last executing test programs: 34.289954343s ago: executing program 1 (id=364): setgroups(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) socket$inet(0x2, 0x2, 0x1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000a0000000000001510000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x54}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x20}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 34.253449723s ago: executing program 1 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x40086) 34.206736944s ago: executing program 1 (id=368): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'veth0_to_hsr\x00', @random="55a06e0e1616"}) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_6={0x18, 0x6, {0xb, 0x0, 0x12d, 0x9, 0x6b, 0x5}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) 33.944193625s ago: executing program 1 (id=370): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000e40)={0x0, 0x0, 0xeac7}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, {0x2}}) (async) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x50140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1/file0\x00'}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x444000, 0x0) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r14 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x23, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x1a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x2, 0x3, 0x6, 0xb, 0x9, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x8c, &(0x7f0000000340)=""/140, 0x41000, 0x42, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)=[r8, r9, r10, 0xffffffffffffffff, r11, r12, 0xffffffffffffffff, r13, r14], 0x0, 0x10, 0x3, @void, @value}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x4040, 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101242, 0x1ff) 33.805095926s ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000100)=""/25}, 0x20) 32.98715631s ago: executing program 1 (id=392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$security_selinux(&(0x7f00000002c0)='.\x00', &(0x7f0000000600), &(0x7f0000000640)='system_u:object_r:auditd_var_run_t:s0\x00', 0x26, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x300}, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f00000002c0)="c603", 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 32.94745966s ago: executing program 32 (id=392): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$security_selinux(&(0x7f00000002c0)='.\x00', &(0x7f0000000600), &(0x7f0000000640)='system_u:object_r:auditd_var_run_t:s0\x00', 0x26, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100007f0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x300}, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f00000002c0)="c603", 0x0, 0x0, 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 29.551819728s ago: executing program 2 (id=480): r0 = inotify_init1(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xa8}, 0x18) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x50007a2) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1=0xe0000012}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 29.436904628s ago: executing program 2 (id=487): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 29.416525698s ago: executing program 2 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, 0x3, 0x8, 0xb01, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfffff0f9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x40086) 29.388384398s ago: executing program 2 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950036000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000100)=""/198, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000980), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x2000)=nil) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20040a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x2a000, 0x30) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d627780820d1cbf7db710382aceb38a0ef8da65697e4298d1e02dcb8eb8c6b105d9600fdff00000000040000000000000000000000438ea359866cfe1a00", "be1d0000ae9ef30bea2a004000010000000000008000", [0x4000000]}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1}], 0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) r6 = socket(0x22, 0x2, 0x24) close(r6) sendto$phonet(r6, 0x0, 0x0, 0x40800, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x4b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000a40)={0xffffffffffffffff, 0x5, 0x7, 0x1}) 28.286332074s ago: executing program 2 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000191000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f48b12756bfa8618bc0f7900000000000000000000000000000000000000000484588124faf7a7faa4ef0000000aaf4604f5bfe08ec39b1945217653c2799c6bc3cc1a14c15909ee7622466309b70add7a280a53ac0ad6be3c0993b2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) io_uring_enter(r3, 0x3f01, 0x9f53, 0x0, &(0x7f0000000080)={[0x25]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) 27.888173916s ago: executing