last executing test programs: 8.964772619s ago: executing program 4 (id=2405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000e80)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x12c, @loopback, 0xb0000000}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x10}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x28}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x33}, @in={0x2, 0x4e20, @loopback}], 0xa0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x222b, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) close_range(r5, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, 0x1403, 0x714, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x38}}, 0x4000800) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 8.828774508s ago: executing program 4 (id=2409): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x4, 0xfffffffb, 0x46, @private1={0xfc, 0x1, '\x00', 0xff}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x40, 0x10, 0x1, 0xa}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5ee}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01070000000000000000670000000800c300000000000800c40000000000"], 0x2c}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0xa1) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000002c00), 0x0, 0x0) readv(r7, &(0x7f0000005200)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/4096, 0x1000}], 0x2) 8.719435098s ago: executing program 4 (id=2413): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 8.617310188s ago: executing program 4 (id=2416): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000740)='cq_process\x00', r0}, 0x7) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2000000000000000}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@mblk_io_submit}, {@norecovery}, {@lazytime}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x57c, &(0x7f0000000f80)="$eJzs3V1rFFcfAPD/bHajj/rUCCJtL4rgRS3WjUn6YqFQe1laqdDe2yUZg2TjSnYjJhWqF/WmN8WbUiqUfoDe91L6BfophFaQIqG9KIWU2czGNdnNm2s2ur8fTHLOzkzOnD3zPzlnZ5YJYGAdz34UIl6JiG+TiMNt64qRrzy+st3SoxuT2ZLE8vJnfyaR5K+1tk/y3wfzzMsR8evXEacK68utLyzOVKrVdC7PjzZmr47WFxZPX56tTKfT6ZXxiYmzb0+Mv/fuOz2r6xsX/v7+03sfnf3mxNJ3Pz84cieJc3EoX9dej6dwsz1zvPJvnirFuTUbjvWgsL0k6fcBsCNDeZyXIusDDsdQHvXAi++riFgGBlQi/mFAtcYBrbl9j+bBz42HH65MgJp1H26vf3Hls5HY35wbHVhKnpgZZfPdkR6Un5Xxyx9372RLbPw5xP82yQNsy81bEXGmWFzf/yd5/7dzZ5ofHm9sbRmD9v8H+uleNv55s9P4r7A6/okO45+DHWJ3JzaP/8KDHhTTVTb+e7/j+He16xoZynP/b475Ssmly9X0TES8FBEno7Qvy290Pefs0v3lbuvax3/ZkpXfGgvmx/GguO/JfaYqjUpEDD9NvVse3op4tdip/slq+ycd2j97Py5ssYxj6d3Xuq3bvP7P1vJPEa93bP/HV7SSja9PjjbPh9HWWbHeX7eP/dat/H7XP2v/AxvXfyRpv15b334ZP+7/J+22bqfn/3DyeTPdCoLrlUZjbixiOPlk/evjj/dt5VvbZ/U/eWLj/q/T+Z9Nvr7YYv1vH73dddO90P5T22r/7Sfuf/zlD93K31r7v9VMncxfyfu/zvJzZasH+LTvHwAAAAAAAOwlhYg4FEmhvJouFMrllfs7jsaBQrVWb5y6VJu/MhXN78qORKnQutJ9uO1+iLH8fthWfnxNfiIijqzcTdLMlydr1al+Vx4AAAAAAAAAAAAAAAAAAAD2iINdvv+f+X2o30cHPHPNBxvs6/dRAP2w6SP/e/GkJ2BP2jT+n1B6ZscB7L7txT/wIhH/MLjEPwwu8Q+DS/zD4BL/MLjEPwAAAAAAAAAAAAAAAAAAAAAAAAAAAPTUhfPns2V56dGNySw/dW1hfqZ27fRUWp8pz85Plidrc1fL07XadDUtT9ZmN/t71Vrt6th4zF8fbaT1xmh9YfHibG3+SuPi5dnKdHox9fBQAAAAAAAAAAAAAAAAAAAAWK++sDhTqVbTOYmuiQ9iN8oa6mcFV+xo9+JeaabnMVHajbJu5c27vb362CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBr/BQAA//8/6zEm") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0xc0000000}) fallocate(r5, 0x20, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x38) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) gettid() setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000780), 0x4) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r8, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r9 = syz_io_uring_setup(0x24a9, &(0x7f0000000300)={0x0, 0x40001000, 0x10100, 0x3, 0x5c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x3, 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 8.231259797s ago: executing program 4 (id=2423): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000006c0)='./file0\x00', 0x0, 0x881004, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="06005d0bcd586a2773447fc10000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000680)={0xffffffffffffffff, r2, 0x2b, 0x0, @void}, 0x10) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) r7 = fspick(r6, &(0x7f0000000380)='./file0\x00', 0x0) r8 = dup3(r7, 0xffffffffffffffff, 0x80000) recvfrom$packet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, 0x6e) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="24010000040a010100000000000000000a00000ad2000c008bb2328d320b52cd2b8595b98d04851ae737e37ec16587033d9f4dbea52b86f1d181fd32b8d7ebf3e0be1d494e60b6e4b8e11b75eb625723e49ed780300da498ba56fb440ec48f27af2761156cdda289dead6afd25e831d6290d80fe93870dc3501dc049892389ffb475469207000000000000003f16b4cd85723a770e6adc691b99cd67c94e39471fec02dccef238949b5feca30272aec51b96c73461e902c2f35b3563e19e9e7063a60d9b836d40a5a00118e34546ebac53619d9ed5228b35280b1e9f54a8d9be3ddd72d47b209c1298cf51e667b4df057e025163000028000480080002404780b3fc1400030076657468315f766cde6e0000000000000800024001f0ecdf090003007379"], 0x124}, 0x1, 0x0, 0x0, 0x20008809}, 0x40004) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_clone3(&(0x7f00000008c0)={0x95340580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getpid() 7.823527265s ago: executing program 4 (id=2433): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010000b040400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}, 0x1, 0xba01, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, 0x0, 0xa67f7518401d886f, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x10811) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 7.823216315s ago: executing program 32 (id=2433): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800000010000b040400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}, 0x1, 0xba01, 0x0, 0x4000}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, 0x0, 0xa67f7518401d886f, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x10811) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) sendto$inet6(r0, &(0x7f0000000500), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.736411526s ago: executing program 1 (id=2522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r1 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB=' '], 0x20}, 0x0, 0xe3d08660d3cd4684}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0xffffffc, 0x0) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 1.624440466s ago: executing program 1 (id=2524): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 1.623892656s ago: executing program 1 (id=2525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000e80)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x12c, @loopback, 0xb0000000}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x10}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x28}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x33}, @in={0x2, 0x4e20, @loopback}], 0xa0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x222b, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) close_range(r5, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, 0x1403, 0x714, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x38}}, 0x4000800) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 1.548878645s ago: executing program 5 (id=2526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) io_setup(0x5ff, &(0x7f0000000040)) 1.421972885s ago: executing program 1 (id=2527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000740)='cq_process\x00', r0}, 0x7) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x2000000000000000}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@mblk_io_submit}, {@norecovery}, {@lazytime}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x57c, &(0x7f0000000f80)="$eJzs3V1rFFcfAPD/bHajj/rUCCJtL4rgRS3WjUn6YqFQe1laqdDe2yUZg2TjSnYjJhWqF/WmN8WbUiqUfoDe91L6BfophFaQIqG9KIWU2czGNdnNm2s2ur8fTHLOzkzOnD3zPzlnZ5YJYGAdz34UIl6JiG+TiMNt64qRrzy+st3SoxuT2ZLE8vJnfyaR5K+1tk/y3wfzzMsR8evXEacK68utLyzOVKrVdC7PjzZmr47WFxZPX56tTKfT6ZXxiYmzb0+Mv/fuOz2r6xsX/v7+03sfnf3mxNJ3Pz84cieJc3EoX9dej6dwsz1zvPJvnirFuTUbjvWgsL0k6fcBsCNDeZyXIusDDsdQHvXAi++riFgGBlQi/mFAtcYBrbl9j+bBz42HH65MgJp1H26vf3Hls5HY35wbHVhKnpgZZfPdkR6Un5Xxyx9372RLbPw5xP82yQNsy81bEXGmWFzf/yd5/7dzZ5ofHm9sbRmD9v8H+uleNv55s9P4r7A6/okO45+DHWJ3JzaP/8KDHhTTVTb+e7/j+He16xoZynP/b475Ssmly9X0TES8FBEno7Qvy290Pefs0v3lbuvax3/ZkpXfGgvmx/GguO/JfaYqjUpEDD9NvVse3op4tdip/slq+ycd2j97Py5ssYxj6d3Xuq3bvP7P1vJPEa93bP/HV7SSja9PjjbPh9HWWbHeX7eP/dat/H7XP2v/AxvXfyRpv15b334ZP+7/J+22bqfn/3DyeTPdCoLrlUZjbixiOPlk/evjj/dt5VvbZ/U/eWLj/q/T+Z9Nvr7YYv1vH73dddO90P5T22r/7Sfuf/zlD93K31r7v9VMncxfyfu/zvJzZasH+LTvHwAAAAAAAOwlhYg4FEmhvJouFMrllfs7jsaBQrVWb5y6VJu/MhXN78qORKnQutJ9uO1+iLH8fthWfnxNfiIijqzcTdLMlydr1al+Vx4AAAAAAAAAAAAAAAAAAAD2iINdvv+f+X2o30cHPHPNBxvs6/dRAP2w6SP/e/GkJ2BP2jT+n1B6ZscB7L7txT/wIhH/MLjEPwwu8Q+DS/zD4BL/MLjEPwAAAAAAAAAAAAAAAAAAAAAAAAAAAPTUhfPns2V56dGNySw/dW1hfqZ27fRUWp8pz85Plidrc1fL07XadDUtT9ZmN/t71Vrt6th4zF8fbaT1xmh9YfHibG3+SuPi5dnKdHox9fBQAAAAAAAAAAAAAAAAAAAAWK++sDhTqVbTOYmuiQ9iN8oa6mcFV+xo9+JeaabnMVHajbJu5c27vb362CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBr/BQAA//8/6zEm") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0xc0000000}) fallocate(r5, 0x20, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x38) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) gettid() setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000780), 0x4) r8 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r8, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r9 = syz_io_uring_setup(0x24a9, &(0x7f0000000300)={0x0, 0x40001000, 0x10100, 0x3, 0x5c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x3, 0x0, 0x0, 0x0) 1.362322095s ago: executing program 5 (id=2528): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@mblk_io_submit}, {@norecovery}, {@lazytime}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x57c, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r0, 0x20, 0x0, 0x8000) 1.245809264s ago: executing program 5 (id=2531): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x51, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbe, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.164866694s ago: executing program 3 (id=2533): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x5) 1.077991894s ago: executing program 5 (id=2535): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 970.806383ms ago: executing program 1 (id=2536): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f", 0xbc}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 970.002143ms ago: executing program 5 (id=2537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000e80)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x12c, @loopback, 0xb0000000}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x10}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x28}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x33}, @in={0x2, 0x4e20, @loopback}], 0xa0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x222b, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) close_range(r5, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, 0x1403, 0x714, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x38}}, 0x4000800) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 832.445603ms ago: executing program 5 (id=2542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x40095505, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000040c000000180001801400020076657468315f766972745f77696669000c00038004000100040005"], 0x38}}, 0x0) ioperm(0x0, 0x444, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x20, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) 737.271653ms ago: executing program 0 (id=2545): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) 670.085452ms ago: executing program 1 (id=2546): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000040)={[{@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000001200)="$eJzs3c9vVNUeAPDvnWlLS3mvhby893AhTYyBRGlpAUOMC9ga0uCPuHFjpQWRAg2t0aIJJcGNiXFjjIkrF+J/oUS2rHTlwo0rQ0LUsDRxzJ3eWzrtnZYObS/p/XySofeeM7fnXKbfOeeeOedOAJU1lP5Ti9gfETNJxECysJTXFVnm0OLzHvz50dn0kUSj8drvSSRZWv78JPvZnx3cGxE//pDEvvrqcmfnr12cmJ6euprtj8xdmhmZnb92+MKlifNT56cuj70wduL4seMnRo90dF7XC9JO33z3/YFPxt/85qu/ktFvfxlP4mS8nD1x+XlslqEYav6fJKuz+k9sdmElqWd/J8tf4qSrxAqxIfnr1x0R/4uBqMfDF28gPn6l1MoBW6qRRDSKpW/jbbKAnSER5FBReT8gv7ZfeR1cK6VXAmyH+6cWBwBWx3/X4thg9DbHBnY/SGL5sE4SEZ2NzLXaExF374zfPHdn/GZs0TgcUGzhRkT8vyj+k2b8D0ZvDDbjv9YS/2m/4Ez2M01/tcPyVw4Vi3/YPovx37tm/Eeb+H9rWfy/3WH5Qw833+lrif++Tk8JAAAAAAAAKuv2qYh4vujz/9rS/J8omP/THxEnN6H8oRX7qz//r93bhGKAAvdPRbxUOP+3ls/+HaxnW/9qzgfoTs5dmJ46EhH/johD0b0r3R9do4zDn+77sl3eUDb/L3+k5d/N5gJm9bjXtav1mMmJuYnHPW8g4v6NiKcK5/8mS+1/UtD+p+8HM49Yxr5nb51pl7d+/ANbpfF1xMHC9v/hXSuSte/PMdLsD4zkvYLVnv7ws+/ald9p/LvFBDy+tP3fvXb8DybL79czu/Eyjs53Ndrlddr/70leb95ypidL+2Bibu7qaERPcrqeprakj228zrAT5fGQx0sa/4eeWXv8r6j/3xcRCyt+d/JH65ri3H//7v+1XX30/6E8afxPbqj93/jG2K3B79uV/2jt/7FmW38oSzH+B4u+yMO0pzW9IBy7irK2u74AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsBPUImJPJLXhpe1abXg4oj8i/hO7a9NXZueeO3flvcuTaV7z+/9r+Tf9DizuJ/n3/w8u2x9bsX80IvZGxOf1vub+8Nkr05NlnzwAAAAAAAAAAAAAAAAAAAA8IfrbrP9P/VYvu3bAlusquwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/gEAAAAAYEfZe+D2z0lELLzY13ykerK87lJrBmy1WtkVAErjFj9QXab+QHW5xgeSdfJ72x603pFrmTn7GAcDAAAAAAAAAAAAQOUc3G/9P1SV9f9QXdb/Q3Xl6/8PlFwPYPu5xgdinZX8hev/1z0KAAAAAAAAAAAAANhMs/PXLk5MT09dtfHGk1GNoo16RGzFb240GtfTv4LST3BnbORT4Z+U+qzYyNf6PdpR5b0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArf4JAAD//15RHvk=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysfs$1(0x1, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108040, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10200, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xa42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 669.731572ms ago: executing program 33 (id=2546): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000040)={[{@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysfs$1(0x1, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108040, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10200, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xa42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 669.374152ms ago: executing program 2 (id=2548): sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0xd4, 0x0, 0x506, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x3, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) sync_file_range(r3, 0x1, 0xb2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a00842100008f26f723f67668743ecd6f884eacde61c208d29d109c0161bc183f10e9cda387b252d5d5afc2c93e7078f4e7da4c6015ff3773ca2e8c9e33f60dfa30fd3293ea676fdc0aba4002e268891f2e24b2522e1b154922082cb7173db17ac8c5a9b03eb47eb8c870bbf0fede63eeaec895aa1cb71802114b40"], 0x24}}, 0x0) r6 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r6, 0x567, 0x60, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 625.868552ms ago: executing program 0 (id=2549): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) 600.474882ms ago: executing program 2 (id=2550): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000006c0)={[{@jqfmt_vfsv1}], [{@obj_user={'obj_user', 0x3d, ')\'-)'}}, {@uid_gt}, {@subj_role={'subj_role', 0x3d, '%\')'}}]}, 0xff, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==") ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r2, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x5, &(0x7f0000002000)={0x2, 0x1, 0x9, 0xffffffffffffffff}) 541.690372ms ago: executing program 0 (id=2551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000a4030000000000009500000000000000709e592a33c0cffaeb65f50aa39238a4f57251679c3919549ce1e01ed2b45a017996219bafd5f06bfda7d80105f26e6b2f910019fea4d2ce6bd32b41e85643a291e1f9df84f0820518eb55c8da2d9e3f6f61a3b9af24132b9e9c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x80, 0xff0e, 0x7, 0x3, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0xa, [{@empty, 0xa}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @generic={0x44, 0x9, "f70267e86fdaf2"}, @timestamp_prespec={0x44, 0x1c, 0xa, 0x3, 0x1, [{@empty, 0xc5}, {@loopback, 0xffffff15}, {@rand_addr=0x64010102, 0x400}]}]}}}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000300)={[{@dioread_nolock}, {@noload}, {@debug}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x17}}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3881b9f4}}, {@noquota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) recvmmsg(r4, &(0x7f0000000f00), 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x4100, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b33000000000000000015"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x40000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @multicast}, 0x10) 494.358482ms ago: executing program 2 (id=2552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000040)={[{@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysfs$1(0x1, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108040, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10200, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xa42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 490.660052ms ago: executing program 3 (id=2553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000e80)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x12c, @loopback, 0xb0000000}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x10}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x28}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x33}, @in={0x2, 0x4e20, @loopback}], 0xa0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x222b, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) close_range(r5, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, 0x1403, 0x714, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg0\x00'}}]}, 0x38}}, 0x4000800) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 302.717731ms ago: executing program 0 (id=2554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0"]) 301.288971ms ago: executing program 2 (id=2555): syz_io_uring_setup(0x90e, &(0x7f00000000c0)={0x0, 0xee38, 0x0, 0x1, 0x10000000}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)='./file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000007b0000000000deffffff00850000007b00000095d76d1ea6411e60072761b92519b4153bda129da7bcb6bed59668712c72f27e3c90cb3886a1dc0dcb7cdd11", @ANYRESOCT=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000380), &(0x7f00000003c0)=r8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYRESDEC=r7], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r11) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) brk(0x20001000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 299.736572ms ago: executing program 3 (id=2556): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b", 0xc2}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 266.589791ms ago: executing program 3 (id=2557): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 222.525671ms ago: executing program 3 (id=2558): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010008506000000000000000000010000", @ANYRES32=r4, @ANYBLOB="01020000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000c80)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x80800) 138.702441ms ago: executing program 0 (id=2559): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210090, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {}, {@mblk_io_submit}, {@norecovery}, {@lazytime}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@dioread_lock}]}, 0xfc, 0x57c, &(0x7f0000000f80)="$eJzs3V1rFFcfAPD/bHajj/rUCCJtL4rgRS3WjUn6YqFQe1laqdDe2yUZg2TjSnYjJhWqF/WmN8WbUiqUfoDe91L6BfophFaQIqG9KIWU2czGNdnNm2s2ur8fTHLOzkzOnD3zPzlnZ5YJYGAdz34UIl6JiG+TiMNt64qRrzy+st3SoxuT2ZLE8vJnfyaR5K+1tk/y3wfzzMsR8evXEacK68utLyzOVKrVdC7PjzZmr47WFxZPX56tTKfT6ZXxiYmzb0+Mv/fuOz2r6xsX/v7+03sfnf3mxNJ3Pz84cieJc3EoX9dej6dwsz1zvPJvnirFuTUbjvWgsL0k6fcBsCNDeZyXIusDDsdQHvXAi++riFgGBlQi/mFAtcYBrbl9j+bBz42HH65MgJp1H26vf3Hls5HY35wbHVhKnpgZZfPdkR6Un5Xxyx9372RLbPw5xP82yQNsy81bEXGmWFzf/yd5/7dzZ5ofHm9sbRmD9v8H+uleNv55s9P4r7A6/okO45+DHWJ3JzaP/8KDHhTTVTb+e7/j+He16xoZynP/b475Ssmly9X0TES8FBEno7Qvy290Pefs0v3lbuvax3/ZkpXfGgvmx/GguO/JfaYqjUpEDD9NvVse3op4tdip/slq+ycd2j97Py5ssYxj6d3Xuq3bvP7P1vJPEa93bP/HV7SSja9PjjbPh9HWWbHeX7eP/dat/H7XP2v/AxvXfyRpv15b334ZP+7/J+22bqfn/3DyeTPdCoLrlUZjbixiOPlk/evjj/dt5VvbZ/U/eWLj/q/T+Z9Nvr7YYv1vH73dddO90P5T22r/7Sfuf/zlD93K31r7v9VMncxfyfu/zvJzZasH+LTvHwAAAAAAAOwlhYg4FEmhvJouFMrllfs7jsaBQrVWb5y6VJu/MhXN78qORKnQutJ9uO1+iLH8fthWfnxNfiIijqzcTdLMlydr1al+Vx4AAAAAAAAAAAAAAAAAAAD2iINdvv+f+X2o30cHPHPNBxvs6/dRAP2w6SP/e/GkJ2BP2jT+n1B6ZscB7L7txT/wIhH/MLjEPwwu8Q+DS/zD4BL/MLjEPwAAAAAAAAAAAAAAAAAAAAAAAAAAAPTUhfPns2V56dGNySw/dW1hfqZ27fRUWp8pz85Plidrc1fL07XadDUtT9ZmN/t71Vrt6th4zF8fbaT1xmh9YfHibG3+SuPi5dnKdHox9fBQAAAAAAAAAAAAAAAAAAAAWK++sDhTqVbTOYmuiQ9iN8oa6mcFV+xo9+JeaabnMVHajbJu5c27vb362CkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBr/BQAA//8/6zEm") fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) 115.230071ms ago: executing program 2 (id=2560): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) 27.561011ms ago: executing program 3 (id=2561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000a4030000000000009500000000000000709e592a33c0cffaeb65f50aa39238a4f57251679c3919549ce1e01ed2b45a017996219bafd5f06bfda7d80105f26e6b2f910019fea4d2ce6bd32b41e85643a291e1f9df84f0820518eb55c8da2d9e3f6f61a3b9af24132b9e9c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x80, 0xff0e, 0x7, 0x3, {{0x14, 0x4, 0x2, 0x0, 0x50, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010101, @broadcast, {[@timestamp_prespec={0x44, 0x14, 0x66, 0x3, 0xa, [{@empty, 0xa}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x9}]}, @generic={0x44, 0x9, "f70267e86fdaf2"}, @timestamp_prespec={0x44, 0x1c, 0xa, 0x3, 0x1, [{@empty, 0xc5}, {@loopback, 0xffffff15}, {@rand_addr=0x64010102, 0x400}]}]}}}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000140), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000300)={[{@dioread_nolock}, {@noload}, {@debug}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x17}}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3881b9f4}}, {@noquota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) recvmmsg(r4, &(0x7f0000000f00), 0x0, 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x4100, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b33000000000000000015"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x40000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @multicast}, 0x10) 364.84µs ago: executing program 0 (id=2562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_link\x00', r4, 0x0, 0x800000000}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) 0s ago: executing program 2 (id=2563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x81, 0x2a00) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) kernel console output (not intermixed with test programs): ange from 0 to 512 [ 131.294792][ T7985] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1765: Invalid inode bitmap blk 4 in block_group 0 [ 131.295534][ T7985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.296610][ T7995] syz.1.1769: attempt to access beyond end of device [ 131.296610][ T7995] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 131.340018][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.372172][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.372243][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.537234][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 131.542705][ T8018] loop1: detected capacity change from 0 to 1024 [ 131.543066][ T8018] ext4: Bad value for 'commit' [ 131.689487][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 131.689503][ T29] audit: type=1326 audit(1737459441.796:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 131.693642][ T8028] FAULT_INJECTION: forcing a failure. [ 131.693642][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 131.703241][ T29] audit: type=1326 audit(1737459441.796:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.3.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 131.719167][ T8028] CPU: 1 UID: 0 PID: 8028 Comm: syz.3.1783 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 131.731751][ T29] audit: type=1326 audit(1737459441.796:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.3.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1cf444690 code=0x7ffc0000 [ 131.755055][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 131.755070][ T8028] Call Trace: [ 131.755078][ T8028] [ 131.765394][ T29] audit: type=1326 audit(1737459441.796:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.3.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa1cf4447df code=0x7ffc0000 [ 131.788706][ T8028] dump_stack_lvl+0xf2/0x150 [ 131.832922][ T8028] dump_stack+0x15/0x1a [ 131.837116][ T8028] should_fail_ex+0x223/0x230 [ 131.841822][ T8028] should_failslab+0x8f/0xb0 [ 131.846477][ T8028] kmem_cache_alloc_noprof+0x52/0x320 [ 131.851929][ T8028] ? audit_log_start+0x34c/0x6b0 [ 131.856976][ T8028] audit_log_start+0x34c/0x6b0 [ 131.861819][ T8028] audit_seccomp+0x4b/0x130 [ 131.866329][ T8028] __seccomp_filter+0x6fa/0x1180 [ 131.871357][ T8028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 131.877047][ T8028] ? vfs_write+0x596/0x920 [ 131.881485][ T8028] __secure_computing+0x9f/0x1c0 [ 131.886495][ T8028] syscall_trace_enter+0xd1/0x1f0 [ 131.891536][ T8028] ? fpregs_assert_state_consistent+0x83/0xa0 [ 131.897739][ T8028] do_syscall_64+0xaa/0x1c0 [ 131.902249][ T8028] ? clear_bhb_loop+0x55/0xb0 [ 131.906999][ T8028] ? clear_bhb_loop+0x55/0xb0 [ 131.911711][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.917657][ T8028] RIP: 0033:0x7fa1cf445d29 [ 131.922074][ T8028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.942037][ T8028] RSP: 002b:00007fa1cdab6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 131.950453][ T8028] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa1cf445d29 [ 131.958527][ T8028] RDX: 00007fa1cdab6f20 RSI: 0000000000000058 RDI: 00007fa1cdab6f20 [ 131.966578][ T8028] RBP: 00007fa1cdab7090 R08: 0000000000000000 R09: 0000000000000058 [ 131.974586][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.982643][ T8028] R13: 0000000000000000 R14: 00007fa1cf635fa0 R15: 00007ffed5f45848 [ 131.990626][ T8028] [ 131.993698][ T8028] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 132.001459][ T8028] audit: out of memory in audit_log_start [ 132.007685][ T29] audit: type=1326 audit(1737459441.906:5964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 132.031480][ T29] audit: type=1326 audit(1737459441.906:5965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 132.055001][ T29] audit: type=1326 audit(1737459441.906:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 132.078488][ T29] audit: type=1326 audit(1737459441.906:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 133.068141][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1790'. [ 133.174634][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 133.331543][ T8064] loop3: detected capacity change from 0 to 512 [ 133.379830][ T8064] journal_path: Non-blockdev passed as './bus' [ 133.386064][ T8064] EXT4-fs: error: could not find journal device path [ 133.939376][ T8076] FAULT_INJECTION: forcing a failure. [ 133.939376][ T8076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.952596][ T8076] CPU: 1 UID: 0 PID: 8076 Comm: syz.1.1796 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 133.963056][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.973166][ T8076] Call Trace: [ 133.976442][ T8076] [ 133.979373][ T8076] dump_stack_lvl+0xf2/0x150 [ 133.984075][ T8076] dump_stack+0x15/0x1a [ 133.988324][ T8076] should_fail_ex+0x223/0x230 [ 133.993029][ T8076] should_fail+0xb/0x10 [ 133.997224][ T8076] should_fail_usercopy+0x1a/0x20 [ 134.002290][ T8076] _copy_from_user+0x1c/0xa0 [ 134.006951][ T8076] get_timespec64+0x49/0x140 [ 134.011712][ T8076] futex2_setup_timeout+0x6a/0x1f0 [ 134.016884][ T8076] ? vfs_write+0x596/0x920 [ 134.021344][ T8076] __se_sys_futex_waitv+0xb8/0x360 [ 134.026543][ T8076] ? ksys_write+0x176/0x1b0 [ 134.031067][ T8076] __x64_sys_futex_waitv+0x67/0x80 [ 134.036277][ T8076] x64_sys_call+0x105f/0x2dc0 [ 134.041032][ T8076] do_syscall_64+0xc9/0x1c0 [ 134.045548][ T8076] ? clear_bhb_loop+0x55/0xb0 [ 134.050231][ T8076] ? clear_bhb_loop+0x55/0xb0 [ 134.054958][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.060894][ T8076] RIP: 0033:0x7feb35bc5d29 [ 134.065344][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.085020][ T8076] RSP: 002b:00007feb34231038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 134.093511][ T8076] RAX: ffffffffffffffda RBX: 00007feb35db5fa0 RCX: 00007feb35bc5d29 [ 134.101554][ T8076] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000020000b00 [ 134.109526][ T8076] RBP: 00007feb34231090 R08: 0000000000000001 R09: 0000000000000000 [ 134.117498][ T8076] R10: 0000000020000d80 R11: 0000000000000246 R12: 0000000000000001 [ 134.125471][ T8076] R13: 0000000000000001 R14: 00007feb35db5fa0 R15: 00007ffe40e5e7e8 [ 134.133456][ T8076] [ 134.945476][ T8103] loop2: detected capacity change from 0 to 1024 [ 134.966893][ T8103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 135.004784][ T8103] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.077280][ T8103] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 135.100076][ T8113] syz.4.1810: attempt to access beyond end of device [ 135.100076][ T8113] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 135.105795][ T8103] System zones: 0-1, 3-12 [ 135.144927][ T8103] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.1806: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 135.179442][ T8103] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1806: couldn't read orphan inode 11 (err -117) [ 135.214721][ T8103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.248971][ T8131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1816'. [ 135.288658][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.320275][ T8137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1820'. [ 135.363840][ T8141] tmpfs: Bad value for 'mpol' [ 135.442384][ T8148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 135.573600][ T8155] 9pnet_fd: Insufficient options for proto=fd [ 135.956295][ T8168] loop0: detected capacity change from 0 to 1024 [ 135.995603][ T8168] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.023734][ T8168] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.049984][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1831'. [ 136.069554][ T8168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 136.089724][ T8168] System zones: 0-1, 3-12 [ 136.111823][ T8168] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.1830: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 136.144505][ T8177] 9pnet_fd: Insufficient options for proto=fd [ 136.162476][ T8168] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1830: couldn't read orphan inode 11 (err -117) [ 136.250731][ T8168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.412037][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.502296][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1845'. [ 136.556165][ T8208] 9pnet_fd: Insufficient options for proto=fd [ 136.792427][ T8235] 9pnet_fd: Insufficient options for proto=fd [ 136.835316][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 136.835334][ T29] audit: type=1400 audit(1737459446.936:6459): avc: granted { setsecparam } for pid=8237 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 136.899742][ T29] audit: type=1326 audit(1737459447.006:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 136.938452][ T29] audit: type=1326 audit(1737459447.026:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 136.962010][ T29] audit: type=1326 audit(1737459447.026:6462): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 136.985816][ T29] audit: type=1326 audit(1737459447.026:6463): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 136.997785][ T8253] syz.4.1867[8253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.009920][ T29] audit: type=1326 audit(1737459447.026:6464): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 137.023291][ T8253] syz.4.1867[8253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.045323][ T29] audit: type=1326 audit(1737459447.026:6465): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 137.045381][ T29] audit: type=1326 audit(1737459447.026:6466): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 137.104262][ T29] audit: type=1326 audit(1737459447.026:6467): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 137.128053][ T29] audit: type=1326 audit(1737459447.026:6468): auid=4294967295 uid=0 gid=60929 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8246 comm="syz.1.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 137.153721][ T8253] syz.4.1867[8253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.275848][ T8253] loop4: detected capacity change from 0 to 512 [ 137.411512][ T8253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.397080][ T8253] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.499447][ T3003] udevd[3003]: worker [7327] terminated by signal 32 (Unknown signal 32) [ 138.555063][ T3003] udevd[3003]: worker [7327] failed while handling '/devices/virtual/block/loop4' [ 138.571446][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.707692][ T8286] loop0: detected capacity change from 0 to 512 [ 138.874810][ T8286] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 138.906953][ T8286] System zones: 0-2, 18-18, 34-35 [ 138.945571][ T8286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.016766][ T8286] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.364335][ T8281] loop1: detected capacity change from 0 to 2048 [ 139.398506][ T8281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.485303][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.566813][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.951117][ T8340] loop1: detected capacity change from 0 to 512 [ 139.974030][ T8340] journal_path: Non-blockdev passed as './bus' [ 139.980505][ T8340] EXT4-fs: error: could not find journal device path [ 141.325345][ T8357] loop1: detected capacity change from 0 to 512 [ 141.383500][ T8357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.480289][ T8357] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.667053][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.852501][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 141.852517][ T29] audit: type=1326 audit(1737459451.956:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 141.996970][ T29] audit: type=1326 audit(1737459451.986:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.020528][ T29] audit: type=1326 audit(1737459451.986:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.043945][ T29] audit: type=1326 audit(1737459451.986:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.067499][ T29] audit: type=1326 audit(1737459451.986:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.091036][ T29] audit: type=1326 audit(1737459451.986:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.114458][ T29] audit: type=1326 audit(1737459451.986:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.137930][ T29] audit: type=1326 audit(1737459451.986:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.161440][ T29] audit: type=1326 audit(1737459451.986:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.184894][ T29] audit: type=1326 audit(1737459451.996:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.0.1912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 142.531216][ T8372] loop2: detected capacity change from 0 to 2048 [ 142.557080][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 142.631301][ T8372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.661239][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1920'. [ 143.481152][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'. [ 143.576306][ T8415] tmpfs: Bad value for 'mpol' [ 143.719052][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.841403][ T8425] loop4: detected capacity change from 0 to 512 [ 143.867578][ T8425] journal_path: Non-blockdev passed as './bus' [ 143.873904][ T8425] EXT4-fs: error: could not find journal device path [ 143.955673][ T8437] tmpfs: Bad value for 'mpol' [ 144.024184][ T8442] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 144.030836][ T8442] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 144.038594][ T8442] vhci_hcd vhci_hcd.0: Device attached [ 144.055316][ T8443] vhci_hcd: connection closed [ 144.055586][ T1702] vhci_hcd: stop threads [ 144.064641][ T1702] vhci_hcd: release socket [ 144.069089][ T1702] vhci_hcd: disconnect device [ 144.325786][ T8464] syz.3.1942[8464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.325852][ T8464] syz.3.1942[8464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.355294][ T8464] syz.3.1942[8464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.394625][ T8464] loop3: detected capacity change from 0 to 512 [ 144.451141][ T8464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.463824][ T8464] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.691050][ T8480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1949'. [ 145.080711][ T8484] syz.4.1948[8484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.080780][ T8484] syz.4.1948[8484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.080898][ T8484] syz.4.1948[8484] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.112712][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.117119][ T8484] loop4: detected capacity change from 0 to 512 [ 145.183981][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.184090][ T8484] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.232244][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.854960][ T8506] 9pnet_fd: Insufficient options for proto=fd [ 145.995027][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 146.237208][ T8543] FAULT_INJECTION: forcing a failure. [ 146.237208][ T8543] name failslab, interval 1, probability 0, space 0, times 0 [ 146.250055][ T8543] CPU: 0 UID: 0 PID: 8543 Comm: syz.4.1974 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 146.260550][ T8543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.270676][ T8543] Call Trace: [ 146.273962][ T8543] [ 146.276977][ T8543] dump_stack_lvl+0xf2/0x150 [ 146.281642][ T8543] dump_stack+0x15/0x1a [ 146.285826][ T8543] should_fail_ex+0x223/0x230 [ 146.290572][ T8543] should_failslab+0x8f/0xb0 [ 146.295243][ T8543] kmem_cache_alloc_noprof+0x52/0x320 [ 146.300721][ T8543] ? audit_log_start+0x34c/0x6b0 [ 146.305851][ T8543] audit_log_start+0x34c/0x6b0 [ 146.310663][ T8543] audit_seccomp+0x4b/0x130 [ 146.315193][ T8543] __seccomp_filter+0x6fa/0x1180 [ 146.320172][ T8543] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 146.325927][ T8543] ? vfs_write+0x596/0x920 [ 146.330442][ T8543] ? __schedule+0x6fa/0x930 [ 146.334969][ T8543] __secure_computing+0x9f/0x1c0 [ 146.339971][ T8543] syscall_trace_enter+0xd1/0x1f0 [ 146.345133][ T8543] do_syscall_64+0xaa/0x1c0 [ 146.349644][ T8543] ? clear_bhb_loop+0x55/0xb0 [ 146.354355][ T8543] ? clear_bhb_loop+0x55/0xb0 [ 146.359043][ T8543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.364967][ T8543] RIP: 0033:0x7fcf29e25d29 [ 146.369550][ T8543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.389346][ T8543] RSP: 002b:00007fcf28497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 146.397768][ T8543] RAX: ffffffffffffffda RBX: 00007fcf2a015fa0 RCX: 00007fcf29e25d29 [ 146.405810][ T8543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000798e2644 [ 146.413792][ T8543] RBP: 00007fcf28497090 R08: 0000000000000000 R09: 0000000000000000 [ 146.421863][ T8543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.429837][ T8543] R13: 0000000000000000 R14: 00007fcf2a015fa0 R15: 00007ffe3697bb48 [ 146.437830][ T8543] [ 147.156333][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 147.156350][ T29] audit: type=1400 audit(1737459457.256:6844): avc: granted { setsecparam } for pid=8570 comm="syz.0.1983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 147.381346][ T29] audit: type=1326 audit(1737459457.486:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.540563][ T29] audit: type=1326 audit(1737459457.506:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.564090][ T29] audit: type=1326 audit(1737459457.506:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.587718][ T29] audit: type=1326 audit(1737459457.506:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.611253][ T29] audit: type=1326 audit(1737459457.506:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.634722][ T29] audit: type=1326 audit(1737459457.506:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.658240][ T29] audit: type=1326 audit(1737459457.506:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.681745][ T29] audit: type=1326 audit(1737459457.506:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 147.705191][ T29] audit: type=1326 audit(1737459457.516:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8565 comm="syz.1.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 148.109596][ T8590] loop2: detected capacity change from 0 to 512 [ 148.170940][ T8590] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 148.190096][ T8592] tmpfs: Bad value for 'mpol' [ 148.220242][ T8590] System zones: 0-2, 18-18, 34-35 [ 148.249765][ T8590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.327243][ T8590] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.552312][ T8604] loop0: detected capacity change from 0 to 1024 [ 148.586802][ T8604] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.598300][ T8604] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.689014][ T8604] JBD2: no valid journal superblock found [ 148.694805][ T8604] EXT4-fs (loop0): Could not load journal inode [ 148.844946][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.008598][ T8627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2003'. [ 149.036989][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2005'. [ 149.552836][ T8640] loop2: detected capacity change from 0 to 512 [ 149.582001][ T8640] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 149.582038][ T8640] System zones: 0-2, 18-18, 34-35 [ 149.583031][ T8640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.583116][ T8640] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.673559][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.360839][ T8663] loop3: detected capacity change from 0 to 1024 [ 150.393597][ T8663] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.398139][ T8666] loop0: detected capacity change from 0 to 512 [ 150.410763][ T8663] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.427127][ T8666] journal_path: Non-blockdev passed as './bus' [ 150.433381][ T8666] EXT4-fs: error: could not find journal device path [ 150.440516][ T8663] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 150.460912][ T8663] System zones: 0-1, 3-12 [ 150.465670][ T8663] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2015: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 150.485507][ T8663] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2015: couldn't read orphan inode 11 (err -117) [ 150.498292][ T8663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.519526][ T8663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'. [ 150.593662][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.709937][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 150.756718][ T8689] 9pnet_fd: Insufficient options for proto=fd [ 150.873758][ T8695] loop0: detected capacity change from 0 to 512 [ 150.889502][ T8701] loop4: detected capacity change from 0 to 1024 [ 150.896640][ T8701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.918798][ T8701] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.919238][ T8695] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 150.942742][ T8703] loop1: detected capacity change from 0 to 512 [ 150.955851][ T8701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 150.984762][ T8695] System zones: 0-2, 18-18, 34-35 [ 150.995310][ T8703] journal_path: Non-blockdev passed as './bus' [ 151.001636][ T8703] EXT4-fs: error: could not find journal device path [ 151.016901][ T8701] System zones: 0-1, 3-12 [ 151.026394][ T8695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.042300][ T8710] FAULT_INJECTION: forcing a failure. [ 151.042300][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 151.055010][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.3.2035 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 151.065397][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 151.075492][ T8710] Call Trace: [ 151.078778][ T8710] [ 151.081776][ T8710] dump_stack_lvl+0xf2/0x150 [ 151.086390][ T8710] dump_stack+0x15/0x1a [ 151.090681][ T8710] should_fail_ex+0x223/0x230 [ 151.095378][ T8710] ? resv_map_alloc+0x32/0x190 [ 151.100164][ T8710] should_failslab+0x8f/0xb0 [ 151.104858][ T8710] __kmalloc_cache_noprof+0x4e/0x320 [ 151.110165][ T8710] ? vfs_write+0x596/0x920 [ 151.114669][ T8710] resv_map_alloc+0x32/0x190 [ 151.119293][ T8710] hugetlbfs_get_inode+0x64/0x380 [ 151.124346][ T8710] hugetlb_file_setup+0x188/0x3c0 [ 151.129420][ T8710] ksys_mmap_pgoff+0x172/0x330 [ 151.134249][ T8710] x64_sys_call+0x1940/0x2dc0 [ 151.138939][ T8710] do_syscall_64+0xc9/0x1c0 [ 151.143653][ T8710] ? clear_bhb_loop+0x55/0xb0 [ 151.148359][ T8710] ? clear_bhb_loop+0x55/0xb0 [ 151.153146][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.159126][ T8710] RIP: 0033:0x7fa1cf445d29 [ 151.163564][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.183189][ T8710] RSP: 002b:00007fa1cdab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 151.191616][ T8710] RAX: ffffffffffffffda RBX: 00007fa1cf635fa0 RCX: 00007fa1cf445d29 [ 151.199607][ T8710] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 151.207738][ T8710] RBP: 00007fa1cdab7090 R08: ffffffffffffffff R09: 0000000000000000 [ 151.215715][ T8710] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 151.223720][ T8710] R13: 0000000000000000 R14: 00007fa1cf635fa0 R15: 00007ffed5f45848 [ 151.231707][ T8710] [ 151.234918][ T8695] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.234901][ T8701] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.2032: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 151.299286][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.302388][ T8701] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2032: couldn't read orphan inode 11 (err -117) [ 151.361728][ T8701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.403534][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2032'. [ 151.452312][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.474403][ T8724] 9pnet_fd: Insufficient options for proto=fd [ 151.481160][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 151.493659][ T8722] loop0: detected capacity change from 0 to 512 [ 151.970003][ T8722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 151.990855][ T8722] System zones: 0-2, 18-18, 34-35 [ 152.018660][ T8722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.081092][ T8722] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.229068][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 152.229087][ T29] audit: type=1400 audit(1737459462.326:7071): avc: denied { getopt } for pid=8736 comm="syz.4.