last executing test programs: 15.644931607s ago: executing program 2 (id=1280): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYRES8=0x0], 0x7, 0x501, &(0x7f0000002b00)="$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") mount$nfs(&(0x7f0000000540)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000500)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000040)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000080)='./file0\x00', 0x0, 0x603840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/3, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000eb030100000000000000000000001000000100000000000000000000000ada5439c3b8c3172747c0ab31e8effb9508ea1b946bbcd74a7446b07a1e1106435ade1cc94c178530837851c4e8e8c20a89492c85cfb8ce0ab57a63acd26cbdd683b9378e3d3d4ef6f61311"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0c0002"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 15.544143509s ago: executing program 2 (id=1283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000200)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffb) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x9) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 15.342709161s ago: executing program 2 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) 15.342214331s ago: executing program 2 (id=1287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600330000000a000000000000000000000000000000000000000000000000000000000000000800120000000000000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00001600000000fc01000000000000000000000000000000000000000000000500"], 0xc8}}, 0x0) epoll_create1(0x0) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000180)=0x28) r3 = socket$l2tp(0x2, 0x2, 0x73) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000a40)="55dfa64d9a8d17b6d8daf28b174783be8f160f439b025627220f7dc64c4d483977b3ed934f19f64154acd9997e8ecf4243e094a72c673e213ffb08c1fe9c0ab9d6e753fe31b3c61547a0cd50271b411a7f9a0d77c4698340c0417f6131b7a31140e90f223a2d5b4f10666c47cbf8d93fecda322fe839ae74f84fbc88816438c3d948495d5e7355b6e61df517e22f0ae7e957bfd582c4215d88275553f41ab1b8b470f8fb21ef6baa24bc2af8149e18ae5bff671b0ea8d9ab73f7dc5a9207f9f4a860885f1bdc98f8bf0319cf56987646f6c6591deec5e10739a05afacdfe84fa8be9457924e09c5926cc5f916302566d4b01d77b7c90184677ad6cdedb4ddbc6485ccf941fbe2a5b4931ddbb52dad65e365f9792bd4cecd8b69691c94f1e1f39567bf6ebfa35d18498f2505d11546f008adb48b5b0e1952486f11c9a34feb0c3af2bb114666172a4dda4109f100ef28da05748ec47c281fb973c8337648547e5bf4fdf37eb4cfc06119958d8d9a81d000eed2a35af75a4fabc521607cd1fb9ad5c7ceedf7ee986d8676a324f339147e8819b5949a0ae64d8f380772045ce652af400e5a5836302dfabd5bdf610ea77908ea94d94c50669f6bf5d266a56b88c36d9f8e249fb58323292d5bdbf2d5612603950f262988b862fe7dba221f8ad3af525653039d04fd9669de4cbabe5c69ccf425b1a1e10c8eecd561789bece65d3bf9dfa7ce803b1fd6e07d050028a29e5226ec6838c3a8fd44bf2bcb2709acd69c4f3a65155222c50a754840f56b2c3be2ed26d7fc7abf7a64fa7f66626eba5348a31703a7987466f662105512269e920a4c3a2f19bb7dfff70fec18068f0c87c486c47a5e27a5e785ad58ac89a7fe743d6fbce927a3a42741f158f60a52621e295b4fb807a4fa6b6f8a696eb94959c61fc8ef0231b46bd0bc5d4702c30ec3e4a1dcfd59a8bfd67c4ab79c1d09f3b87e8e4c40278aa0f06a4c3212b37efadb3fbb8799dcc87c221557a5c2ba4f16330f879110c28ca82a9cd2a824f5d3e246519eba883ad50d6ee416d4ddcf284500294244ce53bb3fdf1ad618df237bfc6977f51403b573c0e7b721389810f9e5de7142ebf04168b91dc5c7066e32ae30a831e8e83f7269e68d288934e0b8c080810145f8a4cc3401a04338a47ae7edd5436be491817e6a3a84850cc1b0688c92941127f8c08ecb70a9f8de6138de42c6f45b068019236115ae23a48a2dc7dd342c726b3a804d9632f66372ef0665418b99f219a52f2b98cb00cc60c1265ec71f996226c70fcb0305be4cb3deac2302092465f11273f058a7cb862e969e50f3c3fdfcbea7518c1e14d7e625be8fcf83524836ca833a33964f60c0cb55d7a031097cbb30aa5a4d37bfc661b12cc723271111cdd55f5ffeba6b409823594b49f90d06b4e9b8702cc4eff3ac735edc4fd3852b52c8925328bbe1700d159374be947a93d270efa8dd01c4377713270b0eb6657e91eed27a14e11e4c30fef4523a358391ce358de7559be29ef026f6ef02c84b5430639c5bb859490f46ad06e125a64a3f00601a53335f76c9615a7e4a5c4572ffc01af7a08f0ef68070e94b764906e5655681e2f841f71a02e2d2c04544c18a1ac8b195afa59fb8f7f0d8cb200bc06dc77cef307d1ba6583565b6e03788cd8162e2153ddab753777ca4bec423ce59909b2ea23b318dbbd697b2960abea4d0004bc2738311afa3b40c5d838e6b196781c67596876c61e74a66a2b2145bd1f293279606805261e2322b35fc1a8b807c80e73186c45191a3264c0cf57a5c0e48bcf1a891e70218dc9b5c3e640f6be6339bf3b99f18b9ddc9ac4bbc3f3846f3a96faa5f6a1acc615923d99f2ce5d15a14e9650622ff94f6cd1bbb1ed913fa362c7be53088cdb8bc62fad6b5c504c61757d864a68531f006f83853e56f8c3a6d220fb2341463dfc704372dfaa9f28f444223f432bc0b4909381ccc5787478e2479bf175e3eb155522884429c27c38915c5529b50b16651e3a7400c30a553b31dd103c9ac0e60aee7562add42377748b42b61929adad5bc96380d704b15e7a276854deb91bebb6ea29359fa4c4cb3d28be90c82b6fd03c0b7d29a278f4c99e3ac94f173e01ac5b3053ce806d773d87322f18c054e6d164b6567907edf04a84d9d89a0e6e8440ab4ba497ebc6a9393cb5fd236b9a05fe363103db48171fcf3ceff387bc2ce3cd95c501d3a7d171216d8880d261aeb09c45804211f959abbf409087b36b74a5582fe5f620da3de78145de3432320cee8f8fa7d9c66a74a14a144999c732b2d48d85aabe868457978e44acee7c5e22323cd40d19b3bbe4111a4f145a9c0b5d31536103a17844dbb5be981b3a81b8d5cdc1606f144c784698316d651512982fefd0d2ebb2cb686a94796895958101429c661a40e5e2f9c27c071d39e371b21ad827b54cb9cc87e59968c20b95bfa946d84a6fd65bca64cdd1c91f89415f3c5344caca96070da9b004a7c95b40a5c7e531087d1596d725dcdb7bb6140a4646e1a8c47cd9eecd4452da33876973e24cf992385986080e13142755248ab602df93d23718306d43a0214f0680d36710ef16955a94b339a83dd2f3b6df8cb1b24cc216b5c263a365c4581a54774858952684e0eb724a175ae1aa958d422a6a034dbc2a5fb11d718e8a50b4970878835903cca45f2a61458342484b1bfd7e43e92254c3de02e99f564cadb36f30f163f0ec6e8d2ba2cdd45c2a326cf461fbe2f8d4c062a94c279ec1b7d597e593e2e29b5d00820ed1426f3809be63571f3bb690a44288d9628a8358c1a361a4fc625b22b5dedb8db749ce8591ff59114b0aa687348d32ed9f925ea0f326490a5a7cde6a15486aaae8050a07d0b30540d8a66c7d4088cb3cf7f37843ac49535007f8ca236ff48e048edf5ac5d2f5b1545af0be529c68e4492282bba7b2d7df647de21a7e2d4f630f42965a0fbb95eaee404a237e4ef0c2f08be882b915b5107be90ea5720732937b6c18ddab52b5a39e2d50e26704aac48b3616e103218be3d143404ed59e52ba6090b4f8baa6aa1ff187fc003f86e79a39242c34ec54b369b8a37e50a498d2f1085f45fa98b0f86df4ffb7a4ce6491c7bd1199eeaf9a11b3b2d3962d1504c350f15125ed0836591fab2e2daa154e318d08b98fc8f490a04ca7030db714b3d67e5de67c3d3f3cd3beb1b956fe6780e6313c9059c2136047bdf22d858b5e5c024e935db3ded7e78c58b6706f8e779a04193d969ad07372642c6dd66e286dbfddeee67cdcd5710628517189ea6a7d3e481c445047abe1aa6c5e7360efaf689974b2541f7e4d207483a0feeebf4157d272192ea549a304c0c03cb44a81f0ea6380f9400621bfa895f131c68ff355ec53aff710555ae621fd2de82a08a1332e6097e31d123e24f51748e0075bf9422e69718ad391fef898dbf6b0a0c4ee0cef561b412eed5ed472bf486a484555319c67af88b36c02aabff1ca4ce53c584dca52457c390729f4cf592f9ff6dc3d997bd12e22010ec2b47759eaf02724b286aee1f290b86aff130a3cdbbc4a2646f6da6977b5814685d38aedf042eea21c47ead60d12d40a64b6ec45cd3b1fed0f7e5f1ebeab9abafb7596ac7e71eb98520beb781d13ea7f06d3d932d5bb4ca98cffccb048b651700034971468cd4dd3e50c1f5b1ad6d48e1fcc3de1047ea97e0677e4f5cb6252e77e1e4146bd8efa7acd29579f3d1d0234af5074b8c500155bb6fe30722fbcf0337e656bf1e94138bf5917c4e1e1b385f0af1fb916af82431ac6f3cf9745e006a0cee5d7ccf6ac5eea76776f7dcc80cc69ec0eb42ec6e4f0eae86c5be0190ccc166f17ea28d0c35357ebc738cffb2af4cc49adfd7494697a351ec0517517d0b250e92c155b3d01e2362b1337ce8b8fb3b6067c5a2178dc772325f10c957b2cb5e49fec67bea5945fc876eb8fac5b8014c7411d83825ae442a546ebac7c9dca236df81451fef9800eb51b2482236fb0fcc0a804abefcb2aa0184368591c0625cd7a48fa637a7f7cbf5a60a1b2a32fa59ccdae3f716ad21986a3d14c8c068d56662e50322d849ef6ab2f0965d3e6435ebf05c55505cd9f74fe6a0944c45cb97ab39d0422c2d8e533d7838324bd0d611538cd08ef6b93435bcb2329d6560cfd2604cc9c90ca257523e233ca2e8c444999ff85edee5a5b6df59a1d2bcd49e297fb25160df0ce746b7a2e71dad2d0dbda5913eed617addb59965247acd81be8c70b7f4fb36aab2a5dbf711c684d20e85934e3f174de435d3b455ddb79597ca8585e20b1ae9f5850d218a06630154828d7aa1913b912abb028eedab5f913533e350fec1772000e4dcf3f209bf2113ef1f8d6d24c61c86d809df05c4c4e96f6b14570bfbf74205d96e0f34e529ff1494cadbe8fcc8d53363f36c9a306513a0b2959b1ec22a0382c61adc0bba3ebbc229a196161cbe43c77fac0bee3bbad69849291de19bb7b5b02833f8b0c5175f4bde16fa4fab970de55989431dc638250d406c4b28638029f04d460902eb030483270e3d2b42399d971cea31ea1e9aaae2358a69b817ea32e3518e968706847836d86ff992fd56781a8947580d6e56f0b45ff98cb8c91534209971d9256ac5e70b9fd9c4cfb2e6f6c815aada1da370f38e465c85fd5b2d74cab3a0a9a2fd353e9d6492824c80cc062ce1e35c20389d28bf56134a4c1892ba33a7c737c45c67c32e34e6829dc36c57075a3b64a753e5b438655c2ab26bb787623aa828026886086648141f827c63bcf42d67258177344ac86c57962a32eb8f511dcd395921af2e0e766a96d792d4023bb8746f065018f9738c0653ccf5adf353b717acf73fedf308cf3438e9ec2c0274bcdade0a44fb9cf11c3063c1e43b4d358d415548c3d0535f404ac61803478740ad6ede73400fdbd4fc0c749000555c65e10c44f4eab4e7e9567b766a146d3a9fcd58ce7d279ac0bdf2601b23634f8295a8ec74c045a092d19a615d1999581bfd64cf2e8b57f83b47db723a01998bf3992f67e8fd4a5669c7c2dffc8e4c3a031a71930a5b75ba19ccb6e444e3bd5fd8ed739996434dd5ba367d0bb479297a0d87f9412c6c3f19e981aaa59e8798fa1709bd3632866dd8b7c2ce08aa59d9b9abcd45ff0df5ca0e1dc2fbce061aad565942014ef13be48888dd45d7092765d4064a53acaae4b8b2d451e1c759685eb2e4f718bc6668c5713cd883196378930224db6d861d71bc295d6e1d164024d13e21ebd2bc1fc334340031cbe829609ac96ea138f9db85add78105f4db69883216da5d6b897a98a1fbc205768222815e442cdc01fcea80afb14d2112745d0221ca2d62d3c609938486e6aec4ecbfc6ca7124dc2eebfa4b087aade34dd599b099b35869336dd2099e5c8b6256089d8c3b271310836151f787e5489f423c9804688f2d64a9081a00dffde0e23ca087324a257a6224cb97049a4e8a1a2ff9c48d9e5daaa6f9d26687222615895b6f75516e8fc23cb48743e6076156fe2f53f605874e846f6def91fb3af89b82658e1a86e6a3834b255d7f29c90d47eee0901311ba1007be019b70f74c8bd1193874651cd4a5ba3f328d53ba4e79b99234bddbdf302a746f83959885f7c48fa5722ca8bc889e225f52f83d97078f0c7c9952126c4c1a1a8c7e6252fd24dbd5f7709bb2fc5c344292c1ca8fdab19b7f5e0bda5f182f51a7d3e3bee42a7ea2ba1c654b5e392e343eda3db1c04e9f217802ef38be93f217b6b21d7434be1b5bc9ee3e03ed9d0820f405d811e122196a21776ecaa89dd", 0x1000}], 0x1, 0x80000001, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create(0x5) 15.220937103s ago: executing program 2 (id=1290): r0 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) ftruncate(r0, 0x401) r1 = inotify_init() io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000987) sendfile(r0, r0, 0x0, 0x800000009) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffbfffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@deltfilter={0xa0, 0x2d, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x7, 0xd}, {0xffe0, 0x9}, {0x1, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x9}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0xe32}, @filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x5, 0x4, 0xfffa}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xb, 0x2}, {0xcb, 0x3, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}]}]}}]}, 0xa0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0x10, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x8}, {0x3ff, 0x9, 0x5, 0x6ca}}}]}]}]}}]}, 0x74}}, 0x20040054) getresuid(0x0, 0x0, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f0000000280)=0x14) read(r10, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r11 = fcntl$dupfd(r5, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r11, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=r10], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.980691466s ago: executing program 2 (id=1292): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYRES8=0x0], 0x7, 0x501, &(0x7f0000002b00)="$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") mount$nfs(&(0x7f0000000540)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000500)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000040)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000080)='./file0\x00', 0x0, 0x603840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/3, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000eb030100000000000000000000010000000100000000000000000000000ada5439c3b8c3172747c0ab31e8effb9508ea1b946bbcd74a7446b07a1e1106435ade1cc94c178530837851c4e8e8c20a89492c85cfb8ce0ab57a63acd26cbdd683b9378e3d3d4ef6f61311"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0c0002"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 14.980468846s ago: executing program 32 (id=1292): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYRES8=0x0], 0x7, 0x501, &(0x7f0000002b00)="$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") mount$nfs(&(0x7f0000000540)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000500)='./file0\x00', 0x0, 0x2000, 0x0) mount$nfs(&(0x7f0000000040)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000080)='./file0\x00', 0x0, 0x603840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/3, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x5) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000eb030100000000000000000000010000000100000000000000000000000ada5439c3b8c3172747c0ab31e8effb9508ea1b946bbcd74a7446b07a1e1106435ade1cc94c178530837851c4e8e8c20a89492c85cfb8ce0ab57a63acd26cbdd683b9378e3d3d4ef6f61311"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0c0002"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) 11.494679574s ago: executing program 1 (id=1341): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) sync() 10.784313833s ago: executing program 1 (id=1349): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x3000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000640)=0xff, 0x4) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000c80)}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x0, 0x0, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'bond_slave_0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x528, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x2200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x1, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = timerfd_create(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) timerfd_gettime(r6, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "b5dcc4dbdf0216e5", "9ceaabfc60a679cc3dc8a267343a0ae3", "d9ae6613", "952551747d5101f5"}, 0x28) read$usbmon(r1, &(0x7f00000001c0)=""/208, 0xd0) 10.580590266s ago: executing program 1 (id=1355): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0xffe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000655}, 0x0) 10.528289617s ago: executing program 1 (id=1357): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYRES8=0x0], 0x7, 0x501, &(0x7f0000002b00)="$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") mount$nfs(&(0x7f0000000540)='\xf1uj\xb0\xc1\xb7\x15\r\xa3\xb5e\xee&\x91\xcd\xd2<..', &(0x7f0000000500)='./file0\x00', 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e657200000050000280080002400000008408000340f5000007080004400000000f08000140000000002c0005800c00060f8eec796c6f6164001c000280080004400000002708000340000000b908000240000000000900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) lgetxattr(0x0, &(0x7f0000000080)=@known='system.posix_acl_default\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x3, 0x0, 0x0, 0x2, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x5dd8, 0x4000000, 0x3, 0x0, 0x7, 0xfffb, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc, 0x4, @perf_config_ext={0xa, 0x7}, 0x1100, 0x7, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) write$selinux_access(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x800041, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 10.394749069s ago: executing program 1 (id=1361): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14, &(0x7f0000000040)={&(0x7f0000000280)="a0462bedb0ad47eca9592a2ccf3950247289182536cb4cc9863fc1ed5d21d6b2a97f4dfc3a589ebf592cf3f4d3d377f5c347ea1ce8c8a1fc29b2e94e5976ba9221061e032709ffbbd3395946fbde3ed207b29f7df0a23960f5920ca6802dfcc2d10c8f891de141392abaec88af3e9b1b4ce966d5278a5ea68d6ac6873ef1bedb3fd5326ee816aa8f21e4d60ce8e6289b8cfda68f57096d1470e79e9b9c5b85bea66ad4f56df26ea7091d18", 0xab}, 0x1, 0x0, 0x0, 0x20004851}, 0x40) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r3}, 0x18) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r4, 0x0, 0x0) lseek(r4, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) rename(0x0, &(0x7f0000000040)='./file1\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) 9.902244075s ago: executing program 1 (id=1370): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c00038008"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 9.798668847s ago: executing program 33 (id=1370): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c00038008"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.827339322s ago: executing program 3 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) 2.802783642s ago: executing program 3 (id=1452): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0xbcfc, 0x6219, 0x0, 0x2, 0x21d7, 0x9b3, 0x8001, 0x800}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x7, 0x50, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r6}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) sync() 1.888613844s ago: executing program 3 (id=1475): syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0xc4040) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) 1.608207438s ago: executing program 5 (id=1480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) 1.590185688s ago: executing program 5 (id=1481): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x19de3, r3, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd82, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="04010000020101010000000000000000000000092c000f800c0002400000000408000140000077580800014000000008ed0001400000000d08000240000001ff28000e800c00028005000100010000000c00028005000100880000000c0002800500010001000000080004800400018004001980080015"], 0x104}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x4, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=r8, 0x12) setfsuid(0xee01) syz_emit_ethernet(0x6e, &(0x7f0000000800)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000383a00fe880000000000000000000000000101ff02000000000000000000000000000102009078000005dc608cb02b00042f00000000000000000000000001fe8000000000000000000000000000aa2b0004000010000000000000"], 0x0) 1.49366076s ago: executing program 4 (id=1484): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000042, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noload}, {@oldalloc}, {@errors_remount}, {@oldalloc}, {@usrquota}, {@delalloc}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x101042, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x10a, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000ecffff4a64ffec850000850000002a0000fa95615b50dbbea950cfb32826d29b9e62a2c00cf32863b155cb4c8c2d2d484c3a155a893bc16f4702505c2e5528a3b5d41168d939e97952173d8bf37948d1659b24cd09daf9a06e95e59df23579e5fb87962ad0eedb082435286fb4e9fbacc429ee7be30fe399064e9e142d6bfe309a38174d6ff506a0033813b2378683c87ce00224a669fae79954b95019"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.49157763s ago: executing program 5 (id=1485): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="ab99", 0x2}], 0x1}, 0x20000010) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000000, 0x800) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000240)={0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="25000000100001000000", @ANYRES64=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800"/37], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000010000104fcffffff0000000000000000", @ANYRES32, @ANYBLOB="0025000000000000340012800b000100697036746e6c00002400028006000f0000000000080014000900000006000f000130bc4bde582e588c3ed8259ff8b5ac4be69a4e9a03fa8f76b12b1a6501ead31aaad84202dc87c0ad6879894ec8328947d9b76d245c853d41707a6cf23214327893ab80a71ff007bf3c0d886016b7a7d8d954e951f5b53b596a6e60bec8ff45497d0c598db8590c1d7c5a7b6048f95c8edea327850a7342d0e7bddfb0ab5520ca63a54aecc7882699722339efa3e36e7700"/208], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x101) r7 = mq_open(&(0x7f0000000000)=')#!-\':(^&-[@\'', 0x80, 0x0, &(0x7f0000000040)={0xb, 0xffffffff00000000, 0x800, 0x100000001}) mq_timedsend(r7, &(0x7f0000000340)="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", 0x1000, 0x6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.43289037s ago: executing program 3 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.345242642s ago: executing program 3 (id=1487): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0xe, &(0x7f0000000500)={[], [{@context={'context', 0x3d, 'system_u'}}]}, 0x3, 0x448, &(0x7f0000001400)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) getrandom(0x0, 0x0, 0xc078c563989fede1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x5, 0x5}}}, 0x90) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000019380)={'#! ', './file0'}, 0xb) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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", @ANYRESDEC=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ustat(0x801, &(0x7f0000000240)) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r9, &(0x7f0000000540)={0x8, 0x120, 0xfa00, {0x4, {0xffffffff, 0x23, "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", 0x4, 0x6, 0x8, 0x8, 0xdc, 0x7, 0xf}, r2}}, 0x128) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r11 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92b3, 0x20, 0x2, 0x219, 0x0, r9}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}, 0x0, 0x8000}) io_uring_enter(r11, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32=r10, @ANYRES32=r5, @ANYBLOB="2f0000000000000200000000", @ANYRES32, @ANYBLOB="82e1691cf3906c97079a968145c418c0acf1251d8ad864f0a6cfa873320b5aab2188c099f55c5c4af22db1731c004ea00cfae3e50310fb395485bfff0b05a2f57dd82f3c9e33aa7be0280a3d1cf6852605241d029a3fb06b7ea318e41884e3b5a10854bce6d585c9d28fc5159070e11894ee6c89aa0028d68a5929271669c1506602493dfcea2a532d9af2c8874139cf0538392cc99bcf60751574c02e2796f00531bab77e", @ANYRES64=0x0], 0x20) 1.223162673s ago: executing program 4 (id=1488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2) 1.208175273s ago: executing program 5 (id=1489): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff6}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) 1.167067394s ago: executing program 4 (id=1490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 1.152936144s ago: executing program 5 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) 1.127674945s ago: executing program 4 (id=1492): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.111202765s ago: executing program 5 (id=1493): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000e0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000070000006a0000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) unshare(0x42000000) 1.068848115s ago: executing program 4 (id=1494): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff6}]}) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1) 957.542017ms ago: executing program 0 (id=1496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (fail_nth: 6) 529.438183ms ago: executing program 0 (id=1499): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="ab99", 0x2}], 0x1}, 0x20000010) r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000000, 0x800) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000240)={0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffcf8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="25000000100001000000", @ANYRES64=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800"/37], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="5400000010000104fcffffff0000000000000000", @ANYRES32, @ANYBLOB="0025000000000000340012800b000100697036746e6c00002400028006000f0000000000080014000900000006000f000130bc4bde582e588c3ed8259ff8b5ac4be69a4e9a03fa8f76b12b1a6501ead31aaad84202dc87c0ad6879894ec8328947d9b76d245c853d41707a6cf23214327893ab80a71ff007bf3c0d886016b7a7d8d954e951f5b53b596a6e60bec8ff45497d0c598db8590c1d7c5a7b6048f95c8edea327850a7342d0e7bddfb0ab5520ca63a54aecc7882699722339efa3e36e7700"/208], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x101) r7 = mq_open(&(0x7f0000000000)=')#!-\':(^&-[@\'', 0x80, 0x0, &(0x7f0000000040)={0xb, 0xffffffff00000000, 0x800, 0x100000001}) mq_timedsend(r7, &(0x7f0000000340)="f67299d23d9705cec9d869f5dbd860a5c195694d76bd5a989b123641a0c78cfa19dc73b7890b2a6189ca5c8cf710864242e50e9f8301c63b9a7d6bbfd10363dedffd05e064a1773d5c71555b4cb529c6d06f393294d15113108fbfc789d8409edd17367150f3ccb6eb0716b44fc49d30c2c2757c06967253640d9406affdaf734ece77bbe42609f485e7654baf568014e3808972722333909d17d47eca2248c762697eea9fc29265e1af4c02a13856e14f2866f29391ebd7355226edcf9b35454a826cdb7814a716a3b5c8a1d0051bb0a8ddb49b4035450f321e37e2b7c9b2d4d6384442a63f65f86e76ee56a3fe75442dffe64e5fd03ffcdfc75f94983e62f4d4e2ce33fba7cd1e2d934ee171932d04862e93873a22abfa0b359e48dd6c26c550a7ed467d491399505da77dcd443f13d09aadb964255411ca3aa46f54018bb2e828a3b03f1a978c4036e1550a173d6a6f5a0bab6748be96c085e9aa0668be6ec2ecbee06d0686e29adfda27c57bb83c344a67d25bfac69eeeed1917c97dd3cc250bb529918cde287159d329094898cdf382f834f97fbf9944304bd2d52d49e64ca8bbdc755ad1c43320adb0fbccd230652735f9ae32377f26eec069c0f83a0483cf1f5b5cb13845d54ad9f373bb0c9513fa5eb7708920a5b2a1adb40963b0b756a23ef60187ae7593338897e453c46b86c16ec490b8202f32ee253315bd3893c5e295920d6d767e317a30c47e16e17b13e07b9cc9e42ef9f90fd91ee21999e7c22aff2cada2445070590325f972e446ccc8803dc2d01eec0909d661d7104549e6c9070265ee4577e398367c6a95bc2dbbf23aaee0c2431ef723a170fa381934dd082c48436d17876e2a7ac582670d80042c3a359dc89f22f5d1207aef5176d219a801f0de865b50694b7911274fc016b234ab392b58c778a5dc18a42c6d2778caf8635cd570bd1c0a998c9887fef3195686da4faec76ee154f3e737883c6aaf479c9985ec7be923873da3102e5e29fdc6f94c26f2cf049c526a5189f1232e5b638ab543de797ea58d17ed5d0a8a789338e015b01a34174c8d68b253b92c1b27d405ac0d86221e01de7ff0c66b6b9e88bc2cd42824f845acd058670060b45b2cfe80bcf4b070fad2afc1b1a923feca41c477c53f61f3b1776fa83cbaefab46ba7f110b267d28c98d62f75f795f4d547249cc1866d3a5eb253f422dcebbcd8991108a253656ade170b145041203273d9f62718f676bef6723bd0d725831a82c5e27f172b77fb162f07f9c4eeebe2e65466cc66265163397258a0dbace13b302a83e55e4ea53c2e508ae863223bc69d796d2d5a4caa593077da1f4449201466db5051566485635a908c12e1aadb241799ffaae6ef47fb319d810a0546c8e012b4e097c22deb2d0f776f626935ad189f021dd5bbeafc29e13c3d5d9e9c28a5370c53cf3bd8b0bebf94b6c3b18ae1f8b5c804e0aff5b40bea245f09fe8b1bea6702257db8731d95c3e1af7aa4cdbbb6c496e265c372d7ed116ac735c76ba0dd4b620e4036ec7c6106945abf83f200eb417cd7ceed59cdf9d57fb7b872a753798e01a55de5f25d449231c9f6f07ace49c499d728b26ee1a84a7da808a64e72c9c0fffca629e3d09b040d77cc0326bca15eff927a82f35889d9d6bf955fd26fe03784b1074c9c8545baa7bbec08a2563d0e1bd9b7904c4ac97e1dc2b50f72c5bd69db59efe1ee837bc1b76a71cb9c7f90fc671e13f4a0410f6579fd9e1a809ff29139248fb9f4d7bdb0382238ab27cbc4f17dd82b4b54d3779489d520fcabfc7f802bb1a40b894207fbb1e5c617271c17d6dc74b16436b5279cd4d3e5472a0ea8a3ba31ce78fecd62ae1298294af160fe7a4361ba4017901def9908448333dfee9c7acf9dc9f16a7fc76a3c460ba81448568ee01f9b388fcde5cf6ad5d4bf94d29dbecd329fb5cbefe9f367a6b4e96e1d6209c472a07831e19f6f4750670686040c8471d2e80d75f1457569c323488e5f6ded47790a10030bb27af7fb97b221710d06f0a33ceac5d512b006259cf5d735376c11828da9c6d3f80e9beec8f45f2ed61f248c0af5a728e0892223062fa53987500262e658ad79fdfd8831974eb70266eee6354f7c9b573e6d63b28cf6638646f8058aa61b58012008e90de59c630bef85633679e09101c81f724843287299f8fd490bf0b5d2827fd5d13a1f473b82e3372dcb25e99a0fc828e7b590225e2632a36528bdc0f9ff002f1cad7013e173b36adb33e82b34af955f0b618a205c7ef0ba508b78b62b5bbbf4c7cae2344d5b54aa4e1be84bf73f529c931c50b6b85a9aa2af6d2843c1a614390d5621d0c3d51f87877cf5be1e05c34ed9ec1e12bd4aaafefa3555cfea875c1cab312ed425c9b17c3d7e55768109900d3a8bfda89d62ede4d5de0cfae49b54da6888dcf06f6536dcc9f774eafe6905c2059c69874e23b8ad37d6eafc9de1a68891d86178e9762983f62c56c6f3b17765c99b6853e016020959692897f6753dee02c394ecd6ab0b080f42172b6102b8ebf4e1a03bd96127c93cf372c4ba0f1f9ad471bb18d5dc7542ed2afa7431a439da479cd69ee837e9f15b227b66f90f79b5c6f2462014ff6f57331f1d957eaa373267c7d53be8d2f18b961688cb92d9296a7ff81d86afec9aa26e5c14bace170d91caeef20e5c2427d96ba252ad7394043681ea466f6f5c04dc71286bf5b66fb8ac52485792df4e288141d79495cc0daedb935d2fee0159c56a8cc436b03fa1f18862b6e9332c7c48a18bc8b6d53466d90ae31f3b827b3b21ab176593c8dace8ebc712d624b0dc17f0b5f6a7fb6dc8dc85d226c92ef9b4aa82a802fd460ede367104bb520ffc85763710cf04c59d2a63c7f61614d89c4ed1cf2ac8643ee6d192534139fc96c121e171c8a9cfbee0f691144cabde5ff6aaf804c4537e919fd9a9841cddaa150526d3c77b5d383a7ee2fa1c21beedb8d914f16c0369a9f06ce276ced7843e8b9b65be764e1d93a6596aeb310304d543847c85864c2100719cd6ae8aba2c320901098d9d3be5f11f73d3decdecbda262d813f5b5594919becad4bbcebfc120ca485920f69f53ef965f4b69ed559d26c391682b8f3b52a02c935515caa4d1d7d7c6cf20415f6057a521beb96b95344fb268e812686cd7414ae1487037c1743c5e3dd15edc1184fb9556efef78c12a2fe36202d59068845188dbcafdca249308f403a3639a26fd5efcee83a0012517a9946b989c390ef5266cd5372b366fb6f09daeca2d1f2c0b9713879c1e38dccf09028c158ead113ff77ea57152b16e134452413135cb8233034870ba4232a2a3f439ad68be132a40c9a875955957b5d7432cb93934870395f32957bfc156fb10d30cf54b153f6b70904ab784f9ab801d0893da96f91855834d4b128dcf5cd2d5dec066c85ebc70ea8c3439b7718347b92791e656b30b688000884fc26f183ee32422193f4f9328902c478002be8f69d2f1e450c081e5f1a4de595926ecbcca25a942d58f79472721ac03869198d51a84543474ab65a92391011984218cd95566da3354fe1e26ef974356fc5179b59d46a45cd8448be9ade1cdae48b6b8b6fff692e80aa0fa0c66696962f60d9c262c93aadb5c3022b5f6996379b343c7d967636f175161e5de95854725bf7088e64bb2f3b9dfa40644a4b83b654782f624d838413e06ecb4ddce80791227a62b47eef4b2f1be239fcfe22e0566d2d95d4f6dc9afdf7b8b095f4f68d3dafae9130290f7a6952ed7bddee83a2e7040489946575e7dfe3dd29bbe6cd415ed25bb11eb397cebe3e63990da19a9250a1634d39341357200a5d8c3b67511716c6bc591469c7d6ebf87d8b59eb1bc3686b26c34c1933f157561d647cd06f1157a2f08b0a6e9fc2eab4b622db42c184020d7655f8593bce72d486a60bff23d50cced3ff04c9b7630238d75f5bd79de2da3a1653fce52c30a35c503d3c73b4d0d61045d805c87d7cd58b82be15a6dbe0e8a21b079315b7c4513c36f998e8c37e444c2237a894da4c1ade8b03df662901b9e14afe949117b9655bcb4346ec8f540162f444c1ab8e12d45e26a87dada2c7c6896c7a7505e97891d895b5cadc4099bdb9dfd0fcd065d675eaaa8ab366ae77b5b761822efd19afa33aabd85cf1ee0b9d4e193fa07599bb0be30729e1df2701d85a768eeb38e2eb5984ba54dbb1ae2519ba06f8c886a85612c3ada5fc64c683bc92c2c1c8c57708a640a9d17200e4106ee0aab18b5df9bd2ef0c5aee9c51543d2708ff64837bc7bd9573a91e9d9fb84d7ad749e9a63fbb4dcd83fc75c840f3c69f8e5d572f30bf984a62dc081e4ea625aea660f4a8a043a75bf646e9c56b1aa76787f01a4b823019a2e83172097b19c2951cb98693b6b0b0babe2818bd1f8e5168664ffdd0ef27d716ac06d62d8ea6e717f08e658790b5d76e9a489ee14f96a489cde7fb4c104bc937e5dd77ed44448f727632eed4e40972e54eac11524727834e1e65d677307575b9bf908640bbb20d3accfffe6ea2c554dad8b001298859450156d8b8d3409bdab7abe4506c9d6c82442cd2b0dca8411f74bcea742fea20492474febff9511965dcb74439af2e1f4235b33f2fad84fd05b83cc87bff5b3db24637a4f16f135c9a10c2a7195b71664163e31aeb9eff67aaa3cf04843847c5c364aeabdc2adcb1bcf3a547b3ebdab15f31641fa4f4ac9e7e2022187abadb852cd81bda2188e8b6b909313d13efb68095d77038960348b0db650515e69e22bc3a9afb7b3e1a509dddf9241fe70bfa705a3ea8579b9846204b648ba2c44f0bbb49887d2f5db74b9beb9c726e0fd92f5df7a8e64d448223dea48162c737e4ac52ceb022ef6449502a1d3554e73b9d8a2b6c467299ee241bf1225d69fd87e9d1d75022eab64810e9381b108f0c1fc91fc9707546a3f270b46de1bc2232bf2b9819d4180cd3230e73315fa9d01997393985fce72183cbc557b9781084627aa497a97bb94ed52f01477f31b075c19799e0151194d931ac4b0ac41bcb8360c50bcb8eebe8ccd1cd7acdb500f5491cc09f1b986064d33a3347b03dddf7ce050eff53157a8b5e81acfb64370389bd3a3989fbe1733783338f0123bba6c56320da6543f4a89dd7d5bb12cb05464f0e24b386576f3612e3e4227dd59e6b61f59ae828fec00fe89bff86cb57df6bae4194c013f53169efe871d8fefbf3f6e1e35b337af4d6c57e980099c6b33c808cb3d4d1b3fe6ee8ea69a9831afa01e4db5e6da45b2bdb94d2956f69de4cf308ce643f2a158fb8ef40b14f3dd9c5c0a6b5582dee6f5fc3523d5d41ef03bc7ea4c6999920036f278c4b4afba80818e617ad55e16bdf60bdd41b4cf8fbfb3acc7237a00ba33657a5e448b84d43d1c79b5a096076ea20f22516686c9205ece6e57cc7b0d3cc62774dd317bb7cad76bbed29bce0bd4caac064bcd46393348560151a953b08b43c1f954b2dca8e2e31f96aef3f52393a94c6ae28aadb75a2a35ebecb686d7d7b4bcb84578bb7c274bb7976a91654935dfa4b1bd3e4bdc00ffe2f919211a9a885c3d95df2740840f4336ad6008ec6bc4e9c98220985ca0af9c0b4b5fc281ff74aeafb89ae35b72f04e1778fa186a29a73f36f3809e366a8c3d3b8d7fa09fb46789fcb861a3c293108b0ff97589370298e36d1d9416c6f0e078874b05d192468071ecc566c388ba1c412e16000078ed17ecc563ed7af3aaf45f932351c6b95907ff60bcd0346b43b1d16ed5d2adb3528f4750da7c7cefe015d2d09e2ace916804009e9", 0x1000, 0x6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 497.837893ms ago: executing program 6 (id=1500): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 463.769473ms ago: executing program 3 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) syz_usbip_server_init(0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r3}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) r4 = semget(0x0, 0x3, 0x90) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) r7 = gettid() semctl$SEM_STAT(r4, 0x2, 0x12, &(0x7f0000002440)=""/223) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = getpid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a310000000008000340", @ANYRES64], 0x34}}, 0x0) syz_pidfd_open(r8, 0x0) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r8], 0x1}, 0x58) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002240)=@o_path={&(0x7f0000002200)='./file1\x00', 0x0, 0x4008, r1}, 0x18) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002280), &(0x7f00000022c0)=0xc) 422.717644ms ago: executing program 6 (id=1502): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a", 0x19, 0x0, &(0x7f0000000140), 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20000010) syz_open_dev$usbmon(&(0x7f00000000c0), 0x80000000, 0x800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x101) mq_open(&(0x7f0000000000)=')#!