program 2 (id=527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x2000000, &(0x7f00008b5000/0x1000)=nil) 27.887968096s ago: executing program 33 (id=527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x2000000, &(0x7f00008b5000/0x1000)=nil) 1.627551132s ago: executing program 5 (id=1273): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[], 0x118) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x2000000000000127, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000010000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x3, 0x0, 0x6, 0x2, 0x7, 0xfffffffffffffffe, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x9c, &(0x7f0000000340)=""/156, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0xdf5, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r8, r8, r8, r8], &(0x7f0000000440)=[{0x3, 0x1, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r8, r9}, 0x10) 1.555853723s ago: executing program 0 (id=1274): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x99]V\xe3\xb6!\xae\xf79k\x90\x88\v8I!\xfdQ\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xd9\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xd2#\x9e\x97\xf4*\xc9\xdd[\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x95\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x02\xb9(\xf6\x1c\x83\xb1J\xec', 0x42, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1.535904722s ago: executing program 5 (id=1275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)="a2820c4a3d4ae3fc0ea4592ea9cc2a4236a226bf0ecac8ea0cfb7e9659348f0622bd452bc85cc9121783774707b906345fc5ca83d0cf31dfaa94d4e48aa6d95d76b878ee5c182b5d30cc76a37197ad516eb33ee61a36885bc804e05e31fcabab7c2a51fcbddf5b593bdb887013000000000000000000", 0x76}], 0x1}, 0x40040) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="503d595536e664255333d87ed22d2f5ef9ab248ef59d9e9e4ab0d051bd0ba6f14130f4012258c3a0db875f027ffc3435507f7c9e748ec3f7dee3f0", @ANYRES16=r4, @ANYRES8=r4, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xa04, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x3, 0x570, &(0x7f0000000f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000c997141d8f32ce000000000000000000b7080000000000007b8af8727adc408388fd4a0000000000ffffffffffffff7fbfa100000000000007010000f8ff1594a3e800000000800007040000f0ffffffb70200000000000018230000d930e2f3510b3a56172ee313ea0bc5de6ff2d36b296e4ca7d0874b2cde4db571780ea126de7dd527257d440ba73e1a8b670778b0825fe258965b8bd54df04455040100000000000000d483421c901ea6c1d02df9400da4b12d97d2078af8345e325b5acc55feef7a1afe2210cd1cfd0c9858ee1780cae7aea719932841f110c5b7df83ab6e4adabb7a2456379f8c90", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000007a9f000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011907800000000000000000000000000109078e2020076ea000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000200000000000008004500001c00000002b1c134620011907800000000479400000000ffff00089078"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000580)="f7528469b638e5c69c72077ceea11fd4e063affb6cc60ea00990652817dc102b3ed8be4bba27fb734ad6c89d1f4e41055949995d2c7295a82d31cc6cadb1e5913a1ddf0a5a65c272578307b8ad74147b5a64c4838823afb6b8cebfcdafbdb92d75cb91f20f02f4bcb0760a33c2871c1ca079e919", 0x74}], 0x1, 0x7fff, 0x0, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) fdatasync(r8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r11, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$PIO_FONT(r9, 0x4b61, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EVIOCGPROP(r10, 0x80404509, &(0x7f00000006c0)=""/104) 1.331070204s ago: executing program 4 (id=1277): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001200)="7ab166", 0x3}], 0x1, &(0x7f00000012c0)=[{0x1010, 0x88, 0x7ff, "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"}], 0x1010}}], 0x1, 0x4000000) 1.308515063s ago: executing program 4 (id=1278): socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x404, '\x00', 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="df74e82c0e136062fec47accf0eb8cf93e69178cf1c0f6cbb9eff5bb103b77f8aad7309bebd3953c5b3abc36e8861bc275675bfb9d42afd47afaf565462985499b33b7d84a8468d1cd2e796e37f62cab8640515382918b846268b8466717b2e3b141ff1b45ab094fc963662a5241843a76d1b1e9b0bd97dc80b35369af43663555776342eb1836536a06a4ce83b972da5f4b6b043ca64f060571227b764282a5bc1b18f5adcd408a5709e42b6397af2388bd59579f9ed4330369f950cf0ce2b7deec4a6e34309f0897ea9e6abd45da27796984a52e975604087ae2c6f3", 0xdd) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 1.289180633s ago: executing program 4 (id=1279): socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) preadv(r4, &(0x7f0000000780)=[{0x0}, {&(0x7f00000004c0)=""/213, 0xd5}], 0x2, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000100)="df74e82c0e136062fec47accf0eb8cf93e69178cf1c0f6cbb9eff5bb103b77f8aad7309bebd3953c5b3abc36e8861bc275675bfb9d42afd47afaf565462985499b33b7d84a8468d1cd2e796e37f62cab8640515382918b846268b8466717b2e3b141ff1b45ab094fc963662a5241843a76d1b1e9b0bd97dc80b35369af43663555776342eb1836536a06a4ce83b972da5f4b6b043ca64f060571227b764282a5bc1b18f5adcd408a5709e42b6397af2388bd59579f9ed4330369f950cf0ce2b7deec4a6e34309f0897ea9e6abd45da27796984a52e975604087ae2c6f3", 0xdd) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) socket$inet_dccp(0x2, 0x6, 0x0) bind$unix(r2, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.270522614s ago: executing program 4 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.253903274s ago: executing program 4 (id=1281): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.215426454s ago: executing program 4 (id=1282): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x400011, 0x0) 947.813925ms ago: executing program 3 (id=1295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x20001}, 0x18) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x81, 0x0, 0x6, [0x2, 0x9, 0xfffffffa, 0x4]}]}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x802, 0x1, 0xffffffff}}}}}, 0x0) 922.879026ms ago: executing program 3 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)="a2820c4a3d4ae3fc0ea4592ea9cc2a4236a226bf0ecac8ea0cfb7e9659348f0622bd452bc85cc9121783774707b906345fc5ca83d0cf31dfaa94d4e48aa6d95d76b878ee5c182b5d30cc76a37197ad516eb33ee61a36885bc804e05e31fcabab7c2a51fcbddf5b593bdb887013000000000000000000", 0x76}], 0x1}, 0x40040) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="503d595536e664255333d87ed22d2f5ef9ab248ef59d9e9e4ab0d051bd0ba6f14130f4012258c3a0db875f027ffc3435507f7c9e748ec3f7dee3f0", @ANYRES16=r4, @ANYRES8=r4, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xa04, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x3, 0x570, &(0x7f0000000f00)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000c997141d8f32ce000000000000000000b7080000000000007b8af8727adc408388fd4a0000000000ffffffffffffff7fbfa100000000000007010000f8ff1594a3e800000000800007040000f0ffffffb70200000000000018230000d930e2f3510b3a56172ee313ea0bc5de6ff2d36b296e4ca7d0874b2cde4db571780ea126de7dd527257d440ba73e1a8b670778b0825fe258965b8bd54df04455040100000000000000d483421c901ea6c1d02df9400da4b12d97d2078af8345e325b5acc55feef7a1afe2210cd1cfd0c9858ee1780cae7aea719932841f110c5b7df83ab6e4adabb7a2456379f8c90", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000007a9f000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011907800000000000000000000000000109078e2020076ea000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000200000000000008004500001c00000002b1c134620011907800000000479400000000ffff00089078"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000580)="f7528469b638e5c69c72077ceea11fd4e063affb6cc60ea00990652817dc102b3ed8be4bba27fb734ad6c89d1f4e41055949995d2c7295a82d31cc6cadb1e5913a1ddf0a5a65c272578307b8ad74147b5a64c4838823afb6b8cebfcdafbdb92d75cb91f20f02f4bcb0760a33c2871c1ca079e919", 0x74}], 0x1, 0x7fff, 0x0, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) fdatasync(r8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r11, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$PIO_FONT(r9, 0x4b61, &(0x7f00000002c0)) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EVIOCGPROP(r10, 0x80404509, &(0x7f00000006c0)=""/104) 862.222646ms ago: executing program 6 (id=1298): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000009ecdbe29ef5bc14291c5b4e0811ea01f3afe608e378239c48e1a1933f83269a212ac263e6ee0e51f4922335a26815546782034a302fb607d342493154b6a6e75091e438477804254137cbe5ea8c100715b29518dea898b90a272749acb9ab5000000000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x7, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000046d100180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000008208500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000001de639a220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) unshare(0x74020000) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r10, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='c\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000425bd7000fbdbdf25180000000c00990052000000140000000a001a0008021100000100000a00060008021100000100000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x840) connect$unix(r11, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x3, @broadcast}, 0x10) 774.311666ms ago: executing program 6 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000002c0)=ANY=[], 0x118) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x2000000000000127, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000010000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @ldst={0x3, 0x0, 0x6, 0x2, 0x7, 0xfffffffffffffffe, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x9c, &(0x7f0000000340)=""/156, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x3, 0xdf5, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[r8, r8, r8, r8], &(0x7f0000000440)=[{0x3, 0x1, 0x9}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r8, r9}, 0x10) 732.606127ms ago: executing program 6 (id=1300): socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x404, '\x00', 