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.377928][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.416120][ T29] audit: type=1326 audit(1737459462.456:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.439699][ T29] audit: type=1326 audit(1737459462.456:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.463162][ T29] audit: type=1326 audit(1737459462.456:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.486663][ T29] audit: type=1326 audit(1737459462.456:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.510183][ T29] audit: type=1326 audit(1737459462.456:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.533695][ T29] audit: type=1326 audit(1737459462.456:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.557184][ T29] audit: type=1326 audit(1737459462.456:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.580720][ T29] audit: type=1326 audit(1737459462.456:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.604231][ T29] audit: type=1326 audit(1737459462.456:7080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 152.657066][ T8747] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 152.663647][ T8747] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 152.671376][ T8747] vhci_hcd vhci_hcd.0: Device attached [ 152.692443][ T8753] tmpfs: Bad value for 'mpol' [ 152.709820][ T8750] vhci_hcd: connection closed [ 152.727963][ T2434] vhci_hcd: stop threads [ 152.737010][ T2434] vhci_hcd: release socket [ 152.741757][ T2434] vhci_hcd: disconnect device [ 152.869731][ T8761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2054'. [ 152.904397][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2054'. [ 152.964529][ T8767] loop1: detected capacity change from 0 to 512 [ 152.981552][ T8767] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 152.991105][ T8767] System zones: 0-2, 18-18, 34-35 [ 152.997054][ T8767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.012188][ T8767] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.051006][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.085601][ T8776] syz.0.2060[8776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.085736][ T8776] syz.0.2060[8776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.098651][ T8776] syz.0.2060[8776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.123671][ T8776] loop0: detected capacity change from 0 to 512 [ 153.157448][ T8776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.191944][ T8776] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.259816][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.333098][ T8794] tmpfs: Bad value for 'mpol' [ 153.338113][ T8797] hub 9-0:1.0: USB hub found [ 153.343609][ T8797] hub 9-0:1.0: 8 ports detected [ 153.451715][ T8809] FAULT_INJECTION: forcing a failure. [ 153.451715][ T8809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.464835][ T8809] CPU: 0 UID: 0 PID: 8809 Comm: syz.4.2073 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 153.475216][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.485450][ T8809] Call Trace: [ 153.488820][ T8809] [ 153.491776][ T8809] dump_stack_lvl+0xf2/0x150 [ 153.496425][ T8809] dump_stack+0x15/0x1a [ 153.500715][ T8809] should_fail_ex+0x223/0x230 [ 153.505459][ T8809] should_fail+0xb/0x10 [ 153.509651][ T8809] should_fail_usercopy+0x1a/0x20 [ 153.514802][ T8809] _copy_from_user+0x1c/0xa0 [ 153.519498][ T8809] usbdev_ioctl+0x1450/0x3e00 [ 153.524291][ T8809] ? do_vfs_ioctl+0x96e/0x1530 [ 153.529142][ T8809] ? selinux_file_ioctl+0x2f7/0x380 [ 153.534397][ T8809] ? __fget_files+0x17c/0x1c0 [ 153.539132][ T8809] ? __pfx_usbdev_ioctl+0x10/0x10 [ 153.544188][ T8809] __se_sys_ioctl+0xc9/0x140 [ 153.548868][ T8809] __x64_sys_ioctl+0x43/0x50 [ 153.553480][ T8809] x64_sys_call+0x1690/0x2dc0 [ 153.558336][ T8809] do_syscall_64+0xc9/0x1c0 [ 153.562867][ T8809] ? clear_bhb_loop+0x55/0xb0 [ 153.567575][ T8809] ? clear_bhb_loop+0x55/0xb0 [ 153.572346][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.578254][ T8809] RIP: 0033:0x7fcf29e25d29 [ 153.582689][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.582709][ T8809] RSP: 002b:00007fcf28497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.610754][ T8809] RAX: ffffffffffffffda RBX: 00007fcf2a015fa0 RCX: 00007fcf29e25d29 [ 153.618746][ T8809] RDX: 0000000020000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 153.626900][ T8809] RBP: 00007fcf28497090 R08: 0000000000000000 R09: 0000000000000000 [ 153.626930][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.642900][ T8809] R13: 0000000000000000 R14: 00007fcf2a015fa0 R15: 00007ffe3697bb48 [ 153.650899][ T8809] [ 153.669556][ T8816] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 153.884327][ T8833] FAULT_INJECTION: forcing a failure. [ 153.884327][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 153.897001][ T8833] CPU: 1 UID: 0 PID: 8833 Comm: syz.2.2081 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 153.907362][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 153.917574][ T8833] Call Trace: [ 153.920867][ T8833] [ 153.923813][ T8833] dump_stack_lvl+0xf2/0x150 [ 153.928454][ T8833] dump_stack+0x15/0x1a [ 153.932639][ T8833] should_fail_ex+0x223/0x230 [ 153.937345][ T8833] should_failslab+0x8f/0xb0 [ 153.941970][ T8833] kmem_cache_alloc_noprof+0x52/0x320 [ 153.947369][ T8833] ? audit_log_start+0x34c/0x6b0 [ 153.952399][ T8833] audit_log_start+0x34c/0x6b0 [ 153.957236][ T8833] audit_seccomp+0x4b/0x130 [ 153.961773][ T8833] __seccomp_filter+0x6fa/0x1180 [ 153.966761][ T8833] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 153.972469][ T8833] ? vfs_write+0x596/0x920 [ 153.976946][ T8833] ? __schedule+0x6fa/0x930 [ 153.981486][ T8833] __secure_computing+0x9f/0x1c0 [ 153.986468][ T8833] syscall_trace_enter+0xd1/0x1f0 [ 153.991612][ T8833] do_syscall_64+0xaa/0x1c0 [ 153.996139][ T8833] ? clear_bhb_loop+0x55/0xb0 [ 154.000851][ T8833] ? clear_bhb_loop+0x55/0xb0 [ 154.005546][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.011610][ T8833] RIP: 0033:0x7f4324fc5d29 [ 154.016100][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.035741][ T8833] RSP: 002b:00007f4323637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 154.044234][ T8833] RAX: ffffffffffffffda RBX: 00007f43251b5fa0 RCX: 00007f4324fc5d29 [ 154.052220][ T8833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002040400 [ 154.060210][ T8833] RBP: 00007f4323637090 R08: 0000000000000000 R09: 0000000000000000 [ 154.068371][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.076361][ T8833] R13: 0000000000000000 R14: 00007f43251b5fa0 R15: 00007fff8d6c87b8 [ 154.084445][ T8833] [ 154.143592][ T8841] netlink: 'syz.1.2082': attribute type 4 has an invalid length. [ 154.158108][ T8841] netlink: 'syz.1.2082': attribute type 4 has an invalid length. [ 154.372373][ T8860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2092'. [ 154.493096][ T8866] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 154.818204][ T8879] loop4: detected capacity change from 0 to 1024 [ 154.820471][ T8879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 154.841084][ T8879] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.844118][ T8879] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 154.844147][ T8879] System zones: 0-1, 3-12 [ 154.868837][ T8879] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.2098: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 154.870347][ T8879] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2098: couldn't read orphan inode 11 (err -117) [ 154.935126][ T8882] loop1: detected capacity change from 0 to 512 [ 154.949517][ T8879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.963118][ T8882] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 154.963168][ T8882] System zones: 0-2, 18-18, 34-35 [ 154.963624][ T8882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.963739][ T8882] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.976339][ T8879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2098'. [ 154.987740][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.988401][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.091776][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.091926][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.312487][ T8907] netlink: 'syz.0.2106': attribute type 4 has an invalid length. [ 155.320672][ T8907] netlink: 'syz.0.2106': attribute type 4 has an invalid length. [ 155.433356][ T8915] loop1: detected capacity change from 0 to 1024 [ 155.440766][ T8913] tmpfs: Bad value for 'mpol' [ 155.443160][ T8915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.461086][ T8915] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.477029][ T8915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 155.487037][ T8915] System zones: 0-1, 3-12 [ 155.491849][ T8915] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.2111: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 155.511037][ T8915] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2111: couldn't read orphan inode 11 (err -117) [ 155.523639][ T8915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.541013][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2111'. [ 155.542112][ T8919] loop4: detected capacity change from 0 to 512 [ 155.567030][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.583947][ T8919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 155.600154][ T8919] System zones: 0-2, 18-18, 34-35 [ 155.606247][ T8919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.619310][ T8919] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.649638][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.691812][ T8927] loop1: detected capacity change from 0 to 512 [ 155.730757][ T8927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.747796][ T8927] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.787945][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.827263][ T8941] FAULT_INJECTION: forcing a failure. [ 155.827263][ T8941] name failslab, interval 1, probability 0, space 0, times 0 [ 155.840227][ T8941] CPU: 0 UID: 0 PID: 8941 Comm: syz.2.2118 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 155.850677][ T8941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 155.852392][ T8943] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 155.860733][ T8941] Call Trace: [ 155.860743][ T8941] [ 155.860752][ T8941] dump_stack_lvl+0xf2/0x150 [ 155.860852][ T8941] dump_stack+0x15/0x1a [ 155.860889][ T8941] should_fail_ex+0x223/0x230 [ 155.860973][ T8941] should_failslab+0x8f/0xb0 [ 155.876225][ T8943] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 155.877348][ T8941] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 155.881926][ T8943] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.886059][ T8941] ? sock_alloc_inode+0x34/0xa0 [ 155.890943][ T8943] vhci_hcd vhci_hcd.0: Device attached [ 155.895387][ T8941] sock_alloc_inode+0x34/0xa0 [ 155.895425][ T8941] ? __pfx_sock_alloc_inode+0x10/0x10 [ 155.895463][ T8941] alloc_inode+0x3c/0x160 [ 155.895538][ T8941] new_inode_pseudo+0x15/0x20 [ 155.895559][ T8941] __sock_create+0x12b/0x5a0 [ 155.949924][ T8941] __sys_socketpair+0x17c/0x430 [ 155.954796][ T8941] __x64_sys_socketpair+0x52/0x60 [ 155.959898][ T8941] x64_sys_call+0x1cad/0x2dc0 [ 155.964659][ T8941] do_syscall_64+0xc9/0x1c0 [ 155.969234][ T8941] ? clear_bhb_loop+0x55/0xb0 [ 155.974046][ T8941] ? clear_bhb_loop+0x55/0xb0 [ 155.978763][ T8941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.984705][ T8941] RIP: 0033:0x7f4324fc7c7a [ 155.989146][ T8941] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.008812][ T8941] RSP: 002b:00007f4323636f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 156.017235][ T8941] RAX: ffffffffffffffda RBX: 00007f43251b5f00 RCX: 00007f4324fc7c7a [ 156.025208][ T8941] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 156.033179][ T8941] RBP: 00007f4323637090 R08: 0000000000000000 R09: 0000000000000000 [ 156.041156][ T8941] R10: 00007f4323636f98 R11: 0000000000000246 R12: 0000000000000002 [ 156.049165][ T8941] R13: 0000000000000000 R14: 00007f43251b5fa0 R15: 00007fff8d6c87b8 [ 156.057153][ T8941] [ 156.060584][ T8941] socket: no more sockets [ 156.066732][ T8944] vhci_hcd: connection closed [ 156.067488][ T1702] vhci_hcd: stop threads [ 156.076466][ T1702] vhci_hcd: release socket [ 156.080926][ T1702] vhci_hcd: disconnect device [ 156.103835][ T8947] FAULT_INJECTION: forcing a failure. [ 156.103835][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.117032][ T8947] CPU: 0 UID: 0 PID: 8947 Comm: syz.4.2122 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 156.127390][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 156.129023][ T3376] vhci_hcd: vhci_device speed not set [ 156.137484][ T8947] Call Trace: [ 156.137496][ T8947] [ 156.149173][ T8947] dump_stack_lvl+0xf2/0x150 [ 156.153802][ T8947] dump_stack+0x15/0x1a [ 156.158038][ T8947] should_fail_ex+0x223/0x230 [ 156.162784][ T8947] should_fail+0xb/0x10 [ 156.164347][ T8951] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 156.166991][ T8947] should_fail_usercopy+0x1a/0x20 [ 156.179803][ T8947] strncpy_from_user+0x25/0x210 [ 156.183944][ T8951] bond2: entered allmulticast mode [ 156.184664][ T8947] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 156.190079][ T8951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.195429][ T8947] ? getname_flags+0x81/0x3b0 [ 156.195457][ T8947] getname_flags+0xb0/0x3b0 [ 156.211303][ T8947] __x64_sys_symlinkat+0x43/0x70 [ 156.216311][ T8947] x64_sys_call+0x269e/0x2dc0 [ 156.221091][ T8947] do_syscall_64+0xc9/0x1c0 [ 156.225656][ T8947] ? clear_bhb_loop+0x55/0xb0 [ 156.230406][ T8947] ? clear_bhb_loop+0x55/0xb0 [ 156.235126][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.241049][ T8947] RIP: 0033:0x7fcf29e25d29 [ 156.245467][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.265576][ T8947] RSP: 002b:00007fcf28497038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 156.274007][ T8947] RAX: ffffffffffffffda RBX: 00007fcf2a015fa0 RCX: 00007fcf29e25d29 [ 156.281991][ T8947] RDX: 0000000020000040 RSI: ffffffffffffff9c RDI: 0000000020001040 [ 156.290019][ T8947] RBP: 00007fcf28497090 R08: 0000000000000000 R09: 0000000000000000 [ 156.298011][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.305993][ T8947] R13: 0000000000000000 R14: 00007fcf2a015fa0 R15: 00007ffe3697bb48 [ 156.313984][ T8947] [ 156.322834][ T8951] bond2: entered promiscuous mode [ 156.330564][ T8951] batadv0: entered promiscuous mode [ 156.336369][ T8951] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 156.366844][ T8955] loop4: detected capacity change from 0 to 1024 [ 156.376843][ T8955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.392892][ T8955] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.404502][ T8955] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 156.412938][ T8955] System zones: 0-1, 3-12 [ 156.417863][ T8955] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.2124: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 156.437104][ T8955] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.2124: couldn't read orphan inode 11 (err -117) [ 156.441853][ T8958] loop0: detected capacity change from 0 to 512 [ 156.449630][ T8955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.473760][ T8955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2124'. [ 156.483964][ T8958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 156.492943][ T8958] System zones: 0-2, 18-18, 34-35 [ 156.498848][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.499183][ T8958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.520582][ T8958] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.549434][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.882332][ T8983] tmpfs: Bad value for 'mpol' [ 156.944471][ T8987] netlink: 'syz.0.2131': attribute type 4 has an invalid length. [ 156.955985][ T8987] netlink: 'syz.0.2131': attribute type 4 has an invalid length. [ 157.769601][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 157.769617][ T29] audit: type=1326 audit(1737459467.876:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.809175][ T29] audit: type=1326 audit(1737459467.876:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.832754][ T29] audit: type=1326 audit(1737459467.906:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.856272][ T29] audit: type=1326 audit(1737459467.906:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.879730][ T29] audit: type=1326 audit(1737459467.906:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.903210][ T29] audit: type=1326 audit(1737459467.906:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.926722][ T29] audit: type=1326 audit(1737459467.906:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.950226][ T29] audit: type=1326 audit(1737459467.906:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 157.973774][ T29] audit: type=1326 audit(1737459467.906:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 158.000406][ T9017] loop1: detected capacity change from 0 to 512 [ 158.006965][ T29] audit: type=1326 audit(1737459467.916:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9016 comm="syz.1.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 158.007413][ T9017] EXT4-fs: Ignoring removed oldalloc option [ 158.062721][ T9017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.099330][ T9023] loop3: detected capacity change from 0 to 512 [ 158.106509][ T9017] EXT4-fs (loop1): 1 truncate cleaned up [ 158.112579][ T9023] journal_path: Non-blockdev passed as './bus' [ 158.118784][ T9023] EXT4-fs: error: could not find journal device path [ 158.127501][ T9017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.349712][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.536019][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.580053][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.080564][ T9064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 159.087135][ T9064] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.094880][ T9064] vhci_hcd vhci_hcd.0: Device attached [ 159.122451][ T9066] vhci_hcd: connection closed [ 159.131512][ T2277] vhci_hcd: stop threads [ 159.140551][ T2277] vhci_hcd: release socket [ 159.144975][ T2277] vhci_hcd: disconnect device [ 159.221315][ T9075] loop2: detected capacity change from 0 to 512 [ 159.235900][ T9075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.272044][ T9075] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.288840][ T9081] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 159.309567][ T9081] bond1: entered allmulticast mode [ 159.316690][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.321394][ T9081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.341446][ T9081] bond1: entered promiscuous mode [ 159.347775][ T9081] batadv0: entered promiscuous mode [ 159.353942][ T9081] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 159.362033][ T9081] Cannot create hsr debugfs directory [ 159.367660][ T9081] hsr1: Slave A (bond1) is not up; please bring it up to get a fully working HSR network [ 159.377543][ T9081] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 159.388661][ T9081] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 159.538332][ T9096] FAULT_INJECTION: forcing a failure. [ 159.538332][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 159.551040][ T9096] CPU: 1 UID: 0 PID: 9096 Comm: syz.3.2174 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 159.557998][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 159.561390][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 159.561415][ T9096] Call Trace: [ 159.561423][ T9096] [ 159.561432][ T9096] dump_stack_lvl+0xf2/0x150 [ 159.570343][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 159.580335][ T9096] dump_stack+0x15/0x1a [ 159.604500][ T9096] should_fail_ex+0x223/0x230 [ 159.604537][ T9096] ? resv_map_alloc+0x32/0x190 [ 159.604619][ T9096] should_failslab+0x8f/0xb0 [ 159.604651][ T9096] __kmalloc_cache_noprof+0x4e/0x320 [ 159.604676][ T9096] ? vfs_write+0x596/0x920 [ 159.628441][ T9096] resv_map_alloc+0x32/0x190 [ 159.633144][ T9096] hugetlbfs_get_inode+0x64/0x380 [ 159.638202][ T9096] hugetlb_file_setup+0x188/0x3c0 [ 159.643256][ T9096] ksys_mmap_pgoff+0x172/0x330 [ 159.648081][ T9096] x64_sys_call+0x1940/0x2dc0 [ 159.652915][ T9096] do_syscall_64+0xc9/0x1c0 [ 159.657441][ T9096] ? clear_bhb_loop+0x55/0xb0 [ 159.662142][ T9096] ? clear_bhb_loop+0x55/0xb0 [ 159.666827][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.672779][ T9096] RIP: 0033:0x7fa1cf445d29 [ 159.677201][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.696826][ T9096] RSP: 002b:00007fa1cdab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.705249][ T9096] RAX: ffffffffffffffda RBX: 00007fa1cf635fa0 RCX: 00007fa1cf445d29 [ 159.713231][ T9096] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000000020000000 [ 159.721286][ T9096] RBP: 00007fa1cdab7090 R08: ffffffffffffffff R09: 0000000000000000 [ 159.729335][ T9096] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 159.737333][ T9096] R13: 0000000000000000 R14: 00007fa1cf635fa0 R15: 00007ffed5f45848 [ 159.745319][ T9096] [ 159.890643][ T9112] loop0: detected capacity change from 0 to 512 [ 159.900744][ T9112] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.919065][ T9112] EXT4-fs (loop0): 1 truncate cleaned up [ 159.925284][ T9112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.038884][ T9121] loop3: detected capacity change from 0 to 512 [ 160.075947][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.099331][ T9121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.115285][ T9121] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.143473][ T9125] loop0: detected capacity change from 0 to 732 [ 160.163547][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.202758][ T9131] C: renamed from team_slave_0 [ 160.211598][ T9131] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2188'. [ 160.231474][ T9131] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 160.247672][ T9133] loop0: detected capacity change from 0 to 512 [ 160.257087][ T9131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2188'. [ 160.271364][ T9133] journal_path: Non-blockdev passed as './bus' [ 160.277575][ T9133] EXT4-fs: error: could not find journal device path [ 160.291992][ T9131] loop2: detected capacity change from 0 to 128 [ 160.322221][ T9131] FAT-fs (loop2): bogus number of reserved sectors [ 160.328792][ T9131] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 160.338188][ T9131] FAT-fs (loop2): Can't find a valid FAT filesystem [ 160.426818][ T9145] FAULT_INJECTION: forcing a failure. [ 160.426818][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.440042][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.0.2194 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 160.450394][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 160.460510][ T9145] Call Trace: [ 160.463810][ T9145] [ 160.466809][ T9145] dump_stack_lvl+0xf2/0x150 [ 160.471504][ T9145] dump_stack+0x15/0x1a [ 160.475691][ T9145] should_fail_ex+0x223/0x230 [ 160.480453][ T9145] should_fail+0xb/0x10 [ 160.484676][ T9145] should_fail_usercopy+0x1a/0x20 [ 160.489766][ T9145] _copy_from_user+0x1c/0xa0 [ 160.490639][ T9149] loop2: detected capacity change from 0 to 512 [ 160.494812][ T9145] copy_msghdr_from_user+0x54/0x2a0 [ 160.494853][ T9145] ? __fget_files+0x17c/0x1c0 [ 160.494889][ T9145] __sys_sendmsg+0x13e/0x230 [ 160.501618][ T9149] journal_path: Non-blockdev passed as './bus' [ 160.506345][ T9145] __x64_sys_sendmsg+0x46/0x50 [ 160.511092][ T9149] EXT4-fs: error: could not find journal device path [ 160.515580][ T9145] x64_sys_call+0x2734/0x2dc0 [ 160.538440][ T9145] do_syscall_64+0xc9/0x1c0 [ 160.543094][ T9145] ? clear_bhb_loop+0x55/0xb0 [ 160.547803][ T9145] ? clear_bhb_loop+0x55/0xb0 [ 160.552580][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.558496][ T9145] RIP: 0033:0x7fc8c74c5d29 [ 160.563000][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.582645][ T9145] RSP: 002b:00007fc8c5b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.591070][ T9145] RAX: ffffffffffffffda RBX: 00007fc8c76b5fa0 RCX: 00007fc8c74c5d29 [ 160.599100][ T9145] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 160.607093][ T9145] RBP: 00007fc8c5b37090 R08: 0000000000000000 R09: 0000000000000000 [ 160.615068][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.623136][ T9145] R13: 0000000000000000 R14: 00007fc8c76b5fa0 R15: 00007ffe90802d68 [ 160.631133][ T9145] [ 160.700225][ T9153] loop2: detected capacity change from 0 to 512 [ 160.706813][ T9153] journal_path: Non-blockdev passed as './bus' [ 160.713055][ T9153] EXT4-fs: error: could not find journal device path [ 160.853454][ T9169] loop2: detected capacity change from 0 to 1024 [ 160.862578][ T9169] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.899284][ T9169] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.922242][ T9169] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 160.952140][ T9169] System zones: 0-1, 3-12 [ 160.957160][ T9169] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.2202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 161.029127][ T9169] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2202: couldn't read orphan inode 11 (err -117) [ 161.031944][ T9182] loop0: detected capacity change from 0 to 164 [ 161.051117][ T9169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.064216][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 161.080384][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2202'. [ 161.105636][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.126495][ T9182] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 161.495393][ T9214] loop3: detected capacity change from 0 to 512 [ 161.530135][ T9214] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0102] [ 161.546546][ T9214] System zones: 0-2, 18-18, 34-35 [ 161.561471][ T9220] netlink: 'syz.0.2221': attribute type 13 has an invalid length. [ 161.569858][ T9214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.601401][ T9214] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.661040][ T9220] gretap0: refused to change device tx_queue_len [ 161.667488][ T9220] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.685261][ T9228] FAULT_INJECTION: forcing a failure. [ 161.685261][ T9228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.698531][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.1.2224 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 161.708960][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 161.719032][ T9228] Call Trace: [ 161.722313][ T9228] [ 161.725322][ T9228] dump_stack_lvl+0xf2/0x150 [ 161.729935][ T9228] dump_stack+0x15/0x1a [ 161.734177][ T9228] should_fail_ex+0x223/0x230 [ 161.738883][ T9228] should_fail+0xb/0x10 [ 161.743043][ T9228] should_fail_usercopy+0x1a/0x20 [ 161.748223][ T9228] _copy_from_user+0x1c/0xa0 [ 161.752855][ T9228] __sys_bpf+0x14e/0x7a0 [ 161.757134][ T9228] __x64_sys_bpf+0x43/0x50 [ 161.761632][ T9228] x64_sys_call+0x2914/0x2dc0 [ 161.766358][ T9228] do_syscall_64+0xc9/0x1c0 [ 161.770873][ T9228] ? clear_bhb_loop+0x55/0xb0 [ 161.775612][ T9228] ? clear_bhb_loop+0x55/0xb0 [ 161.780302][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.786198][ T9228] RIP: 0033:0x7feb35bc5d29 [ 161.790617][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.810230][ T9228] RSP: 002b:00007feb34231038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.818649][ T9228] RAX: ffffffffffffffda RBX: 00007feb35db5fa0 RCX: 00007feb35bc5d29 [ 161.826652][ T9228] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 161.834663][ T9228] RBP: 00007feb34231090 R08: 0000000000000000 R09: 0000000000000000 [ 161.842719][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.850693][ T9228] R13: 0000000000000000 R14: 00007feb35db5fa0 R15: 00007ffe40e5e7e8 [ 161.858711][ T9228] [ 161.862865][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.889960][ T9231] loop2: detected capacity change from 0 to 512 [ 161.896380][ T9231] journal_path: Non-blockdev passed as './bus' [ 161.902609][ T9231] EXT4-fs: error: could not find journal device path [ 161.950053][ T9235] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2228'. [ 161.962390][ T9237] netlink: 'syz.0.2229': attribute type 1 has an invalid length. [ 162.004647][ T9237] bond3: entered allmulticast mode [ 162.013822][ T9237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.027714][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 162.051140][ T9237] bond3: entered promiscuous mode [ 162.055203][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.065801][ T9237] bond3: left promiscuous mode [ 162.073133][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.086329][ T9252] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2234'. [ 162.196935][ T9256] loop0: detected capacity change from 0 to 512 [ 162.217177][ T9256] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2236: bg 0: block 5: invalid block bitmap [ 162.230588][ T9256] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 162.250069][ T9256] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2236: invalid indirect mapped block 3 (level 2) [ 162.250727][ T9256] EXT4-fs (loop0): 1 orphan inode deleted [ 162.250765][ T9256] EXT4-fs (loop0): 1 truncate cleaned up [ 162.251271][ T9256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.323531][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.345244][ T9262] loop0: detected capacity change from 0 to 512 [ 162.345519][ T9262] journal_path: Non-blockdev passed as './bus' [ 162.345541][ T9262] EXT4-fs: error: could not find journal device path [ 162.415134][ T9266] ref_ctr increment failed for inode: 0x971 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888100054540 [ 162.415543][ T9265] uprobe: syz.0.2241:9265 failed to unregister, leaking uprobe [ 162.723307][ T9281] FAULT_INJECTION: forcing a failure. [ 162.723307][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 162.723337][ T9281] CPU: 0 UID: 0 PID: 9281 Comm: syz.3.2246 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 162.723362][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.723374][ T9281] Call Trace: [ 162.723380][ T9281] [ 162.723386][ T9281] dump_stack_lvl+0xf2/0x150 [ 162.767184][ T9281] dump_stack+0x15/0x1a [ 162.767306][ T9281] should_fail_ex+0x223/0x230 [ 162.767339][ T9281] should_failslab+0x8f/0xb0 [ 162.767452][ T9281] kmem_cache_alloc_noprof+0x52/0x320 [ 162.767481][ T9281] ? vm_area_dup+0x2c/0x130 [ 162.767520][ T9281] ? xa_load+0xb9/0xe0 [ 162.767547][ T9281] vm_area_dup+0x2c/0x130 [ 162.767663][ T9281] __split_vma+0xf7/0x6a0 [ 162.767733][ T9281] vms_gather_munmap_vmas+0x171/0x7a0 [ 162.767757][ T9281] ? mas_walk+0x204/0x320 [ 162.767894][ T9281] __mmap_region+0x306/0x1400 [ 162.767963][ T9281] ? _raw_spin_unlock+0x26/0x50 [ 162.767995][ T9281] ? finish_task_switch+0xb5/0x2b0 [ 162.768020][ T9281] ? __rcu_read_unlock+0x4e/0x70 [ 162.768056][ T9281] ? mntput_no_expire+0x70/0x3d0 [ 162.768179][ T9281] mmap_region+0x164/0x1e0 [ 162.768211][ T9281] do_mmap+0x732/0xbb0 [ 162.768243][ T9281] vm_mmap_pgoff+0x133/0x290 [ 162.768342][ T9281] ksys_mmap_pgoff+0x286/0x330 [ 162.768378][ T9281] x64_sys_call+0x1940/0x2dc0 [ 162.768417][ T9281] do_syscall_64+0xc9/0x1c0 [ 162.768438][ T9281] ? clear_bhb_loop+0x55/0xb0 [ 162.768537][ T9281] ? clear_bhb_loop+0x55/0xb0 [ 162.768565][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.768587][ T9281] RIP: 0033:0x7fa1cf445d29 [ 162.768602][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.768626][ T9281] RSP: 002b:00007fa1cdab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.768717][ T9281] RAX: ffffffffffffffda RBX: 00007fa1cf635fa0 RCX: 00007fa1cf445d29 [ 162.768733][ T9281] RDX: 000000000000001e RSI: 0000000000003000 RDI: 0000000020002000 [ 162.768748][ T9281] RBP: 00007fa1cdab7090 R08: 0000000000000005 R09: 0000000000000000 [ 162.768763][ T9281] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 162.768777][ T9281] R13: 0000000000000000 R14: 00007fa1cf635fa0 R15: 00007ffed5f45848 [ 162.768798][ T9281] [ 162.788287][ T9280] uprobe: syz.3.2246:9280 failed to unregister, leaking uprobe [ 162.924519][ T9287] loop3: detected capacity change from 0 to 512 [ 162.956810][ T9287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.956940][ T9287] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.978861][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.992899][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 162.992918][ T29] audit: type=1326 audit(1737459473.096:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 162.992989][ T29] audit: type=1326 audit(1737459473.096:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.015694][ T29] audit: type=1326 audit(1737459473.116:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.015732][ T29] audit: type=1326 audit(1737459473.116:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.015763][ T29] audit: type=1326 audit(1737459473.116:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.015843][ T29] audit: type=1326 audit(1737459473.116:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.016246][ T29] audit: type=1326 audit(1737459473.116:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.016278][ T29] audit: type=1326 audit(1737459473.116:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.016385][ T29] audit: type=1326 audit(1737459473.116:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.016410][ T29] audit: type=1326 audit(1737459473.116:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9292 comm="syz.3.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1cf445d29 code=0x7ffc0000 [ 163.051008][ T9296] loop0: detected capacity change from 0 to 4096 [ 163.078313][ T9296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.207780][ T9307] +}k calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.405056][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.405123][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.481434][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.472176][ T9333] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2264'. [ 164.607399][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2264'. [ 164.923906][ T9342] loop3: detected capacity change from 0 to 1024 [ 164.932781][ T9342] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.990009][ T9342] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.002201][ T9346] loop2: detected capacity change from 0 to 512 [ 165.019828][ T9342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 165.023533][ T9348] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 165.028007][ T9342] System zones: [ 165.034475][ T9348] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.034561][ T9348] vhci_hcd vhci_hcd.0: Device attached [ 165.051708][ T9342] 0-1, 3-12 [ 165.056818][ T9342] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 165.076529][ T9342] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2266: couldn't read orphan inode 11 (err -117) [ 165.077882][ T9346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.097288][ T9342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.100909][ T9350] vhci_hcd: connection closed [ 165.120585][ T9342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2266'. [ 165.144373][ T11] vhci_hcd: stop threads [ 165.148668][ T11] vhci_hcd: release socket [ 165.153171][ T11] vhci_hcd: disconnect device [ 165.153497][ T9346] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.189282][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.200471][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 165.265898][ T9367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2276'. [ 165.281698][ T9364] loop3: detected capacity change from 0 to 512 [ 165.290424][ T9364] journal_path: Non-blockdev passed as './bus' [ 165.296681][ T9364] EXT4-fs: error: could not find journal device path [ 165.327425][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2276'. [ 165.767684][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 165.981504][ T9399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2287'. [ 166.375730][ T9407] loop3: detected capacity change from 0 to 512 [ 166.455990][ T9407] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.707553][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.707631][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.742938][ T9432] loop1: detected capacity change from 0 to 512 [ 166.743103][ T9432] journal_path: Non-blockdev passed as './bus' [ 166.743121][ T9432] EXT4-fs: error: could not find journal device path [ 168.263510][ T9465] loop0: detected capacity change from 0 to 512 [ 168.301264][ T9465] journal_path: Non-blockdev passed as './bus' [ 168.307518][ T9465] EXT4-fs: error: could not find journal device path [ 168.499134][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 168.499150][ T29] audit: type=1326 audit(1737459478.536:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 168.528331][ T29] audit: type=1326 audit(1737459478.536:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 168.551192][ T29] audit: type=1326 audit(1737459478.536:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 168.574155][ T29] audit: type=1326 audit(1737459478.536:7895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8c74c7c47 code=0x7ffc0000 [ 168.596954][ T29] audit: type=1326 audit(1737459478.536:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc8c74c7bbc code=0x7ffc0000 [ 168.619758][ T29] audit: type=1326 audit(1737459478.536:7897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc8c74c7af4 code=0x7ffc0000 [ 168.642592][ T29] audit: type=1326 audit(1737459478.536:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc8c74c7af4 code=0x7ffc0000 [ 168.665504][ T29] audit: type=1326 audit(1737459478.536:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc8c74c498a code=0x7ffc0000 [ 168.688264][ T29] audit: type=1326 audit(1737459478.556:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 168.711175][ T29] audit: type=1326 audit(1737459478.556:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9464 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc8c74c5d29 code=0x7ffc0000 [ 168.778275][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2316'. [ 168.791817][ T9479] netlink: 'syz.0.2315': attribute type 1 has an invalid length. [ 168.815264][ T9479] bond4: entered allmulticast mode [ 168.820785][ T9479] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.928548][ T9479] bond4: entered promiscuous mode [ 168.941067][ T9479] bond4: left promiscuous mode [ 168.952360][ T9484] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 169.231386][ T9504] loop2: detected capacity change from 0 to 512 [ 169.231574][ T9504] journal_path: Non-blockdev passed as './bus' [ 169.231589][ T9504] EXT4-fs: error: could not find journal device path [ 169.296519][ T9508] loop2: detected capacity change from 0 to 512 [ 169.296661][ T9508] journal_path: Non-blockdev passed as './bus' [ 169.296677][ T9508] EXT4-fs: error: could not find journal device path [ 170.159053][ T9521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2329'. [ 170.220041][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 170.350976][ T9532] loop0: detected capacity change from 0 to 512 [ 170.367694][ T9532] journal_path: Non-blockdev passed as './bus' [ 170.373998][ T9532] EXT4-fs: error: could not find journal device path [ 170.464902][ T9538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 170.471541][ T9538] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.479344][ T9538] vhci_hcd vhci_hcd.0: Device attached [ 170.504600][ T9541] vhci_hcd: connection closed [ 170.504864][ T111] vhci_hcd: stop threads [ 170.513877][ T111] vhci_hcd: release socket [ 170.518321][ T111] vhci_hcd: disconnect device [ 170.675015][ T9553] loop2: detected capacity change from 0 to 512 [ 170.711683][ T9553] EXT4-fs mount: 3 callbacks suppressed [ 170.711701][ T9553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.714773][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2340'. [ 170.727736][ T9553] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.776560][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.144762][ T9587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2352'. [ 171.397751][ T9593] loop3: detected capacity change from 0 to 512 [ 171.403121][ T9593] ext4: Unknown parameter 'obj_user' [ 171.494622][ T9599] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 171.666675][ T9605] 9pnet_fd: Insufficient options for proto=fd [ 171.709704][ T9608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2359'. [ 171.765707][ T9609] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 171.794700][ T9612] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 171.794722][ T9612] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 171.794802][ T9612] vhci_hcd vhci_hcd.0: Device attached [ 171.795111][ T9613] vhci_hcd: connection closed [ 171.796437][ T111] vhci_hcd: stop threads [ 171.824998][ T111] vhci_hcd: release socket [ 171.825010][ T111] vhci_hcd: disconnect device [ 171.927021][ T9618] loop4: detected capacity change from 0 to 1024 [ 171.950957][ T9618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.985305][ T9618] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.047249][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2364'. [ 172.057604][ T9626] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 172.198741][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.237673][ T9628] loop1: detected capacity change from 0 to 2048 [ 172.247506][ T9628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.266097][ T9628] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 172.266124][ T9628] EXT4-fs (loop1): This should not happen!! Data will be lost [ 172.266124][ T9628] [ 172.266138][ T9628] EXT4-fs (loop1): Total free blocks count 0 [ 172.266152][ T9628] EXT4-fs (loop1): Free/Dirty block details [ 172.266165][ T9628] EXT4-fs (loop1): free_blocks=0 [ 172.266182][ T9628] EXT4-fs (loop1): dirty_blocks=0 [ 172.266196][ T9628] EXT4-fs (loop1): Block reservation details [ 172.266208][ T9628] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 172.341853][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.388700][ T9639] loop1: detected capacity change from 0 to 512 [ 172.388938][ T9639] journal_path: Non-blockdev passed as './bus' [ 172.389016][ T9639] EXT4-fs: error: could not find journal device path [ 172.418818][ T9641] 9pnet_fd: Insufficient options for proto=fd [ 172.459953][ T9646] loop0: detected capacity change from 0 to 512 [ 172.460994][ T9646] journal_path: Non-blockdev passed as './bus' [ 172.461014][ T9646] EXT4-fs: error: could not find journal device path [ 173.216575][ T9677] 9pnet_fd: Insufficient options for proto=fd [ 173.250828][ T9680] loop2: detected capacity change from 0 to 512 [ 173.257345][ T9680] journal_path: Non-blockdev passed as './bus' [ 173.263639][ T9680] EXT4-fs: error: could not find journal device path [ 173.289955][ T9682] loop1: detected capacity change from 0 to 1024 [ 173.301982][ T9682] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 173.338528][ T9686] loop0: detected capacity change from 0 to 512 [ 173.346753][ T9682] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.351371][ T9686] ext4: Unknown parameter 'obj_user' [ 173.380782][ T9682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 173.419188][ T9682] System zones: 0-1, 3-12 [ 173.428957][ T9682] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.2383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 173.531448][ T9682] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2383: couldn't read orphan inode 11 (err -117) [ 173.550314][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 173.550328][ T29] audit: type=1326 audit(1737459483.646:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.578338][ T9682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.580071][ T29] audit: type=1326 audit(1737459483.646:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.615961][ T29] audit: type=1326 audit(1737459483.646:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.639501][ T29] audit: type=1326 audit(1737459483.646:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.639534][ T29] audit: type=1326 audit(1737459483.646:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.671142][ T9682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2383'. [ 173.686511][ T29] audit: type=1326 audit(1737459483.656:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.719084][ T29] audit: type=1326 audit(1737459483.656:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.742561][ T29] audit: type=1326 audit(1737459483.656:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.766451][ T29] audit: type=1326 audit(1737459483.656:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.790695][ T29] audit: type=1326 audit(1737459483.656:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9699 comm="syz.4.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf29e25d29 code=0x7ffc0000 [ 173.822643][ T9709] loop3: detected capacity change from 0 to 512 [ 173.830951][ T9711] netlink: 'syz.4.2396': attribute type 1 has an invalid length. [ 173.846417][ T9711] bond1: entered allmulticast mode [ 173.856648][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.860514][ T9709] journal_path: Non-blockdev passed as './bus' [ 173.871891][ T9709] EXT4-fs: error: could not find journal device path [ 173.879156][ T9711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.906542][ T9711] bond1: entered promiscuous mode [ 173.913320][ T9711] batadv0: entered promiscuous mode [ 173.923401][ T9711] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 173.968547][ T9711] Cannot create hsr debugfs directory [ 173.974408][ T9711] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 173.983222][ T9719] netlink: 'syz.0.2399': attribute type 1 has an invalid length. [ 174.034041][ T9719] bond5: entered allmulticast mode [ 174.049910][ T9719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.071963][ T9732] netlink: 'syz.1.2397': attribute type 4 has an invalid length. [ 174.083117][ T9728] bond5: entered promiscuous mode [ 174.084966][ T9731] loop2: detected capacity change from 0 to 512 [ 174.095403][ T9731] journal_path: Non-blockdev passed as './bus' [ 174.101733][ T9731] EXT4-fs: error: could not find journal device path [ 174.124291][ T9736] netlink: 'syz.1.2397': attribute type 4 has an invalid length. [ 174.145914][ T9728] bond5: left promiscuous mode [ 174.202148][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 174.318243][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 174.340975][ T9754] loop2: detected capacity change from 0 to 512 [ 174.347660][ T9754] journal_path: Non-blockdev passed as './bus' [ 174.353931][ T9754] EXT4-fs: error: could not find journal device path [ 174.420221][ T9760] loop2: detected capacity change from 0 to 512 [ 174.442571][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.442619][ T9764] loop3: detected capacity change from 0 to 1024 [ 174.456401][ T9760] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.476049][ T9764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.486475][ T9764] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.501006][ T9764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 174.509832][ T9764] System zones: 0-1, 3-12 [ 174.514387][ T9768] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.514889][ T9764] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2415: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 174.523243][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.549943][ T9764] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2415: couldn't read orphan inode 11 (err -117) [ 174.563081][ T9764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.565732][ T9768] random: crng reseeded on system resumption [ 174.581089][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2415'. [ 174.602743][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.635138][ T9769] loop4: detected capacity change from 0 to 1024 [ 174.641949][ T9769] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.656439][ T9769] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 174.680433][ T9769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.757359][ T9768] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 16: comm syz.4.2416: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=1024 fake=0 [ 174.777655][ T9783] loop2: detected capacity change from 0 to 128 [ 174.788475][ T7352] hid-generic 0000:000A:0000.0002: unknown main item tag 0x0 [ 174.797784][ T9783] EXT4-fs error (device loop2): __ext4_fill_super:5505: inode #2: comm syz.2.2421: iget: checksum invalid [ 174.807426][ T7352] hid-generic 0000:000A:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.828784][ T9783] EXT4-fs (loop2): get root inode failed [ 174.834613][ T9783] EXT4-fs (loop2): mount failed [ 174.847831][ T3301] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /476/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=1024 fake=0 [ 174.976796][ T9796] loop0: detected capacity change from 0 to 1024 [ 175.000348][ T9796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.093017][ T9796] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.116983][ T9796] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 175.131394][ T9786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.282399][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.582400][ T9818] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 176.072180][ T9810] chnl_net:caif_netlink_parms(): no params data found [ 176.323091][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.330213][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.342023][ T9853] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 176.372527][ T9810] bridge_slave_0: entered allmulticast mode [ 176.386050][ T9810] bridge_slave_0: entered promiscuous mode [ 176.404521][ T9853] bond1: entered allmulticast mode [ 176.411284][ T9853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.423168][ T9856] bond1: entered promiscuous mode [ 176.430113][ T9856] batadv0: entered promiscuous mode [ 176.435760][ T9856] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 176.443391][ T9856] Cannot create hsr debugfs directory [ 176.449176][ T9856] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 176.458161][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.465279][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.472454][ T9810] bridge_slave_1: entered allmulticast mode [ 176.479203][ T9810] bridge_slave_1: entered promiscuous mode [ 176.499760][ T9810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.511309][ T9810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.533195][ T9810] team0: Port device team_slave_0 added [ 176.540200][ T9810] team0: Port device team_slave_1 added [ 176.557253][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.564293][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.590254][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.601542][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.608589][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.634551][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.702122][ T9810] hsr_slave_0: entered promiscuous mode [ 176.708290][ T9810] hsr_slave_1: entered promiscuous mode [ 176.716374][ T9810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.724021][ T9810] Cannot create hsr debugfs directory [ 176.902365][ T9810] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.912341][ T9810] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.921742][ T9810] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.931283][ T9810] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.946433][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.953564][ T9810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.960982][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.968056][ T9810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.058843][ T9888] bridge0: entered allmulticast mode [ 177.068754][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 177.077692][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 177.086741][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 177.141865][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.151931][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.160281][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.226463][ T9810] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.244262][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.251365][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.288848][ T2434] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.295958][ T2434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.355189][ T9904] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 177.378068][ T9810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.388555][ T9810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.407113][ T9906] loop1: detected capacity change from 0 to 512 [ 177.414107][ T9906] journal_path: Non-blockdev passed as './bus' [ 177.420419][ T9906] EXT4-fs: error: could not find journal device path [ 177.439257][ T9910] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 177.445858][ T9910] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 177.453640][ T9910] vhci_hcd vhci_hcd.0: Device attached [ 177.475059][ T9911] vhci_hcd: connection closed [ 177.475290][ T2434] vhci_hcd: stop threads [ 177.484350][ T2434] vhci_hcd: release socket [ 177.488854][ T2434] vhci_hcd: disconnect device [ 177.536469][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.662884][ T9932] loop3: detected capacity change from 0 to 512 [ 177.689460][ T9932] EXT4-fs: Ignoring removed orlov option [ 177.704484][ T9932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.713778][ T9932] EXT4-fs (loop3): orphan cleanup on readonly fs [ 177.737936][ T9932] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2475: bg 0: block 248: padding at end of block bitmap is not set [ 177.742012][ T9810] veth0_vlan: entered promiscuous mode [ 177.758786][ T9932] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2475: Failed to acquire dquot type 1 [ 177.764016][ T9810] veth1_vlan: entered promiscuous mode [ 177.782714][ T9810] veth0_macvtap: entered promiscuous mode [ 177.790110][ T9810] veth1_macvtap: entered promiscuous mode [ 177.800849][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.809617][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.839021][ T9810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.847785][ T9810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.852188][ T9932] EXT4-fs (loop3): 1 truncate cleaned up [ 177.856538][ T9810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.870894][ T9810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.890339][ T9932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.951316][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.294382][ T9969] loop3: detected capacity change from 0 to 512 [ 179.400636][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 179.400655][ T29] audit: type=1400 audit(1737459489.506:8816): avc: denied { getopt } for pid=9973 comm="syz.2.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.416583][ T9969] journal_path: Non-blockdev passed as './bus' [ 179.432574][ T9969] EXT4-fs: error: could not find journal device path [ 179.460253][ T9977] loop5: detected capacity change from 0 to 512 [ 179.547162][ T9984] loop1: detected capacity change from 0 to 1024 [ 179.563987][ T29] audit: type=1326 audit(1737459489.606:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.587450][ T29] audit: type=1326 audit(1737459489.606:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.610894][ T29] audit: type=1326 audit(1737459489.606:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.634337][ T29] audit: type=1326 audit(1737459489.606:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.657791][ T29] audit: type=1326 audit(1737459489.606:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.681144][ T29] audit: type=1326 audit(1737459489.606:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.704618][ T29] audit: type=1326 audit(1737459489.606:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9973 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4324fc5d29 code=0x7ffc0000 [ 179.790586][ T9990] FAULT_INJECTION: forcing a failure. [ 179.790586][ T9990] name failslab, interval 1, probability 0, space 0, times 0 [ 179.803329][ T9990] CPU: 1 UID: 0 PID: 9990 Comm: syz.0.2491 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 179.813798][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 179.823867][ T9990] Call Trace: [ 179.827238][ T9990] [ 179.830180][ T9990] dump_stack_lvl+0xf2/0x150 [ 179.834809][ T9990] dump_stack+0x15/0x1a [ 179.839007][ T9990] should_fail_ex+0x223/0x230 [ 179.843882][ T9990] should_failslab+0x8f/0xb0 [ 179.848491][ T9990] kmem_cache_alloc_noprof+0x52/0x320 [ 179.853878][ T9990] ? security_inode_alloc+0x37/0x100 [ 179.859214][ T9990] security_inode_alloc+0x37/0x100 [ 179.864417][ T9990] inode_init_always_gfp+0x4a2/0x4f0 [ 179.869738][ T9990] alloc_inode+0x82/0x160 [ 179.874140][ T9990] new_inode_pseudo+0x15/0x20 [ 179.878885][ T9990] create_pipe_files+0x42/0x3b0 [ 179.883798][ T9990] __do_pipe_flags+0x46/0x190 [ 179.888518][ T9990] do_pipe2+0x64/0x130 [ 179.892700][ T9990] __x64_sys_pipe2+0x30/0x40 [ 179.897447][ T9990] x64_sys_call+0x28a6/0x2dc0 [ 179.902147][ T9990] do_syscall_64+0xc9/0x1c0 [ 179.906739][ T9990] ? clear_bhb_loop+0x55/0xb0 [ 179.911445][ T9990] ? clear_bhb_loop+0x55/0xb0 [ 179.916132][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.922040][ T9990] RIP: 0033:0x7fc8c74c5d29 [ 179.926457][ T9990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.946077][ T9990] RSP: 002b:00007fc8c5b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 179.954547][ T9990] RAX: ffffffffffffffda RBX: 00007fc8c76b5fa0 RCX: 00007fc8c74c5d29 [ 179.962535][ T9990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 179.970526][ T9990] RBP: 00007fc8c5b37090 R08: 0000000000000000 R09: 0000000000000000 [ 179.978511][ T9990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.986556][ T9990] R13: 0000000000000000 R14: 00007fc8c76b5fa0 R15: 00007ffe90802d68 [ 179.994543][ T9990] [ 180.104836][ T9977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.111391][ T9999] FAULT_INJECTION: forcing a failure. [ 180.111391][ T9999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.119232][ T9984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.130357][ T9999] CPU: 0 UID: 0 PID: 9999 Comm: syz.0.2494 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 180.130383][ T9999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 180.130444][ T9999] Call Trace: [ 180.147959][ T9977] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.153102][ T9999] [ 180.179770][ T9999] dump_stack_lvl+0xf2/0x150 [ 180.184464][ T9999] dump_stack+0x15/0x1a [ 180.188652][ T9999] should_fail_ex+0x223/0x230 [ 180.193333][ T9999] should_fail+0xb/0x10 [ 180.197488][ T9999] should_fail_usercopy+0x1a/0x20 [ 180.202589][ T9999] _copy_from_user+0x1c/0xa0 [ 180.207215][ T9999] ____sys_sendmsg+0x1a4/0x410 [ 180.212009][ T9999] __sys_sendmsg+0x19d/0x230 [ 180.216676][ T9999] __x64_sys_sendmsg+0x46/0x50 [ 180.221544][ T9999] x64_sys_call+0x2734/0x2dc0 [ 180.226258][ T9999] do_syscall_64+0xc9/0x1c0 [ 180.230766][ T9999] ? clear_bhb_loop+0x55/0xb0 [ 180.235453][ T9999] ? clear_bhb_loop+0x55/0xb0 [ 180.240140][ T9999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.246065][ T9999] RIP: 0033:0x7fc8c74c5d29 [ 180.250481][ T9999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.270172][ T9999] RSP: 002b:00007fc8c5b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.278642][ T9999] RAX: ffffffffffffffda RBX: 00007fc8c76b5fa0 RCX: 00007fc8c74c5d29 [ 180.286608][ T9999] RDX: 0000000000000006 RSI: 0000000020000200 RDI: 0000000000000003 [ 180.294751][ T9999] RBP: 00007fc8c5b37090 R08: 0000000000000000 R09: 0000000000000000 [ 180.302762][ T9999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.310729][ T9999] R13: 0000000000000000 R14: 00007fc8c76b5fa0 R15: 00007ffe90802d68 [ 180.318753][ T9999] [ 180.324829][ T29] audit: type=1326 audit(1737459490.426:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 180.352067][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.361388][ T29] audit: type=1326 audit(1737459490.426:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9983 comm="syz.1.