][T29121] console_flush_all+0x2a9/0x7a0 [ 1348.518861][T29121] console_unlock+0xf4/0x350 [ 1348.518884][T29121] vprintk_emit+0x470/0x6c0 [ 1348.518908][T29121] vprintk_default+0x26/0x30 [ 1348.518930][T29121] vprintk+0x1d/0x30 [ 1348.518964][T29121] _printk+0x7f/0xb0 [ 1348.518988][T29121] __ext4_msg+0x198/0x1b0 [ 1348.519008][T29121] ext4_fill_super+0x17d1/0x3580 [ 1348.519027][T29121] get_tree_bdev_flags+0x2b4/0x330 [ 1348.519061][T29121] get_tree_bdev+0x1f/0x30 [ 1348.519095][T29121] ext4_get_tree+0x1c/0x30 [ 1348.519118][T29121] vfs_get_tree+0x56/0x1e0 [ 1348.519149][T29121] do_new_mount+0x246/0x6b0 [ 1348.519180][T29121] path_mount+0x49b/0xb30 [ 1348.519222][T29121] __se_sys_mount+0x28f/0x2e0 [ 1348.519253][T29121] __x64_sys_mount+0x67/0x80 [ 1348.519284][T29121] x64_sys_call+0xd11/0x2e10 [ 1348.519311][T29121] do_syscall_64+0xc9/0x1c0 [ 1348.519340][T29121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.519362][T29121] [ 1348.519367][T29121] value changed: 0x0000000000001712 -> 0x0000000000000000 [ 1348.519380][T29121] [ 1348.519384][T29121] Reported by Kernel Concurrency Sanitizer on: [ 1348.519396][T29121] CPU: 1 UID: 0 PID: 29121 Comm: syz.6.7794 Not tainted 6.15.0-rc1-syzkaller-00095-g2eb959eeecc6 #0 PREEMPT(voluntary) [ 1348.519426][T29121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1348.519439][T29121] ================================================================== [ 1348.544343][T29124] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1348.685550][T29121] EXT4-fs warning (device loop6): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 1348.691372][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1348.695734][T29126] EXT4-fs warning (device loop6): ext4_lookup:1801: Inconsistent encryption contexts: 2/12 [ 1348.811106][T29124] EXT4-fs (loop4): 1 truncate cleaned up [ 1348.846355][T29124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1348.863413][T28664] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.937960][T22825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.723223][T15338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1350.442558][ T2967] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1350.453856][ T3377] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1350.762703][T15475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1351.803085][T15475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1352.852210][T15475] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1353.882323][ T1042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1354.279230][T15338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1354.923418][ T9852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.972690][T29130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1356.999451][ T3449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1358.042369][T15338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration