last executing test programs: 9.003272581s ago: executing program 3 (id=1041): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@jqfmt_vfsv0}, {@init_itable}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) linkat(r0, &(0x7f0000000280)='./file2\x00', r0, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@mmap}, {@version_L}, {@nodevmap}, {@uname={'uname', 0x3d, 'errors=remount-ro'}}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}], [{@dont_appraise}]}}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setgid(0xee00) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f00000003c0)={&(0x7f0000000100)=@xdp={0x2c, 0xe, 0x0, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="5bc7b8815c1f9c02ded814187045ea396b881abbd1f34fcccca7cfed1ac6eae6ca1f2a290388725009d0032bbcd7f3d4caaa13c3203618db0befa2b33a62263a9fd2db0b779e487a3d02c956a7c415f4f81f0f3f347717fd5974ff3aa3edea5192e2e4939069a819cedbfb32b08b7f56c19199c07ab3665504458e6e9c3d4ccdfe", 0x81}, {&(0x7f0000000240)="094c6b363b925898ac3f6fdb2758ed42a09301bde9327eeb2cb5fdaf157e74acbdd20e6ca4b9f5430820637e78e0857b5e4a224c5d89d40e6c615025275bdca054927b055518fb50ba6d63e3f83eed6e630064e33dca781b362e1b1b6c84d0caeda6af5120d488825ad843c204845721b4018cebc066e0eb55a56de13b2a1a59c22b942b0b1470b068528cd6868652d6aaac1b030b388ed1e2485eba4c5b3a9b0550862c0608daba8529e03ea122737b8437d2ab4315c2", 0xb7}], 0x2, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5b6}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x14000000}}], 0x90}, 0x10004041) r4 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x101) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r4, 0x540a, 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x8, 0x0, 0x39, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000, 0x10000000, 0xfff}}) 8.867257688s ago: executing program 3 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24689f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb6121e63f45f3dceb6e1c0c410d799168ffc4b64675af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xf2}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f0000000a00)="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", 0x1a9}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c", 0x64}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8", 0x72}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445b", 0xd2}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b49072db", 0x3a}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.841747191s ago: executing program 3 (id=1046): semop(0x0, &(0x7f0000000740)=[{0x0, 0xffff}, {0x0, 0x6, 0x800}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x3, 0x1000}], 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000dd"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18001000ed07449e00000000000000006b37b1b5b7ecf73afa3802180100002da08ab18c0264a2fe77c9e9e3b9d3ec70f1008ef4c991f9cafd20cfa0f4d9780f6d7c9fc6fac25ab018ed28b490b69abf6e82cb2591d25b142423cf21ee8f283649859d6baacaa62b8b67a39d6ecbecd3b89258bd9f40a6eaa97ebc511416997666cf9c1f83a6ff9a1e9a293ac6", @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x52, [@local]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x94, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x59}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2001}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000640)={r5, r1, 0x412, 0x51, &(0x7f00000005c0)="379a1d10e7ce6e3844409f8f1cf751f5a379cf38a88f80b8915ad61e10d70fd0b288b45d8a75f5e6b0216e3f36b0b80ffd1803d8246ba6326c259f65cfaf53f4d0ae8c2a34e6b9e79f60aa4a0b3b0b7458", 0xff, 0xab, 0xffff, 0x8, 0x1, 0x2, 0xffffff02, 'syz1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) unshare(0x22020400) r6 = fsopen(&(0x7f0000000900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r6, 0x0, 0x0) 8.765408421s ago: executing program 3 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000a00)="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", 0x1a9}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a3", 0x63}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebd", 0x28}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d88", 0x79}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445b", 0xd2}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b49072db", 0x3a}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8.735261835s ago: executing program 3 (id=1049): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 7.524679831s ago: executing program 3 (id=1065): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0xfff}, @sack_perm, @timestamp, @sack_perm, @window={0x3, 0x8, 0x9}], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000100)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/89, 0x59}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f00000005c0)=""/131, 0x83}], 0x5, &(0x7f00000008c0)=""/218, 0xda}, 0x40) r4 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) r8 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000e"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2c, &(0x7f00000002c0)=0x1f, 0x4) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f00000000c0), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 3.905447627s ago: executing program 0 (id=1117): semop(0x0, &(0x7f0000000740)=[{0x0, 0xffff}, {0x0, 0x6, 0x800}, {0x4, 0x8}, {0x4, 0x3, 0x1000}], 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000dd"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x52, [@local]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x94, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x59}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2001}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000640)={r5, r1, 0x412, 0x51, &(0x7f00000005c0)="379a1d10e7ce6e3844409f8f1cf751f5a379cf38a88f80b8915ad61e10d70fd0b288b45d8a75f5e6b0216e3f36b0b80ffd1803d8246ba6326c259f65cfaf53f4d0ae8c2a34e6b9e79f60aa4a0b3b0b7458", 0xff, 0xab, 0xffff, 0x8, 0x1, 0x2, 0xffffff02, 'syz1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) unshare(0x22020400) r6 = fsopen(&(0x7f0000000900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r6, 0x0, 0x0) 3.661646008s ago: executing program 0 (id=1119): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_read_part_table(0x59a, &(0x7f0000001640)="$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") r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0xc, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = dup(0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3], 0x178) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 3.479025232s ago: executing program 4 (id=1120): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.63952357s ago: executing program 0 (id=1124): semop(0x0, &(0x7f0000000740)=[{0x0, 0xffff}, {0x0, 0x6, 0x800}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x3, 0x1000}], 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000dd"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRESOCT, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x52, [@local]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x94, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x59}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2001}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000640)={r5, r1, 0x412, 0x51, &(0x7f00000005c0)="379a1d10e7ce6e3844409f8f1cf751f5a379cf38a88f80b8915ad61e10d70fd0b288b45d8a75f5e6b0216e3f36b0b80ffd1803d8246ba6326c259f65cfaf53f4d0ae8c2a34e6b9e79f60aa4a0b3b0b7458", 0xff, 0xab, 0xffff, 0x8, 0x1, 0x2, 0xffffff02, 'syz1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) unshare(0x22020400) r6 = fsopen(&(0x7f0000000900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r6, 0x0, 0x0) 2.577232268s ago: executing program 4 (id=1125): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004"], 0x190}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x1d0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0xe}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x96df, 0x2, 0x3, 0x80000000, 0x400, 0x4}}, {0xc, 0x2, [0x100, 0x3, 0x5, 0x8]}}]}, @TCA_STAB={0x15c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x3, 0x6, 0xf7bb, 0x2, 0x9, 0x5, 0x2}}, {0x8, 0x2, [0x6, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfe, 0x2708, 0x9, 0x2, 0x8000, 0x5, 0x1}}, {0x6, 0x2, [0x3de]}}, {{0x1c, 0x1, {0xf7, 0x7d, 0x2, 0xb3, 0x2, 0x8, 0x2, 0x8}}, {0x14, 0x2, [0x9, 0x797, 0xc34, 0x0, 0xbd08, 0xcad, 0x9, 0xf]}}, {{0x1c, 0x1, {0xa4, 0x7, 0x400, 0xfff, 0x1, 0x7, 0x1d2, 0x3}}, {0xa, 0x2, [0x4, 0xfffa, 0x7]}}, {{0x1c, 0x1, {0x10, 0x75, 0x6, 0x7, 0x0, 0x6, 0x5, 0x6}}, {0x10, 0x2, [0x7, 0x0, 0x1, 0x4, 0xd, 0x3]}}, {{0x1c, 0x1, {0x5, 0xe, 0x200, 0xffffff7f, 0x0, 0xffff, 0xfffffff8, 0x6}}, {0x10, 0x2, [0x401, 0xd, 0x67ee, 0x7f, 0x2, 0x1]}}, {{0x1c, 0x1, {0x5, 0x0, 0x4, 0x6, 0x1, 0x34c3, 0xff, 0x9}}, {0x16, 0x2, [0x5b, 0x7, 0x1847, 0xffff, 0xfc, 0x7, 0x6, 0x6, 0x4]}}, {{0x1c, 0x1, {0x2, 0xc2, 0x8000, 0x1, 0x2, 0x3ff, 0x11b1, 0x5}}, {0xe, 0x2, [0x4, 0x1ff, 0x1ff, 0x3, 0x1]}}]}]}, 0x1d0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsgid(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x400, 0x0, 0x2, 0x8001, 0x81}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) 1.817828756s ago: executing program 0 (id=1131): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) 1.816498836s ago: executing program 2 (id=1132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x18c) fallocate(r2, 0x0, 0x8, 0x1101f0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="94", 0x1}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x6, 0x57, 0xe, 0x800, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffd, 0x1, 0xc}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x4, 0x0, 0x0) accept4(r7, &(0x7f0000000200)=@caif=@util, &(0x7f0000000040)=0x80, 0x80000) mknodat$null(r1, &(0x7f0000000400)='./file1\x00', 0x4, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x1a, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0xa1, &(0x7f0000000340)=""/161, 0x40f00, 0x10, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x9, 0x4, 0x7}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, r3, r4, 0xffffffffffffffff, r5, r7, r8, 0xffffffffffffffff], 0x0, 0x10, 0x7f}, 0x94) 1.728606417s ago: executing program 2 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r5, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 1.575731777s ago: executing program 2 (id=1134): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_read_part_table(0x59a, &(0x7f0000001640)="$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") r0 = gettid() r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0xc, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00'}) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r4 = dup(0xffffffffffffffff) write$binfmt_elf64(r4, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3], 0x178) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.521065184s ago: executing program 1 (id=1135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.484219369s ago: executing program 1 (id=1136): semop(0x0, &(0x7f0000000740)=[{0x0, 0x6, 0x800}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x3, 0x1000}], 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/91]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18001000ed07449e00000000000000006b37b1b5b7ecf73afa3802180100002da08ab18c0264a2fe77c9e9e3b9d3ec70f1008ef4c991f9cafd20cfa0f4d9780f6d7c9fc6fac25ab018ed28b490b69abf6e82cb2591d25b142423cf21ee8f283649859d6baacaa62b8b67a39d6ecbecd3b89258bd9f40a6eaa97ebc511416997666cf9c1f83a6ff9a1e9a293ac6", @ANYRESOCT, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x52, [@local]}, @noop]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2001}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000640)={r3, r1, 0x412, 0x51, &(0x7f00000005c0)="379a1d10e7ce6e3844409f8f1cf751f5a379cf38a88f80b8915ad61e10d70fd0b288b45d8a75f5e6b0216e3f36b0b80ffd1803d8246ba6326c259f65cfaf53f4d0ae8c2a34e6b9e79f60aa4a0b3b0b7458", 0xff, 0xab, 0xffff, 0x8, 0x1, 0x2, 0xffffff02, 'syz1\x00'}) unshare(0x22020400) r4 = fsopen(&(0x7f0000000900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r4, 0x0, 0x0) 1.452964553s ago: executing program 4 (id=1137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x5, 0x441, &(0x7f00000011c0)="$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") 1.129242694s ago: executing program 0 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffde, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x60000480) 993.827632ms ago: executing program 1 (id=1139): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffff0301000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d90000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 804.408096ms ago: executing program 4 (id=1140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000000000000000a37b7ee712512818196c717500"], 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000080200000008080100", @ANYRES32=0x1, @ANYBLOB='\x00a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/18, @ANYRES32=r0, @ANYBLOB], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0xffffffff, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) rmdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0xf) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 534.518431ms ago: executing program 1 (id=1141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24689f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb6121e63f45f3dceb6e1c0c410d799168ffc4b64675af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xf2}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f0000000a00)="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", 0x1a9}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc6ed554a34c", 0x64}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8", 0x72}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc049095876", 0x76}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445b", 0xd2}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b49072db", 0x3a}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 520.255513ms ago: executing program 2 (id=1142): sigaltstack(&(0x7f00000008c0)={0x0, 0x80000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sigaltstack(&(0x7f0000001a00)={0x0, 0x80000002}, &(0x7f0000001b40)={0x0}) 450.837702ms ago: executing program 2 (id=1143): syz_open_dev$usbfs(0x0, 0x70, 0x103301) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x5}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000085000000000200001801000020646c2500207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff85000000730000009500"/89], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYRESHEX, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f00000001c0), 0x64, 0x537, &(0x7f0000000f80)="$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") ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d370887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)='\xa9\x1c)\x00', 0xfffffffffffffffd) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge_slave_0\x00'}) 449.734422ms ago: executing program 1 (id=1144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000004}, {}, {0x2, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x8) 400.364018ms ago: executing program 1 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_GET_FP_MODE(0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='mm_page_free\x00', r1}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffff7ffff08004c0000440000000000069078ac1414aa0a070504414344140601ac1e0001000003ffe000000100000100"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000050000"], 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="74000000700009082bbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="100001800c00048008000100001000000c000180050006000a000000100001800c000480080001000a0000000c00018005000600080000000c00018005000300020000000c0001800800010021dbf3e0bd391f688e2981c61afa1bb90002000c000180060002000e000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x200008c1) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) syz_open_dev$usbfs(&(0x7f0000000200), 0xfffffffffffffff8, 0x600000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 259.237987ms ago: executing program 0 (id=1146): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 234.359719ms