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7feb35bc5d29 code=0x7ffc0000 [ 180.391729][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.437433][T10001] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 180.443993][T10001] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 180.451794][T10001] vhci_hcd vhci_hcd.0: Device attached [ 180.464304][T10002] vhci_hcd: connection closed [ 180.465552][ T2434] vhci_hcd: stop threads [ 180.474595][ T2434] vhci_hcd: release socket [ 180.479159][ T2434] vhci_hcd: disconnect device [ 180.532555][T10014] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.541398][T10018] netlink: 'syz.5.2503': attribute type 1 has an invalid length. [ 180.565842][T10014] random: crng reseeded on system resumption [ 180.598339][T10021] loop3: detected capacity change from 0 to 512 [ 180.615843][T10022] loop1: detected capacity change from 0 to 1024 [ 180.624448][T10021] journal_path: Non-blockdev passed as './bus' [ 180.630748][T10021] EXT4-fs: error: could not find journal device path [ 180.636440][T10022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.646438][T10022] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.661218][T10022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 180.669737][T10022] System zones: 0-1, 3-12 [ 180.674475][T10022] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.2504: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 180.691723][T10024] loop2: detected capacity change from 0 to 1024 [ 180.700283][T10022] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2504: couldn't read orphan inode 11 (err -117) [ 180.709953][T10024] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.719230][T10022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.760493][T10027] loop3: detected capacity change from 0 to 512 [ 180.760945][T10022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2504'. [ 180.778311][T10024] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 180.805046][T10027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.805248][T10024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.817798][T10027] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.848430][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.861569][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.875151][T10014] EXT4-fs error (device loop2): ext4_find_dest_de:2079: inode #2: block 16: comm syz.2.2501: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=1024 fake=0 [ 180.898350][ T3376] hid-generic 0000:000A:0000.0003: unknown main item tag 0x0 [ 180.910949][ T3376] hid-generic 0000:000A:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.955427][T10040] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.972026][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.981855][T10040] random: crng reseeded on system resumption [ 181.024775][T10042] loop1: detected capacity change from 0 to 1024 [ 181.048618][T10042] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.108500][T10048] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 181.117107][T10042] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.136949][T10048] bond2: entered allmulticast mode [ 181.142363][T10048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.150511][T10042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.166455][T10048] bond2: entered promiscuous mode [ 181.199697][T10048] bond2: left promiscuous mode [ 181.322737][T10065] loop5: detected capacity change from 0 to 1024 [ 181.332713][T10065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.349509][T10065] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 181.365513][T10065] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 181.372787][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.383912][T10065] System zones: 0-1, 3-12 [ 181.400620][T10065] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #11: comm syz.5.2519: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 181.419341][T10071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.446519][T10065] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2519: couldn't read orphan inode 11 (err -117) [ 181.463834][T10065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.477712][T10071] random: crng reseeded on system resumption [ 181.505681][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2519'. [ 181.543937][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.549791][T10080] loop0: detected capacity change from 0 to 1024 [ 181.559919][T10080] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.566719][T10080] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.591699][T10080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.631558][T10071] EXT4-fs error (device loop0): ext4_find_dest_de:2079: inode #2: block 16: comm syz.0.2523: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=1024 fake=0 [ 181.655443][ T3377] hid-generic 0000:000A:0000.0004: unknown main item tag 0x0 [ 181.669533][ T3377] hid-generic 0000:000A:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.683782][T10086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.700450][T10086] random: crng reseeded on system resumption [ 181.729672][T10088] loop5: detected capacity change from 0 to 1024 [ 181.737578][T10088] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.749315][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.769412][T10088] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.795018][T10089] loop1: detected capacity change from 0 to 1024 [ 181.810855][T10088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.814418][T10089] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.831643][T10089] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 181.856839][ T9810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.880011][T10089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.950976][T10095] Driver unsupported XDP return value 0 on prog (id 1909) dev N/A, expect packet loss! [ 181.964052][T10089] EXT4-fs error (device loop1): ext4_find_dest_de:2079: inode #2: block 16: comm syz.1.2527: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=1024 fake=0 [ 181.973525][T10105] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 181.990334][T10105] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 181.998056][T10105] vhci_hcd vhci_hcd.0: Device attached [ 182.013157][ T3377] hid-generic 0000:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 182.025493][ T3377] hid-generic 0000:FFFFFFFF:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.046490][T10109] batadv1: entered promiscuous mode [ 182.047842][T10106] vhci_hcd: connection closed [ 182.057300][T10109] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.060426][ T1933] vhci_hcd: stop threads [ 182.073148][ T1933] vhci_hcd: release socket [ 182.077575][ T1933] vhci_hcd: disconnect device [ 182.096432][ T3308] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /504/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=1024 fake=0 [ 182.256246][T10123] 9pnet_fd: Insufficient options for proto=fd [ 182.293306][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.309504][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.315424][T10129] loop2: detected capacity change from 0 to 1024 [ 182.330193][T10129] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.337297][T10129] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 182.355564][T10110] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.370466][T10133] loop0: detected capacity change from 0 to 512 [ 182.371121][T10129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.408133][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.418643][T10133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.433782][T10133] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.476393][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.512799][T10146] loop2: detected capacity change from 0 to 512 [ 182.520412][T10146] ext4: Unknown parameter 'obj_user' [ 182.587882][T10153] loop0: detected capacity change from 0 to 1024 [ 182.593354][T10155] loop2: detected capacity change from 0 to 1024 [ 182.604285][T10155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.628070][T10153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 182.646578][T10155] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 182.658111][T10153] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 182.677564][T10155] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 182.687270][T10153] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 182.705418][T10153] System zones: 0-1, 3-12 [ 182.712654][T10153] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.2551: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 182.734927][T10153] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2551: couldn't read orphan inode 11 (err -117) [ 182.747918][T10153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.760608][T10139] chnl_net:caif_netlink_parms(): no params data found [ 182.766520][T10153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2551'. [ 182.804870][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.818370][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.855911][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.863138][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.887846][T10179] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 182.895924][T10139] bridge_slave_0: entered allmulticast mode [ 182.902877][T10139] bridge_slave_0: entered promiscuous mode [ 182.910180][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.917290][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.925038][T10139] bridge_slave_1: entered allmulticast mode [ 182.930199][T10177] 9pnet_fd: Insufficient options for proto=fd [ 182.932953][T10139] bridge_slave_1: entered promiscuous mode [ 182.950781][T10179] bond2: entered allmulticast mode [ 182.956391][T10179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.969139][T10180] bond2: entered promiscuous mode [ 182.980879][T10180] bond2: left promiscuous mode [ 182.995899][T10183] loop0: detected capacity change from 0 to 1024 [ 183.002585][T10183] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.012240][T10183] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 183.034388][T10183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.034442][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.059066][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.092045][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.103442][T10139] team0: Port device team_slave_0 added [ 183.110065][T10189] loop3: detected capacity change from 0 to 1024 [ 183.120779][ T7345] ================================================================== [ 183.120798][T10189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.128883][ T7345] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 183.139180][T10139] team0: Port device team_slave_1 added [ 183.145844][ T7345] [ 183.145852][ T7345] write to 0xffffea0004866b58 of 8 bytes by task 10189 on cpu 1: [ 183.145868][ T7345] delete_from_page_cache_batch+0x308/0x700 [ 183.145891][ T7345] truncate_inode_pages_range+0x1c5/0x6b0 [ 183.145918][ T7345] truncate_inode_pages+0x24/0x30 [ 183.158113][T10189] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.161476][ T7345] set_blocksize+0x25b/0x270 [ 183.161508][ T7345] sb_min_blocksize+0x63/0xe0 [ 183.197584][ T7345] ext4_fill_super+0x38b/0x3a10 [ 183.202441][ T7345] get_tree_bdev_flags+0x29f/0x310 [ 183.207557][ T7345] get_tree_bdev+0x1f/0x30 [ 183.211974][ T7345] ext4_get_tree+0x1c/0x30 [ 183.216395][ T7345] vfs_get_tree+0x56/0x1e0 [ 183.220811][ T7345] do_new_mount+0x227/0x690 [ 183.225313][ T7345] path_mount+0x49b/0xb30 [ 183.229645][ T7345] __se_sys_mount+0x27f/0x2d0 [ 183.234323][ T7345] __x64_sys_mount+0x67/0x80 [ 183.238915][ T7345] x64_sys_call+0x2c84/0x2dc0 [ 183.243592][ T7345] do_syscall_64+0xc9/0x1c0 [ 183.248090][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.253991][ T7345] [ 183.256304][ T7345] read to 0xffffea0004866b58 of 8 bytes by task 7345 on cpu 0: [ 183.263845][ T7345] folio_mapping+0xa0/0x120 [ 183.268365][ T7345] lru_add+0x89/0x440 [ 183.272353][ T7345] folio_batch_move_lru+0x15f/0x230 [ 183.277558][ T7345] lru_add_drain_cpu+0x7c/0x260 [ 183.282437][ T7345] lru_add_drain_per_cpu+0x26/0x80 [ 183.287578][ T7345] process_scheduled_works+0x483/0x9a0 [ 183.293039][ T7345] worker_thread+0x51d/0x6f0 [ 183.297638][ T7345] kthread+0x1d1/0x210 [ 183.301698][ T7345] ret_from_fork+0x4b/0x60 [ 183.306116][ T7345] ret_from_fork_asm+0x1a/0x30 [ 183.310877][ T7345] [ 183.313223][ T7345] value changed: 0xffff8881004c1e18 -> 0x0000000000000000 [ 183.320366][ T7345] [ 183.322688][ T7345] Reported by Kernel Concurrency Sanitizer on: [ 183.328828][ T7345] CPU: 0 UID: 0 PID: 7345 Comm: kworker/0:10 Not tainted 6.13.0-syzkaller-00918-g95ec54a420b8 #0 [ 183.339323][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 183.349384][ T7345] Workqueue: mm_percpu_wq lru_add_drain_per_cpu [ 183.355645][ T7345] ================================================================== [ 183.370877][T10189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 183.379280][T10189] System zones: 0-1, 3-12 [ 183.388009][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.389586][T10189] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #11: comm syz.3.2561: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 183.395009][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.439609][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.450930][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.457892][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.476799][T10189] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.2561: couldn't read orphan inode 11 (err -117) [ 183.483835][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.509606][T10189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.537713][T10195] batadv1: entered promiscuous mode [ 183.543787][T10195] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 183.553423][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2561'. [ 183.564494][T10139] hsr_slave_0: entered promiscuous mode [ 183.570920][T10139] hsr_slave_1: entered promiscuous mode [ 183.576898][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.584537][T10139] Cannot create hsr debugfs directory [ 183.601074][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.664427][T10139] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.673136][T10139] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.681980][T10139] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.690793][T10139] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.733656][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.747224][T10139] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.757370][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.764457][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.777021][ T2434] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.784124][ T2434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.855744][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.974877][T10139] veth0_vlan: entered promiscuous mode [ 183.983420][T10139] veth1_vlan: entered promiscuous mode [ 184.001114][T10139] veth0_macvtap: entered promiscuous mode [ 184.008726][T10139] veth1_macvtap: entered promiscuous mode [ 184.021470][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.031999][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.042771][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.053190][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.063800][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.074638][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.085118][T10139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.093911][T10139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.102647][T10139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.111536][T10139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0