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="df74e82c0e136062fec47accf0eb8cf93e69178cf1c0f6cbb9eff5bb103b77f8aad7309bebd3953c5b3abc36e8861bc275675bfb9d42afd47afaf565462985499b33b7d84a8468d1cd2e796e37f62cab8640515382918b846268b8466717b2e3b141ff1b45ab094fc963662a5241843a76d1b1e9b0bd97dc80b35369af43663555776342eb1836536a06a4ce83b972da5f4b6b043ca64f060571227b764282a5bc1b18f5adcd408a5709e42b6397af2388bd59579f9ed4330369f950cf0ce2b7deec4a6e34309f0897ea9e6abd45da27796984a52e975604087ae2c6f3", 0xdd) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000073000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 707.890677ms ago: executing program 6 (id=1301): open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', &(0x7f00000004c0), 0x400801, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=rd']) 676.680537ms ago: executing program 0 (id=1302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 674.900097ms ago: executing program 5 (id=1303): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 661.675567ms ago: executing program 0 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 656.472937ms ago: executing program 6 (id=1305): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x1000000, &(0x7f0000000100)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x202002, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x20000155, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x4) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfffffff7, '\x00', r5, r6, 0x3, 0x8d, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") r8 = creat(&(0x7f0000000000)='./file1\x00', 0x119) write$cgroup_type(r8, &(0x7f0000000200), 0xf642e7e) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x3}, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 637.791577ms ago: executing program 0 (id=1306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x20001}, 0x18) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x81, 0x0, 0x6, [0x2, 0x9, 0xfffffffa, 0x4]}]}}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x802, 0x1, 0xffffffff}}}}}, 0x0) 602.235997ms ago: executing program 5 (id=1307): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500), 0x588, 0x0) 601.638537ms ago: executing program 5 (id=1308): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_open_dev$mouse(0x0, 0x9, 0x181040) preadv(r3, 0x0, 0x0, 0x6, 0x3) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00', @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000657218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x4, 0x258, &(0x7f00000005c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$system_posix_acl(r4, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 596.481287ms ago: executing program 0 (id=1309): r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 573.614647ms ago: executing program 0 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)="a2820c4a3d4ae3fc0ea4592ea9cc2a4236a226bf0ecac8ea0cfb7e9659348f0622bd452bc85cc9121783774707b906345fc5ca83d0cf31dfaa94d4e48aa6d95d76b878ee5c182b5d30cc76a37197ad516eb33ee61a36885bc804e05e31fcabab7c2a51fcbddf5b593bdb887013000000000000000000", 0x76}], 0x1}, 0x40040) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="503d595536e664255333d87ed22d2f5ef9ab248ef59d9e9e4ab0d051bd0ba6f14130f4012258c3a0db875f027ffc3435507f7c9e748ec3f7dee3f0", @ANYRES16=r4, @ANYRES8=r4, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xa04, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x3, 0x570, &(0x7f0000000f00)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000c997141d8f32ce000000000000000000b7080000000000007b8af8727adc408388fd4a0000000000ffffffffffffff7fbfa100000000000007010000f8ff1594a3e800000000800007040000f0ffffffb70200000000000018230000d930e2f3510b3a56172ee313ea0bc5de6ff2d36b296e4ca7d0874b2cde4db571780ea126de7dd527257d440ba73e1a8b670778b0825fe258965b8bd54df04455040100000000000000d483421c901ea6c1d02df9400da4b12d97d2078af8345e325b5acc55feef7a1afe2210cd1cfd0c9858ee1780cae7aea719932841f110c5b7df83ab6e4adabb7a2456379f8c90", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000007a9f000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x32, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000200000000000008004500001c00000002b1c134620011907800000000479400000000ffff00089078"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000580)="f7528469b638e5c69c72077ceea11fd4e063affb6cc60ea00990652817dc102b3ed8be4bba27fb734ad6c89d1f4e41055949995d2c7295a82d31cc6cadb1e5913a1ddf0a5a65c272578307b8ad74147b5a64c4838823afb6b8cebfcdafbdb92d75cb91f20f02f4bcb0760a33c2871c1ca079e919", 0x74}], 0x1, 0x7fff, 0x0, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) fdatasync(r8) 541.934857ms ago: executing program 6 (id=1311): pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffff80000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) lchown(&(0x7f0000000180)='./file0\x00', 0x0, r3) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8004550f, &(0x7f0000002a40)) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x99]V\xe3\xb6!\xae\xf79k\x90\x88\v8I!