ago: executing program 2 (id=1147): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x5) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000600)="cd65b70c93a8999c5fb382be70bc8d4138b3f387fdf90488ac54851779e686590db51f8e6498dc4d47e807b132901960588841762188327613e692e9ef2f970a56e050f418e0960686644b305b93208bc6d5c9888588587787f9ea0b4b13ea236704b884592ec967ef564a927fca7535561cbca38b68a9873ea2073ead", &(0x7f00000006c0)=""/221, &(0x7f00000022c0)="4212a4d9ee3b09ab1812e3ff00b11546bb759e2f6009405e621c18987b03b1ad6d41b0a17dd6191da905d2a7fef48993682b8c5f82bf91f0e2acf25166c93b2271ed1716e20dc1b523cff0a22c1a54a4da5b285ea2154d17098413ca1a157956bbd2bda6e4510270d84ccb85df46ab28d8075e133e619497c0bbad5c3d2965f206d1d549801787f93ee638181bd862eaa5d3906fb18f046866a9880f1a1d59412c379102b10d3148df8d1ba1bd4779e1223bb2c071daca240fae077dd926f0543175c175fcc77125f0b04fb064d27c8f50aafa6496e65e7504a89879828529b20f18552d3d1858f0609a709e52338c3a50d492041329c0bc3cec8248cd51e02c5b0b3dcda9cecccb3fbcf6961036d2bd395eae4e1da0cd5a9d906c6e5ba32a65cc2136b5d1e3c20387805afbff9764b3608695dfa1b3e695b898f4bf777da82a32eaa0f20e251f10a69d3533ef0e5c2a2b472e1f2fbd741f57afb8452f858335c25c194c8a73167c8199cdce3623ddedb2447cc2cabc446541b2137e25fbe8da83ca5425d11fe5fc2ecb04905cb872f3e007b02ce8369b288ed2096d310eb90bdcf4d8b2cb9ce427c1c38f3ff5580c524386a73daa09b10801cbbd737091ced94b4410cdb6141c78d94e8993f2b2fe4e01b942272d085a1abf8c0f03322242381d92e3ae571de358798c54ecff9aff0f3869260a4dcb7cf1ccaee259a604661d54b02d1a468a4b49eeb2ff68dab64010c466611e1e9de7ac6145435ae2409165ddc5248317a52556b21418655867ee3d4fef883b6e563cf1cdef70b14692172e2895ddb29b453f4f3e3fd796c7b52b4452abdd89df533052b1841513d09af79e3ccf201c5a38698c323aafb9f645cb3fab608b7955cad27999993248d1e8d14a2f62e6fa98e3daed6a135a1272af8f51050f2ad6e46310c8a9201d6a5998dbe3e1f71d9239aaecbef77e75358886b2946604537ac818b3edabd58ea9546fafc825012c8c8fac798a55cc509db91cb9a6e0a9584f2f4aabdc3487abc7bc58a40420d602c33fb4019900f7a42bdc940de70bad01943d5b864a01029b6e0a58dc2b46c96bd8187f135c7ee74f9fa120e5885806719ef510ae5bf8f630d88fcb0b728585db5ee58fc3d75cb1f6a72c5ed0e110d829ba69761a29fe4a8e9beb8219fe56a51dc654c7469d8c3e8dc2e5d3cd6703ba9af0db5c017b3bc188a5e8a8e2875090798758ac1f6f0ea71b2549a35830fcea1d3dbc2892061c9ea80b5c20aa9760e2165d5d17ce59f9f49532e0359b31d1c54188ad7f7893865fd3d1901bd9c13ba60139fc0473b765de540c79b6c2062b0f174c50adca436db0c3a5bb0cbc75f17f50ddeedf94358778a3c5cd325d610da1c3f649d311ba3d684b7698a2f63d7134cf2a6e1547daa8381708802f4c850cd003ebf9dadd8f6c0a65d639959fe9dce460cd312283470e904191c717ab20b2ee0616e1ca8815273c5bc0316ff930cd69d428b3118988aa818a228b8d1a0c2bc8ad086640a982646cb428ca6f97ed73f48681d84dce94b653378d35ea9152687db06a91d0b8124c6e9833c64bf0211831d5e07b27a5f02e3b29625b28b9a6edb2ae97243f5980b55201fe66db0936f6216d35e3e17e441b340401724b5efa87e81d85b399099b486aa5dbc4f764c4c7ae77ddcdecceb7d25df69b87bb5f2c6d192fe18d2c56253b7bf124a77054fed64b2c7185ba3afc7d1d69baea864b67d67cf9a6a8c0582eceb9c174ad9e7d8cc4f39b5bda23c07ccd977bbd2528f3fc4c9b0bb38d7eddf0fbc5a371a05b132d7d29633d95e698d40ee13fee5dec2a06ee305e29e5e5102e1c9c3a960077dfd021df7a96c25b54dde177d914dceb16d9da26b804735feebd0f5549477b2f923ae32d8becbd68daaa7a099790bdd857a39b7589c4dd5e98d09651c242e51216d81bd355c8eaa52c37fa9c0e3953acd448288ad0caf12a829de75e13b92e679b3e2cc9109427e817b632abf92e5d36bd1a0f20dcd7acfe0b7d8fa9d0f0838c49b59fa4af724cfa3795dad52d8bae925f687f629f533acf6809785a02de436942b0bce6a0878eac9c65cc57a03bc700a150e8f489e99918c0569b2628c6db941eab49edda56bd7619522263eba2a948d04e51067c49da52b746dca1690bd8ffe92fa24ed508b8013643cf4fd21c2762613e3d9476b4eb5f290685d286fafb19611b863e0e4d087a1a98a7bf6107c85dd8ed71e4d6c469d41692462ded72b6d328870ea9502619ba3a97f5275dc976c7b59e0be71884c69bf846b4e0e0d1265dc13487fb42bae760a6a661d7e38a599032c8c722e9379272ba5373555d3fa94cdca2b1fcb283dc7ab22c1f71819e474873c606d9d276d5d16a7c23e6d3c49df424310e96a2b4247a92c1d0c73605db15deb1334f0f4042050c84037209f4d79eb3779954431a7ae0bf9644a2bd5e07fc1030626b7ec5c7e82c51b7ce550717d1369772562a6dcb185ddc8ba0289b11398ea59467728ef0c61261bcc83eb09a0e0d98fcc9e34936a80a89a4d23cf0c6382b5648d13062340e2672bec173798c7b61378a6a06fc6e255ca723ef8c7081468038987fe4b70d60a8e85268340ea645ea9ce10d3fb0e82a50e429c1ea129ba9cf7523195ddea5f7ab355d9998fe248af532c86e24ae6b5f700628f4cf3dbe5163af64e624289ff88fc2429b6de401396153a742b8ac92e74f9ccb4d6a392bbf26b6c8690025e3ca38c28268b9fcced98357f491c590deaf7be585bb77919cf598bfa7985b7f13bc4b281393091c18f1eefa858917f9e66f3c072112ab5da0abe7db01691e3544fd7da7f4585cecc5a23b3cfa72ffa6addf9e5ffdb1fdb33ed4eb46b84e2dd66bd695ed855b90ac275aef2e4a43d9bf88285cec37e954ed42f9768cfa9b1c1d199eb283e4a6b17f5a09e8e83de959bf0ed174f3c95ffd3b7a2ecc4a2c1453a0142e7cf7cd4cb567059ff2ca2573d6a22d26b3cb4c3d0bde5776933ca25d561a039f712c8592cdc31184d871c4f82215dfdb3a7a842fb5bf6186c833c73e220f0d9466f5d8afefca561f6ceaee73332da2b9903682a4a33542da26d2387e062280a97995c9b9c0200c5347345f19901ae01d622ee9e0322fc484788e3e0c168c2bd6f630c5668d9dee5e291fbbea5243e0b963ac00f71e63ad4abab51c6fc0aa6ba1c3b05d7e5254aa7c4e99d8b3edfbaff6299d1976f7a33439684115cde8d577185bc245d1759ba76206fadc5a035251fe9766b4bc616bc1060c227d59841cc495ac605e41dd2b8cf6700fe03eb596fdd934f726a204b87c6b3a4a53bcaf21a73b222bc21f67140cb0c53ea056811eb8720b0897f6e7c6a1944587319801c6693f886f938aeea5ec640e900586a78cc30d2915ffc18393fc3ddb2143f55b5624064df93cf8a9423bc2bd539dcd3b91356a3c8ae465207011d6580569d32a408e4ba2e29eb6b2497b2c7608df782eee4dd08da357b4cb5bcadcc86a4ebdf736118b53bfc781de56b9b9b640fd63bb81ec9cdd1f2495a34bee510d8d06e012f23b6f7ca5486ddb1f9c0e9e62f7d51b5391bb3d8efdc7b77d14d0321603d9d9d1c6e8b9ac06d272c67db8905dd3db5dc785f2fee17dbd6212904022ad9237d9160f9c27abfabed8795db00092ab95536b8b019ccd720a9e7dd773d17179ff73fa937b80294f828ec95bb7a735bd53625d00469a1fdcbfd2a5e8f8f77e8dce2cedf44e5f906328a20f2190c28fcb0a5789eec52cc059e778319e62f0092b21a4c02a75910ebbb141de9de525180b9db4692798f9175939342370070cea67f06d50c0b1610ad69acc250f03a17d783f7657674116ee20a9950ac00f6818653692318dbefd13362478dddfa34d8c6370d3d7124b06d7ef7c413fdc82ec7d7f2072c9165291b6ce135ff96b5b3bfc003a0eb5accca5fe4aeba31ef9c3e1d7e0fdf89cfc0b510747bee8c4d05b05922f94f3b9ee2816a28c3902374af546cf69ea68899e7c23c3470a5a5070b95fde97e57ab9d0724927a2182186c417661d016c40be0c4eb1f94bc45f48fa250caa2567fa23f1bd19999f4726c303c4f9bd02a528d9755c08e0f0525b7a08eef2d3d890217eeb8cb4144cc59464152db33fe850261c1e9b268a01371304270f72d148e1b8a2995e6cb7b0c069be49d83079d4babe5ca44ac4bc37c04d41d43646ad40e90f26c2cbb9f900bd606eb9558bd2157906df97f0b0aa790f4f816fce9f6e9f0dc2553fb6d4fdd4b9b8751bbbc59181bec7f7dd604542d098be7c029ad58a4bbab1a83353dc761bee8470d0c360a5cf2b7b9c004faf44b5fc351e4a70cbc14f0eec456d8aaea9bc1319b2a099c6535027ca044541e8dd236b8fbbf000364432246c54257c9b4759ea5549a27e4766bfaad7b6294c1891947d37be9463795df21dbfd27a4adcafc1034273182d3c1083ff38c00baa6a206b120da37c9321cd98606daecc733d869d5265ebba2a9c840bb2a7301a1238aed2253ff11416bf5fd53bbbb21eba6898949fb5ea78f981ecd0bbdc4c1e1a87bc393f8ac575f10dedcc3618bea23f6aa17b0a663639cbb4d37c6dd60474225b1d22a2cc81fe7be456dd6d02f4a5c3b00a92f140ede45fd8cb8f43cdedcbd0c490ae1698565a40d3d02e3628ef90d7789e7c05bc2f840f843d7bb80a715a945db210e81494747140d9e54582e2dd173dcfee4a07f52db38931f7e24079046b9de5cd35f1f955ee262ac423fedd504b19d75a65ab6c3edd7eb564a5ed83a7b732695bb8e4c0a5de7a48a0cd608382ce4a627d389b3181753b595bebbabcddcc51246da9c813cf1ebf6ca477b827e9224cf6596e495799c3628bb801e90c2aef378591f8a3d5a51a093369866b78a36339dac6f4ab04097a33c1cb15fac700cfb4b45df3e8af1085a3a654cbdecd0937b327035f038d896fae0f93f5108e1bab1f5af3d6856e252c9f8c649debc2902836a8e3b706e1afb2bbcda6048a218fcb4eb141a5f668fc573120ad47e5674c3788755018d4e22e8abaa88bed92cc3a5493af5fc9469165cabdc5268adfcd3d148e5d6f7156cde9ff445652eb251ad38ec2b7df3dcc76c4cd21283eb9378030d868729f86aa0cb41a80a8e98c1adb3e968eea7019e1ae071467c96f164d21d6832e4d58df29b58306834a731b6961d23112005fb256e6a14d368a68473127468c750e38865b69ac96710f936f7cfd69d1ff7062e92a3958cf0795b024550f88c5379170e6424553ec81c8de413d95c4bcf5ce58feb2406783d826df8be77511dd7e75b89f6701dc4d9527a68d8cea7773581f3910037f21ab3d476f00a3dc015831bdad59c23f99c1b1aa3e0cce05d4c9d709ce22a91bf86e11910861b6a8dbf864e351f6906e617d4402dc89930381d4f3c1b4dadd4ad33b7886dfa3ac350ca4f50fbac500805c199e3932fd8e53ef9832b1ff3cf25549cd5621c455e0cbde839854a81f2ab1d69c99b16b0ca70351f468168837dc044d88ebafdf117baab3b6350aef2d4865bd8c52e3827a88a8b533363f356c739e26c4df6990f6fe46781001004b67a7849a2a7f2d6ca9c13592e47142432980b157d3c03633914ccd4983a95ad50e556817d6846b3a9ea8fdc7ba2f924a54a7e723ce3421953ec5c0630f1f7206f42f33b5a2dd34119947c5416302eb1f81b2361f9cb9399f5fb5750cc36ab18d82689c428436f648590ccdcb39ddc2b5502e675aa2f51a31aa8572690ea39efd7a26b2962b30dca70329b67890adc1d639a6a0f3052499", &(0x7f0000000840)="9d3b34fbf721b86867b9814b0b7cf031c7e12bffe9e63f3425acfca603d71dbf1f7c25411568061ea107059afc254e7670972c35d9fa9f87270907bd46f95173f33ad969b92f5c190b8f0731779c72deb5fe466694d4", 0x3, r0, 0x4}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000005c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x7a}}, 0x14}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$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") syz_clone(0x4ca00200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xa, 0x2) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 198.371584ms ago: executing program 4 (id=1148): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 4 (id=1149): semop(0x0, &(0x7f0000000740)=[{0x0, 0xffff}, {0x0, 0x6, 0x800}, {0x4, 0x8}, {0x4, 0x3, 0x1000}], 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000dd"]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18001000ed07449e00000000000000006b37b1b5b7ecf73afa3802180100002da08ab18c0264a2fe77c9e9e3b9d3ec70f1008ef4c991f9cafd20cfa0f4d9780f6d7c9fc6fac25a", @ANYRESOCT, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000800)={'erspan0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x8, 0x4, 0x2, 0x9, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x52, [@local]}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x94, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8c}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x59}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20020000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2001}, 0x18) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000640)={r5, r1, 0x412, 0x51, &(0x7f00000005c0)="379a1d10e7ce6e3844409f8f1cf751f5a379cf38a88f80b8915ad61e10d70fd0b288b45d8a75f5e6b0216e3f36b0b80ffd1803d8246ba6326c259f65cfaf53f4d0ae8c2a34e6b9e79f60aa4a0b3b0b7458", 0xff, 0xab, 0xffff, 0x8, 0x1, 0x2, 0xffffff02, 'syz1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) unshare(0x22020400) r6 = fsopen(&(0x7f0000000900)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) fsmount(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): ode #15: comm syz.1.668: iget: bad i_size value: 360287970189639690 [ 72.692669][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.765590][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.673'. [ 72.800001][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 72.872331][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.287890][ T5627] loop1: detected capacity change from 0 to 512 [ 73.336434][ T5627] EXT4-fs (loop1): 1 orphan inode deleted [ 73.343328][ T5627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.356310][ T2286] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 73.360025][ T5627] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.393936][ T5635] loop2: detected capacity change from 0 to 512 [ 73.425411][ T5635] EXT4-fs (loop2): 1 orphan inode deleted [ 73.439355][ T5627] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.681: iget: bad i_size value: 360287970189639690 [ 73.452788][ T5635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.468197][ T5635] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.494026][ T5635] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.683: iget: bad i_size value: 360287970189639690 [ 73.563637][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.709281][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.765836][ T5647] loop0: detected capacity change from 0 to 2048 [ 73.808129][ T3523] Alternate GPT is invalid, using primary GPT. [ 73.814587][ T3523] loop0: p2 p3 p7 [ 73.996211][ T5647] Alternate GPT is invalid, using primary GPT. [ 74.002693][ T5647] loop0: p2 p3 p7 [ 74.024742][ T5656] netlink: 'syz.1.686': attribute type 13 has an invalid length. [ 74.036425][ T5656] gretap0: refused to change device tx_queue_len [ 74.044080][ T5658] netlink: 64 bytes leftover after parsing attributes in process `syz.2.688'. [ 74.055725][ T5656] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 74.086758][ T5661] loop2: detected capacity change from 0 to 512 [ 74.090878][ T5659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.692'. [ 74.102112][ T5661] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.134550][ T5661] EXT4-fs (loop2): 1 truncate cleaned up [ 74.140646][ T5661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.179447][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.288754][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 74.288960][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 74.301863][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 74.766901][ T5683] loop0: detected capacity change from 0 to 512 [ 75.045326][ T5696] loop0: detected capacity change from 0 to 164 [ 75.212872][ T3523] Alternate GPT is invalid, using primary GPT. [ 75.219710][ T3523] loop0: p2 p3 p7 [ 75.297713][ T5702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.707'. [ 75.314303][ T5700] EXT4-fs (loop2): 1 orphan inode deleted [ 75.325951][ T5700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.373257][ T3306] Alternate GPT is invalid, using primary GPT. [ 75.379583][ T3306] loop1: p2 p3 p7 [ 75.434825][ T5700] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.484516][ T5700] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.706: iget: bad i_size value: 360287970189639690 [ 75.518886][ T5697] Alternate GPT is invalid, using primary GPT. [ 75.525428][ T5697] loop0: p2 p3 p7 [ 75.540727][ T5698] Alternate GPT is invalid, using primary GPT. [ 75.547172][ T5698] loop1: p2 p3 p7 [ 75.629235][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.726769][ T5710] syz.3.708 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 75.737711][ T5710] CPU: 1 UID: 0 PID: 5710 Comm: syz.3.708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.737736][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.737747][ T5710] Call Trace: [ 75.737753][ T5710] [ 75.737807][ T5710] __dump_stack+0x1d/0x30 [ 75.737834][ T5710] dump_stack_lvl+0x95/0xd0 [ 75.737858][ T5710] dump_stack+0x15/0x1b [ 75.737877][ T5710] dump_header+0x81/0x240 [ 75.737895][ T5710] oom_kill_process+0x295/0x350 [ 75.737917][ T5710] out_of_memory+0x97b/0xb80 [ 75.737982][ T5710] try_charge_memcg+0x610/0xa10 [ 75.738024][ T5710] charge_memcg+0x51/0xc0 [ 75.738056][ T5710] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 75.738131][ T5710] __read_swap_cache_async+0x17b/0x2d0 [ 75.738167][ T5710] swap_cluster_readahead+0x262/0x3c0 [ 75.738204][ T5710] swapin_readahead+0xde/0x820 [ 75.738327][ T5710] ? sized_strscpy+0x121/0x1a0 [ 75.738352][ T5710] ? __rcu_read_unlock+0x4f/0x70 [ 75.738371][ T5710] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 75.738460][ T5710] ? __rcu_read_unlock+0x4f/0x70 [ 75.738477][ T5710] ? __rcu_read_unlock+0x4f/0x70 [ 75.738493][ T5710] ? swap_cache_get_folio+0x277/0x280 [ 75.738523][ T5710] do_swap_page+0x2b4/0x21e0 [ 75.738569][ T5710] ? _raw_spin_unlock+0x26/0x50 [ 75.738591][ T5710] ? __schedule+0x85f/0xcd0 [ 75.738613][ T5710] ? __pfx_default_wake_function+0x10/0x10 [ 75.738647][ T5710] handle_mm_fault+0x9d8/0x2c60 [ 75.738769][ T5710] do_user_addr_fault+0x630/0x1080 [ 75.738813][ T5710] exc_page_fault+0x62/0xa0 [ 75.738842][ T5710] asm_exc_page_fault+0x26/0x30 [ 75.738864][ T5710] RIP: 0033:0x7fa7d9ae2008 [ 75.738880][ T5710] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 75.738899][ T5710] RSP: 002b:00007fa7d84edf80 EFLAGS: 00010293 [ 75.738916][ T5710] RAX: 0000000000000000 RBX: 00007fa7d9d06090 RCX: 00007fa7d9ae2005 [ 75.739006][ T5710] RDX: 00007fa7d84edfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.739017][ T5710] RBP: 00007fa7d9b33f91 R08: 0000000000000000 R09: 0000000000000000 [ 75.739028][ T5710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.739115][ T5710] R13: 00007fa7d9d06128 R14: 00007fa7d9d06090 R15: 00007ffd8d2aa008 [ 75.739155][ T5710] [ 75.967487][ T5710] memory: usage 265080kB, limit 307200kB, failcnt 3025 [ 75.974406][ T5710] memory+swap: usage 265392kB, limit 9007199254740988kB, failcnt 0 [ 75.982354][ T5710] kmem: usage 248316kB, limit 9007199254740988kB, failcnt 0 [ 75.989719][ T5710] Memory cgroup stats for /syz3: [ 76.029354][ T5710] cache 528384 [ 76.037888][ T5710] rss 20480 [ 76.040976][ T5710] shmem 0 [ 76.043978][ T5710] mapped_file 8192 [ 76.047767][ T5710] dirty 8192 [ 76.051056][ T5710] writeback 0 [ 76.054366][ T5710] workingset_refault_anon 94 [ 76.058970][ T5710] workingset_refault_file 252 [ 76.063744][ T5710] swap 303104 [ 76.067027][ T5710] swapcached 12288 [ 76.070744][ T5710] pgpgin 74845 [ 76.074137][ T5710] pgpgout 74710 [ 76.077594][ T5710] pgfault 46192 [ 76.081028][ T5710] pgmajfault 90 [ 76.084539][ T5710] inactive_anon 0 [ 76.085552][ T5720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.712'. [ 76.088239][ T5710] active_anon 24576 [ 76.088249][ T5710] inactive_file 0 [ 76.088263][ T5710] active_file 528384 [ 76.107197][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 76.107212][ T29] audit: type=1326 audit(1768536906.605:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.108421][ T5710] unevictable 0 [ 76.108429][ T5710] hierarchical_memory_limit 314572800 [ 76.108437][ T5710] hierarchical_memsw_limit 9223372036854771712 [ 76.108446][ T5710] total_cache 528384 [ 76.114722][ T29] audit: type=1326 audit(1768536906.605:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.114748][ T29] audit: type=1326 audit(1768536906.605:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.114771][ T29] audit: type=1326 audit(1768536906.605:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.114794][ T29] audit: type=1326 audit(1768536906.605:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.138213][ T5710] total_rss 20480 [ 76.138224][ T5710] total_shmem 0 [ 76.138231][ T5710] total_mapped_file 8192 [ 76.141697][ T29] audit: type=1326 audit(1768536906.605:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.147032][ T5710] total_dirty 8192 [ 76.147042][ T5710] total_writeback 0 [ 76.153380][ T29] audit: type=1326 audit(1768536906.605:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.157224][ T5710] total_workingset_refault_anon 94 [ 76.157237][ T5710] total_workingset_refault_file 252 [ 76.180540][ T29] audit: type=1326 audit(1768536906.605:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.180567][ T29] audit: type=1326 audit(1768536906.605:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.180597][ T29] audit: type=1326 audit(1768536906.605:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5714 comm="syz.2.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 76.204015][ T5710] total_swap 303104 [ 76.278302][ T5713] EXT4-fs (loop0): 1 orphan inode deleted [ 76.285164][ T5710] total_swapcached 12288 [ 76.289197][ T5713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.292727][ T5710] total_pgpgin 74845 [ 76.292737][ T5710] total_pgpgout 74710 [ 76.319663][ T5713] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.321441][ T5710] total_pgfault 46192 [ 76.349331][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 76.350041][ T5710] total_pgmajfault 90 [ 76.376194][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 76.396498][ T5710] total_inactive_anon 0 [ 76.396508][ T5710] total_active_anon 24576 [ 76.396516][ T5710] total_inactive_file 0 [ 76.396524][ T5710] total_active_file 528384 [ 76.429568][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 76.430681][ T5710] total_unevictable 0 [ 76.494584][ T5713] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.711: iget: bad i_size value: 360287970189639690 [ 76.495759][ T5710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.708,pid=5706,uid=0 [ 76.527001][ T5710] Memory cgroup out of memory: Killed process 5706 (syz.3.708) total-vm:93968kB, anon-rss:1168kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 76.532346][ T5724] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 76.601836][ T5723] team0: Port device bond0 removed [ 76.625360][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.721451][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.730237][ T5724] team0: Port device bond0 added [ 76.737297][ T5734] netlink: 'syz.3.715': attribute type 13 has an invalid length. [ 76.746908][ T5734] gretap0: refused to change device tx_queue_len [ 76.767398][ T5734] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 76.942828][ T5759] netlink: 'syz.2.726': attribute type 13 has an invalid length. [ 76.988515][ T5759] gretap0: refused to change device tx_queue_len [ 77.042245][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 77.051101][ T5759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 77.053236][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.053264][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.053277][ T3319] Call Trace: [ 77.053350][ T3319] [ 77.053358][ T3319] __dump_stack+0x1d/0x30 [ 77.053417][ T3319] dump_stack_lvl+0x95/0xd0 [ 77.053438][ T3319] dump_stack+0x15/0x1b [ 77.053481][ T3319] dump_header+0x81/0x240 [ 77.053502][ T3319] oom_kill_process+0x295/0x350 [ 77.053603][ T3319] out_of_memory+0x97b/0xb80 [ 77.053626][ T3319] try_charge_memcg+0x610/0xa10 [ 77.053703][ T3319] charge_memcg+0x51/0xc0 [ 77.053733][ T3319] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 77.053825][ T3319] __read_swap_cache_async+0x17b/0x2d0 [ 77.053857][ T3319] swap_cluster_readahead+0x262/0x3c0 [ 77.053891][ T3319] swapin_readahead+0xde/0x820 [ 77.053956][ T3319] ? __rcu_read_unlock+0x4f/0x70 [ 77.053976][ T3319] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 77.053999][ T3319] ? __list_add_valid_or_report+0x38/0xe0 [ 77.054040][ T3319] ? __rcu_read_unlock+0x4f/0x70 [ 77.054059][ T3319] ? swap_cache_get_folio+0x277/0x280 [ 77.054122][ T3319] do_swap_page+0x2b4/0x21e0 [ 77.054148][ T3319] ? _raw_spin_unlock+0x26/0x50 [ 77.054173][ T3319] ? __schedule+0x85f/0xcd0 [ 77.054211][ T3319] ? __pfx_default_wake_function+0x10/0x10 [ 77.054246][ T3319] handle_mm_fault+0x9d8/0x2c60 [ 77.054285][ T3319] do_user_addr_fault+0x630/0x1080 [ 77.054393][ T3319] exc_page_fault+0x62/0xa0 [ 77.054473][ T3319] asm_exc_page_fault+0x26/0x30 [ 77.054493][ T3319] RIP: 0033:0x7fc58eda1fc5 [ 77.054509][ T3319] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 77.054527][ T3319] RSP: 002b:00007ffd657bf9f8 EFLAGS: 00010246 [ 77.054543][ T3319] RAX: 0000000000000000 RBX: 00000000000001a2 RCX: 00007fc58eda1fc3 [ 77.054612][ T3319] RDX: 00007ffd657bfa10 RSI: 0000000000000000 RDI: 0000000000000000 [ 77.054625][ T3319] RBP: 00007ffd657bfa7c R08: 000000002ebb579d R09: 0000000000000000 [ 77.054638][ T3319] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 77.054650][ T3319] R13: 00000000000927c0 R14: 0000000000013387 R15: 00007ffd657bfad0 [ 77.054669][ T3319] [ 77.054676][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 1635 [ 77.299631][ T3319] memory+swap: usage 160744kB, limit 9007199254740988kB, failcnt 0 [ 77.307618][ T3319] kmem: usage 157648kB, limit 9007199254740988kB, failcnt 0 [ 77.314954][ T3319] Memory cgroup stats for /syz1: [ 77.338911][ T3319] cache 0 [ 77.346807][ T3319] rss 4096 [ 77.349866][ T3319] shmem 0 [ 77.352803][ T3319] mapped_file 0 [ 77.356266][ T3319] dirty 0 [ 77.359293][ T3319] writeback 4096 [ 77.362833][ T3319] workingset_refault_anon 139 [ 77.367521][ T3319] workingset_refault_file 717 [ 77.372256][ T3319] swap 184320 [ 77.375582][ T3319] swapcached 12288 [ 77.379336][ T3319] pgpgin 50833 [ 77.382705][ T3319] pgpgout 50829 [ 77.386252][ T3319] pgfault 60562 [ 77.389737][ T3319] pgmajfault 96 [ 77.393269][ T3319] inactive_anon 4096 [ 77.397185][ T3319] active_anon 12288 [ 77.400987][ T3319] inactive_file 0 [ 77.404815][ T3319] active_file 0 [ 77.408413][ T3319] unevictable 0 [ 77.411934][ T3319] hierarchical_memory_limit 314572800 [ 77.417387][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 77.423540][ T3319] total_cache 0 [ 77.427026][ T3319] total_rss 4096 [ 77.430567][ T3319] total_shmem 0 [ 77.434044][ T3319] total_mapped_file 0 [ 77.438012][ T3319] total_dirty 0 [ 77.441554][ T3319] total_writeback 4096 [ 77.445738][ T3319] total_workingset_refault_anon 139 [ 77.450925][ T3319] total_workingset_refault_file 717 [ 77.456211][ T3319] total_swap 184320 [ 77.460012][ T3319] total_swapcached 12288 [ 77.464269][ T3319] total_pgpgin 50833 [ 77.468229][ T3319] total_pgpgout 50829 [ 77.472233][ T3319] total_pgfault 60562 [ 77.476204][ T3319] total_pgmajfault 96 [ 77.480179][ T3319] total_inactive_anon 4096 [ 77.484623][ T3319] total_active_anon 12288 [ 77.488940][ T3319] total_inactive_file 0 [ 77.493101][ T3319] total_active_file 0 [ 77.497081][ T3319] total_unevictable 0 [ 77.501073][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.725,pid=5756,uid=0 [ 77.515648][ T3319] Memory cgroup out of memory: Killed process 5756 (syz.1.725) total-vm:93968kB, anon-rss:1268kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 77.742129][ T5802] set_capacity_and_notify: 4 callbacks suppressed [ 77.742240][ T5802] loop0: detected capacity change from 0 to 1024 [ 77.765393][ T5802] EXT4-fs: Ignoring removed bh option [ 77.792039][ T5802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.824976][ T5812] loop1: detected capacity change from 0 to 512 [ 77.845235][ T5812] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.858215][ T5812] EXT4-fs (loop1): 1 truncate cleaned up [ 77.867496][ T5812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.908977][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.913828][ T5816] loop2: detected capacity change from 0 to 1024 [ 77.931176][ T5816] EXT4-fs: Ignoring removed orlov option [ 77.944208][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.095034][ T5816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.347231][ T5830] loop1: detected capacity change from 0 to 2048 [ 78.523240][ T5830] Alternate GPT is invalid, using primary GPT. [ 78.529621][ T5830] loop1: p2 p3 p7 [ 78.642550][ T5847] loop0: detected capacity change from 0 to 512 [ 78.666996][ T5847] EXT4-fs (loop0): 1 orphan inode deleted [ 78.679179][ T5847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.691958][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 78.704028][ T5847] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.732080][ T5847] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.754: iget: bad i_size value: 360287970189639690 [ 78.813869][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.860576][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 78.881267][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 78.895912][ T5859] loop1: detected capacity change from 0 to 512 [ 78.900545][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 78.911894][ T5859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 78.925492][ T5862] loop3: detected capacity change from 0 to 512 [ 79.028914][ T5859] EXT4-fs (loop1): 1 truncate cleaned up [ 79.035995][ T5859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.049478][ T5862] EXT4-fs (loop3): 1 orphan inode deleted [ 79.055690][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 79.065647][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.069194][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.089742][ T5862] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.431766][ T5862] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.758: iget: bad i_size value: 360287970189639690 [ 79.475079][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.485726][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.619574][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.629293][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.629918][ T5884] team0: Port device bond0 removed [ 79.666331][ T5887] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 79.693354][ T5887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.701600][ T5887] team0: Port device bond0 added [ 79.765318][ T5891] loop4: detected capacity change from 0 to 512 [ 79.816637][ T5891] EXT4-fs (loop4): 1 orphan inode deleted [ 79.832729][ T5891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.845380][ T53] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 79.861634][ T5891] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.913234][ T5891] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.767: iget: bad i_size value: 360287970189639690 [ 79.954412][ T5900] loop0: detected capacity change from 0 to 512 [ 79.990361][ T5900] EXT4-fs (loop0): 1 orphan inode deleted [ 80.005446][ T53] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 80.020745][ T5894] syz.1.769 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 80.031719][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.1.769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.031819][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.031831][ T5894] Call Trace: [ 80.031852][ T5894] [ 80.031860][ T5894] __dump_stack+0x1d/0x30 [ 80.032011][ T5894] dump_stack_lvl+0x95/0xd0 [ 80.032031][ T5894] dump_stack+0x15/0x1b [ 80.032126][ T5894] dump_header+0x81/0x240 [ 80.032152][ T5894] oom_kill_process+0x295/0x350 [ 80.032175][ T5894] out_of_memory+0x97b/0xb80 [ 80.032199][ T5894] try_charge_memcg+0x610/0xa10 [ 80.032303][ T5894] charge_memcg+0x51/0xc0 [ 80.032372][ T5894] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 80.032481][ T5894] __read_swap_cache_async+0x17b/0x2d0 [ 80.032512][ T5894] swap_cluster_readahead+0x262/0x3c0 [ 80.032544][ T5894] swapin_readahead+0xde/0x820 [ 80.032625][ T5894] ? plist_check_list+0x199/0x1b0 [ 80.032694][ T5894] ? __rcu_read_unlock+0x4f/0x70 [ 80.032713][ T5894] ? swap_cache_get_folio+0x277/0x280 [ 80.032742][ T5894] do_swap_page+0x2b4/0x21e0 [ 80.032768][ T5894] ? __pfx_futex_wake_mark+0x10/0x10 [ 80.032867][ T5894] ? __pfx_default_wake_function+0x10/0x10 [ 80.032903][ T5894] handle_mm_fault+0x9d8/0x2c60 [ 80.032947][ T5894] do_user_addr_fault+0x630/0x1080 [ 80.032976][ T5894] exc_page_fault+0x62/0xa0 [ 80.033004][ T5894] asm_exc_page_fault+0x26/0x30 [ 80.033022][ T5894] RIP: 0033:0x7fc58ed6f75b [ 80.033097][ T5894] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 80.033117][ T5894] RSP: 002b:00007ffd657bf818 EFLAGS: 00010213 [ 80.033134][ T5894] RAX: 000000000000006e RBX: 0000000000013f6e RCX: ffffffffffffffa8 [ 80.033155][ T5894] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc58efc5fac [ 80.033170][ T5894] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 00000009657bfb0f [ 80.033181][ T5894] R10: 00007ffd657bf910 R11: 0000000000000246 R12: 00007fc58efc5fac [ 80.033192][ T5894] R13: 00007ffd657bf910 R14: 0000000000013fa0 R15: 00007ffd657bf930 [ 80.033231][ T5894] [ 80.033237][ T5894] memory: usage 307200kB, limit 307200kB, failcnt 1947 [ 80.057047][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.059281][ T5894] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 80.218424][ T5900] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.221664][ T5894] kmem: usage 248kB, limit 9007199254740988kB, failcnt 0 [ 80.253396][ T5900] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.770: iget: bad i_size value: 360287970189639690 [ 80.260216][ T5894] Memory cgroup stats for /syz1: [ 80.298354][ T5894] cache 0 [ 80.301760][ T5904] netlink: 64 bytes leftover after parsing attributes in process `syz.3.771'. [ 80.303319][ T5894] rss 24576 [ 80.318267][ T5894] shmem 0 [ 80.321267][ T5894] mapped_file 0 [ 80.324832][ T5894] dirty 0 [ 80.327798][ T5894] writeback 0 [ 80.331100][ T5894] workingset_refault_anon 192 [ 80.335818][ T5894] workingset_refault_file 845 [ 80.340523][ T5894] swap 172032 [ 80.343882][ T5894] swapcached 20480 [ 80.347612][ T5894] pgpgin 55441 [ 80.351018][ T5894] pgpgout 55433 [ 80.354472][ T5894] pgfault 65794 [ 80.357980][ T5894] pgmajfault 126 [ 80.361538][ T5894] inactive_anon 0 [ 80.365174][ T5894] active_anon 32768 [ 80.369012][ T5894] inactive_file 0 [ 80.372635][ T5894] active_file 0 [ 80.376209][ T5894] unevictable 0 [ 80.379774][ T5894] hierarchical_memory_limit 314572800 [ 80.385168][ T5894] hierarchical_memsw_limit 9223372036854771712 [ 80.391372][ T5894] total_cache 0 [ 80.394903][ T5894] total_rss 24576 [ 80.398574][ T5894] total_shmem 0 [ 80.402034][ T5894] total_mapped_file 0 [ 80.406133][ T5894] total_dirty 0 [ 80.409584][ T5894] total_writeback 0 [ 80.413416][ T5894] total_workingset_refault_anon 192 [ 80.418649][ T5894] total_workingset_refault_file 845 [ 80.423843][ T5894] total_swap 172032 [ 80.427727][ T5894] total_swapcached 20480 [ 80.431990][ T5894] total_pgpgin 55441 [ 80.435925][ T5894] total_pgpgout 55433 [ 80.439902][ T5894] total_pgfault 65794 [ 80.443916][ T5894] total_pgmajfault 126 [ 80.448082][ T5894] total_inactive_anon 0 [ 80.452248][ T5894] total_active_anon 32768 [ 80.456657][ T5894] total_inactive_file 0 [ 80.460813][ T5894] total_active_file 0 [ 80.464869][ T5894] total_unevictable 0 [ 80.468854][ T5894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.769,pid=5894,uid=0 [ 80.471821][ T5907] netlink: 'syz.2.772': attribute type 13 has an invalid length. [ 80.483534][ T5894] Memory cgroup out of memory: Killed process 5894 (syz.1.769) total-vm:93836kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 80.508946][ T5907] gretap0: refused to change device tx_queue_len [ 80.516826][ T5907] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.533420][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.572914][ T5909] loop4: detected capacity change from 0 to 512 [ 80.581597][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.684939][ T5909] EXT4-fs (loop4): 1 orphan inode deleted [ 80.701122][ T3732] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 80.725439][ T5909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.730223][ T5930] netlink: 72 bytes leftover after parsing attributes in process `syz.1.781'. [ 80.760087][ T5909] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.771354][ T5930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.781'. [ 80.786634][ T5929] team0: Port device bond0 removed [ 80.804298][ T5934] netlink: 'syz.0.779': attribute type 10 has an invalid length. [ 80.804580][ T5935] netlink: 64 bytes leftover after parsing attributes in process `syz.1.782'. [ 80.862875][ T5909] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.773: iget: bad i_size value: 360287970189639690 [ 80.877703][ T3523] Alternate GPT is invalid, using primary GPT. [ 80.884021][ T3523] loop3: p2 p3 p7 [ 80.901169][ T5929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.928343][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.937495][ T5939] EXT4-fs (loop1): 1 orphan inode deleted [ 80.944715][ T53] __quota_error: 444 callbacks suppressed [ 80.944749][ T53] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 80.960354][ T53] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 80.972731][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.989135][ T5934] team0: Port device bond0 added [ 80.997957][ T5932] Alternate GPT is invalid, using primary GPT. [ 81.004587][ T5932] loop3: p2 p3 p7 [ 81.019692][ T5939] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.019983][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.080631][ T5939] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.783: iget: bad i_size value: 360287970189639690 [ 81.097197][ T3004] Alternate GPT is invalid, using primary GPT. [ 81.103724][ T3004] loop3: p2 p3 p7 [ 81.159755][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.225755][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'. [ 81.258664][ T5956] EXT4-fs (loop0): 1 orphan inode deleted [ 81.272437][ T52] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 81.282332][ T52] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 81.298322][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.314153][ T5956] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.325847][ T29] audit: type=1326 audit(1768536912.138:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 81.349284][ T29] audit: type=1326 audit(1768536912.138:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 81.372695][ T29] audit: type=1326 audit(1768536912.138:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 81.395955][ T29] audit: type=1326 audit(1768536912.138:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 81.419265][ T29] audit: type=1326 audit(1768536912.138:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5953 comm="syz.1.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 81.627350][ T5962] netlink: 'syz.1.788': attribute type 13 has an invalid length. [ 81.649568][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 81.654751][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 81.684970][ T5962] gretap0: refused to change device tx_queue_len [ 81.697590][ T5962] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 81.734414][ T5956] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.787: iget: bad i_size value: 360287970189639690 [ 81.753688][ T29] audit: type=1326 audit(1768536912.589:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9aaf749 code=0x7ffc0000 [ 81.777156][ T29] audit: type=1326 audit(1768536912.589:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d9aaf749 code=0x7ffc0000 [ 81.800477][ T29] audit: type=1326 audit(1768536912.589:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5968 comm="syz.3.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7d9aaf749 code=0x7ffc0000 [ 81.869624][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.924577][ T5973] netlink: 64 bytes leftover after parsing attributes in process `syz.3.794'. [ 81.990504][ T5976] netlink: 64 bytes leftover after parsing attributes in process `syz.0.793'. [ 82.124073][ T5984] EXT4-fs: Ignoring removed orlov option [ 82.132480][ T3306] Alternate GPT is invalid, using primary GPT. [ 82.138899][ T3306] loop4: p2 p3 p7 [ 82.169121][ T5980] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 82.180201][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.220710][ T3004] Alternate GPT is invalid, using primary GPT. [ 82.227264][ T3004] loop4: p2 p3 p7 [ 82.355074][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.800'. [ 82.573949][ T5997] netlink: 'syz.0.802': attribute type 13 has an invalid length. [ 82.615623][ T5997] gretap0: refused to change device tx_queue_len [ 82.690547][ T5997] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 82.737595][ T6000] set_capacity_and_notify: 5 callbacks suppressed [ 82.737747][ T6000] loop1: detected capacity change from 0 to 512 [ 82.790643][ T6000] EXT4-fs (loop1): 1 orphan inode deleted [ 82.807182][ T6000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.821903][ T53] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 82.892321][ T6008] netlink: 64 bytes leftover after parsing attributes in process `syz.4.806'. [ 82.913219][ T6000] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.931285][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 83.056726][ T6010] netlink: 'syz.0.807': attribute type 13 has an invalid length. [ 83.068386][ T6000] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.803: iget: bad i_size value: 360287970189639690 [ 83.082234][ T6010] gretap0: refused to change device tx_queue_len [ 83.089449][ T6010] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 83.153835][ T6014] loop4: detected capacity change from 0 to 164 [ 83.283596][ T6016] loop4: detected capacity change from 0 to 2048 [ 83.398904][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.438873][ T3523] Alternate GPT is invalid, using primary GPT. [ 83.445249][ T3523] loop4: p2 p3 p7 [ 83.538504][ T6020] netlink: 72 bytes leftover after parsing attributes in process `syz.0.812'. [ 83.591575][ T6021] loop2: detected capacity change from 0 to 2048 [ 83.640155][ T6016] Alternate GPT is invalid, using primary GPT. [ 83.646585][ T6016] loop4: p2 p3 p7 [ 83.667372][ T3306] Alternate GPT is invalid, using primary GPT. [ 83.673815][ T3306] loop2: p2 p3 p7 [ 83.700811][ T6021] Alternate GPT is invalid, using primary GPT. [ 83.707255][ T6021] loop2: p2 p3 p7 [ 83.791347][ T6033] loop1: detected capacity change from 0 to 512 [ 83.828617][ T6033] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.831635][ T6047] loop4: detected capacity change from 0 to 512 [ 83.858644][ T6033] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 83.865697][ T6047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.901760][ T6047] EXT4-fs (loop4): 1 truncate cleaned up [ 83.909413][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 83.912069][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 83.925332][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 83.976503][ T4948] udevd[4948]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 83.978048][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 83.987477][ T4191] udevd[4191]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 84.029164][ T6060] loop0: detected capacity change from 0 to 512 [ 84.234683][ T6091] team0: Port device bond0 removed [ 84.274717][ T6091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.291686][ T6097] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 84.300342][ T6097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.318263][ T6097] team0: Port device bond0 added [ 84.359929][ T6099] loop2: detected capacity change from 0 to 2048 [ 84.407929][ T3523] Alternate GPT is invalid, using primary GPT. [ 84.414243][ T3523] loop2: p2 p3 p7 [ 84.447394][ T6099] Alternate GPT is invalid, using primary GPT. [ 84.453772][ T6099] loop2: p2 p3 p7 [ 84.457738][ T6107] loop1: detected capacity change from 0 to 2048 [ 84.458786][ T3499] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.494195][ T3507] Alternate GPT is invalid, using primary GPT. [ 84.500495][ T3507] loop1: p2 p3 p7 [ 84.506878][ T6109] loop3: detected capacity change from 0 to 128 [ 84.518771][ T6106] FAULT_INJECTION: forcing a failure. [ 84.518771][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 84.531532][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.4.832 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.531561][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.531603][ T6106] Call Trace: [ 84.531610][ T6106] [ 84.531617][ T6106] __dump_stack+0x1d/0x30 [ 84.531692][ T6106] dump_stack_lvl+0x95/0xd0 [ 84.531733][ T6106] dump_stack+0x15/0x1b [ 84.531752][ T6106] should_fail_ex+0x265/0x280 [ 84.531815][ T6106] should_failslab+0x8c/0xb0 [ 84.531839][ T6106] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 84.531862][ T6106] ? __alloc_skb+0x2ff/0x4b0 [ 84.531888][ T6106] __alloc_skb+0x2ff/0x4b0 [ 84.531978][ T6106] ? __alloc_skb+0x228/0x4b0 [ 84.532002][ T6106] audit_log_start+0x3a0/0x720 [ 84.532076][ T6106] ? kstrtouint+0x76/0xc0 [ 84.532109][ T6106] audit_seccomp+0x48/0x100 [ 84.532226][ T6106] ? __seccomp_filter+0x832/0x1260 [ 84.532300][ T6106] __seccomp_filter+0x843/0x1260 [ 84.532325][ T6106] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.532409][ T6106] ? vfs_write+0x7e8/0x960 [ 84.532430][ T6106] __secure_computing+0x82/0x150 [ 84.532454][ T6106] syscall_trace_enter+0xcf/0x1e0 [ 84.532507][ T6106] do_syscall_64+0xa4/0x2b0 [ 84.532525][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.532543][ T6106] RIP: 0033:0x7f516912f749 [ 84.532557][ T6106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.532573][ T6106] RSP: 002b:00007f5167b8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.532591][ T6106] RAX: ffffffffffffffda RBX: 00007f5169385fa0 RCX: 00007f516912f749 [ 84.532623][ T6106] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 84.532634][ T6106] RBP: 00007f5167b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 84.532645][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.532656][ T6106] R13: 00007f5169386038 R14: 00007f5169385fa0 R15: 00007fff80d0c788 [ 84.532672][ T6106] [ 84.537315][ T3523] udevd[3523]: symlink '../../loop3' '/dev/disk/by-diskseq/345.tmp-b7:3' failed: Read-only file system [ 84.564177][ T6113] ext4: Unknown parameter 'nouser_xattr' [ 84.635387][ T6106] openvswitch: netlink: Missing key (keys=40, expected=100) [ 84.764011][ T3499] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.775924][ T6107] Alternate GPT is invalid, using primary GPT. [ 84.782400][ T6107] loop1: p2 p3 p7 [ 85.143094][ T6158] FAULT_INJECTION: forcing a failure. [ 85.143094][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 85.155799][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.2.842 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.155828][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.155841][ T6158] Call Trace: [ 85.155849][ T6158] [ 85.155858][ T6158] __dump_stack+0x1d/0x30 [ 85.155886][ T6158] dump_stack_lvl+0x95/0xd0 [ 85.155909][ T6158] dump_stack+0x15/0x1b [ 85.155979][ T6158] should_fail_ex+0x265/0x280 [ 85.156000][ T6158] should_failslab+0x8c/0xb0 [ 85.156022][ T6158] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 85.156081][ T6158] ? snd_timer_instance_new+0x4a/0x160 [ 85.156114][ T6158] ? should_failslab+0x8c/0xb0 [ 85.156210][ T6158] kstrdup+0x3e/0xd0 [ 85.156316][ T6158] snd_timer_instance_new+0x4a/0x160 [ 85.156380][ T6158] snd_seq_timer_open+0x12b/0x360 [ 85.156404][ T6158] ? snd_timer_instance_free+0x5f/0x70 [ 85.156437][ T6158] ? kfree+0x10e/0x3c0 [ 85.156457][ T6158] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 85.156528][ T6158] snd_seq_queue_timer_open+0xaf/0x140 [ 85.156546][ T6158] snd_seq_ioctl_set_queue_timer+0x148/0x1b0 [ 85.156574][ T6158] snd_seq_ioctl+0x177/0x300 [ 85.156655][ T6158] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 85.156683][ T6158] __se_sys_ioctl+0xce/0x140 [ 85.156715][ T6158] __x64_sys_ioctl+0x43/0x50 [ 85.156826][ T6158] x64_sys_call+0x14b0/0x3000 [ 85.156849][ T6158] do_syscall_64+0xca/0x2b0 [ 85.156899][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.156951][ T6158] RIP: 0033:0x7f2d3b35f749 [ 85.157010][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.157028][ T6158] RSP: 002b:00007f2d39dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.157104][ T6158] RAX: ffffffffffffffda RBX: 00007f2d3b5b5fa0 RCX: 00007f2d3b35f749 [ 85.157154][ T6158] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000006 [ 85.157166][ T6158] RBP: 00007f2d39dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 85.157179][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.157192][ T6158] R13: 00007f2d3b5b6038 R14: 00007f2d3b5b5fa0 R15: 00007fff7ddd6538 [ 85.157211][ T6158] [ 85.467340][ T6162] EXT4-fs (loop2): 1 orphan inode deleted [ 85.482144][ T2286] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 85.491269][ T6162] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.567090][ T6162] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.844: iget: bad i_size value: 360287970189639690 [ 85.711724][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 85.711743][ T29] audit: type=1326 audit(1768536916.747:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 85.741284][ T6109] Trying to write to read-only block-device loop3 [ 85.741352][ T6109] syz.3.833: attempt to access beyond end of device [ 85.741352][ T6109] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 85.741474][ T6109] syz.3.833: attempt to access beyond end of device [ 85.741474][ T6109] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 85.785054][ T6109] syz.3.833: attempt to access beyond end of device [ 85.785054][ T6109] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 85.798545][ T6109] syz.3.833: attempt to access beyond end of device [ 85.798545][ T6109] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 85.812492][ T6109] syz.3.833: attempt to access beyond end of device [ 85.812492][ T6109] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 85.826023][ T6109] syz.3.833: attempt to access beyond end of device [ 85.826023][ T6109] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 85.830487][ T6178] __nla_validate_parse: 9 callbacks suppressed [ 85.830528][ T6178] netlink: 64 bytes leftover after parsing attributes in process `syz.2.848'. [ 85.839963][ T6109] syz.3.833: attempt to access beyond end of device [ 85.839963][ T6109] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 85.877942][ T6109] syz.3.833: attempt to access beyond end of device [ 85.877942][ T6109] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 85.901254][ T6109] syz.3.833: attempt to access beyond end of device [ 85.901254][ T6109] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 85.944067][ T29] audit: type=1326 audit(1768536916.747:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 85.968116][ T29] audit: type=1326 audit(1768536916.747:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 85.991912][ T6109] syz.3.833: attempt to access beyond end of device [ 85.991912][ T6109] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 86.004501][ T6181] FAULT_INJECTION: forcing a failure. [ 86.004501][ T6181] name failslab, interval 1, probability 0, space 0, times 0 [ 86.005721][ T29] audit: type=1400 audit(1768536916.747:5042): avc: denied { mounton } for pid=6108 comm="syz.3.833" path="/156/file0" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 86.018290][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.2.849 Not tainted syzkaller #0 PREEMPT(voluntary) [ 86.018412][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.018423][ T6181] Call Trace: [ 86.018431][ T6181] [ 86.018440][ T6181] __dump_stack+0x1d/0x30 [ 86.018526][ T6181] dump_stack_lvl+0x95/0xd0 [ 86.018554][ T6181] dump_stack+0x15/0x1b [ 86.018625][ T6181] should_fail_ex+0x265/0x280 [ 86.018649][ T6181] should_failslab+0x8c/0xb0 [ 86.018729][ T6181] __kmalloc_cache_noprof+0x65/0x4c0 [ 86.018754][ T6181] ? proc_cgroup_show+0x3f/0x610 [ 86.018794][ T6181] proc_cgroup_show+0x3f/0x610 [ 86.018817][ T6181] ? __rcu_read_unlock+0x4f/0x70 [ 86.018838][ T6181] proc_single_show+0x8c/0x120 [ 86.018915][ T6181] traverse+0x149/0x3a0 [ 86.018946][ T6181] seq_read_iter+0x85f/0x950 [ 86.018975][ T6181] ? _parse_integer+0x27/0x40 [ 86.018996][ T6181] seq_read+0x270/0x2b0 [ 86.019087][ T6181] ? __pfx_seq_read+0x10/0x10 [ 86.019123][ T6181] vfs_readv+0x3fb/0x690 [ 86.019154][ T6181] __x64_sys_preadv+0xfd/0x1c0 [ 86.019175][ T6181] x64_sys_call+0x2805/0x3000 [ 86.019245][ T6181] do_syscall_64+0xca/0x2b0 [ 86.019266][ T6181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.019356][ T6181] RIP: 0033:0x7f2d3b35f749 [ 86.019371][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.019389][ T6181] RSP: 002b:00007f2d39dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 86.019465][ T6181] RAX: ffffffffffffffda RBX: 00007f2d3b5b5fa0 RCX: 00007f2d3b35f749 [ 86.019478][ T6181] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 86.019491][ T6181] RBP: 00007f2d39dbf090 R08: 000000000000fff5 R09: 0000000000000000 [ 86.019504][ T6181] R10: 000000000000012e R11: 0000000000000246 R12: 0000000000000001 [ 86.019516][ T6181] R13: 00007f2d3b5b6038 R14: 00007f2d3b5b5fa0 R15: 00007fff7ddd6538 [ 86.019557][ T6181] [ 86.236644][ T29] audit: type=1326 audit(1768536916.820:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 86.260132][ T29] audit: type=1326 audit(1768536916.820:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 86.283520][ T29] audit: type=1326 audit(1768536916.820:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 86.306852][ T29] audit: type=1326 audit(1768536916.820:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 86.330441][ T29] audit: type=1326 audit(1768536916.820:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 86.353761][ T29] audit: type=1326 audit(1768536916.820:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d3b35f749 code=0x7ffc0000 [ 86.421957][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 86.506491][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.851'. [ 86.635438][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 86.637876][ T6193] netlink: 72 bytes leftover after parsing attributes in process `syz.1.854'. [ 86.657406][ T6190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 86.671826][ T3523] udevd[3523]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system [ 86.712647][ T6195] EXT4-fs (loop2): 1 orphan inode deleted [ 86.726580][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/353.tmp-b7:2' failed: Read-only file system [ 86.737803][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 86.741917][ T6193] netlink: 64 bytes leftover after parsing attributes in process `syz.1.854'. [ 86.762702][ T6195] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.793683][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 86.828038][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system [ 86.857506][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/354.tmp-b7:2' failed: Read-only file system [ 86.883381][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/351.tmp-b7:1' failed: Read-only file system [ 86.893228][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 86.901172][ T6195] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.855: iget: bad i_size value: 360287970189639690 [ 86.931650][ T3306] Alternate GPT is invalid, using primary GPT. [ 86.933842][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/354.tmp-b7:2' failed: Read-only file system [ 86.937976][ T3306] loop1: p2 p3 p7 [ 86.965510][ T6207] Alternate GPT is invalid, using primary GPT. [ 86.972464][ T6207] loop1: p2 p3 p7 [ 86.983563][ T3004] Alternate GPT is invalid, using primary GPT. [ 86.990074][ T3004] loop1: p2 p3 p7 [ 87.040717][ T6211] EXT4-fs (loop0): 1 orphan inode deleted [ 87.048426][ T6217] FAULT_INJECTION: forcing a failure. [ 87.048426][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 87.061119][ T6217] CPU: 1 UID: 0 PID: 6217 Comm: syz.2.863 Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.061219][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.061231][ T6217] Call Trace: [ 87.061238][ T6217] [ 87.061246][ T6217] __dump_stack+0x1d/0x30 [ 87.061269][ T6217] dump_stack_lvl+0x95/0xd0 [ 87.061369][ T6217] dump_stack+0x15/0x1b [ 87.061386][ T6217] should_fail_ex+0x265/0x280 [ 87.061408][ T6217] should_failslab+0x8c/0xb0 [ 87.061427][ T6217] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 87.061529][ T6217] ? __alloc_skb+0x2ff/0x4b0 [ 87.061555][ T6217] __alloc_skb+0x2ff/0x4b0 [ 87.061575][ T6217] ? __alloc_skb+0x228/0x4b0 [ 87.061597][ T6217] netlink_alloc_large_skb+0xbf/0xf0 [ 87.061704][ T6217] netlink_sendmsg+0x3cf/0x6b0 [ 87.061735][ T6217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.061858][ T6217] __sock_sendmsg+0x145/0x180 [ 87.061877][ T6217] ____sys_sendmsg+0x31e/0x4a0 [ 87.061905][ T6217] ___sys_sendmsg+0x17b/0x1d0 [ 87.061966][ T6217] __x64_sys_sendmsg+0xd4/0x160 [ 87.061994][ T6217] x64_sys_call+0x17ba/0x3000 [ 87.062062][ T6217] do_syscall_64+0xca/0x2b0 [ 87.062083][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.062103][ T6217] RIP: 0033:0x7f2d3b35f749 [ 87.062119][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.062139][ T6217] RSP: 002b:00007f2d39dbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.062166][ T6217] RAX: ffffffffffffffda RBX: 00007f2d3b5b5fa0 RCX: 00007f2d3b35f749 [ 87.062177][ T6217] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 87.062189][ T6217] RBP: 00007f2d39dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.062247][ T6217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.062260][ T6217] R13: 00007f2d3b5b6038 R14: 00007f2d3b5b5fa0 R15: 00007fff7ddd6538 [ 87.062280][ T6217] [ 87.063661][ T42] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 87.079145][ T6211] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.319144][ T6211] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.861: iget: bad i_size value: 360287970189639690 [ 87.335143][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 87.627585][ T3318] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 87.638590][ T3318] CPU: 0 UID: 0 PID: 3318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 87.638618][ T3318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.638632][ T3318] Call Trace: [ 87.638714][ T3318] [ 87.638721][ T3318] __dump_stack+0x1d/0x30 [ 87.638748][ T3318] dump_stack_lvl+0x95/0xd0 [ 87.638845][ T3318] dump_stack+0x15/0x1b [ 87.638867][ T3318] dump_header+0x81/0x240 [ 87.638958][ T3318] oom_kill_process+0x295/0x350 [ 87.638979][ T3318] out_of_memory+0x97b/0xb80 [ 87.639003][ T3318] try_charge_memcg+0x610/0xa10 [ 87.639139][ T3318] charge_memcg+0x51/0xc0 [ 87.639168][ T3318] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 87.639226][ T3318] __read_swap_cache_async+0x17b/0x2d0 [ 87.639261][ T3318] swap_cluster_readahead+0x262/0x3c0 [ 87.639339][ T3318] swapin_readahead+0xde/0x820 [ 87.639380][ T3318] ? strncpy_from_user_nofault+0xe5/0xf0 [ 87.639406][ T3318] ? __rcu_read_unlock+0x34/0x70 [ 87.639424][ T3318] ? bpf_get_current_ancestor_cgroup_id+0xd5/0xf0 [ 87.639444][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 87.639516][ T3318] ? __rcu_read_unlock+0x4f/0x70 [ 87.639533][ T3318] ? swap_cache_get_folio+0x277/0x280 [ 87.639564][ T3318] do_swap_page+0x2b4/0x21e0 [ 87.639613][ T3318] ? _raw_spin_unlock+0x26/0x50 [ 87.639638][ T3318] ? __schedule+0x85f/0xcd0 [ 87.639663][ T3318] ? __pfx_default_wake_function+0x10/0x10 [ 87.639719][ T3318] handle_mm_fault+0x9d8/0x2c60 [ 87.639759][ T3318] do_user_addr_fault+0x630/0x1080 [ 87.639790][ T3318] exc_page_fault+0x62/0xa0 [ 87.639818][ T3318] asm_exc_page_fault+0x26/0x30 [ 87.639871][ T3318] RIP: 0033:0x7f2d3b391fc5 [ 87.639884][ T3318] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 87.639900][ T3318] RSP: 002b:00007fff7ddd6878 EFLAGS: 00010246 [ 87.639948][ T3318] RAX: 0000000000000000 RBX: 00000000000001b0 RCX: 00007f2d3b391fc3 [ 87.639961][ T3318] RDX: 00007fff7ddd6890 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.639973][ T3318] RBP: 00007fff7ddd68fc R08: 0000000035b255c6 R09: 0000000000000000 [ 87.639985][ T3318] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 87.640060][ T3318] R13: 00000000000927c0 R14: 0000000000015f0d R15: 00007fff7ddd6950 [ 87.640077][ T3318] [ 87.640084][ T3318] memory: usage 307200kB, limit 307200kB, failcnt 6134 [ 87.875490][ T3318] memory+swap: usage 127480kB, limit 9007199254740988kB, failcnt 0 [ 87.883412][ T3318] kmem: usage 125020kB, limit 9007199254740988kB, failcnt 0 [ 87.890693][ T3318] Memory cgroup stats for /syz2: [ 87.894996][ T6242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.870'. [ 87.925205][ T3318] cache 98304 [ 87.928516][ T3318] rss 0 [ 87.931348][ T3318] shmem 0 [ 87.934279][ T3318] mapped_file 98304 [ 87.938071][ T3318] dirty 0 [ 87.941106][ T3318] writeback 0 [ 87.944433][ T3318] workingset_refault_anon 1283 [ 87.949327][ T3318] workingset_refault_file 3229 [ 87.954082][ T3318] swap 212992 [ 87.957454][ T3318] swapcached 4096 [ 87.961130][ T3318] pgpgin 124087 [ 87.964595][ T3318] pgpgout 124062 [ 87.968223][ T3318] pgfault 64510 [ 87.971666][ T3318] pgmajfault 305 [ 87.975195][ T3318] inactive_anon 0 [ 87.978850][ T3318] active_anon 4096 [ 87.982627][ T3318] inactive_file 98304 [ 87.986589][ T3318] active_file 0 [ 87.990165][ T3318] unevictable 0 [ 87.993659][ T3318] hierarchical_memory_limit 314572800 [ 87.999057][ T3318] hierarchical_memsw_limit 9223372036854771712 [ 88.005258][ T3318] total_cache 98304 [ 88.009063][ T3318] total_rss 0 [ 88.012468][ T3318] total_shmem 0 [ 88.015938][ T3318] total_mapped_file 98304 [ 88.020308][ T3318] total_dirty 0 [ 88.023755][ T3318] total_writeback 0 [ 88.027581][ T3318] total_workingset_refault_anon 1283 [ 88.032847][ T3318] total_workingset_refault_file 3229 [ 88.038250][ T3318] total_swap 212992 [ 88.042044][ T3318] total_swapcached 4096 [ 88.046201][ T3318] total_pgpgin 124087 [ 88.050310][ T3318] total_pgpgout 124062 [ 88.054413][ T3318] total_pgfault 64510 [ 88.058497][ T3318] total_pgmajfault 305 [ 88.062561][ T3318] total_inactive_anon 0 [ 88.066737][ T3318] total_active_anon 4096 [ 88.071043][ T3318] total_inactive_file 98304 [ 88.075674][ T3318] total_active_file 0 [ 88.079644][ T3318] total_unevictable 0 [ 88.083697][ T3318] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.866,pid=6225,uid=0 [ 88.098285][ T3318] Memory cgroup out of memory: Killed process 6225 (syz.2.866) total-vm:94100kB, anon-rss:1140kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 88.122298][ T6244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.868'. [ 88.132163][ T6244] netlink: 64 bytes leftover after parsing attributes in process `syz.0.868'. [ 88.288278][ T6261] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 88.371464][ T6261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.386256][ T6261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.393923][ T6261] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 88.405434][ T6261] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 88.417263][ T6265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.433951][ T6266] FAULT_INJECTION: forcing a failure. [ 88.433951][ T6266] name failslab, interval 1, probability 0, space 0, times 0 [ 88.446648][ T6266] CPU: 1 UID: 0 PID: 6266 Comm: syz.1.875 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.446680][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 88.446694][ T6266] Call Trace: [ 88.446702][ T6266] [ 88.446710][ T6266] __dump_stack+0x1d/0x30 [ 88.446771][ T6266] dump_stack_lvl+0x95/0xd0 [ 88.446790][ T6266] dump_stack+0x15/0x1b [ 88.446809][ T6266] should_fail_ex+0x265/0x280 [ 88.446865][ T6266] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 88.446975][ T6266] should_failslab+0x8c/0xb0 [ 88.446998][ T6266] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 88.447018][ T6266] ? shmem_alloc_inode+0x34/0x50 [ 88.447070][ T6266] ? kstrtouint_from_user+0x9f/0xf0 [ 88.447222][ T6266] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 88.447286][ T6266] shmem_alloc_inode+0x34/0x50 [ 88.447311][ T6266] alloc_inode+0x40/0x170 [ 88.447339][ T6266] new_inode+0x1d/0xe0 [ 88.447363][ T6266] shmem_get_inode+0x246/0x750 [ 88.447463][ T6266] __shmem_file_setup+0x113/0x210 [ 88.447489][ T6266] shmem_file_setup+0x3b/0x50 [ 88.447515][ T6266] __se_sys_memfd_create+0x2f7/0x6b0 [ 88.447568][ T6266] __x64_sys_memfd_create+0x31/0x40 [ 88.447677][ T6266] x64_sys_call+0x28cb/0x3000 [ 88.447698][ T6266] do_syscall_64+0xca/0x2b0 [ 88.447717][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.447803][ T6266] RIP: 0033:0x7fc58ed6f749 [ 88.447818][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.447838][ T6266] RSP: 002b:00007fc58d7add68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 88.447858][ T6266] RAX: ffffffffffffffda RBX: 000000000000104f RCX: 00007fc58ed6f749 [ 88.447869][ T6266] RDX: 00007fc58d7addec RSI: 0000000000000000 RDI: 00007fc58edf4960 [ 88.447881][ T6266] RBP: 0000200000000000 R08: 00007fc58d7adb07 R09: 0000000000000000 [ 88.447969][ T6266] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 88.447980][ T6266] R13: 00007fc58d7addec R14: 00007fc58d7addf0 R15: 00007ffd657bf6b8 [ 88.447996][ T6266] [ 88.689839][ T6263] wireguard0: entered promiscuous mode [ 88.695431][ T6263] wireguard0: entered allmulticast mode [ 88.735546][ T6272] netlink: 'syz.3.879': attribute type 13 has an invalid length. [ 88.744849][ T6272] gretap0: refused to change device tx_queue_len [ 88.751702][ T6272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 88.846844][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 89.033688][ T6289] set_capacity_and_notify: 6 callbacks suppressed [ 89.033705][ T6289] loop0: detected capacity change from 0 to 2048 [ 89.112771][ T6296] loop2: detected capacity change from 0 to 512 [ 89.132046][ T3523] Alternate GPT is invalid, using primary GPT. [ 89.138377][ T3523] loop0: p2 p3 p7 [ 89.173313][ T6296] EXT4-fs (loop2): 1 orphan inode deleted [ 89.174186][ T6289] Alternate GPT is invalid, using primary GPT. [ 89.185546][ T6289] loop0: p2 p3 p7 [ 89.188063][ T6296] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.199876][ T52] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 89.217517][ T3004] Alternate GPT is invalid, using primary GPT. [ 89.223829][ T3004] loop0: p2 p3 p7 [ 89.413088][ T6296] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.889: iget: bad i_size value: 360287970189639690 [ 89.428396][ T6301] netlink: 'syz.1.890': attribute type 10 has an invalid length. [ 90.319420][ T6348] FAULT_INJECTION: forcing a failure. [ 90.319420][ T6348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.332646][ T6348] CPU: 0 UID: 0 PID: 6348 Comm: syz.0.904 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.332674][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.332686][ T6348] Call Trace: [ 90.332694][ T6348] [ 90.332704][ T6348] __dump_stack+0x1d/0x30 [ 90.332732][ T6348] dump_stack_lvl+0x95/0xd0 [ 90.332829][ T6348] dump_stack+0x15/0x1b [ 90.332850][ T6348] should_fail_ex+0x265/0x280 [ 90.332892][ T6348] should_fail+0xb/0x20 [ 90.332948][ T6348] should_fail_usercopy+0x1a/0x20 [ 90.333000][ T6348] strncpy_from_user+0x27/0x260 [ 90.333031][ T6348] __se_sys_memfd_create+0x206/0x6b0 [ 90.333080][ T6348] __x64_sys_memfd_create+0x31/0x40 [ 90.333154][ T6348] x64_sys_call+0x28cb/0x3000 [ 90.333181][ T6348] do_syscall_64+0xca/0x2b0 [ 90.333206][ T6348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.333258][ T6348] RIP: 0033:0x7fc65953f749 [ 90.333275][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.333294][ T6348] RSP: 002b:00007fc657fa6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 90.333311][ T6348] RAX: ffffffffffffffda RBX: 00000000000004fa RCX: 00007fc65953f749 [ 90.333326][ T6348] RDX: 00007fc657fa6ef0 RSI: 0000000000000000 RDI: 00007fc6595c4960 [ 90.333359][ T6348] RBP: 0000200000000b00 R08: 00007fc657fa6bb7 R09: 00007fc657fa6e40 [ 90.333374][ T6348] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000340 [ 90.333387][ T6348] R13: 00007fc657fa6ef0 R14: 00007fc657fa6eb0 R15: 00002000000002c0 [ 90.333408][ T6348] [ 90.633487][ T6351] loop0: detected capacity change from 0 to 512 [ 90.641603][ T6351] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.677140][ T6351] EXT4-fs (loop0): 1 truncate cleaned up [ 90.743418][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 90.743432][ T29] audit: type=1326 audit(1768536922.028:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 90.800343][ T6373] __nla_validate_parse: 4 callbacks suppressed [ 90.800432][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 90.931574][ T6385] netlink: 72 bytes leftover after parsing attributes in process `syz.1.911'. [ 90.959835][ T29] audit: type=1326 audit(1768536922.059:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 90.983228][ T29] audit: type=1326 audit(1768536922.059:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.006631][ T29] audit: type=1326 audit(1768536922.059:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.008565][ T6391] loop2: detected capacity change from 0 to 512 [ 91.030262][ T29] audit: type=1326 audit(1768536922.059:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.059882][ T29] audit: type=1326 audit(1768536922.059:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.060073][ T6393] loop0: detected capacity change from 0 to 164 [ 91.083252][ T29] audit: type=1326 audit(1768536922.059:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.112812][ T29] audit: type=1326 audit(1768536922.059:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.136132][ T29] audit: type=1326 audit(1768536922.059:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.159594][ T29] audit: type=1326 audit(1768536922.059:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 91.185047][ T6395] loop0: detected capacity change from 0 to 2048 [ 91.206859][ T6385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.911'. [ 91.228710][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/367.tmp-b7:2' failed: Read-only file system [ 91.250839][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 91.264344][ T3306] Alternate GPT is invalid, using primary GPT. [ 91.270691][ T3306] loop0: p2 p3 p7 [ 91.281222][ T3304] udevd[3304]: symlink '../../loop1' '/dev/disk/by-diskseq/359.tmp-b7:1' failed: Read-only file system [ 91.312404][ T6395] Alternate GPT is invalid, using primary GPT. [ 91.316582][ T6391] EXT4-fs (loop2): 1 orphan inode deleted [ 91.318811][ T6395] loop0: p2 p3 p7 [ 91.332574][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/370.tmp-b7:0' failed: Read-only file system [ 91.343960][ T52] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 91.346568][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/367.tmp-b7:2' failed: Read-only file system [ 91.366082][ T6391] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.390318][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 91.405363][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/370.tmp-b7:0' failed: Read-only file system [ 91.432374][ T6391] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.913: iget: bad i_size value: 360287970189639690 [ 91.458743][ T6410] loop3: detected capacity change from 0 to 512 [ 91.466851][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 91.479980][ T3523] udevd[3523]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 91.492955][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 91.493263][ T6412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.918'. [ 91.532365][ T6410] loop3: detected capacity change from 0 to 2048 [ 91.608318][ T3507] Alternate GPT is invalid, using primary GPT. [ 91.614666][ T3507] loop3: p2 p3 p7 [ 91.641796][ T6410] Alternate GPT is invalid, using primary GPT. [ 91.648209][ T6410] loop3: p2 p3 p7 [ 91.724961][ T6421] netlink: 'syz.1.923': attribute type 13 has an invalid length. [ 91.799989][ T6421] gretap0: refused to change device tx_queue_len [ 91.825901][ T6429] netlink: 64 bytes leftover after parsing attributes in process `syz.0.926'. [ 91.853098][ T6421] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.932060][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 92.014291][ T6438] loop0: detected capacity change from 0 to 512 [ 92.035179][ T6438] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.075037][ T6438] EXT4-fs (loop0): 1 truncate cleaned up [ 92.348146][ T6442] syz.0.929 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 92.359123][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.0.929 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.359151][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.359162][ T6442] Call Trace: [ 92.359225][ T6442] [ 92.359233][ T6442] __dump_stack+0x1d/0x30 [ 92.359347][ T6442] dump_stack_lvl+0x95/0xd0 [ 92.359371][ T6442] dump_stack+0x15/0x1b [ 92.359393][ T6442] dump_header+0x81/0x240 [ 92.359480][ T6442] oom_kill_process+0x295/0x350 [ 92.359505][ T6442] out_of_memory+0x97b/0xb80 [ 92.359530][ T6442] try_charge_memcg+0x610/0xa10 [ 92.359571][ T6442] charge_memcg+0x51/0xc0 [ 92.359630][ T6442] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 92.359661][ T6442] __read_swap_cache_async+0x17b/0x2d0 [ 92.359795][ T6442] swap_cluster_readahead+0x262/0x3c0 [ 92.359838][ T6442] swapin_readahead+0xde/0x820 [ 92.359864][ T6442] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 92.359887][ T6442] ? lruvec_stat_mod_folio+0xd6/0x120 [ 92.359935][ T6442] ? __rcu_read_unlock+0x4f/0x70 [ 92.359982][ T6442] ? swap_cache_get_folio+0x277/0x280 [ 92.360012][ T6442] do_swap_page+0x2b4/0x21e0 [ 92.360095][ T6442] ? __pfx_default_wake_function+0x10/0x10 [ 92.360129][ T6442] handle_mm_fault+0x9d8/0x2c60 [ 92.360189][ T6442] do_user_addr_fault+0x630/0x1080 [ 92.360221][ T6442] exc_page_fault+0x62/0xa0 [ 92.360247][ T6442] asm_exc_page_fault+0x26/0x30 [ 92.360269][ T6442] RIP: 0033:0x7fc6594159c8 [ 92.360349][ T6442] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 [ 92.360368][ T6442] RSP: 002b:00007ffeb973a7b0 EFLAGS: 00010216 [ 92.360386][ T6442] RAX: 000000000001729e RBX: 00007fc659797da0 RCX: 0000000000016f30 [ 92.360401][ T6442] RDX: 000000000000036e RSI: 00007ffeb973a790 RDI: 0000000000000001 [ 92.360414][ T6442] RBP: 00007fc659797da0 R08: 00000000345e9a2c R09: 7fffffffffffffff [ 92.360427][ T6442] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000017522 [ 92.360441][ T6442] R13: 00007fc659796090 R14: ffffffffffffffff R15: 00007ffeb973a8c0 [ 92.360470][ T6442] [ 92.360477][ T6442] memory: usage 307200kB, limit 307200kB, failcnt 4581 [ 92.575808][ T6442] memory+swap: usage 269212kB, limit 9007199254740988kB, failcnt 0 [ 92.584013][ T6442] kmem: usage 268776kB, limit 9007199254740988kB, failcnt 0 [ 92.591335][ T6442] Memory cgroup stats for /syz0: [ 92.591710][ T6442] cache 12288 [ 92.600025][ T6442] rss 32768 [ 92.603249][ T6442] shmem 0 [ 92.606178][ T6442] mapped_file 12288 [ 92.610110][ T6442] dirty 0 [ 92.613081][ T6442] writeback 12288 [ 92.616780][ T6442] workingset_refault_anon 219 [ 92.621549][ T6442] workingset_refault_file 1285 [ 92.626355][ T6442] swap 176128 [ 92.629637][ T6442] swapcached 28672 [ 92.633351][ T6442] pgpgin 75042 [ 92.636757][ T6442] pgpgout 75031 [ 92.640201][ T6442] pgfault 68912 [ 92.643678][ T6442] pgmajfault 152 [ 92.647263][ T6442] inactive_anon 24576 [ 92.651301][ T6442] active_anon 8192 [ 92.655056][ T6442] inactive_file 12288 [ 92.659094][ T6442] active_file 0 [ 92.662559][ T6442] unevictable 0 [ 92.666061][ T6442] hierarchical_memory_limit 314572800 [ 92.671427][ T6442] hierarchical_memsw_limit 9223372036854771712 [ 92.677645][ T6442] total_cache 12288 [ 92.681440][ T6442] total_rss 32768 [ 92.685101][ T6442] total_shmem 0 [ 92.688598][ T6442] total_mapped_file 12288 [ 92.692972][ T6442] total_dirty 0 [ 92.696418][ T6442] total_writeback 12288 [ 92.700563][ T6442] total_workingset_refault_anon 219 [ 92.705786][ T6442] total_workingset_refault_file 1285 [ 92.711056][ T6442] total_swap 176128 [ 92.714926][ T6442] total_swapcached 28672 [ 92.719234][ T6442] total_pgpgin 75042 [ 92.723150][ T6442] total_pgpgout 75031 [ 92.727182][ T6442] total_pgfault 68912 [ 92.731195][ T6442] total_pgmajfault 152 [ 92.735275][ T6442] total_inactive_anon 24576 [ 92.739863][ T6442] total_active_anon 8192 [ 92.744159][ T6442] total_inactive_file 12288 [ 92.748656][ T6442] total_active_file 0 [ 92.752683][ T6442] total_unevictable 0 [ 92.755347][ T6450] loop4: detected capacity change from 0 to 512 [ 92.756666][ T6442] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.929,pid=6442,uid=0 [ 92.777623][ T6442] Memory cgroup out of memory: Killed process 6442 (syz.0.929) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 92.817722][ T6450] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 92.841502][ T6450] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.931: attempt to clear invalid blocks 2 len 1 [ 92.856323][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.932'. [ 92.866177][ T6450] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.883209][ T6450] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.931: invalid indirect mapped block 1819239214 (level 0) [ 92.897637][ T6450] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.931: invalid indirect mapped block 1819239214 (level 1) [ 92.919775][ T6450] EXT4-fs (loop4): 1 truncate cleaned up [ 92.933695][ T6450] EXT4-fs mount: 17 callbacks suppressed [ 92.933712][ T6450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.994631][ T6450] serio: Serial port ttyS3 [ 93.004434][ T6456] team0: Port device bond0 removed [ 93.005240][ T6457] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 93.026093][ T6459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.934'. [ 93.058426][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.081932][ T6456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.098813][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.109677][ T6457] team0: Port device bond0 added [ 93.154368][ T6466] EXT4-fs (loop4): 1 orphan inode deleted [ 93.154767][ T6466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.154946][ T6466] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.215644][ T6466] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.936: iget: bad i_size value: 360287970189639690 [ 93.246379][ T6472] EXT4-fs (loop2): 1 orphan inode deleted [ 93.262200][ T53] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 93.273487][ T6472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.275511][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.308936][ T6479] netlink: 'syz.1.941': attribute type 13 has an invalid length. [ 93.321125][ T6472] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.333553][ T6479] gretap0: refused to change device tx_queue_len [ 93.340705][ T6479] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 93.380757][ T6472] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.937: iget: bad i_size value: 360287970189639690 [ 93.407819][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.430654][ T6486] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.452956][ T6488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.945'. [ 93.472877][ T6486] EXT4-fs (loop4): 1 truncate cleaned up [ 93.483711][ T6486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.512587][ T6497] usb usb5: usbfs: process 6497 (syz.0.947) did not claim interface 0 before use [ 93.523181][ T6497] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.523414][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.636233][ T6505] EXT4-fs (loop1): 1 orphan inode deleted [ 93.645235][ T6505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.657930][ T3732] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 93.669887][ T6505] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.681451][ T3306] Alternate GPT is invalid, using primary GPT. [ 93.687739][ T3306] loop2: p2 p3 p7 [ 93.697142][ T6498] Alternate GPT is invalid, using primary GPT. [ 93.703538][ T6498] loop2: p2 p3 p7 [ 93.707296][ T6505] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.951: iget: bad i_size value: 360287970189639690 [ 93.855540][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.103011][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.956'. [ 94.113152][ T6536] veth1_macvtap: left promiscuous mode [ 94.265688][ T6547] set_capacity_and_notify: 7 callbacks suppressed [ 94.265706][ T6547] loop0: detected capacity change from 0 to 512 [ 94.285284][ T6547] EXT4-fs (loop0): 1 orphan inode deleted [ 94.302193][ T3732] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 94.302498][ T6547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.327380][ T6547] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.340813][ T6551] loop2: detected capacity change from 0 to 512 [ 94.355057][ T6547] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.960: iget: bad i_size value: 360287970189639690 [ 94.380710][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.430452][ T6553] loop0: detected capacity change from 0 to 512 [ 94.451613][ T6553] EXT4-fs (loop0): 1 orphan inode deleted [ 94.461039][ T6553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.474544][ T53] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 94.487283][ T6553] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.525198][ T6560] loop2: detected capacity change from 0 to 512 [ 94.552465][ T6560] EXT4-fs (loop2): 1 orphan inode deleted [ 94.561167][ T6553] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.962: iget: bad i_size value: 360287970189639690 [ 94.573869][ T53] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 94.574286][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.601709][ T6560] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.638233][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.651874][ T6560] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.964: iget: bad i_size value: 360287970189639690 [ 94.680741][ T6566] loop3: detected capacity change from 0 to 512 [ 94.808021][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.901405][ T6582] loop2: detected capacity change from 0 to 512 [ 94.910232][ T6583] loop1: detected capacity change from 0 to 2048 [ 94.944541][ T6584] loop4: detected capacity change from 0 to 2048 [ 94.953789][ T3306] Alternate GPT is invalid, using primary GPT. [ 94.958138][ T6582] EXT4-fs (loop2): 1 orphan inode deleted [ 94.960155][ T3306] loop1: p2 p3 p7 [ 94.966291][ T6582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.982118][ T31] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 94.982513][ T6582] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.007918][ T3507] Alternate GPT is invalid, using primary GPT. [ 95.014276][ T3507] loop4: p2 p3 p7 [ 