-\':(^&-[@\'', 0x80, 0x0, &(0x7f0000000040)={0xb, 0xffffffff00000000, 0x800, 0x100000001}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 422.035194ms ago: executing program 0 (id=1503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 316.990876ms ago: executing program 6 (id=1504): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 295.686056ms ago: executing program 6 (id=1505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @loopback, 0x101}, 0x1c) close(r2) 278.093386ms ago: executing program 6 (id=1506): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 260.824936ms ago: executing program 0 (id=1507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 249.620256ms ago: executing program 6 (id=1508): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000340)=0x7) r4 = syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x1d}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) pause() bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu~-0\t&&') 242.779427ms ago: executing program 0 (id=1509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2d3}, &(0x7f0000001000)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008050) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) 208.172437ms ago: executing program 4 (id=1510): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=1511): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000042, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noload}, {@oldalloc}, {@errors_remount}, {@oldalloc}, {@usrquota}, {@delalloc}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x101042, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x10a, &(0x7f0000000340)={0x0, 0xfd69, 0x80, 0x7ffff, 0x2000088}, 0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x480}, 0x0, 0x18, 0x0, 0x12345}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000ecffff4a64ffec850000850000002a0000fa95615b50dbbea950cfb32826d29b9e62a2c00cf32863b155cb4c8c2d2d484c3a155a893bc16f4702505c2e5528a3b5d41168d939e97952173d8bf37948d1659b24cd09daf9a06e95e59df23579e5fb87962ad0eedb082435286fb4e9fbacc429ee7be30fe399064e9e142d6bfe309a38174d6ff506a0033813b2378683c87ce00224a669fae79954b95019"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): 0 [ 104.769585][ T6388] loop3: detected capacity change from 0 to 512 [ 104.776961][ T29] audit: type=1326 audit(1746966280.085:8512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.801703][ T29] audit: type=1326 audit(1746966280.085:8513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.808563][ T6388] EXT4-fs (loop3): too many log groups per flexible block group [ 104.826050][ T29] audit: type=1326 audit(1746966280.085:8514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.833954][ T6388] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 104.834019][ T6388] EXT4-fs (loop3): mount failed [ 104.859467][ T29] audit: type=1326 audit(1746966280.085:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.895451][ T29] audit: type=1326 audit(1746966280.085:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.919627][ T29] audit: type=1326 audit(1746966280.085:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.945652][ T29] audit: type=1326 audit(1746966280.085:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 104.971559][ T29] audit: type=1326 audit(1746966280.085:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6380 comm="syz.3.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 105.165149][ T6407] loop1: detected capacity change from 0 to 512 [ 105.222620][ T6418] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 105.236129][ T6407] EXT4-fs (loop1): too many log groups per flexible block group [ 105.245080][ T6407] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 105.294761][ C0] hrtimer: interrupt took 47571 ns [ 105.302519][ T6407] EXT4-fs (loop1): mount failed [ 105.452257][ T6429] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 105.636475][ T6431] loop3: detected capacity change from 0 to 256 [ 105.844569][ T6443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.959'. [ 105.919459][ T6453] loop2: detected capacity change from 0 to 2048 [ 105.927455][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 105.959285][ T6453] loop2: p1 < > p4 [ 105.964794][ T6453] loop2: p4 size 8388608 extends beyond EOD, truncated [ 106.081244][ T6463] tipc: Enabling of bearer rejected, already enabled [ 106.111254][ T6466] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.122224][ T6464] loop4: detected capacity change from 0 to 2048 [ 106.182114][ T6464] loop4: p1 < > p4 [ 106.193215][ T6464] loop4: p4 size 8388608 extends beyond EOD, truncated [ 106.272362][ T6479] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.361722][ T6488] tipc: Enabling of bearer rejected, already enabled [ 107.242711][ T6498] FAULT_INJECTION: forcing a failure. [ 107.242711][ T6498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.257047][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.4.981 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 107.257085][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 107.257102][ T6498] Call Trace: [ 107.257111][ T6498] [ 107.257187][ T6498] __dump_stack+0x1d/0x30 [ 107.257212][ T6498] dump_stack_lvl+0xe8/0x140 [ 107.257231][ T6498] dump_stack+0x15/0x1b [ 107.257248][ T6498] should_fail_ex+0x265/0x280 [ 107.257280][ T6498] should_fail+0xb/0x20 [ 107.257367][ T6498] should_fail_usercopy+0x1a/0x20 [ 107.257391][ T6498] _copy_to_user+0x20/0xa0 [ 107.257417][ T6498] simple_read_from_buffer+0xb5/0x130 [ 107.257527][ T6498] proc_fail_nth_read+0x100/0x140 [ 107.257561][ T6498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 107.257593][ T6498] vfs_read+0x19d/0x6f0 [ 107.257677][ T6498] ? __rcu_read_unlock+0x4f/0x70 [ 107.257703][ T6498] ? __fget_files+0x184/0x1c0 [ 107.257741][ T6498] ksys_read+0xda/0x1a0 [ 107.257774][ T6498] __x64_sys_read+0x40/0x50 [ 107.257803][ T6498] x64_sys_call+0x2d77/0x2fb0 [ 107.257850][ T6498] do_syscall_64+0xd0/0x1a0 [ 107.257878][ T6498] ? clear_bhb_loop+0x25/0x80 [ 107.257952][ T6498] ? clear_bhb_loop+0x25/0x80 [ 107.257980][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.258007][ T6498] RIP: 0033:0x7fb82afdd37c [ 107.258027][ T6498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 107.258045][ T6498] RSP: 002b:00007fb829647030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 107.258063][ T6498] RAX: ffffffffffffffda RBX: 00007fb82b205fa0 RCX: 00007fb82afdd37c [ 107.258076][ T6498] RDX: 000000000000000f RSI: 00007fb8296470a0 RDI: 0000000000000007 [ 107.258124][ T6498] RBP: 00007fb829647090 R08: 0000000000000000 R09: 0000000000000000 [ 107.258138][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.258154][ T6498] R13: 0000000000000000 R14: 00007fb82b205fa0 R15: 00007fffdce6d598 [ 107.258178][ T6498] [ 107.531006][ T6502] loop1: detected capacity change from 0 to 1024 [ 107.538400][ T6502] EXT4-fs: Ignoring removed oldalloc option [ 107.545461][ T6502] EXT4-fs: Ignoring removed oldalloc option [ 107.582113][ T6504] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.616867][ T6502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.667641][ T6502] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 107.702891][ T6513] loop2: detected capacity change from 0 to 512 [ 107.718999][ T6513] EXT4-fs: Ignoring removed orlov option [ 107.742969][ T6515] loop0: detected capacity change from 0 to 2048 [ 107.761906][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 107.765900][ T6522] loop4: detected capacity change from 0 to 1024 [ 107.774657][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 107.784067][ T6502] EXT4-fs (loop1): Remounting filesystem read-only [ 107.794277][ T6522] EXT4-fs: Ignoring removed oldalloc option [ 107.804519][ T6522] EXT4-fs: Ignoring removed oldalloc option [ 107.813429][ T6515] loop0: p1 < > p4 [ 107.822036][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.822623][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 107.831498][ T6515] loop0: p4 size 8388608 extends beyond EOD, truncated [ 107.858700][ T6513] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 107.889660][ T6522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.923343][ T6513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 107.939909][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 107.945805][ T6522] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 107.951637][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 107.975275][ T6522] EXT4-fs (loop4): Remounting filesystem read-only [ 108.046089][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 108.061590][ T6538] xt_hashlimit: max too large, truncated to 1048576 [ 108.089730][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.146447][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.205364][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 108.220356][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 108.242989][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.990'. [ 108.614031][ T6562] tipc: Enabling of bearer rejected, already enabled [ 108.751642][ T6570] xt_hashlimit: max too large, truncated to 1048576 [ 108.795871][ T6574] FAULT_INJECTION: forcing a failure. [ 108.795871][ T6574] name failslab, interval 1, probability 0, space 0, times 0 [ 108.811382][ T6574] CPU: 1 UID: 0 PID: 6574 Comm: syz.4.1008 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 108.811465][ T6574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.811484][ T6574] Call Trace: [ 108.811494][ T6574] [ 108.811505][ T6574] __dump_stack+0x1d/0x30 [ 108.811535][ T6574] dump_stack_lvl+0xe8/0x140 [ 108.811561][ T6574] dump_stack+0x15/0x1b [ 108.811656][ T6574] should_fail_ex+0x265/0x280 [ 108.811711][ T6574] should_failslab+0x8c/0xb0 [ 108.811746][ T6574] kmem_cache_alloc_node_noprof+0x57/0x320 [ 108.811789][ T6574] ? __alloc_skb+0x101/0x320 [ 108.811863][ T6574] ? _raw_spin_unlock_bh+0x36/0x40 [ 108.811895][ T6574] __alloc_skb+0x101/0x320 [ 108.811972][ T6574] qdisc_notify+0xcb/0x280 [ 108.812041][ T6574] qdisc_graft+0xafb/0xcc0 [ 108.812074][ T6574] tc_modify_qdisc+0xe13/0x1310 [ 108.812130][ T6574] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 108.812159][ T6574] rtnetlink_rcv_msg+0x657/0x6d0 [ 108.812194][ T6574] netlink_rcv_skb+0x120/0x220 [ 108.812229][ T6574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 108.812300][ T6574] rtnetlink_rcv+0x1c/0x30 [ 108.812325][ T6574] netlink_unicast+0x59e/0x670 [ 108.812466][ T6574] netlink_sendmsg+0x58b/0x6b0 [ 108.812505][ T6574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.812575][ T6574] __sock_sendmsg+0x142/0x180 [ 108.812607][ T6574] ____sys_sendmsg+0x31e/0x4e0 [ 108.812637][ T6574] ___sys_sendmsg+0x17b/0x1d0 [ 108.812690][ T6574] __x64_sys_sendmsg+0xd4/0x160 [ 108.812760][ T6574] x64_sys_call+0x2999/0x2fb0 [ 108.812788][ T6574] do_syscall_64+0xd0/0x1a0 [ 108.812812][ T6574] ? clear_bhb_loop+0x25/0x80 [ 108.812908][ T6574] ? clear_bhb_loop+0x25/0x80 [ 108.812931][ T6574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.812976][ T6574] RIP: 0033:0x7fb82afde969 [ 108.813003][ T6574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.813151][ T6574] RSP: 002b:00007fb829647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.813223][ T6574] RAX: ffffffffffffffda RBX: 00007fb82b205fa0 RCX: 00007fb82afde969 [ 108.813332][ T6574] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000004 [ 108.813353][ T6574] RBP: 00007fb829647090 R08: 0000000000000000 R09: 0000000000000000 [ 108.813369][ T6574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.813384][ T6574] R13: 0000000000000000 R14: 00007fb82b205fa0 R15: 00007fffdce6d598 [ 108.813440][ T6574] [ 109.150263][ T6579] FAULT_INJECTION: forcing a failure. [ 109.150263][ T6579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.165346][ T6579] CPU: 0 UID: 0 PID: 6579 Comm: syz.2.1009 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 109.165385][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.165445][ T6579] Call Trace: [ 109.165454][ T6579] [ 109.165465][ T6579] __dump_stack+0x1d/0x30 [ 109.165493][ T6579] dump_stack_lvl+0xe8/0x140 [ 109.165519][ T6579] dump_stack+0x15/0x1b [ 109.165541][ T6579] should_fail_ex+0x265/0x280 [ 109.165581][ T6579] should_fail+0xb/0x20 [ 109.165673][ T6579] should_fail_usercopy+0x1a/0x20 [ 109.165929][ T6579] _copy_from_user+0x1c/0xb0 [ 109.166033][ T6579] ___bpf_copy_key+0xa5/0x110 [ 109.166054][ T6579] map_update_elem+0x165/0x520 [ 109.166139][ T6579] __sys_bpf+0x5d7/0x790 [ 109.166181][ T6579] __x64_sys_bpf+0x41/0x50 [ 109.166467][ T6579] x64_sys_call+0x2478/0x2fb0 [ 109.166502][ T6579] do_syscall_64+0xd0/0x1a0 [ 109.166526][ T6579] ? clear_bhb_loop+0x25/0x80 [ 109.166553][ T6579] ? clear_bhb_loop+0x25/0x80 [ 109.166579][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.166603][ T6579] RIP: 0033:0x7f2ab87fe969 [ 109.166621][ T6579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.166728][ T6579] RSP: 002b:00007f2ab6e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.166752][ T6579] RAX: ffffffffffffffda RBX: 00007f2ab8a25fa0 RCX: 00007f2ab87fe969 [ 109.166765][ T6579] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000002 [ 109.166781][ T6579] RBP: 00007f2ab6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 109.166836][ T6579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.166851][ T6579] R13: 0000000000000000 R14: 00007f2ab8a25fa0 R15: 00007ffc534ba6f8 [ 109.166874][ T6579] [ 109.516664][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1013'. [ 110.509465][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 110.509490][ T29] audit: type=1326 audit(1746966285.875:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.542155][ T29] audit: type=1326 audit(1746966285.875:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.567975][ T29] audit: type=1326 audit(1746966285.875:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.592511][ T29] audit: type=1326 audit(1746966285.875:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.618890][ T29] audit: type=1326 audit(1746966285.875:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.645402][ T29] audit: type=1326 audit(1746966285.875:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.670928][ T29] audit: type=1326 audit(1746966285.875:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.696474][ T29] audit: type=1326 audit(1746966285.875:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.721830][ T29] audit: type=1326 audit(1746966285.875:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.746381][ T29] audit: type=1326 audit(1746966285.875:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 110.874373][ T6614] tipc: Enabling of bearer rejected, already enabled [ 110.909441][ T6620] bridge4: entered promiscuous mode [ 110.914849][ T6620] bridge4: entered allmulticast mode [ 110.922641][ T6620] team0: Port device bridge4 added [ 111.139973][ T6636] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 111.348902][ T6647] tipc: Enabling of bearer rejected, already enabled [ 111.376455][ T6646] loop2: detected capacity change from 0 to 2048 [ 111.478057][ T6646] loop2: p1 < > p4 [ 111.507933][ T6646] loop2: p4 size 8388608 extends beyond EOD, truncated [ 111.699920][ T6666] loop2: detected capacity change from 0 to 1024 [ 111.707263][ T6666] EXT4-fs: Ignoring removed oldalloc option [ 111.740627][ T6666] EXT4-fs: Ignoring removed oldalloc option [ 111.788090][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.814236][ T6666] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 111.854827][ T6666] EXT4-fs (loop2): Remounting filesystem read-only [ 111.880475][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.895298][ T6672] FAULT_INJECTION: forcing a failure. [ 111.895298][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 111.908934][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.4.1047 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 111.908963][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.909013][ T6672] Call Trace: [ 111.909022][ T6672] [ 111.909032][ T6672] __dump_stack+0x1d/0x30 [ 111.909058][ T6672] dump_stack_lvl+0xe8/0x140 [ 111.909083][ T6672] dump_stack+0x15/0x1b [ 111.909103][ T6672] should_fail_ex+0x265/0x280 [ 111.909181][ T6672] should_failslab+0x8c/0xb0 [ 111.909290][ T6672] kmem_cache_alloc_noprof+0x50/0x310 [ 111.909348][ T6672] ? security_inode_alloc+0x37/0x100 [ 111.909376][ T6672] security_inode_alloc+0x37/0x100 [ 111.909396][ T6672] inode_init_always_gfp+0x4b7/0x500 [ 111.909497][ T6672] ? __pfx_sock_alloc_inode+0x10/0x10 [ 111.909529][ T6672] alloc_inode+0x58/0x170 [ 111.909567][ T6672] __sock_create+0x122/0x5b0 [ 111.909607][ T6672] sock_create_kern+0x38/0x50 [ 111.909686][ T6672] mptcp_subflow_create_socket+0x84/0x630 [ 111.909736][ T6672] ? avc_has_perm_noaudit+0x1b1/0x200 [ 111.909785][ T6672] __mptcp_nmpc_sk+0xb3/0x3b0 [ 111.909807][ T6672] mptcp_connect+0x58/0x7e0 [ 111.909912][ T6672] __inet_stream_connect+0x166/0x7e0 [ 111.909943][ T6672] ? _raw_spin_unlock_bh+0x36/0x40 [ 111.909983][ T6672] ? release_sock+0x116/0x150 [ 111.910017][ T6672] ? _raw_spin_unlock_bh+0x36/0x40 [ 111.910084][ T6672] ? lock_sock_nested+0x112/0x140 [ 111.910107][ T6672] ? selinux_netlbl_socket_connect+0x115/0x130 [ 111.910144][ T6672] inet_stream_connect+0x44/0x70 [ 111.910182][ T6672] ? __pfx_inet_stream_connect+0x10/0x10 [ 111.910238][ T6672] __sys_connect+0x1ef/0x2b0 [ 111.910271][ T6672] __x64_sys_connect+0x3f/0x50 [ 111.910307][ T6672] x64_sys_call+0x1daa/0x2fb0 [ 111.910334][ T6672] do_syscall_64+0xd0/0x1a0 [ 111.910391][ T6672] ? clear_bhb_loop+0x25/0x80 [ 111.910483][ T6672] ? clear_bhb_loop+0x25/0x80 [ 111.910507][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.910528][ T6672] RIP: 0033:0x7fb82afde969 [ 111.910758][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.910858][ T6672] RSP: 002b:00007fb829647038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 111.910878][ T6672] RAX: ffffffffffffffda RBX: 00007fb82b205fa0 RCX: 00007fb82afde969 [ 111.910890][ T6672] RDX: 000000000000001c RSI: 0000200000000180 RDI: 000000000000000a [ 111.910932][ T6672] RBP: 00007fb829647090 R08: 0000000000000000 R09: 0000000000000000 [ 111.910997][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.911008][ T6672] R13: 0000000000000000 R14: 00007fb82b205fa0 