95.022487][ T6582] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.972: iget: bad i_size value: 360287970189639690 [ 95.041801][ T6584] Alternate GPT is invalid, using primary GPT. [ 95.048318][ T6584] loop4: p2 p3 p7 [ 95.059675][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.077485][ T6583] Alternate GPT is invalid, using primary GPT. [ 95.083885][ T6583] loop1: p2 p3 p7 [ 95.255443][ T6602] loop3: detected capacity change from 0 to 1024 [ 95.314948][ T6603] loop2: detected capacity change from 0 to 164 [ 95.482766][ T6607] FAULT_INJECTION: forcing a failure. [ 95.482766][ T6607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.495928][ T6607] CPU: 0 UID: 0 PID: 6607 Comm: syz.3.980 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.495959][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.495987][ T6607] Call Trace: [ 95.495994][ T6607] [ 95.496002][ T6607] __dump_stack+0x1d/0x30 [ 95.496025][ T6607] dump_stack_lvl+0x95/0xd0 [ 95.496048][ T6607] dump_stack+0x15/0x1b [ 95.496107][ T6607] should_fail_ex+0x265/0x280 [ 95.496129][ T6607] should_fail+0xb/0x20 [ 95.496147][ T6607] should_fail_usercopy+0x1a/0x20 [ 95.496250][ T6607] strncpy_from_user+0x27/0x260 [ 95.496280][ T6607] __se_sys_memfd_create+0x206/0x6b0 [ 95.496313][ T6607] __x64_sys_memfd_create+0x31/0x40 [ 95.496356][ T6607] x64_sys_call+0x28cb/0x3000 [ 95.496383][ T6607] do_syscall_64+0xca/0x2b0 [ 95.496406][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.496427][ T6607] RIP: 0033:0x7fa7d9aaf749 [ 95.496441][ T6607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.496521][ T6607] RSP: 002b:00007fa7d850ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 95.496542][ T6607] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007fa7d9aaf749 [ 95.496556][ T6607] RDX: 00007fa7d850eef0 RSI: 0000000000000000 RDI: 00007fa7d9b34960 [ 95.496589][ T6607] RBP: 0000200000001100 R08: 00007fa7d850ebb7 R09: 00007fa7d850ee40 [ 95.496603][ T6607] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 95.496617][ T6607] R13: 00007fa7d850eef0 R14: 00007fa7d850eeb0 R15: 0000200000000600 [ 95.496711][ T6607] [ 95.626904][ T3523] Alternate GPT is invalid, using primary GPT. [ 95.666511][ T3523] loop2: p2 p3 p7 [ 95.715346][ T6605] Alternate GPT is invalid, using primary GPT. [ 95.721812][ T6605] loop2: p2 p3 p7 [ 95.825089][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 95.825103][ T29] audit: type=1326 audit(1768536927.362:5460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 95.874221][ T6628] EXT4-fs (loop1): 1 orphan inode deleted [ 95.882288][ T29] audit: type=1326 audit(1768536927.362:5461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 95.905903][ T29] audit: type=1326 audit(1768536927.362:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 95.929188][ T29] audit: type=1326 audit(1768536927.362:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6625 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 95.931116][ T6628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.965575][ T815] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.975442][ T815] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 96.007472][ T6628] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.056121][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/413.tmp-b7:2' failed: Read-only file system [ 96.086668][ T6643] team0: Port device bond0 removed [ 96.092428][ T6643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 96.118786][ T6643] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 96.140799][ T6643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.148352][ T6643] team0: Port device bond0 added [ 96.159512][ T6628] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.986: iget: bad i_size value: 360287970189639690 [ 96.327258][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.354707][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/413.tmp-b7:2' failed: Read-only file system [ 96.491420][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/413.tmp-b7:2' failed: Read-only file system [ 96.523797][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/413.tmp-b7:2' failed: Read-only file system [ 96.539225][ T29] audit: type=1326 audit(1768536928.075:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6667 comm="syz.2.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d3b35f749 code=0x0 [ 96.556139][ T3523] udevd[3523]: symlink '../../loop3' '/dev/disk/by-diskseq/410.tmp-b7:3' failed: Read-only file system [ 96.573012][ T3306] udevd[3306]: symlink '../../loop2' '/dev/disk/by-diskseq/417.tmp-b7:2' failed: Read-only file system [ 96.579861][ T3306] udevd[3306]: symlink '../../loop2' '/dev/disk/by-diskseq/417.tmp-b7:2' failed: Read-only file system [ 96.611890][ T3523] udevd[3523]: symlink '../../loop1' '/dev/disk/by-diskseq/416.tmp-b7:1' failed: Read-only file system [ 96.612244][ T6673] __nla_validate_parse: 2 callbacks suppressed [ 96.612258][ T6673] netlink: 64 bytes leftover after parsing attributes in process `syz.1.991'. [ 96.639550][ T3523] udevd[3523]: symlink '../../loop1' '/dev/disk/by-diskseq/416.tmp-b7:1' failed: Read-only file system [ 96.661930][ T3306] Alternate GPT is invalid, using primary GPT. [ 96.663211][ T3507] udevd[3507]: symlink '../../loop3' '/dev/disk/by-diskseq/410.tmp-b7:3' failed: Read-only file system [ 96.668338][ T3306] loop2: p2 p3 p7 [ 96.716107][ T6669] Alternate GPT is invalid, using primary GPT. [ 96.722516][ T6669] loop2: p2 p3 p7 [ 96.753756][ T6679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.796119][ T6681] usb usb5: usbfs: process 6681 (syz.1.998) did not claim interface 0 before use [ 96.814462][ T6681] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.063935][ T6678] syz.3.997 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 97.074993][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.3.997 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.075018][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.075031][ T6678] Call Trace: [ 97.075038][ T6678] [ 97.075052][ T6678] __dump_stack+0x1d/0x30 [ 97.075075][ T6678] dump_stack_lvl+0x95/0xd0 [ 97.075095][ T6678] dump_stack+0x15/0x1b [ 97.075114][ T6678] dump_header+0x81/0x240 [ 97.075186][ T6678] oom_kill_process+0x295/0x350 [ 97.075243][ T6678] out_of_memory+0x97b/0xb80 [ 97.075264][ T6678] try_charge_memcg+0x610/0xa10 [ 97.075302][ T6678] charge_memcg+0x51/0xc0 [ 97.075334][ T6678] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 97.075387][ T6678] __read_swap_cache_async+0x17b/0x2d0 [ 97.075419][ T6678] swap_cluster_readahead+0x362/0x3c0 [ 97.075508][ T6678] swapin_readahead+0xde/0x820 [ 97.075534][ T6678] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 97.075560][ T6678] ? __rcu_read_unlock+0x34/0x70 [ 97.075659][ T6678] ? __rcu_read_unlock+0x4f/0x70 [ 97.075680][ T6678] ? swap_cache_get_folio+0x277/0x280 [ 97.075734][ T6678] do_swap_page+0x2b4/0x21e0 [ 97.075763][ T6678] ? __pfx_default_wake_function+0x10/0x10 [ 97.075795][ T6678] handle_mm_fault+0x9d8/0x2c60 [ 97.075901][ T6678] do_user_addr_fault+0x630/0x1080 [ 97.076037][ T6678] exc_page_fault+0x62/0xa0 [ 97.076095][ T6678] asm_exc_page_fault+0x26/0x30 [ 97.076113][ T6678] RIP: 0033:0x7fa7d99859c8 [ 97.076127][ T6678] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d fa 23 38 00 00 0f 8e 09 fe ff ff e8 23 98 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 [ 97.076174][ T6678] RSP: 002b:00007ffd8d2aa170 EFLAGS: 00010202 [ 97.076189][ T6678] RAX: 00000000000185f5 RBX: 00007fa7d9d07da0 RCX: 00000000000182b8 [ 97.076201][ T6678] RDX: 000000000000033d RSI: 00007ffd8d2aa150 RDI: 0000000000000001 [ 97.076212][ T6678] RBP: 00007fa7d9d07da0 R08: 000000003174be28 R09: 7fffffffffffffff [ 97.076223][ T6678] R10: 3fffffffffffffff R11: 0000000000000293 R12: 00000000000187df [ 97.076234][ T6678] R13: 00007fa7d9d05fa0 R14: ffffffffffffffff R15: 00007ffd8d2aa280 [ 97.076250][ T6678] [ 97.076258][ T6678] memory: usage 307200kB, limit 307200kB, failcnt 12316 [ 97.290782][ T6678] memory+swap: usage 194060kB, limit 9007199254740988kB, failcnt 0 [ 97.298696][ T6678] kmem: usage 175528kB, limit 9007199254740988kB, failcnt 0 [ 97.306077][ T6678] Memory cgroup stats for /syz3: [ 97.307883][ T6678] cache 0 [ 97.308470][ T6690] EXT4-fs (loop1): 1 orphan inode deleted [ 97.312865][ T6678] rss 0 [ 97.312876][ T6678] shmem 0 [ 97.312882][ T6678] mapped_file 0 [ 97.312889][ T6678] dirty 0 [ 97.316943][ T6690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.321637][ T6678] writeback 0 [ 97.349688][ T6678] workingset_refault_anon 166 [ 97.354353][ T6678] workingset_refault_file 1049 [ 97.359172][ T6678] swap 225280 [ 97.362479][ T6678] swapcached 0 [ 97.365836][ T6678] pgpgin 156727 [ 97.369304][ T6678] pgpgout 156727 [ 97.372845][ T6678] pgfault 90219 [ 97.376375][ T6678] pgmajfault 148 [ 97.379944][ T6678] inactive_anon 0 [ 97.383565][ T6678] active_anon 0 [ 97.387010][ T6678] inactive_file 0 [ 97.390665][ T6678] active_file 0 [ 97.394116][ T6678] unevictable 0 [ 97.397589][ T6678] hierarchical_memory_limit 314572800 [ 97.402954][ T6678] hierarchical_memsw_limit 9223372036854771712 [ 97.409142][ T6678] total_cache 0 [ 97.412594][ T6678] total_rss 0 [ 97.415871][ T6678] total_shmem 0 [ 97.419370][ T6678] total_mapped_file 0 [ 97.423349][ T6678] total_dirty 0 [ 97.426840][ T6678] total_writeback 0 [ 97.430661][ T6678] total_workingset_refault_anon 166 [ 97.432414][ T6690] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.435888][ T6678] total_workingset_refault_file 1049 [ 97.435901][ T6678] total_swap 225280 [ 97.455401][ T6678] total_swapcached 0 [ 97.459293][ T6678] total_pgpgin 156727 [ 97.463324][ T6678] total_pgpgout 156727 [ 97.467459][ T6678] total_pgfault 90219 [ 97.471438][ T6678] total_pgmajfault 148 [ 97.472543][ T6690] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1001: iget: bad i_size value: 360287970189639690 [ 97.475561][ T6678] total_inactive_anon 0 [ 97.475572][ T6678] total_active_anon 0 [ 97.475580][ T6678] total_inactive_file 0 [ 97.500444][ T6678] total_active_file 0 [ 97.504451][ T6678] total_unevictable 0 [ 97.508425][ T6678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.997,pid=6678,uid=0 [ 97.522998][ T6678] Memory cgroup out of memory: Killed process 6678 (syz.3.997) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 97.555577][ T3004] Alternate GPT is invalid, using primary GPT. [ 97.562009][ T3004] loop4: p2 p3 p7 [ 97.569596][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.584782][ T6694] Alternate GPT is invalid, using primary GPT. [ 97.591392][ T6694] loop4: p2 p3 p7 [ 97.687846][ T29] audit: type=1326 audit(1768536929.314:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 97.688124][ T29] audit: type=1326 audit(1768536929.314:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 97.708538][ T29] audit: type=1326 audit(1768536929.314:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 97.761765][ T29] audit: type=1326 audit(1768536929.356:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.1.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 97.771758][ T3306] Alternate GPT is invalid, using primary GPT. [ 97.772022][ T3306] loop3: p2 p3 p7 [ 97.801456][ T6702] Alternate GPT is invalid, using primary GPT. [ 97.801796][ T6702] loop3: p2 p3 p7 [ 97.877750][ T6716] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1009'. [ 97.951238][ T6725] EXT4-fs (loop1): 1 orphan inode deleted [ 97.959412][ T6725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.972135][ T52] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 97.972784][ T6725] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.024795][ T6725] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1012: iget: bad i_size value: 360287970189639690 [ 98.051685][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.094457][ T6732] Alternate GPT is invalid, using primary GPT. [ 98.100807][ T6732] loop0: p2 p3 p7 [ 98.647049][ T3523] Alternate GPT is invalid, using primary GPT. [ 98.653466][ T3523] loop1: p2 p3 p7 [ 98.828190][ T6748] EXT4-fs (loop4): 1 orphan inode deleted [ 98.856469][ T2286] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 98.868503][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.869640][ T6742] Alternate GPT is invalid, using primary GPT. [ 98.882525][ T6752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'. [ 98.887438][ T6742] loop1: p2 p3 p7 [ 98.902151][ T6748] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.961683][ T6754] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.988675][ T6759] netlink: 'syz.3.1025': attribute type 13 has an invalid length. [ 99.009180][ T6748] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1020: iget: bad i_size value: 360287970189639690 [ 99.041607][ T6759] gretap0: refused to change device tx_queue_len [ 99.054102][ T6754] EXT4-fs (loop2): 1 truncate cleaned up [ 99.058699][ T6759] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 99.062807][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.117650][ T6765] set_capacity_and_notify: 17 callbacks suppressed [ 99.117666][ T6765] loop0: detected capacity change from 0 to 512 [ 99.123001][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.129633][ T6767] loop3: detected capacity change from 0 to 512 [ 99.169120][ T6767] loop3: detected capacity change from 0 to 2048 [ 99.190559][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 99.230529][ T3306] Alternate GPT is invalid, using primary GPT. [ 99.236889][ T3306] loop3: p2 p3 p7 [ 99.252910][ T6767] Alternate GPT is invalid, using primary GPT. [ 99.259357][ T6767] loop3: p2 p3 p7 [ 99.279674][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.332435][ T6775] loop0: detected capacity change from 0 to 2048 [ 99.361322][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1033'. [ 99.363755][ T3306] Alternate GPT is invalid, using primary GPT. [ 99.376889][ T3306] loop0: p2 p3 p7 [ 99.406386][ T6775] Alternate GPT is invalid, using primary GPT. [ 99.412887][ T6775] loop0: p2 p3 p7 [ 99.447570][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1034'. [ 99.499414][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'. [ 99.627938][ T6801] netlink: 'syz.1.1040': attribute type 13 has an invalid length. [ 99.638422][ T6803] loop3: detected capacity change from 0 to 2048 [ 99.645827][ T6801] gretap0: refused to change device tx_queue_len [ 99.652901][ T6801] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 99.661555][ T6803] 9p: Bad value for 'rfdno' [ 99.690677][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 99.710107][ T6803] team0: Port device bond0 removed [ 99.715566][ T6803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 99.791826][ T6812] loop3: detected capacity change from 0 to 512 [ 99.843232][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1047'. [ 100.040078][ T6826] loop0: detected capacity change from 0 to 512 [ 100.086001][ T6826] EXT4-fs (loop0): 1 orphan inode deleted [ 100.099767][ T6826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.112732][ T42] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 100.126606][ T6834] FAULT_INJECTION: forcing a failure. [ 100.126606][ T6834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.139782][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.1.1054 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.139807][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.139819][ T6834] Call Trace: [ 100.139826][ T6834] [ 100.139833][ T6834] __dump_stack+0x1d/0x30 [ 100.139896][ T6834] dump_stack_lvl+0x95/0xd0 [ 100.139914][ T6834] dump_stack+0x15/0x1b [ 100.139932][ T6834] should_fail_ex+0x265/0x280 [ 100.139960][ T6834] should_fail+0xb/0x20 [ 100.140056][ T6834] should_fail_usercopy+0x1a/0x20 [ 100.140139][ T6834] _copy_to_user+0x20/0xa0 [ 100.140170][ T6834] simple_read_from_buffer+0xb5/0x130 [ 100.140191][ T6834] proc_fail_nth_read+0x10e/0x150 [ 100.140217][ T6834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.140364][ T6834] vfs_read+0x1a8/0x770 [ 100.140379][ T6834] ? __rcu_read_unlock+0x4f/0x70 [ 100.140396][ T6834] ? __fget_files+0x184/0x1c0 [ 100.140437][ T6834] ? mutex_lock+0x58/0x90 [ 100.140540][ T6834] ksys_read+0xda/0x1a0 [ 100.140610][ T6834] __x64_sys_read+0x40/0x50 [ 100.140626][ T6834] x64_sys_call+0x2889/0x3000 [ 100.140649][ T6834] do_syscall_64+0xca/0x2b0 [ 100.140668][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.140689][ T6834] RIP: 0033:0x7fc58ed6e15c [ 100.140760][ T6834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.140780][ T6834] RSP: 002b:00007fc58d7cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.140801][ T6834] RAX: ffffffffffffffda RBX: 00007fc58efc5fa0 RCX: 00007fc58ed6e15c [ 100.140815][ T6834] RDX: 000000000000000f RSI: 00007fc58d7cf0a0 RDI: 0000000000000004 [ 100.140829][ T6834] RBP: 00007fc58d7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 100.140843][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.140933][ T6834] R13: 00007fc58efc6038 R14: 00007fc58efc5fa0 R15: 00007ffd657bf6b8 [ 100.140959][ T6834] [ 100.350547][ T6826] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.388745][ T6826] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1051: iget: bad i_size value: 360287970189639690 [ 100.508686][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.536920][ T6851] loop1: detected capacity change from 0 to 512 [ 100.547062][ T6852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 100.607016][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 100.607029][ T29] audit: type=1326 audit(1768536932.380:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.2.1062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d3b35f749 code=0x0 [ 100.646282][ T6851] EXT4-fs (loop1): 1 orphan inode deleted [ 100.664419][ T2286] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 100.674271][ T2286] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 1 [ 100.695149][ T6861] loop2: detected capacity change from 0 to 2048 [ 100.702117][ T6851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.760041][ T29] audit: type=1326 audit(1768536932.527:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.783666][ T29] audit: type=1326 audit(1768536932.527:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.807076][ T29] audit: type=1326 audit(1768536932.527:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.830504][ T29] audit: type=1326 audit(1768536932.527:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.854035][ T29] audit: type=1326 audit(1768536932.527:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.859973][ T3523] Alternate GPT is invalid, using primary GPT. [ 100.877485][ T29] audit: type=1326 audit(1768536932.527:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.883836][ T3523] loop2: p2 p3 p7 [ 100.907022][ T29] audit: type=1326 audit(1768536932.527:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.934116][ T29] audit: type=1326 audit(1768536932.527:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65953f749 code=0x7ffc0000 [ 100.959945][ T6851] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.080376][ T6851] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1059: iget: bad i_size value: 360287970189639690 [ 101.120904][ T3306] udevd[3306]: symlink '../../loop3' '/dev/disk/by-diskseq/459.tmp-b7:3' failed: Read-only file system [ 101.134612][ T6861] Alternate GPT is invalid, using primary GPT. [ 101.140962][ T6861] loop2: p2 p3 p7 [ 101.146797][ T3507] udevd[3507]: symlink '../../loop4' '/dev/disk/by-diskseq/452.tmp-b7:4' failed: Read-only file system [ 101.183203][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/464.tmp-b7:2' failed: Read-only file system [ 101.230991][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.241817][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/452.tmp-b7:4' failed: Read-only file system [ 101.276112][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/464.tmp-b7:2' failed: Read-only file system [ 101.333307][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/463.tmp-b7:1' failed: Read-only file system [ 101.402727][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/463.tmp-b7:1' failed: Read-only file system [ 101.425201][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/464.tmp-b7:2' failed: Read-only file system [ 101.468700][ T3306] udevd[3306]: symlink '../../loop1' '/dev/disk/by-diskseq/465.tmp-b7:1' failed: Read-only file system [ 101.580816][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/452.tmp-b7:4' failed: Read-only file system [ 101.610405][ T6906] __nla_validate_parse: 1 callbacks suppressed [ 101.610421][ T6906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1072'. [ 101.764377][ T6910] loop4: detected capacity change from 0 to 512 [ 101.787595][ T6910] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.839636][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1074'. [ 101.969857][ T6910] EXT4-fs (loop4): 1 truncate cleaned up [ 101.998262][ T6910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.048006][ T6917] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1076'. [ 102.095708][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.219224][ T6931] netlink: 'syz.0.1080': attribute type 13 has an invalid length. [ 102.260618][ T6931] gretap0: refused to change device tx_queue_len [ 102.306178][ T6931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.559960][ T6947] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1086'. [ 103.480018][ T6966] netlink: 'syz.1.1095': attribute type 13 has an invalid length. [ 103.520026][ T6966] gretap0: refused to change device tx_queue_len [ 103.531627][ T6966] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.568321][ T6975] team0: Port device bond0 removed [ 103.588689][ T6975] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.676721][ T6980] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 103.711859][ T6980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.754625][ T6980] team0: Port device bond0 added [ 103.852765][ T6990] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1104'. [ 104.147304][ T7002] set_capacity_and_notify: 1 callbacks suppressed [ 104.147321][ T7002] loop1: detected capacity change from 0 to 512 [ 104.270404][ T7002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.295762][ T7002] EXT4-fs (loop1): 1 truncate cleaned up [ 104.341547][ T7002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.409177][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.468635][ T7010] loop1: detected capacity change from 0 to 512 [ 104.499065][ T7010] EXT4-fs (loop1): 1 truncate cleaned up [ 104.521874][ T7010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.619903][ T7015] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1114'. [ 104.726788][ T7022] loop0: detected capacity change from 0 to 512 [ 104.741204][ T7020] loop4: detected capacity change from 0 to 512 [ 104.775827][ T7022] EXT4-fs (loop0): 1 orphan inode deleted [ 104.788589][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 104.802361][ T7026] loop2: detected capacity change from 0 to 512 [ 104.853682][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.853846][ T7022] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.896375][ T7022] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1117: iget: bad i_size value: 360287970189639690 [ 104.955570][ T7020] EXT4-fs (loop4): 1 orphan inode deleted [ 104.956049][ T7020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.956206][ T7020] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.961756][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.062036][ T7034] loop0: detected capacity change from 0 to 2048 [ 105.065034][ T7020] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1116: iget: bad i_size value: 360287970189639690 [ 105.103349][ T3523] Alternate GPT is invalid, using primary GPT. [ 105.103510][ T3523] loop0: p2 p3 p7 [ 105.108776][ T7034] Alternate GPT is invalid, using primary GPT. [ 105.108947][ T7034] loop0: p2 p3 p7 [ 105.151620][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.256091][ T7039] netlink: 'syz.4.1120': attribute type 13 has an invalid length. [ 105.369076][ T7010] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1112: bg 0: block 465: padding at end of block bitmap is not set [ 105.417016][ T7039] gretap0: refused to change device tx_queue_len [ 105.427944][ T7010] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.431936][ T7039] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 105.440563][ T7010] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.440563][ T7010] [ 105.440583][ T7010] EXT4-fs (loop1): Total free blocks count 0 [ 105.471782][ T7010] EXT4-fs (loop1): Free/Dirty block details [ 105.477693][ T7010] EXT4-fs (loop1): free_blocks=0 [ 105.482635][ T7010] EXT4-fs (loop1): dirty_blocks=9852 [ 105.487930][ T7010] EXT4-fs (loop1): Block reservation details [ 105.493997][ T7010] EXT4-fs (loop1): i_reserved_data_blocks=9852 [ 105.551231][ T7043] loop2: detected capacity change from 0 to 164 [ 105.726297][ T7045] loop2: detected capacity change from 0 to 2048 [ 105.820097][ T3523] Alternate GPT is invalid, using primary GPT. [ 105.826469][ T3523] loop2: p2 p3 p7 [ 105.891797][ T7045] Alternate GPT is invalid, using primary GPT. [ 105.898128][ T7045] loop2: p2 p3 p7 [ 105.906025][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/483.tmp-b7:2' failed: Read-only file system [ 105.953261][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 105.954654][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/479.tmp-b7:0' failed: Read-only file system [ 105.986437][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/483.tmp-b7:2' failed: Read-only file system [ 105.989441][ T7047] loop0: detected capacity change from 0 to 512 [ 106.029381][ T3507] udevd[3507]: symlink '../../loop4' '/dev/disk/by-diskseq/480.tmp-b7:4' failed: Read-only file system [ 106.132549][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 106.133273][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/479.tmp-b7:0' failed: Read-only file system [ 106.162485][ T7058] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1126'. [ 106.165665][ T7047] EXT4-fs (loop0): 1 orphan inode deleted [ 106.179264][ T815] __quota_error: 249 callbacks suppressed [ 106.179279][ T815] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 106.180557][ T3523] udevd[3523]: symlink '../../loop2' '/dev/disk/by-diskseq/483.tmp-b7:2' failed: Read-only file system [ 106.185019][ T815] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 106.213221][ T3507] udevd[3507]: symlink '../../loop1' '/dev/disk/by-diskseq/473.tmp-b7:1' failed: Read-only file system [ 106.227067][ T7047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.241889][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 106.255453][ T29] audit: type=1326 audit(1768536938.323:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.290070][ T3507] udevd[3507]: symlink '../../loop1' '/dev/disk/by-diskseq/473.tmp-b7:1' failed: Read-only file system [ 106.316801][ T7047] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.342639][ T3306] udevd[3306]: symlink '../../loop0' '/dev/disk/by-diskseq/484.tmp-b7:0' failed: Read-only file system [ 106.373910][ T29] audit: type=1326 audit(1768536938.344:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.397369][ T29] audit: type=1326 audit(1768536938.344:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.420807][ T29] audit: type=1326 audit(1768536938.344:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.444383][ T29] audit: type=1326 audit(1768536938.344:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.467804][ T29] audit: type=1326 audit(1768536938.344:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.491272][ T29] audit: type=1326 audit(1768536938.344:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.514687][ T29] audit: type=1326 audit(1768536938.344:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.538190][ T29] audit: type=1326 audit(1768536938.344:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7061 comm="syz.1.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc58ed6f749 code=0x7ffc0000 [ 106.651143][ T7047] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1124: iget: bad i_size value: 360287970189639690 [ 106.736915][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.127041][ T7091] loop2: detected capacity change from 0 to 2048 [ 107.190179][ T3523] Alternate GPT is invalid, using primary GPT. [ 107.196599][ T3523] loop2: p2 p3 p7 [ 107.203379][ T7093] EXT4-fs (loop1): 1 orphan inode deleted [ 107.227048][ T2146] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 107.242927][ T7091] Alternate GPT is invalid, using primary GPT. [ 107.249247][ T7091] loop2: p2 p3 p7 [ 107.253824][ T7093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.342425][ T7098] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.356953][ T7093] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.441470][ T7098] EXT4-fs (loop4): 1 truncate cleaned up [ 107.472565][ T7093] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1136: iget: bad i_size value: 360287970189639690 [ 107.510479][ T7098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.629027][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.662483][ T7105] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1139'. [ 108.073193][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.628664][ T3523] Alternate GPT is invalid, using primary GPT. [ 108.635093][ T3523] loop2: p2 p3 p7 [ 108.644721][ T7142] Alternate GPT is invalid, using primary GPT. [ 108.651133][ T7142] loop2: p2 p3 p7 [ 108.713732][ T3306] ================================================================== [ 108.721837][ T3306] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 108.729574][ T3306] [ 108.731928][ T3306] read-write to 0xffff888237d27550 of 8 bytes by task 7153 on cpu 1: [ 108.739991][ T3306] find_get_block_common+0x498/0x8e0 [ 108.745283][ T3306] bdev_getblk+0x334/0x3f0 [ 108.749704][ T3306] __ext4_get_inode_loc+0x303/0x930 [ 108.754931][ T3306] __ext4_iget+0x2ea/0x2350 [ 108.759440][ T3306] ext4_fill_super+0x291d/0x37a0 [ 108.764378][ T3306] get_tree_bdev_flags+0x291/0x300 [ 108.769501][ T3306] get_tree_bdev+0x1f/0x30 [ 108.773920][ T3306] ext4_get_tree+0x1c/0x30 [ 108.778338][ T3306] vfs_get_tree+0x57/0x1d0 [ 108.782750][ T3306] do_new_mount+0x24d/0x6a0 [ 108.787305][ T3306] path_mount+0x4ab/0xb80 [ 108.791630][ T3306] __se_sys_mount+0x28c/0x2e0 [ 108.796306][ T3306] __x64_sys_mount+0x67/0x80 [ 108.800897][ T3306] x64_sys_call+0x2cca/0x3000 [ 108.805577][ T3306] do_syscall_64+0xca/0x2b0 [ 108.810082][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.815982][ T3306] [ 108.818325][ T3306] read to 0xffff888237d27550 of 8 bytes by task 3306 on cpu 0: [ 108.825945][ T3306] has_bh_in_lru+0x35/0x1f0 [ 108.830455][ T3306] smp_call_function_many_cond+0x2a9/0xc40 [ 108.836270][ T3306] on_each_cpu_cond_mask+0x3c/0x80 [ 108.841476][ T3306] invalidate_bh_lrus+0x2a/0x30 [ 108.846339][ T3306] blkdev_flush_mapping+0x9a/0x1a0 [ 108.851471][ T3306] bdev_release+0x260/0x3d0 [ 108.855981][ T3306] blkdev_release+0x15/0x20 [ 108.860501][ T3306] __fput+0x29b/0x650 [ 108.864498][ T3306] fput_close_sync+0xad/0x190 [ 108.869192][ T3306] __x64_sys_close+0x56/0xf0 [ 108.873794][ T3306] x64_sys_call+0x2c25/0x3000 [ 108.878483][ T3306] do_syscall_64+0xca/0x2b0 [ 108.882985][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.888882][ T3306] [ 108.891205][ T3306] value changed: 0x0000000000000000 -> 0xffff88811a181820 [ 108.898309][ T3306] [ 108.900632][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 108.906871][ T3306] CPU: 0 UID: 0 PID: 3306 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.916158][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.926220][ T3306] ================================================================== [ 109.043858][ T7153] EXT4-fs (loop4): 1 orphan inode deleted [ 109.055216][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 109.087140][ T7153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.204167][ T7153] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.382855][ T7153] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1149: iget: bad i_size value: 360287970189639690 [ 109.421417][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.530199][ T7170] udevd[7170]: symlink '../../loop3' '/dev/disk/by-diskseq/459.tmp-b7:3' failed: Read-only file system