R15: 00007fffdce6d598 [ 111.911031][ T6672] [ 111.911048][ T6672] socket: no more sockets [ 112.033592][ T6689] loop3: detected capacity change from 0 to 2048 [ 112.214409][ T6699] loop4: detected capacity change from 0 to 1024 [ 112.221560][ T6699] EXT4-fs: Ignoring removed oldalloc option [ 112.227947][ T6699] EXT4-fs: Ignoring removed oldalloc option [ 112.243735][ T6702] tipc: Enabled bearer , priority 0 [ 112.250901][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.251644][ T6689] loop3: p1 < > p4 [ 112.270624][ T6689] loop3: p4 size 8388608 extends beyond EOD, truncated [ 112.282928][ T6699] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 112.306695][ T6699] EXT4-fs (loop4): Remounting filesystem read-only [ 112.328362][ T6700] tipc: Disabling bearer [ 112.398243][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.616054][ T6735] loop3: detected capacity change from 0 to 2048 [ 112.658142][ T6735] loop3: p1 < > p4 [ 112.662738][ T6735] loop3: p4 size 8388608 extends beyond EOD, truncated [ 112.701017][ T6739] tipc: Enabled bearer , priority 0 [ 112.760013][ T6738] tipc: Disabling bearer [ 112.975965][ T6746] loop3: detected capacity change from 0 to 1024 [ 112.983263][ T6746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.009143][ T6746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.054567][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.263539][ T6761] FAULT_INJECTION: forcing a failure. [ 113.263539][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.277890][ T6761] CPU: 1 UID: 0 PID: 6761 Comm: syz.1.1082 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 113.277998][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.278036][ T6761] Call Trace: [ 113.278045][ T6761] [ 113.278054][ T6761] __dump_stack+0x1d/0x30 [ 113.278081][ T6761] dump_stack_lvl+0xe8/0x140 [ 113.278105][ T6761] dump_stack+0x15/0x1b [ 113.278146][ T6761] should_fail_ex+0x265/0x280 [ 113.278177][ T6761] should_fail+0xb/0x20 [ 113.278204][ T6761] should_fail_usercopy+0x1a/0x20 [ 113.278247][ T6761] _copy_to_user+0x20/0xa0 [ 113.278273][ T6761] simple_read_from_buffer+0xb5/0x130 [ 113.278302][ T6761] proc_fail_nth_read+0x100/0x140 [ 113.278328][ T6761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.278381][ T6761] vfs_read+0x19d/0x6f0 [ 113.278411][ T6761] ? __rcu_read_unlock+0x4f/0x70 [ 113.278437][ T6761] ? __fget_files+0x184/0x1c0 [ 113.278518][ T6761] ksys_read+0xda/0x1a0 [ 113.278549][ T6761] __x64_sys_read+0x40/0x50 [ 113.278668][ T6761] x64_sys_call+0x2d77/0x2fb0 [ 113.278700][ T6761] do_syscall_64+0xd0/0x1a0 [ 113.278722][ T6761] ? clear_bhb_loop+0x25/0x80 [ 113.278745][ T6761] ? clear_bhb_loop+0x25/0x80 [ 113.278772][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.278822][ T6761] RIP: 0033:0x7f41493bd37c [ 113.278839][ T6761] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.278857][ T6761] RSP: 002b:00007f4147a27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.278877][ T6761] RAX: ffffffffffffffda RBX: 00007f41495e5fa0 RCX: 00007f41493bd37c [ 113.278891][ T6761] RDX: 000000000000000f RSI: 00007f4147a270a0 RDI: 0000000000000003 [ 113.278902][ T6761] RBP: 00007f4147a27090 R08: 0000000000000000 R09: 0000000000000000 [ 113.278920][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.278932][ T6761] R13: 0000000000000000 R14: 00007f41495e5fa0 R15: 00007fffdc8a2f98 [ 113.278952][ T6761] [ 113.529712][ T6763] __nla_validate_parse: 2 callbacks suppressed [ 113.529733][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 113.550662][ T6763] bridge_slave_1: left allmulticast mode [ 113.557015][ T6763] bridge_slave_1: left promiscuous mode [ 113.563201][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.583887][ T6763] bridge_slave_0: left allmulticast mode [ 113.590282][ T6763] bridge_slave_0: left promiscuous mode [ 113.597077][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.642462][ T6774] loop4: detected capacity change from 0 to 1024 [ 113.655257][ T6774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.663901][ T6767] tipc: Enabled bearer , priority 0 [ 113.682983][ T6774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.701829][ T6766] tipc: Disabling bearer [ 113.722487][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.840400][ T6784] FAULT_INJECTION: forcing a failure. [ 113.840400][ T6784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.856333][ T6784] CPU: 1 UID: 0 PID: 6784 Comm: syz.2.1091 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 113.856413][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.856424][ T6784] Call Trace: [ 113.856431][ T6784] [ 113.856515][ T6784] __dump_stack+0x1d/0x30 [ 113.856534][ T6784] dump_stack_lvl+0xe8/0x140 [ 113.856551][ T6784] dump_stack+0x15/0x1b [ 113.856565][ T6784] should_fail_ex+0x265/0x280 [ 113.856612][ T6784] should_fail+0xb/0x20 [ 113.856636][ T6784] should_fail_usercopy+0x1a/0x20 [ 113.856732][ T6784] _copy_from_user+0x1c/0xb0 [ 113.856750][ T6784] arp_ioctl+0xac/0x2c0 [ 113.856810][ T6784] inet_ioctl+0x2ad/0x3a0 [ 113.856841][ T6784] sock_do_ioctl+0x70/0x220 [ 113.856992][ T6784] sock_ioctl+0x41b/0x610 [ 113.857156][ T6784] ? __pfx_sock_ioctl+0x10/0x10 [ 113.857176][ T6784] __se_sys_ioctl+0xcb/0x140 [ 113.857196][ T6784] __x64_sys_ioctl+0x43/0x50 [ 113.857236][ T6784] x64_sys_call+0x19a8/0x2fb0 [ 113.857255][ T6784] do_syscall_64+0xd0/0x1a0 [ 113.857275][ T6784] ? clear_bhb_loop+0x25/0x80 [ 113.857315][ T6784] ? clear_bhb_loop+0x25/0x80 [ 113.857335][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.857397][ T6784] RIP: 0033:0x7f2ab87fe969 [ 113.857417][ T6784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.857437][ T6784] RSP: 002b:00007f2ab6e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.857461][ T6784] RAX: ffffffffffffffda RBX: 00007f2ab8a25fa0 RCX: 00007f2ab87fe969 [ 113.857473][ T6784] RDX: 0000200000000040 RSI: 0000000000008955 RDI: 0000000000000008 [ 113.857483][ T6784] RBP: 00007f2ab6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 113.857494][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.857587][ T6784] R13: 0000000000000000 R14: 00007f2ab8a25fa0 R15: 00007ffc534ba6f8 [ 113.857604][ T6784] [ 114.426593][ T6798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1096'. [ 114.492998][ T6804] loop4: detected capacity change from 0 to 1024 [ 114.502816][ T6804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.531903][ T6804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.568191][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.594556][ T6814] loop4: detected capacity change from 0 to 1024 [ 114.601885][ T6813] loop2: detected capacity change from 0 to 2048 [ 114.602480][ T6814] EXT4-fs: Ignoring removed oldalloc option [ 114.615714][ T6814] EXT4-fs: Ignoring removed oldalloc option [ 114.631049][ T6814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.645704][ T6813] loop2: p1 < > p4 [ 114.650297][ T6813] loop2: p4 size 8388608 extends beyond EOD, truncated [ 114.651295][ T6814] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 114.673971][ T6814] EXT4-fs (loop4): Remounting filesystem read-only [ 114.702250][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.734670][ T6821] bridge5: entered promiscuous mode [ 114.740217][ T6821] bridge5: entered allmulticast mode [ 114.752309][ T6821] team0: Port device bridge5 added [ 114.803953][ T6828] loop4: detected capacity change from 0 to 2048 [ 114.825774][ T6832] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.849927][ T6834] loop2: detected capacity change from 0 to 2048 [ 114.880928][ T6838] FAULT_INJECTION: forcing a failure. [ 114.880928][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 114.894492][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.4.1113 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 114.894534][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 114.894554][ T6838] Call Trace: [ 114.894560][ T6838] [ 114.894568][ T6838] __dump_stack+0x1d/0x30 [ 114.894594][ T6838] dump_stack_lvl+0xe8/0x140 [ 114.894619][ T6838] dump_stack+0x15/0x1b [ 114.894678][ T6838] should_fail_ex+0x265/0x280 [ 114.894710][ T6838] should_failslab+0x8c/0xb0 [ 114.894739][ T6838] kmem_cache_alloc_noprof+0x50/0x310 [ 114.894780][ T6838] ? alloc_empty_file+0x76/0x200 [ 114.894943][ T6838] alloc_empty_file+0x76/0x200 [ 114.894985][ T6838] path_openat+0x68/0x2170 [ 114.895012][ T6838] ? mntput+0x4b/0x80 [ 114.895034][ T6838] ? terminate_walk+0x27f/0x2a0 [ 114.895140][ T6838] ? path_openat+0x1bf8/0x2170 [ 114.895167][ T6838] ? _parse_integer_limit+0x170/0x190 [ 114.895205][ T6838] do_filp_open+0x109/0x230 [ 114.895243][ T6838] do_open_execat+0xd8/0x260 [ 114.895351][ T6838] alloc_bprm+0x28/0x660 [ 114.895380][ T6838] do_execveat_common+0x12e/0x750 [ 114.895416][ T6838] __x64_sys_execve+0x5c/0x70 [ 114.895445][ T6838] x64_sys_call+0x13ab/0x2fb0 [ 114.895491][ T6838] do_syscall_64+0xd0/0x1a0 [ 114.895520][ T6838] ? clear_bhb_loop+0x25/0x80 [ 114.895546][ T6838] ? clear_bhb_loop+0x25/0x80 [ 114.895567][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.895640][ T6838] RIP: 0033:0x7fb82afde969 [ 114.895655][ T6838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.895677][ T6838] RSP: 002b:00007fb829647038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 114.895699][ T6838] RAX: ffffffffffffffda RBX: 00007fb82b205fa0 RCX: 00007fb82afde969 [ 114.895715][ T6838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 114.895800][ T6838] RBP: 00007fb829647090 R08: 0000000000000000 R09: 0000000000000000 [ 114.895816][ T6838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.895831][ T6838] R13: 0000000000000000 R14: 00007fb82b205fa0 R15: 00007fffdce6d598 [ 114.895855][ T6838] [ 114.896815][ T6834] loop2: p1 < > p4 [ 114.950911][ T6842] loop4: detected capacity change from 0 to 2048 [ 114.957830][ T6834] loop2: p4 size 8388608 extends beyond EOD, [ 114.981566][ T6840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1114'. [ 114.982512][ T6834] truncated [ 115.200242][ T6842] loop4: p1 < > p4 [ 115.215754][ T6848] bridge8: entered promiscuous mode [ 115.221784][ T6848] bridge8: entered allmulticast mode [ 115.229131][ T6842] loop4: p4 size 8388608 extends beyond EOD, truncated [ 115.232924][ T6848] team0: Port device bridge8 added [ 115.407158][ T6864] netlink: 'syz.4.1125': attribute type 10 has an invalid length. [ 115.442899][ T6864] hsr_slave_0: left promiscuous mode [ 115.453910][ T6864] hsr_slave_1: left promiscuous mode [ 115.504846][ T6868] loop4: detected capacity change from 0 to 1024 [ 115.518679][ T6868] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.552748][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.617654][ T6881] loop1: detected capacity change from 0 to 2048 [ 115.668041][ T6881] loop1: p1 < > p4 [ 115.672820][ T6881] loop1: p4 size 8388608 extends beyond EOD, truncated [ 115.772334][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 115.772354][ T29] audit: type=1326 audit(1746966291.175:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 115.805288][ T29] audit: type=1326 audit(1746966291.175:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 115.829604][ T29] audit: type=1326 audit(1746966291.175:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 115.855099][ T29] audit: type=1326 audit(1746966291.235:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 115.879553][ T29] audit: type=1326 audit(1746966291.235:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 115.903875][ T29] audit: type=1326 audit(1746966291.275:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f41493be969 code=0x7ffc0000 [ 115.924487][ T6884] loop1: detected capacity change from 0 to 764 [ 115.927943][ T29] audit: type=1326 audit(1746966291.275:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41493be9a3 code=0x7ffc0000 [ 115.958178][ T29] audit: type=1326 audit(1746966291.275:9780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f41493bd41f code=0x7ffc0000 [ 115.958218][ T29] audit: type=1326 audit(1746966291.285:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f41493be9f7 code=0x7ffc0000 [ 115.958386][ T29] audit: type=1326 audit(1746966291.325:9782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.1.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41493bd2d0 code=0x7ffc0000 [ 116.037941][ T6884] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 116.247178][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.283071][ T6889] bridge6: entered promiscuous mode [ 116.288876][ T6889] bridge6: entered allmulticast mode [ 116.296492][ T6889] team0: Port device bridge6 added [ 116.415915][ T6901] loop2: detected capacity change from 0 to 2048 [ 116.479169][ T6901] loop2: p1 < > p4 [ 116.484081][ T6901] loop2: p4 size 8388608 extends beyond EOD, truncated [ 116.650955][ T6908] loop1: detected capacity change from 0 to 2048 [ 116.697780][ T6908] loop1: p1 < > p4 [ 116.702644][ T6908] loop1: p4 size 8388608 extends beyond EOD, truncated [ 116.724171][ T6911] xt_hashlimit: max too large, truncated to 1048576 [ 117.183972][ T6922] bridge0: entered promiscuous mode [ 117.189543][ T6922] bridge0: entered allmulticast mode [ 117.200517][ T6922] team0: Port device bridge0 added [ 117.341985][ T6930] loop3: detected capacity change from 0 to 1024 [ 117.350419][ T6930] EXT4-fs: Ignoring removed oldalloc option [ 117.356868][ T6930] EXT4-fs: Ignoring removed oldalloc option [ 117.368990][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.386911][ T6930] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 117.402445][ T6930] EXT4-fs (loop3): Remounting filesystem read-only [ 117.425998][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.497143][ T6940] loop2: detected capacity change from 0 to 2048 [ 117.547917][ T6940] loop2: p1 < > p4 [ 117.552752][ T6940] loop2: p4 size 8388608 extends beyond EOD, truncated [ 117.708003][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 117.772344][ T6958] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.489429][ T6971] loop3: detected capacity change from 0 to 2048 [ 118.517991][ T6971] loop3: p1 < > p4 [ 118.522675][ T6971] loop3: p4 size 8388608 extends beyond EOD, truncated [ 118.658252][ T6987] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 118.711237][ T6987] loop2: detected capacity change from 0 to 1024 [ 118.724046][ T6987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.732135][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 118.773131][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.791281][ T6998] team0 (unregistering): Port device team_slave_0 removed [ 118.811283][ T7005] loop3: detected capacity change from 0 to 2048 [ 118.818985][ T6998] team0 (unregistering): Port device team_slave_1 removed [ 118.829684][ T6998] team0 (unregistering): Port device bridge1 removed [ 118.848888][ T6998] team0 (unregistering): Port device bridge2 removed [ 118.858602][ T7005] loop3: p1 < > p4 [ 118.870433][ T6998] team0 (unregistering): Port device bridge3 removed [ 118.870973][ T7005] loop3: p4 size 8388608 extends beyond EOD, truncated [ 118.891191][ T6998] team0 (unregistering): Port device bridge4 removed [ 118.916757][ T6998] team0 (unregistering): Port device bridge5 removed [ 118.935371][ T6998] team0 (unregistering): Port device bridge6 removed [ 118.943140][ T7008] FAULT_INJECTION: forcing a failure. [ 118.943140][ T7008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.957009][ T7008] CPU: 1 UID: 0 PID: 7008 Comm: syz.3.1178 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 118.957071][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 118.957088][ T7008] Call Trace: [ 118.957097][ T7008] [ 118.957107][ T7008] __dump_stack+0x1d/0x30 [ 118.957135][ T7008] dump_stack_lvl+0xe8/0x140 [ 118.957240][ T7008] dump_stack+0x15/0x1b [ 118.957320][ T7008] should_fail_ex+0x265/0x280 [ 118.957370][ T7008] should_fail+0xb/0x20 [ 118.957407][ T7008] should_fail_usercopy+0x1a/0x20 [ 118.957432][ T7008] _copy_from_iter+0xcf/0xdd0 [ 118.957455][ T7008] ? __build_skb_around+0x1a0/0x200 [ 118.957540][ T7008] ? __alloc_skb+0x223/0x320 [ 118.957640][ T7008] netlink_sendmsg+0x471/0x6b0 [ 118.957688][ T7008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.957740][ T7008] __sock_sendmsg+0x142/0x180 [ 118.957781][ T7008] ____sys_sendmsg+0x31e/0x4e0 [ 118.957812][ T7008] ___sys_sendmsg+0x17b/0x1d0 [ 118.957857][ T7008] __x64_sys_sendmsg+0xd4/0x160 [ 118.957889][ T7008] x64_sys_call+0x2999/0x2fb0 [ 118.957952][ T7008] do_syscall_64+0xd0/0x1a0 [ 118.957981][ T7008] ? clear_bhb_loop+0x25/0x80 [ 118.958009][ T7008] ? clear_bhb_loop+0x25/0x80 [ 118.958036][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.958178][ T7008] RIP: 0033:0x7f9a3fa7e969 [ 118.958197][ T7008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.958221][ T7008] RSP: 002b:00007f9a3e0e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.958307][ T7008] RAX: ffffffffffffffda RBX: 00007f9a3fca5fa0 RCX: 00007f9a3fa7e969 [ 118.958322][ T7008] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 118.958338][ T7008] RBP: 00007f9a3e0e7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.958365][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.958380][ T7008] R13: 0000000000000000 R14: 00007f9a3fca5fa0 R15: 00007ffffd708328 [ 118.958404][ T7008] [ 119.330652][ T7019] tipc: Enabling of bearer rejected, already enabled [ 119.507564][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.573465][ T7034] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.832696][ T7037] xt_hashlimit: max too large, truncated to 1048576 [ 120.066886][ T7041] loop2: detected capacity change from 0 to 512 [ 120.083268][ T7041] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.093299][ T7041] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 120.131043][ T7041] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 120.143152][ T7041] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 120.152835][ T7041] System zones: 0-2, 18-18, 34-34 [ 120.158941][ T7041] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 120.174272][ T7041] EXT4-fs (loop2): 1 truncate cleaned up [ 120.180369][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.205989][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.258727][ T7049] tipc: Enabling of bearer rejected, already enabled [ 120.413918][ T7057] bridge7: entered promiscuous mode [ 120.418345][ T7061] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 120.419751][ T7057] bridge7: entered allmulticast mode [ 120.436434][ T7061] hsr_slave_0: left promiscuous mode [ 120.444855][ T7061] hsr_slave_1: left promiscuous mode [ 120.489890][ T7064] loop4: detected capacity change from 0 to 1024 [ 120.508555][ T7065] loop1: detected capacity change from 0 to 1024 [ 120.516051][ T7065] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.523632][ T7064] EXT4-fs: Ignoring removed oldalloc option [ 120.530453][ T7064] EXT4-fs: Ignoring removed oldalloc option [ 120.539748][ T7065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.557943][ T7064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.578487][ T7064] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 120.595608][ T7064] EXT4-fs (loop4): Remounting filesystem read-only [ 120.608169][ T7072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1201'. [ 120.622579][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.730200][ T7082] loop2: detected capacity change from 0 to 2048 [ 120.768266][ T7082] loop2: p1 < > p4 [ 120.772905][ T7082] loop2: p4 size 8388608 extends beyond EOD, truncated [ 120.808068][ T7084] tipc: Enabling of bearer rejected, already enabled [ 120.832483][ T29] kauditd_printk_skb: 561 callbacks suppressed [ 120.832499][ T29] audit: type=1326 audit(1746966296.235:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 120.868717][ T29] audit: type=1326 audit(1746966296.235:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 120.894367][ T29] audit: type=1326 audit(1746966296.235:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 120.919485][ T29] audit: type=1326 audit(1746966296.235:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 120.944994][ T29] audit: type=1326 audit(1746966296.235:10348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 120.971000][ T29] audit: type=1326 audit(1746966296.235:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 120.995841][ T29] audit: type=1326 audit(1746966296.235:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 121.021735][ T29] audit: type=1326 audit(1746966296.235:10351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 121.047925][ T29] audit: type=1326 audit(1746966296.235:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 121.073466][ T29] audit: type=1326 audit(1746966296.235:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7085 comm="syz.2.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ab87fe969 code=0x7ffc0000 [ 121.167401][ T7092] loop0: detected capacity change from 0 to 1024 [ 121.182124][ T7092] EXT4-fs: Ignoring removed oldalloc option [ 121.190701][ T7092] EXT4-fs: Ignoring removed oldalloc option [ 121.212400][ T7092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.239037][ T7092] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 121.258832][ T7092] EXT4-fs (loop0): Remounting filesystem read-only [ 121.271940][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.304891][ T7097] xt_hashlimit: max too large, truncated to 1048576 [ 121.355002][ T7099] loop1: detected capacity change from 0 to 2048 [ 121.355587][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.399664][ T7099] loop1: p1 < > p4 [ 121.406175][ T7099] loop1: p4 size 8388608 extends beyond EOD, truncated [ 121.452786][ T7107] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 121.875382][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 121.923625][ T7135] tipc: Enabling of bearer rejected, already enabled [ 121.932990][ T7137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1227'. [ 121.980009][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x1 [ 121.989652][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.000743][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.010408][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.021206][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.032001][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.041829][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x4 [ 122.052656][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.062587][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.073965][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x2 [ 122.083954][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.094964][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.104055][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.112923][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.123244][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.133226][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x2 [ 122.143470][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.154080][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.164181][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.173711][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.183358][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.192187][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.202804][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.211355][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.220041][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.230533][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.240423][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.250290][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.259161][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.268141][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.276474][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.285144][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.295600][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.304820][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.313985][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.323689][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.331682][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 122.344232][ T23] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.534379][ T7164] loop0: detected capacity change from 0 to 1024 [ 122.555854][ T7162] FAULT_INJECTION: forcing a failure. [ 122.555854][ T7162] name failslab, interval 1, probability 0, space 0, times 0 [ 122.572172][ T7162] CPU: 0 UID: 0 PID: 7162 Comm: syz.2.1239 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 122.572262][ T7162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 122.572277][ T7162] Call Trace: [ 122.572287][ T7162] [ 122.572297][ T7162] __dump_stack+0x1d/0x30 [ 122.572325][ T7162] dump_stack_lvl+0xe8/0x140 [ 122.572397][ T7162] dump_stack+0x15/0x1b [ 122.572416][ T7162] should_fail_ex+0x265/0x280 [ 122.572453][ T7162] should_failslab+0x8c/0xb0 [ 122.572561][ T7162] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 122.572589][ T7162] ? sidtab_sid2str_get+0xa0/0x130 [ 122.572628][ T7162] kmemdup_noprof+0x2b/0x70 [ 122.572652][ T7162] sidtab_sid2str_get+0xa0/0x130 [ 122.572898][ T7162] security_sid_to_context_core+0x1eb/0x2e0 [ 122.573104][ T7162] security_sid_to_context+0x27/0x40 [ 122.573193][ T7162] selinux_lsmprop_to_secctx+0x67/0xf0 [ 122.573229][ T7162] security_lsmprop_to_secctx+0x43/0x80 [ 122.573260][ T7162] audit_log_task_context+0x77/0x190 [ 122.573295][ T7162] audit_log_task+0xf4/0x250 [ 122.573416][ T7162] audit_seccomp+0x61/0x100 [ 122.573454][ T7162] ? __seccomp_filter+0x68c/0x10d0 [ 122.573478][ T7162] __seccomp_filter+0x69d/0x10d0 [ 122.573501][ T7162] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 122.573598][ T7162] ? vfs_write+0x75e/0x8d0 [ 122.573636][ T7162] __secure_computing+0x82/0x150 [ 122.573658][ T7162] syscall_trace_enter+0xcf/0x1e0 [ 122.573735][ T7162] do_syscall_64+0xaa/0x1a0 [ 122.573765][ T7162] ? clear_bhb_loop+0x25/0x80 [ 122.574086][ T7162] ? clear_bhb_loop+0x25/0x80 [ 122.574108][ T7162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.574129][ T7162] RIP: 0033:0x7f2ab87fe969 [ 122.574147][ T7162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.574194][ T7162] RSP: 002b:00007f2ab6e67038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 122.574217][ T7162] RAX: ffffffffffffffda RBX: 00007f2ab8a25fa0 RCX: 00007f2ab87fe969 [ 122.574233][ T7162] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 122.574692][ T7162] RBP: 00007f2ab6e67090 R08: 0000000000000000 R09: 0000000000000000 [ 122.574710][ T7162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.574725][ T7162] R13: 0000000000000000 R14: 00007f2ab8a25fa0 R15: 00007ffc534ba6f8 [ 122.574744][ T7162] [ 122.578024][ T7164] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.684798][ T7169] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.780629][ T7164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.914932][ T7174] loop1: detected capacity change from 0 to 128 [ 122.950119][ T7180] tipc: Enabling of bearer rejected, already enabled [ 122.973273][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.039243][ T7191] loop0: detected capacity change from 0 to 1024 [ 123.050493][ T7191] EXT4-fs: Ignoring removed oldalloc option [ 123.062171][ T7191] EXT4-fs: Ignoring removed oldalloc option [ 123.101142][ T7191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.123782][ T7191] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 123.142725][ T7191] EXT4-fs (loop0): Remounting filesystem read-only [ 123.166731][ T7208] xt_hashlimit: max too large, truncated to 1048576 [ 123.222626][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.268395][ T7217] tipc: Enabling of bearer rejected, already enabled [ 123.337571][ T7225] loop4: detected capacity change from 0 to 128 [ 123.361091][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 123.371542][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'. [ 123.439005][ T7242] loop4: detected capacity change from 0 to 512 [ 123.450040][ T7242] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1262: invalid indirect mapped block 256 (level 2) [ 123.466243][ T7242] EXT4-fs (loop4): 2 truncates cleaned up [ 123.476560][ T7242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.487812][ T7245] FAULT_INJECTION: forcing a failure. [ 123.487812][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 123.494603][ T7242] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1262: bg 0: block 5: invalid block bitmap [ 123.505658][ T7245] CPU: 0 UID: 0 PID: 7245 Comm: syz.1.1263 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 123.505852][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 123.505870][ T7245] Call Trace: [ 123.505880][ T7245] [ 123.505891][ T7245] __dump_stack+0x1d/0x30 [ 123.505920][ T7245] dump_stack_lvl+0xe8/0x140 [ 123.505957][ T7245] dump_stack+0x15/0x1b [ 123.506008][ T7245] should_fail_ex+0x265/0x280 [ 123.506054][ T7245] should_failslab+0x8c/0xb0 [ 123.506096][ T7245] kmem_cache_alloc_noprof+0x50/0x310 [ 123.506149][ T7245] ? security_file_alloc+0x32/0x100 [ 123.506185][ T7245] security_file_alloc+0x32/0x100 [ 123.506223][ T7245] init_file+0x5c/0x1d0 [ 123.506266][ T7245] alloc_empty_file+0x8b/0x200 [ 123.506328][ T7245] alloc_file_pseudo+0xc6/0x160 [ 123.506404][ T7245] __shmem_file_setup+0x1b9/0x1f0 [ 123.506434][ T7245] shmem_file_setup+0x3b/0x50 [ 123.506468][ T7245] __se_sys_memfd_create+0x2c3/0x590 [ 123.506545][ T7245] __x64_sys_memfd_create+0x31/0x40 [ 123.506602][ T7245] x64_sys_call+0x122f/0x2fb0 [ 123.506685][ T7245] do_syscall_64+0xd0/0x1a0 [ 123.506717][ T7245] ? clear_bhb_loop+0x25/0x80 [ 123.506747][ T7245] ? clear_bhb_loop+0x25/0x80 [ 123.506888][ T7245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.506954][ T7245] RIP: 0033:0x7f41493be969 [ 123.506976][ T7245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.507035][ T7245] RSP: 002b:00007f4147a26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 123.507062][ T7245] RAX: ffffffffffffffda RBX: 00000000000004f5 RCX: 00007f41493be969 [ 123.507081][ T7245] RDX: 00007f4147a26ef0 RSI: 0000000000000000 RDI: 00007f4149441444 [ 123.507098][ T7245] RBP: 0000200000000c00 R08: 00007f4147a26bb7 R09: 00007f4147a26e40 [ 123.507116][ T7245] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 123.507133][ T7245] R13: 00007f4147a26ef0 R14: 00007f4147a26eb0 R15: 0000200000000400 [ 123.507224][ T7245] [ 123.751240][ T7242] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 44 with error 28 [ 123.765214][ T7242] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.765214][ T7242] [ 123.775768][ T7242] EXT4-fs (loop4): Total free blocks count 0 [ 123.782263][ T7242] EXT4-fs (loop4): Free/Dirty block details [ 123.788590][ T7242] EXT4-fs (loop4): free_blocks=0 [ 123.793984][ T7242] EXT4-fs (loop4): dirty_blocks=44 [ 123.799263][ T7242] EXT4-fs (loop4): Block reservation details [ 123.805638][ T7242] EXT4-fs (loop4): i_reserved_data_blocks=44 [ 123.825451][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.856929][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 123.869902][ T7255] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1267'. [ 124.127580][ T7267] FAULT_INJECTION: forcing a failure. [ 124.127580][ T7267] name failslab, interval 1, probability 0, space 0, times 0 [ 124.142793][ T7267] CPU: 0 UID: 0 PID: 7267 Comm: syz.0.1270 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 124.142824][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 124.142840][ T7267] Call Trace: [ 124.142850][ T7267] [ 124.142861][ T7267] __dump_stack+0x1d/0x30 [ 124.142888][ T7267] dump_stack_lvl+0xe8/0x140 [ 124.142911][ T7267] dump_stack+0x15/0x1b [ 124.142931][ T7267] should_fail_ex+0x265/0x280 [ 124.142972][ T7267] ? __pfx_cond_bools_destroy+0x10/0x10 [ 124.143070][ T7267] should_failslab+0x8c/0xb0 [ 124.143099][ T7267] __kmalloc_noprof+0xa5/0x3e0 [ 124.143122][ T7267] ? hashtab_duplicate+0x55/0x360 [ 124.143220][ T7267] ? __pfx_cond_bools_destroy+0x10/0x10 [ 124.143244][ T7267] hashtab_duplicate+0x55/0x360 [ 124.143270][ T7267] ? __kmalloc_noprof+0x1dd/0x3e0 [ 124.143287][ T7267] ? cond_policydb_dup+0xa3/0x4e0 [ 124.143312][ T7267] ? __pfx_cond_bools_copy+0x10/0x10 [ 124.143336][ T7267] cond_policydb_dup+0xd2/0x4e0 [ 124.143361][ T7267] security_set_bools+0xa0/0x340 [ 124.143403][ T7267] sel_commit_bools_write+0x1ea/0x270 [ 124.143425][ T7267] vfs_writev+0x3eb/0x870 [ 124.143523][ T7267] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 124.143552][ T7267] ? mutex_lock+0xd/0x30 [ 124.143653][ T7267] do_writev+0xe7/0x210 [ 124.143695][ T7267] __x64_sys_writev+0x45/0x50 [ 124.143731][ T7267] x64_sys_call+0x2006/0x2fb0 [ 124.143754][ T7267] do_syscall_64+0xd0/0x1a0 [ 124.143803][ T7267] ? clear_bhb_loop+0x25/0x80 [ 124.143829][ T7267] ? clear_bhb_loop+0x25/0x80 [ 124.143850][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.143877][ T7267] RIP: 0033:0x7f03b0dae969 [ 124.143926][ T7267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.143949][ T7267] RSP: 002b:00007f03af417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 124.143974][ T7267] RAX: ffffffffffffffda RBX: 00007f03b0fd5fa0 RCX: 00007f03b0dae969 [ 124.143985][ T7267] RDX: 0000000000000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 124.144071][ T7267] RBP: 00007f03af417090 R08: 0000000000000000 R09: 0000000000000000 [ 124.144088][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.144103][ T7267] R13: 0000000000000000 R14: 00007f03b0fd5fa0 R15: 00007ffcd392da38 [ 124.144171][ T7267] [ 124.461511][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 124.475982][ T7274] erspan0: entered promiscuous mode [ 124.481727][ T7274] macvtap1: entered promiscuous mode [ 124.488332][ T7274] macvtap1: entered allmulticast mode [ 124.494605][ T7274] erspan0: entered allmulticast mode [ 124.582352][ T7281] bridge6: entered promiscuous mode [ 124.589382][ T7281] bridge6: entered allmulticast mode [ 124.599630][ T7281] team0: Port device bridge6 added [ 124.747884][ T7288] loop1: detected capacity change from 0 to 164 [ 124.759159][ T7288] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 124.812498][ T7292] loop2: detected capacity change from 0 to 164 [ 124.820864][ T7292] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 124.889053][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 124.899124][ T7300] bridge_slave_1: left allmulticast mode [ 124.904807][ T7300] bridge_slave_1: left promiscuous mode [ 124.910909][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.926518][ T7300] bridge_slave_0: left allmulticast mode [ 124.932586][ T7300] bridge_slave_0: left promiscuous mode [ 124.938629][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.011614][ T7302] bridge8: entered promiscuous mode [ 125.017029][ T7302] bridge8: entered allmulticast mode [ 125.066678][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1285'. [ 125.109429][ T7313] loop2: detected capacity change from 0 to 512 [ 125.123844][ T7313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.135757][ T7313] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.144957][ T7313] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1287: Failed to acquire dquot type 1 [ 125.159776][ T7315] xt_hashlimit: max too large, truncated to 1048576 [ 125.167470][ T7313] EXT4-fs (loop2): 1 truncate cleaned up [ 125.174239][ T7313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.213777][ T3321] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 12 [ 125.228002][ T3321] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 12 [ 125.414369][ T7320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.467298][ T3779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.519715][ T7327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1291'. [ 125.542505][ T3779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.600852][ T7335] bridge7: entered promiscuous mode [ 125.607124][ T7335] bridge7: entered allmulticast mode [ 125.628359][ T7335] team0: Port device bridge7 added [ 125.649581][ T3779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.716884][ T3779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.785715][ T7348] loop0: detected capacity change from 0 to 1024 [ 125.833415][ T7348] EXT4-fs: Ignoring removed oldalloc option [ 125.839734][ T7348] EXT4-fs: Ignoring removed oldalloc option [ 125.880912][ T7353] loop3: detected capacity change from 0 to 1024 [ 125.908198][ T7353] EXT4-fs: Ignoring removed oldalloc option [ 125.926187][ T7348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.946559][ T7348] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 125.947494][ T7353] EXT4-fs: Ignoring removed oldalloc option [ 125.963701][ T7348] EXT4-fs (loop0): Remounting filesystem read-only [ 126.098421][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 126.098443][ T29] audit: type=1400 audit(1746966301.435:10761): avc: denied { allowed } for pid=7347 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 126.134852][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.179963][ T3779] team0: Port device bridge1 removed [ 126.221832][ T7353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.241115][ T3779] team0: Port device bridge2 removed [ 126.309694][ T3779] team0: Port device bridge3 removed [ 126.327183][ T7353] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 126.346169][ T7353] EXT4-fs (loop3): Remounting filesystem read-only [ 126.373357][ T3779] team0: Port device bridge4 removed [ 126.404677][ T29] audit: type=1326 audit(1746966301.805:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.432972][ T29] audit: type=1326 audit(1746966301.805:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.458711][ T29] audit: type=1326 audit(1746966301.805:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.483874][ T29] audit: type=1326 audit(1746966301.805:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.511401][ T29] audit: type=1326 audit(1746966301.805:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.539141][ T29] audit: type=1326 audit(1746966301.805:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.564724][ T29] audit: type=1326 audit(1746966301.805:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.590288][ T29] audit: type=1326 audit(1746966301.805:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.617544][ T29] audit: type=1326 audit(1746966301.805:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.0.1304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b0dae969 code=0x7ffc0000 [ 126.645812][ T3779] team0: Port device bridge5 removed [ 126.719930][ T3779] team0: Port device bridge6 removed [ 126.759466][ T3779] team0: Port device bridge7 removed [ 126.809658][ T3779] team0: Port device bridge8 removed [ 126.850256][ T3779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.860998][ T3779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.871036][ T3779] bond0 (unregistering): Released all slaves [ 126.923291][ T3779] tipc: Disabling bearer [ 126.928812][ T3779] tipc: Left network mode [ 126.946524][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.954200][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.963742][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.971715][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.980697][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.993742][ T3779] veth1_macvtap: left promiscuous mode [ 126.999654][ T3779] veth0_macvtap: left promiscuous mode [ 127.006010][ T3779] veth1_vlan: left promiscuous mode [ 127.011818][ T3779] veth0_vlan: left promiscuous mode [ 127.081495][ T3779] team0 (unregistering): Port device team_slave_1 removed [ 127.095299][ T3779] team0 (unregistering): Port device team_slave_0 removed [ 127.142303][ T7382] bridge8: entered promiscuous mode [ 127.147746][ T7382] bridge8: entered allmulticast mode [ 127.155324][ T7382] team0: Port device bridge8 added [ 127.167993][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 127.254781][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.262267][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.272852][ T7325] bridge_slave_0: entered allmulticast mode [ 127.291638][ T7325] bridge_slave_0: entered promiscuous mode [ 127.298918][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.306133][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.341744][ T7325] bridge_slave_1: entered allmulticast mode [ 127.355723][ T7325] bridge_slave_1: entered promiscuous mode [ 127.363270][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'. [ 127.372721][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'. [ 127.419399][ T7400] SELinux: failed to load policy [ 127.448165][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.473327][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.536434][ T7410] loop1: detected capacity change from 0 to 128 [ 127.550273][ T7325] team0: Port device team_slave_0 added [ 127.557778][ T7325] team0: Port device team_slave_1 added [ 127.577900][ T7406] loop0: detected capacity change from 0 to 8192 [ 127.590165][ T7406] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.616516][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.624285][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.651859][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.669986][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.677169][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.703954][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.786452][ T7325] hsr_slave_0: entered promiscuous mode [ 127.807667][ T7325] hsr_slave_1: entered promiscuous mode [ 127.892365][ T7424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1322'. [ 127.940195][ T7325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 127.950284][ T7325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 127.966411][ T7325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.966851][ T7432] netlink: 'syz.4.1326': attribute type 4 has an invalid length. [ 127.981792][ T7432] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1326'. [ 127.997451][ T7325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.043001][ T7438] FAULT_INJECTION: forcing a failure. [ 128.043001][ T7438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.056391][ T7438] CPU: 0 UID: 0 PID: 7438 Comm: syz.0.1329 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 128.056438][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.056454][ T7438] Call Trace: [ 128.056461][ T7438] [ 128.056468][ T7438] __dump_stack+0x1d/0x30 [ 128.056489][ T7438] dump_stack_lvl+0xe8/0x140 [ 128.056611][ T7438] dump_stack+0x15/0x1b [ 128.056628][ T7438] should_fail_ex+0x265/0x280 [ 128.056733][ T7438] should_fail+0xb/0x20 [ 128.056820][ T7438] should_fail_usercopy+0x1a/0x20 [ 128.056844][ T7438] _copy_from_user+0x1c/0xb0 [ 128.056868][ T7438] wants_mount_setattr+0x128/0x640 [ 128.056977][ T7438] ? __rcu_read_unlock+0x4f/0x70 [ 128.057002][ T7438] __se_sys_mount_setattr+0x10f/0x240 [ 128.057039][ T7438] __x64_sys_mount_setattr+0x67/0x80 [ 128.057093][ T7438] x64_sys_call+0xda0/0x2fb0 [ 128.057121][ T7438] do_syscall_64+0xd0/0x1a0 [ 128.057148][ T7438] ? clear_bhb_loop+0x25/0x80 [ 128.057173][ T7438] ? clear_bhb_loop+0x25/0x80 [ 128.057249][ T7438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.057276][ T7438] RIP: 0033:0x7f03b0dae969 [ 128.057293][ T7438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.057360][ T7438] RSP: 002b:00007f03af417038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 128.057383][ T7438] RAX: ffffffffffffffda RBX: 00007f03b0fd5fa0 RCX: 00007f03b0dae969 [ 128.057399][ T7438] RDX: 0000000000008100 RSI: 00002000000003c0 RDI: ffffffffffffffff [ 128.057413][ T7438] RBP: 00007f03af417090 R08: 0000000000000020 R09: 0000000000000000 [ 128.057428][ T7438] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 128.057443][ T7438] R13: 0000000000000000 R14: 00007f03b0fd5fa0 R15: 00007ffcd392da38 [ 128.057479][ T7438] [ 128.072858][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.193614][ T7444] loop4: detected capacity change from 0 to 2048 [ 128.205782][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.327606][ T7444] loop4: p1 < > p4 [ 128.335146][ T7446] loop0: detected capacity change from 0 to 512 [ 128.343724][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.349994][ T7446] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 128.351452][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.353920][ T7444] loop4: p4 size 8388608 extends beyond EOD, [ 128.360596][ T7446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 128.368959][ T7444] truncated [ 128.375613][ T7446] EXT4-fs (loop0): orphan cleanup on readonly fs [ 128.388998][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.401341][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.411084][ T7446] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 128.421800][ T7446] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 128.423306][ T7444] FAULT_INJECTION: forcing a failure. [ 128.423306][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 128.434888][ T7446] EXT4-fs (loop0): 1 truncate cleaned up [ 128.447781][ T7444] CPU: 1 UID: 0 PID: 7444 Comm: syz.4.1332 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 128.447813][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 128.447882][ T7444] Call Trace: [ 128.447890][ T7444] [ 128.447901][ T7444] __dump_stack+0x1d/0x30 [ 128.447931][ T7444] dump_stack_lvl+0xe8/0x140 [ 128.447956][ T7444] dump_stack+0x15/0x1b [ 128.447978][ T7444] should_fail_ex+0x265/0x280 [ 128.448055][ T7444] should_failslab+0x8c/0xb0 [ 128.448094][ T7444] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 128.448134][ T7444] ? __d_alloc+0x3d/0x350 [ 128.448233][ T7444] __d_alloc+0x3d/0x350 [ 128.448302][ T7444] ? avc_has_perm_noaudit+0x1b1/0x200 [ 128.448348][ T7444] d_alloc_parallel+0x53/0xc40 [ 128.448372][ T7444] ? selinux_inode_permission+0x32a/0x400 [ 128.448420][ T7444] ? __rcu_read_unlock+0x4f/0x70 [ 128.448449][ T7444] ? __d_lookup+0x316/0x340 [ 128.448472][ T7444] ? inode_permission+0xb5/0x300 [ 128.448587][ T7444] __lookup_slow+0x8c/0x250 [ 128.448688][ T7444] lookup_one_len+0xf7/0x1d0 [ 128.448714][ T7444] start_creating+0x13c/0x230 [ 128.448741][ T7444] debugfs_create_dir+0x22/0x2b0 [ 128.448784][ T7444] do_blk_trace_setup+0x213/0x4e0 [ 128.448948][ T7444] blk_trace_setup+0xa5/0x140 [ 128.448988][ T7444] ? __pfx_blkdev_ioctl+0x10/0x10 [ 128.449077][ T7444] blk_trace_ioctl+0xf5/0x300 [ 128.449116][ T7444] ? do_vfs_ioctl+0x993/0x15b0 [ 128.449147][ T7444] ? selinux_file_ioctl+0x2e3/0x370 [ 128.449288][ T7444] ? __pfx_blkdev_ioctl+0x10/0x10 [ 128.449391][ T7444] blkdev_ioctl+0x25b/0x440 [ 128.449439][ T7444] __se_sys_ioctl+0xcb/0x140 [ 128.449468][ T7444] __x64_sys_ioctl+0x43/0x50 [ 128.449497][ T7444] x64_sys_call+0x19a8/0x2fb0 [ 128.449526][ T7444] do_syscall_64+0xd0/0x1a0 [ 128.449574][ T7444] ? clear_bhb_loop+0x25/0x80 [ 128.449605][ T7444] ? clear_bhb_loop+0x25/0x80 [ 128.449697][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.449726][ T7444] RIP: 0033:0x7fb82afde969 [ 128.449851][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.449900][ T7444] RSP: 002b:00007fb829647038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.449998][ T7444] RAX: ffffffffffffffda RBX: 00007fb82b205fa0 RCX: 00007fb82afde969 [ 128.450015][ T7444] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 128.450032][ T7444] RBP: 00007fb829647090 R08: 0000000000000000 R09: 0000000000000000 [ 128.450049][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.450065][ T7444] R13: 0000000000000000 R14: 00007fb82b205fa0 R15: 00007fffdce6d598 [ 128.450091][ T7444] [ 128.450107][ T7444] blktrace: debugfs_dir not present for loop4p1 so skipping [ 128.454125][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.620696][ T7455] netlink: 'syz.4.1337': attribute type 10 has an invalid length. [ 128.643186][ T7446] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.1333: dx entry: limit 65535 != root limit 120 [ 128.730027][ T7457] loop4: detected capacity change from 0 to 1024 [ 128.736400][ T7446] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.1333: Corrupt directory, running e2fsck is recommended [ 128.761141][ T7457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.771565][ T7446] EXT4-fs warning (device loop0): dx_probe:863: inode #2: comm syz.0.1333: dx entry: limit 65535 != root limit 120 [ 128.803314][ T7457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.806237][ T7446] EXT4-fs warning (device loop0): dx_probe:936: inode #2: comm syz.0.1333: Corrupt directory, running e2fsck is recommended [ 128.949164][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.042037][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.071519][ T7482] loop0: detected capacity change from 0 to 1024 [ 129.091623][ T7482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.129511][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.170728][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.207025][ T7325] veth0_vlan: entered promiscuous mode [ 129.220329][ T7325] veth1_vlan: entered promiscuous mode [ 129.247531][ T7325] veth0_macvtap: entered promiscuous mode [ 129.255417][ T7325] veth1_macvtap: entered promiscuous mode [ 129.284272][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.303592][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.313705][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.324497][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.334741][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.345524][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.360943][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.373630][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.384779][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.396386][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.407926][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.418687][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.430088][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.442475][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.460940][ T7325] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.469998][ T7325] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.478878][ T7325] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.487874][ T7325] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.518884][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.609642][ T7499] loop3: detected capacity change from 0 to 2048 [ 129.658142][ T7499] loop3: p1 < > p4 [ 129.664132][ T7499] loop3: p4 size 8388608 extends beyond EOD, truncated [ 129.669485][ T7511] loop1: detected capacity change from 0 to 512 [ 129.680445][ T7511] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.695378][ T7511] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1349: iget: bad i_size value: -67835469387268086 [ 129.736933][ T7511] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1349: couldn't read orphan inode 15 (err -117) [ 129.750160][ T7511] EXT4-fs (loop1): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.763005][ T7511] ext2 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.785332][ T7511] EXT4-fs error (device loop1): ext4_add_entry:2419: inode #2: comm syz.1.1349: Directory hole found for htree leaf block 0 [ 129.843765][ T7524] loop3: detected capacity change from 0 to 1024 [ 129.852545][ T7524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.859225][ T3325] EXT4-fs (loop1): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 129.899371][ T7532] loop1: detected capacity change from 0 to 164 [ 129.906830][ T7524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.920934][ T7532] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 129.944672][ T7535] loop0: detected capacity change from 0 to 512 [ 129.961794][ T7535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.976024][ T7535] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.980947][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.074804][ T7544] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.1358: corrupted inode contents [ 130.088404][ T7544] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #19: comm syz.0.1358: mark_inode_dirty error [ 130.101872][ T7544] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #19: comm syz.0.1358: corrupted inode contents [ 130.114488][ T7544] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.1358: mark_inode_dirty error [ 130.128440][ T7544] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.1358: mark inode dirty (error -117) [ 130.174402][ T7544] EXT4-fs warning (device loop0): ext4_evict_inode:279: xattr delete (err -117) [ 130.210391][ T7548] xt_hashlimit: max too large, truncated to 1048576 [ 130.225728][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.272156][ T7554] loop3: detected capacity change from 0 to 1024 [ 130.280470][ T7556] FAULT_INJECTION: forcing a failure. [ 130.280470][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 130.280534][ T7554] EXT4-fs: Ignoring removed oldalloc option [ 130.293823][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 130.293926][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 130.293946][ T7556] Call Trace: [ 130.293958][ T7556] [ 130.293968][ T7556] __dump_stack+0x1d/0x30 [ 130.294061][ T7556] dump_stack_lvl+0xe8/0x140 [ 130.294086][ T7556] dump_stack+0x15/0x1b [ 130.294107][ T7556] should_fail_ex+0x265/0x280 [ 130.294159][ T7556] should_failslab+0x8c/0xb0 [ 130.294199][ T7556] kmem_cache_alloc_noprof+0x50/0x310 [ 130.294301][ T7556] ? alloc_empty_file+0x76/0x200 [ 130.294344][ T7556] alloc_empty_file+0x76/0x200 [ 130.294387][ T7556] alloc_file_pseudo+0xc6/0x160 [ 130.294487][ T7556] __shmem_file_setup+0x1b9/0x1f0 [ 130.294522][ T7556] shmem_file_setup+0x3b/0x50 [ 130.294558][ T7556] __se_sys_memfd_create+0x2c3/0x590 [ 130.294592][ T7556] __x64_sys_memfd_create+0x31/0x40 [ 130.294621][ T7556] x64_sys_call+0x122f/0x2fb0 [ 130.294700][ T7556] do_syscall_64+0xd0/0x1a0 [ 130.294731][ T7556] ? clear_bhb_loop+0x25/0x80 [ 130.294760][ T7556] ? clear_bhb_loop+0x25/0x80 [ 130.294863][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.294890][ T7556] RIP: 0033:0x7f03b0dae969 [ 130.294912][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.294936][ T7556] RSP: 002b:00007f03af416e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 130.295009][ T7556] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f03b0dae969 [ 130.295025][ T7556] RDX: 00007f03af416ef0 RSI: 0000000000000000 RDI: 00007f03b0e31444 [ 130.295041][ T7556] RBP: 0000200000000c00 R08: 00007f03af416bb7 R09: 00007f03af416e40 [ 130.295124][ T7556] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 130.295140][ T7556] R13: 00007f03af416ef0 R14: 00007f03af416eb0 R15: 0000200000000080 [ 130.295164][ T7556] [ 130.505181][ T7554] EXT4-fs: Ignoring removed oldalloc option [ 130.545663][ T7554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.564055][ T3747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.595653][ T7554] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 130.620061][ T7558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 130.698343][ T7554] EXT4-fs (loop3): Remounting filesystem read-only [ 130.729828][ T3747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.818778][ T3747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.838312][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.902232][ T3747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.339845][ T3747] team0: Port device bridge2 removed [ 131.388723][ T3747] team0: Port device bridge3 removed [ 131.439064][ T3747] team0: Port device bridge4 removed [ 131.479180][ T3747] team0: Port device bridge5 removed [ 131.518546][ T3747] team0: Port device bridge6 removed [ 131.549904][ T3747] team0: Port device bridge7 removed [ 131.589493][ T3747] team0: Port device bridge8 removed [ 131.630734][ T3747] team0: Port device bridge9 removed [ 131.678844][ T3747] team0: Port device bridge10 removed [ 131.719379][ T3747] bond0 (unregistering): Released all slaves [ 131.758092][ T29] kauditd_printk_skb: 920 callbacks suppressed [ 131.758109][ T29] audit: type=1326 audit(1746966307.165:11691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.778175][ T7610] syzkaller0: entered promiscuous mode [ 131.794836][ T29] audit: type=1326 audit(1746966307.195:11692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.794873][ T29] audit: type=1326 audit(1746966307.195:11693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.794980][ T29] audit: type=1326 audit(1746966307.195:11694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.795178][ T29] audit: type=1326 audit(1746966307.195:11695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.820538][ T7610] syzkaller0: entered allmulticast mode [ 131.850445][ T29] audit: type=1326 audit(1746966307.255:11696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.922481][ T29] audit: type=1326 audit(1746966307.255:11697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.948182][ T29] audit: type=1326 audit(1746966307.305:11698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.972482][ T29] audit: type=1326 audit(1746966307.305:11699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 131.996748][ T29] audit: type=1326 audit(1746966307.305:11700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.5.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90917ee969 code=0x7ffc0000 [ 132.029631][ T7630] loop5: detected capacity change from 0 to 128 [ 132.040272][ T7630] FAT-fs (loop5): Directory bread(block 32) failed [ 132.047043][ T7630] FAT-fs (loop5): Directory bread(block 33) failed [ 132.053858][ T7630] FAT-fs (loop5): Directory bread(block 34) failed [ 132.064912][ T3747] tipc: Disabling bearer [ 132.070214][ T3747] tipc: Left network mode [ 132.077541][ T7630] FAT-fs (loop5): Directory bread(block 35) failed [ 132.107651][ T7630] FAT-fs (loop5): Directory bread(block 36) failed [ 132.114328][ T7630] FAT-fs (loop5): Directory bread(block 37) failed [ 132.147855][ T7630] FAT-fs (loop5): Directory bread(block 38) failed [ 132.155295][ T7630] FAT-fs (loop5): Directory bread(block 39) failed [ 132.162286][ T7630] FAT-fs (loop5): Directory bread(block 40) failed [ 132.170588][ T7630] FAT-fs (loop5): Directory bread(block 41) failed [ 132.184505][ T3747] veth1_macvtap: left promiscuous mode [ 132.194448][ T3747] veth0_macvtap: left promiscuous mode [ 132.202867][ T7630] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1387'. [ 132.212021][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1387'. [ 132.222338][ T7630] syz.5.1387: attempt to access beyond end of device [ 132.222338][ T7630] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 132.236622][ T7630] FAT-fs (loop5): Filesystem has been set read-only [ 132.244021][ T7630] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.267059][ T7640] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 132.319505][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1387'. [ 132.350499][ T7642] loop4: detected capacity change from 0 to 1024 [ 132.368014][ T7642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.382582][ T7571] chnl_net:caif_netlink_parms(): no params data found [ 132.409209][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.417123][ T7630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.426727][ T7642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.442702][ T7630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.450575][ T7630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.526001][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.534414][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.543912][ T7571] bridge_slave_0: entered allmulticast mode [ 132.551346][ T7571] bridge_slave_0: entered promiscuous mode [ 132.560535][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.569211][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.577013][ T7571] bridge_slave_1: entered allmulticast mode [ 132.584557][ T7571] bridge_slave_1: entered promiscuous mode [ 132.607744][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.619282][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.644510][ T7571] team0: Port device team_slave_0 added [ 132.652738][ T7571] team0: Port device team_slave_1 added [ 132.672362][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.679668][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.705854][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.717652][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.724819][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.752303][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.784053][ T7571] hsr_slave_0: entered promiscuous mode [ 132.790628][ T7571] hsr_slave_1: entered promiscuous mode [ 132.796699][ T7571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.804578][ T7571] Cannot create hsr debugfs directory [ 132.892631][ T7571] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 132.902732][ T7571] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 132.913012][ T7571] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 132.922628][ T7571] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 132.951344][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.958467][ T7571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.965869][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.973078][ T7571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.004738][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.019308][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.028475][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.042871][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.059134][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.066361][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.074199][ T7653] FAULT_INJECTION: forcing a failure. [ 133.074199][ T7653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.087914][ T7653] CPU: 1 UID: 0 PID: 7653 Comm: syz.0.1391 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 133.087953][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.087969][ T7653] Call Trace: [ 133.087976][ T7653] [ 133.087987][ T7653] __dump_stack+0x1d/0x30 [ 133.088013][ T7653] dump_stack_lvl+0xe8/0x140 [ 133.088036][ T7653] dump_stack+0x15/0x1b [ 133.088071][ T7653] should_fail_ex+0x265/0x280 [ 133.088107][ T7653] should_fail+0xb/0x20 [ 133.088141][ T7653] should_fail_usercopy+0x1a/0x20 [ 133.088164][ T7653] _copy_from_iter+0xcf/0xdd0 [ 133.088182][ T7653] ? __build_skb_around+0x1a0/0x200 [ 133.088251][ T7653] ? __alloc_skb+0x223/0x320 [ 133.088303][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.088408][ T7653] netlink_sendmsg+0x471/0x6b0 [ 133.088459][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.088543][ T7653] __sock_sendmsg+0x142/0x180 [ 133.088637][ T7653] ____sys_sendmsg+0x31e/0x4e0 [ 133.088666][ T7653] ___sys_sendmsg+0x17b/0x1d0 [ 133.088709][ T7653] __x64_sys_sendmsg+0xd4/0x160 [ 133.088745][ T7653] x64_sys_call+0x2999/0x2fb0 [ 133.088773][ T7653] do_syscall_64+0xd0/0x1a0 [ 133.088802][ T7653] ? clear_bhb_loop+0x25/0x80 [ 133.088832][ T7653] ? clear_bhb_loop+0x25/0x80 [ 133.088859][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.088887][ T7653] RIP: 0033:0x7f03b0dae969 [ 133.088912][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.088954][ T7653] RSP: 002b:00007f03af417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.088979][ T7653] RAX: ffffffffffffffda RBX: 00007f03b0fd5fa0 RCX: 00007f03b0dae969 [ 133.089027][ T7653] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 133.089043][ T7653] RBP: 00007f03af417090 R08: 0000000000000000 R09: 0000000000000000 [ 133.089058][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.089074][ T7653] R13: 0000000000000000 R14: 00007f03b0fd5fa0 R15: 00007ffcd392da38 [ 133.089206][ T7653] [ 133.310074][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.327656][ T7655] xt_hashlimit: max too large, truncated to 1048576 [ 133.336593][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.378663][ T7658] loop5: detected capacity change from 0 to 2048 [ 133.408924][ T7662] tipc: Enabling of bearer rejected, already enabled [ 133.438266][ T7658] loop5: p1 < > p4 [ 133.444360][ T7658] loop5: p4 size 8388608 extends beyond EOD, truncated [ 133.472416][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.523616][ T7679] loop5: detected capacity change from 0 to 2048 [ 133.638561][ T7679] loop5: p1 < > p4 [ 133.650607][ T7679] loop5: p4 size 8388608 extends beyond EOD, truncated [ 133.684271][ T7571] veth0_vlan: entered promiscuous mode [ 133.699639][ T7571] veth1_vlan: entered promiscuous mode [ 133.744749][ T7571] veth0_macvtap: entered promiscuous mode [ 133.754180][ T7571] veth1_macvtap: entered promiscuous mode [ 133.815838][ T7694] IPv6: Can't replace route, no match found [ 133.839170][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.850920][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.862194][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.875239][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.888038][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.901491][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.016383][ T7706] loop5: detected capacity change from 0 to 128 [ 134.025934][ T7706] FAT-fs (loop5): Directory bread(block 162) failed [ 134.036230][ T7706] FAT-fs (loop5): Directory bread(block 163) failed [ 134.045129][ T7706] FAT-fs (loop5): Directory bread(block 164) failed [ 134.069377][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.080069][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.080267][ T7707] loop4: detected capacity change from 0 to 1024 [ 134.093755][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.093804][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.108945][ T7706] FAT-fs (loop5): Directory bread(block 165) failed [ 134.113161][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.113179][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.136341][ T7707] EXT4-fs: Ignoring removed orlov option [ 134.146309][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.164664][ T7706] FAT-fs (loop5): Directory bread(block 166) failed [ 134.169187][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.181088][ T7707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.185421][ T7706] FAT-fs (loop5): Directory bread(block 167) failed [ 134.216320][ T7706] FAT-fs (loop5): Directory bread(block 168) failed [ 134.216448][ T7571] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.223866][ T7706] FAT-fs (loop5): Directory bread(block 169) failed [ 134.233541][ T7571] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.251196][ T7571] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.261602][ T7571] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.295653][ T7706] FAT-fs (loop5): Directory bread(block 162) failed [ 134.306782][ T7706] FAT-fs (loop5): Directory bread(block 163) failed [ 134.384356][ T7706] syz.5.1405: attempt to access beyond end of device [ 134.384356][ T7706] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 134.399849][ T7706] syz.5.1405: attempt to access beyond end of device [ 134.399849][ T7706] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 134.527108][ T7722] tipc: Started in network mode [ 134.532777][ T7722] tipc: Node identity 7f000001, cluster identity 4711 [ 134.580211][ T7724] loop5: detected capacity change from 0 to 2048 [ 134.588936][ T7722] tipc: Enabled bearer , priority 10 [ 134.630312][ T7724] loop5: p1 < > p4 [ 134.635139][ T7724] loop5: p4 size 8388608 extends beyond EOD, truncated [ 134.689524][ T7731] bridge0: entered promiscuous mode [ 134.702287][ T7731] macvlan3: entered promiscuous mode [ 134.810940][ T7737] loop5: detected capacity change from 0 to 2048 [ 134.840002][ T7733] loop6: detected capacity change from 0 to 8192 [ 134.897699][ T7737] loop5: p1 < > p4 [ 134.900546][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.902198][ T7737] loop5: p4 size 8388608 extends beyond EOD, truncated [ 134.964191][ T7749] netlink: 'syz.4.1421': attribute type 10 has an invalid length. [ 134.978424][ T7749] loop4: detected capacity change from 0 to 1024 [ 134.985547][ T7749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.989910][ T7751] tipc: Started in network mode [ 134.997392][ T7751] tipc: Node identity 7f000001, cluster identity 4711 [ 135.004712][ T7751] tipc: Enabled bearer , priority 10 [ 135.026825][ T7749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.058999][ T7759] netlink: 'syz.6.1423': attribute type 10 has an invalid length. [ 135.069415][ T7759] hsr_slave_0: left promiscuous mode [ 135.088905][ T7759] hsr_slave_1: left promiscuous mode [ 135.112941][ T7760] xt_l2tp: v2 tid > 0xffff: 150994944 [ 135.125738][ T7761] loop6: detected capacity change from 0 to 1024 [ 135.263771][ T7761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.279484][ T7761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.617394][ T1041] tipc: Node number set to 2130706433 [ 135.743770][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1433'. [ 135.809660][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.961994][ T7799] IPv6: Can't replace route, no match found [ 135.997376][ T7801] loop5: detected capacity change from 0 to 1024 [ 136.029885][ T7801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.117757][ T5691] tipc: Node number set to 2130706433 [ 136.183663][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 136.195664][ T7801] netlink: 'syz.5.1438': attribute type 13 has an invalid length. [ 136.319308][ T7804] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1438: Allocating blocks 449-513 which overlap fs metadata [ 136.349939][ T7801] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.357675][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.590754][ T7801] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.600374][ T7801] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.609710][ T7801] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.619022][ T7801] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.712300][ T7800] EXT4-fs (loop5): pa ffff888106a32b60: logic 48, phys. 177, len 21 [ 136.721241][ T7800] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 136.930784][ T7325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.976509][ T7823] loop5: detected capacity change from 0 to 1024 [ 136.983165][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 136.983180][ T29] audit: type=1326 audit(1746966312.375:12144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.015057][ T29] audit: type=1326 audit(1746966312.375:12145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.040432][ T7823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.047549][ T29] audit: type=1326 audit(1746966312.445:12146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.071773][ T29] audit: type=1326 audit(1746966312.485:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.102120][ T29] audit: type=1326 audit(1746966312.505:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.133247][ T29] audit: type=1326 audit(1746966312.535:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.157468][ T29] audit: type=1326 audit(1746966312.535:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.183316][ T29] audit: type=1326 audit(1746966312.535:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.193609][ T7823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.206952][ T29] audit: type=1326 audit(1746966312.535:12152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.244434][ T29] audit: type=1326 audit(1746966312.535:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7824 comm="syz.3.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3fa7e969 code=0x7ffc0000 [ 137.270733][ T7825] loop3: detected capacity change from 0 to 128 [ 137.285467][ T7825] FAT-fs (loop3): Directory bread(block 162) failed [ 137.293096][ T7825] FAT-fs (loop3): Directory bread(block 163) failed [ 137.307603][ T7825] FAT-fs (loop3): Directory bread(block 164) failed [ 137.317034][ T7825] FAT-fs (loop3): Directory bread(block 165) failed [ 137.324046][ T7825] FAT-fs (loop3): Directory bread(block 166) failed [ 137.331255][ T7325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.340728][ T7825] FAT-fs (loop3): Directory bread(block 167) failed [ 137.347827][ T7825] FAT-fs (loop3): Directory bread(block 168) failed [ 137.355391][ T7825] FAT-fs (loop3): Directory bread(block 169) failed [ 137.376541][ T7571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.388640][ T7825] FAT-fs (loop3): Directory bread(block 162) failed [ 137.395861][ T7825] FAT-fs (loop3): Directory bread(block 163) failed [ 137.420276][ T7825] syz.3.1441: attempt to access beyond end of device [ 137.420276][ T7825] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 137.435842][ T7825] syz.3.1441: attempt to access beyond end of device [ 137.435842][ T7825] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 137.477057][ T7830] loop6: detected capacity change from 0 to 512 [ 137.511302][ T7830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.535949][ T7830] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.548821][ T7839] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1447'. [ 137.618045][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1448'. [ 137.662611][ T7849] sit0: entered promiscuous mode [ 137.671569][ T7849] netlink: 'gtp': attribute type 1 has an invalid length. [ 137.679106][ T7849] netlink: 1 bytes leftover after parsing attributes in process `gtp'. [ 137.688909][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.1443: corrupted inode contents [ 137.745351][ T7851] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #19: comm syz.6.1443: mark_inode_dirty error [ 137.788116][ T7851] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #19: comm syz.6.1443: corrupted inode contents [ 137.807414][ T7851] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.1443: mark_inode_dirty error [ 137.820045][ T7851] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.1443: mark inode dirty (error -117) [ 137.837423][ T7851] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 137.873761][ T7861] netlink: 'syz.0.1456': attribute type 10 has an invalid length. [ 137.893600][ T7861] loop0: detected capacity change from 0 to 1024 [ 137.921932][ T7861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.941607][ T7861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.014104][ T7571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.139535][ T7870] loop5: detected capacity change from 0 to 1024 [ 138.147261][ T7870] EXT4-fs: Ignoring removed oldalloc option [ 138.154507][ T7870] EXT4-fs: Ignoring removed oldalloc option [ 138.181544][ T7870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.203880][ T7870] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 138.220215][ T7870] EXT4-fs (loop5): Remounting filesystem read-only [ 138.277210][ T7880] Cannot find set identified by id 0 to match [ 138.311338][ T7325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.393643][ T7892] tipc: Enabling of bearer rejected, already enabled [ 138.431216][ T7898] loop6: detected capacity change from 0 to 1024 [ 138.438512][ T7898] EXT4-fs: Ignoring removed oldalloc option [ 138.444696][ T7898] EXT4-fs: Ignoring removed oldalloc option [ 138.460395][ T7898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.484253][ T7898] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 138.501941][ T7898] EXT4-fs (loop6): Remounting filesystem read-only [ 138.548261][ T7571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.555479][ T7906] loop5: detected capacity change from 0 to 1024 [ 138.564837][ T7906] EXT4-fs: Ignoring removed oldalloc option [ 138.571999][ T7906] EXT4-fs: Ignoring removed oldalloc option [ 138.619478][ T7906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.643431][ T7906] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 138.663642][ T7906] EXT4-fs (loop5): Remounting filesystem read-only [ 138.719869][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.750510][ T7325] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.771202][ T7920] loop0: detected capacity change from 0 to 2048 [ 138.808264][ T7920] loop0: p1 < > p4 [ 138.815147][ T7920] loop0: p4 size 8388608 extends beyond EOD, truncated [ 138.886805][ T7926] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1481'. [ 138.980994][ T7933] loop5: detected capacity change from 0 to 2048 [ 138.991608][ T7935] loop4: detected capacity change from 0 to 1024 [ 138.999855][ T7935] EXT4-fs: Ignoring removed oldalloc option [ 139.007290][ T7935] EXT4-fs: Ignoring removed oldalloc option [ 139.019928][ T7935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.039026][ T7933] loop5: p1 < > p4 [ 139.049293][ T7933] loop5: p4 size 8388608 extends beyond EOD, truncated [ 139.052073][ T7935] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 139.082865][ T7941] loop3: detected capacity change from 0 to 512 [ 139.091219][ T7933] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1485'. [ 139.102401][ T7941] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 139.104147][ T7935] EXT4-fs (loop4): Remounting filesystem read-only [ 139.118979][ T7941] loop3: detected capacity change from 0 to 512 [ 139.126008][ T7941] EXT4-fs: Ignoring removed bh option [ 139.128920][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1485'. [ 139.132057][ T7941] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.151334][ T7941] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 139.163078][ T7941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 139.175140][ T7941] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.186726][ T7941] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1487: Failed to acquire dquot type 1 [ 139.199286][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.201759][ T7941] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1487: Invalid block bitmap block 0 in block_group 0 [ 139.225137][ T7941] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1487: Invalid block bitmap block 0 in block_group 0 [ 139.249208][ T7941] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1487: Invalid block bitmap block 0 in block_group 0 [ 139.264915][ T7941] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1487: Failed to acquire dquot type 1 [ 139.284466][ T7941] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.1487: Failed to acquire dquot type 1 [ 139.296874][ T7941] EXT4-fs (loop3): 1 orphan inode deleted [ 139.305697][ T7941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.375637][ T7941] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz.3.1487: deleted inode referenced: 12 [ 139.450419][ T7963] syzkaller0: entered promiscuous mode [ 139.456670][ T7963] syzkaller0: entered allmulticast mode [ 139.465720][ T7963] FAULT_INJECTION: forcing a failure. [ 139.465720][ T7963] name failslab, interval 1, probability 0, space 0, times 0 [ 139.478786][ T7963] CPU: 1 UID: 0 PID: 7963 Comm: syz.0.1496 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 139.478822][ T7963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 139.478895][ T7963] Call Trace: [ 139.478903][ T7963] [ 139.478912][ T7963] __dump_stack+0x1d/0x30 [ 139.478937][ T7963] dump_stack_lvl+0xe8/0x140 [ 139.478961][ T7963] dump_stack+0x15/0x1b [ 139.478980][ T7963] should_fail_ex+0x265/0x280 [ 139.479022][ T7963] should_failslab+0x8c/0xb0 [ 139.479114][ T7963] kmem_cache_alloc_node_noprof+0x57/0x320 [ 139.479166][ T7963] ? __alloc_skb+0x101/0x320 [ 139.479213][ T7963] __alloc_skb+0x101/0x320 [ 139.479251][ T7963] netlink_dump+0x148/0x7f0 [ 139.479305][ T7963] ? __kfree_skb+0x109/0x150 [ 139.479339][ T7963] ? nlmon_xmit+0x4f/0x60 [ 139.479369][ T7963] __netlink_dump_start+0x43e/0x520 [ 139.479489][ T7963] ? __pfx_tc_dump_tclass+0x10/0x10 [ 139.479519][ T7963] rtnetlink_rcv_msg+0x552/0x6d0 [ 139.479547][ T7963] ? __pfx_tc_dump_tclass+0x10/0x10 [ 139.479575][ T7963] ? ref_tracker_free+0x37d/0x3e0 [ 139.479656][ T7963] ? __pfx_rtnl_dumpit+0x10/0x10 [ 139.479684][ T7963] ? __pfx_tc_dump_tclass+0x10/0x10 [ 139.479773][ T7963] netlink_rcv_skb+0x120/0x220 [ 139.479811][ T7963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.479849][ T7963] rtnetlink_rcv+0x1c/0x30 [ 139.479949][ T7963] netlink_unicast+0x59e/0x670 [ 139.480009][ T7963] netlink_sendmsg+0x58b/0x6b0 [ 139.480049][ T7963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.480105][ T7963] __sock_sendmsg+0x142/0x180 [ 139.480211][ T7963] ____sys_sendmsg+0x31e/0x4e0 [ 139.480236][ T7963] ___sys_sendmsg+0x17b/0x1d0 [ 139.480278][ T7963] __x64_sys_sendmsg+0xd4/0x160 [ 139.480390][ T7963] x64_sys_call+0x2999/0x2fb0 [ 139.480410][ T7963] do_syscall_64+0xd0/0x1a0 [ 139.480432][ T7963] ? clear_bhb_loop+0x25/0x80 [ 139.480453][ T7963] ? clear_bhb_loop+0x25/0x80 [ 139.480504][ T7963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.480523][ T7963] RIP: 0033:0x7f03b0dae969 [ 139.480566][ T7963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.480582][ T7963] RSP: 002b:00007f03af417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.480658][ T7963] RAX: ffffffffffffffda RBX: 00007f03b0fd5fa0 RCX: 00007f03b0dae969 [ 139.480669][ T7963] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000009 [ 139.480681][ T7963] RBP: 00007f03af417090 R08: 0000000000000000 R09: 0000000000000000 [ 139.480692][ T7963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.480743][ T7963] R13: 0000000000000000 R14: 00007f03b0fd5fa0 R15: 00007ffcd392da38 [ 139.480760][ T7963] [ 139.840775][ T7969] loop6: detected capacity change from 0 to 1024 [ 139.848353][ T7969] EXT4-fs: Ignoring removed oldalloc option [ 139.854730][ T7969] EXT4-fs: Ignoring removed oldalloc option [ 139.869973][ T7969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.880102][ T7973] loop0: detected capacity change from 0 to 2048 [ 139.890344][ T7969] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 139.905799][ T7969] EXT4-fs (loop6): Remounting filesystem read-only [ 139.920655][ T7973] loop0: p1 < > p4 [ 139.925355][ T7973] loop0: p4 size 8388608 extends beyond EOD, truncated [ 139.935143][ T7571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.956371][ T7973] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1499'. [ 139.967134][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 139.967739][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.016238][ T7977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 140.023097][ T7977] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 140.026214][ T7979] loop6: detected capacity change from 0 to 2048 [ 140.031149][ T7977] vhci_hcd vhci_hcd.0: Device attached [ 140.068306][ T7979] loop6: p1 < > p4 [ 140.072201][ T7980] vhci_hcd: connection closed [ 140.072421][ T3747] vhci_hcd: stop threads [ 140.082195][ T3747] vhci_hcd: release socket [ 140.086637][ T3747] vhci_hcd: disconnect device [ 140.087142][ T7979] loop6: p4 size 8388608 extends beyond EOD, truncated [ 140.162268][ T7990] xt_hashlimit: max too large, truncated to 1048576 [ 140.236193][ T8000] loop4: detected capacity change from 0 to 1024 [ 140.243983][ T8000] EXT4-fs: Ignoring removed orlov option [ 140.262748][ T8000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.447751][ T8006] loop0: detected capacity change from 0 to 1024 [ 140.454565][ T8006] EXT4-fs: Ignoring removed oldalloc option [ 140.461033][ T8006] EXT4-fs: Ignoring removed oldalloc option [ 140.479854][ T8006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.499870][ T8006] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 140.515438][ T8006] EXT4-fs (loop0): Remounting filesystem read-only [ 140.541207][ T8004] ================================================================== [ 140.549718][ T8004] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 140.557864][ T8004] [ 140.560199][ T8004] write to 0xffff888106bd02a4 of 4 bytes by task 8000 on cpu 1: [ 140.568130][ T8004] xas_set_mark+0x12b/0x140 [ 140.573029][ T8004] tag_pages_for_writeback+0xc2/0x290 [ 140.578931][ T8004] ext4_do_writepages+0x695/0x2270 [ 140.584243][ T8004] ext4_writepages+0x176/0x300 [ 140.589152][ T8004] do_writepages+0x1d2/0x480 [ 140.593929][ T8004] file_write_and_wait_range+0x156/0x2c0 [ 140.599697][ T8004] generic_buffers_fsync_noflush+0x45/0x120 [ 140.605969][ T8004] ext4_sync_file+0x1ab/0x690 [ 140.610728][ T8004] vfs_fsync_range+0x10a/0x130 [ 140.615601][ T8004] ext4_buffered_write_iter+0x34f/0x3c0 [ 140.621360][ T8004] ext4_file_write_iter+0x383/0xf00 [ 140.626693][ T8004] iter_file_splice_write+0x5ef/0x970 [ 140.632310][ T8004] direct_splice_actor+0x153/0x2a0 [ 140.637637][ T8004] splice_direct_to_actor+0x30f/0x680 [ 140.643132][ T8004] do_splice_direct+0xda/0x150 [ 140.648102][ T8004] do_sendfile+0x380/0x640 [ 140.653120][ T8004] __x64_sys_sendfile64+0x105/0x150 [ 140.658708][ T8004] x64_sys_call+0xb39/0x2fb0 [ 140.663548][ T8004] do_syscall_64+0xd0/0x1a0 [ 140.668114][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.674244][ T8004] [ 140.676639][ T8004] read to 0xffff888106bd02a4 of 4 bytes by task 8004 on cpu 0: [ 140.684370][ T8004] file_write_and_wait_range+0x10e/0x2c0 [ 140.690204][ T8004] generic_buffers_fsync_noflush+0x45/0x120 [ 140.696131][ T8004] ext4_sync_file+0x1ab/0x690 [ 140.700842][ T8004] vfs_fsync_range+0x10a/0x130 [ 140.705960][ T8004] ext4_buffered_write_iter+0x34f/0x3c0 [ 140.711753][ T8004] ext4_file_write_iter+0x383/0xf00 [ 140.716992][ T8004] iter_file_splice_write+0x5ef/0x970 [ 140.722953][ T8004] direct_splice_actor+0x153/0x2a0 [ 140.728317][ T8004] splice_direct_to_actor+0x30f/0x680 [ 140.734004][ T8004] do_splice_direct+0xda/0x150 [ 140.738911][ T8004] do_sendfile+0x380/0x640 [ 140.743478][ T8004] __x64_sys_sendfile64+0x105/0x150 [ 140.748831][ T8004] x64_sys_call+0xb39/0x2fb0 [ 140.753480][ T8004] do_syscall_64+0xd0/0x1a0 [ 140.758682][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.764864][ T8004] [ 140.767254][ T8004] value changed: 0x02000021 -> 0x04000021 [ 140.773333][ T8004] [ 140.775757][ T8004] Reported by Kernel Concurrency Sanitizer on: [ 140.782007][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.4.1510 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 140.794538][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.804709][ T8004] ================================================================== [ 140.827173][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.210902][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.