\xfdQ\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xd9\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xd2#\x9e\x97\xf4*\xc9\xdd[\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x95\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x02\xb9(\xf6\x1c\x83\xb1J\xec', 0x42, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000640), 0x8) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x25, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 541.482568ms ago: executing program 5 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)="a2820c4a3d4ae3fc0ea4592ea9cc2a4236a226bf0ecac8ea0cfb7e9659348f0622bd452bc85cc9121783774707b906345fc5ca83d0cf31dfaa94d4e48aa6d95d76b878ee5c182b5d30cc76a37197ad516eb33ee61a36885bc804e05e31fcabab7c2a51fcbddf5b593bdb887013000000000000000000", 0x76}], 0x1}, 0x40040) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="503d595536e664255333d87ed22d2f5ef9ab248ef59d9e9e4ab0d051bd0ba6f14130f4012258c3a0db875f027ffc3435507f7c9e748ec3f7dee3f0", @ANYRES16=r4, @ANYRES8=r4, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xa04, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x3, 0x570, &(0x7f0000000f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000c997141d8f32ce000000000000000000b7080000000000007b8af8727adc408388fd4a0000000000ffffffffffffff7fbfa100000000000007010000f8ff1594a3e800000000800007040000f0ffffffb70200000000000018230000d930e2f3510b3a56172ee313ea0bc5de6ff2d36b296e4ca7d0874b2cde4db571780ea126de7dd527257d440ba73e1a8b670778b0825fe258965b8bd54df04455040100000000000000d483421c901ea6c1d02df9400da4b12d97d2078af8345e325b5acc55feef7a1afe2210cd1cfd0c9858ee1780cae7aea719932841f110c5b7df83ab6e4adabb7a2456379f8c90", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000007a9f000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011907800000000000000000000000000109078e2020076ea000000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c200000200000000000008004500001c00000002b1c134620011907800000000479400000000ffff00089078"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000580)="f7528469b638e5c69c72077ceea11fd4e063affb6cc60ea00990652817dc102b3ed8be4bba27fb734ad6c89d1f4e41055949995d2c7295a82d31cc6cadb1e5913a1ddf0a5a65c272578307b8ad74147b5a64c4838823afb6b8cebfcdafbdb92d75cb91f20f02f4bcb0760a33c2871c1ca079e919", 0x74}], 0x1, 0x7fff, 0x0, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) fdatasync(r8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r10, 0x6628) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r11, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$PIO_FONT(r9, 0x4b61, &(0x7f00000002c0)="0fa06b963c297c24b5e1260363e0fc4b4ef6669489e73529c998c236cb70f92d963481ea25d4bd956b84326b52bb5aae2cd8f7a746bc3ded6b4b85fbe9bca5ae08bfcc95e8be8980dfda288926c06df6319d2686372cafa060583353f0400fe52431aa50f2c2482b05") syz_open_dev$tty1(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EVIOCGPROP(r10, 0x80404509, &(0x7f00000006c0)=""/104) 70.98935ms ago: executing program 3 (id=1313): socket$inet6(0xa, 0x806, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x404, '\x00', 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000100)="df74e82c0e136062fec47accf0eb8cf93e69178cf1c0f6cbb9eff5bb103b77f8aad7309bebd3953c5b3abc36e8861bc275675bfb9d42afd47afaf565462985499b33b7d84a8468d1cd2e796e37f62cab8640515382918b846268b8466717b2e3b141ff1b45ab094fc963662a5241843a76d1b1e9b0bd97dc80b35369af43663555776342eb1836536a06a4ce83b972da5f4b6b043ca64f060571227b764282a5bc1b18f5adcd408a5709e42b6397af2388bd59579f9ed4330369f950cf0ce2b7deec4a6e34309f0897ea9e6abd45da27796984a52e975604087ae2c6f3", 0xdd) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 47.53774ms ago: executing program 3 (id=1314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 30.5144ms ago: executing program 3 (id=1315): open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', &(0x7f00000004c0), 0x400801, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=rd']) 0s ago: executing program 3 (id=1316): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x9}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x32, 0xbe, "5d31cc7ccabf118a5961ee4a01917e82c3eec535c2bcee066e682f923bce125bb61ca7b5b7ef17d06b9c4649d0d0"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) kernel console output (not intermixed with test programs): 6.972498][ T4458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.985093][ T4458] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.034425][ T4470] loop3: detected capacity change from 0 to 512 [ 47.045825][ T3321] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 47.060584][ T3321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 47.061069][ T4474] FAULT_INJECTION: forcing a failure. [ 47.061069][ T4474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.069901][ T3321] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 47.082711][ T4474] CPU: 0 UID: 0 PID: 4474 Comm: syz.4.377 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 47.106531][ T4474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.116652][ T4474] Call Trace: [ 47.119938][ T4474] [ 47.122899][ T4474] dump_stack_lvl+0xf2/0x150 [ 47.127592][ T4474] dump_stack+0x15/0x20 [ 47.131805][ T4474] should_fail_ex+0x223/0x230 [ 47.136545][ T4474] should_fail+0xb/0x10 [ 47.140722][ T4474] should_fail_usercopy+0x1a/0x20 [ 47.145809][ T4474] _copy_from_iter+0xd5/0xd00 [ 47.150509][ T4474] ? kmalloc_reserve+0x16e/0x190 [ 47.155480][ T4474] ? __build_skb_around+0x196/0x1f0 [ 47.160755][ T4474] ? __alloc_skb+0x21f/0x310 [ 47.165382][ T4474] ? __virt_addr_valid+0x1ed/0x250 [ 47.170506][ T4474] ? __check_object_size+0x364/0x520 [ 47.175860][ T4474] netlink_sendmsg+0x460/0x6e0 [ 47.180661][ T4474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.186092][ T4474] __sock_sendmsg+0x140/0x180 [ 47.190785][ T4474] ____sys_sendmsg+0x312/0x410 [ 47.195572][ T4474] __sys_sendmsg+0x19d/0x230 [ 47.200186][ T4474] __x64_sys_sendmsg+0x46/0x50 [ 47.204971][ T4474] x64_sys_call+0x2734/0x2dc0 [ 47.209675][ T4474] do_syscall_64+0xc9/0x1c0 [ 47.214281][ T4474] ? clear_bhb_loop+0x55/0xb0 [ 47.218981][ T4474] ? clear_bhb_loop+0x55/0xb0 [ 47.223894][ T4474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.229813][ T4474] RIP: 0033:0x7f5ad453e819 [ 47.234232][ T4474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.254360][ T4474] RSP: 002b:00007f5ad2bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.262859][ T4474] RAX: ffffffffffffffda RBX: 00007f5ad46f5fa0 RCX: 00007f5ad453e819 [ 47.270838][ T4474] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 47.278824][ T4474] RBP: 00007f5ad2bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.286861][ T4474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.294845][ T4474] R13: 0000000000000000 R14: 00007f5ad46f5fa0 R15: 00007fffb6b3d188 [ 47.302862][ T4474] [ 47.309200][ T4470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.321865][ T3321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 47.321969][ T3321] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 47.331661][ T4470] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.355715][ T3321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 47.365242][ T3321] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #15: comm syz-executor: corrupted xattr block 32: bad e_name length [ 47.366711][ T29] kauditd_printk_skb: 998 callbacks suppressed [ 47.366727][ T29] audit: type=1400 audit(1732453259.756:3090): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.401336][ T3321] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 47.418378][ T3321] EXT4-fs warning (device loop1): __ext4_unlink:3292: inode #16: comm syz-executor: Deleting file 'file3' with no links [ 47.433086][ T3321] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 47.451200][ T29] audit: type=1400 audit(1732453259.816:3091): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.451237][ T29] audit: type=1400 audit(1732453259.816:3092): avc: denied { create } for pid=4482 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.480657][ T3321] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1540(4), depth 0(0) [ 47.492686][ T29] audit: type=1400 audit(1732453259.816:3093): avc: denied { write } for pid=4482 comm="syz.4.381" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.521724][ T4470] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 47.543935][ T29] audit: type=1400 audit(1732453259.866:3094): avc: denied { bind } for pid=4482 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.564397][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.591129][ T29] audit: type=1400 audit(1732453259.977:3095): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.615962][ T29] audit: type=1326 audit(1732453259.977:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e71f5e819 code=0x7ffc0000 [ 47.623586][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.639335][ T29] audit: type=1326 audit(1732453259.977:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e71f5e819 code=0x7ffc0000 [ 47.671627][ T29] audit: type=1326 audit(1732453259.977:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0e71f5e819 code=0x7ffc0000 [ 47.695224][ T29] audit: type=1326 audit(1732453259.977:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e71f5e819 code=0x7ffc0000 [ 47.736717][ T4493] dvmrp0: entered allmulticast mode [ 47.742698][ T4493] dvmrp0: left allmulticast mode [ 47.819905][ T4496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 47.877569][ T4499] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.887351][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.888380][ T2157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.955863][ T2157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.995771][ T4524] loop0: detected capacity change from 0 to 1024 [ 48.015112][ T2157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.040596][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 48.062403][ T4524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.075754][ T2157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.091038][ T4533] dvmrp0: entered allmulticast mode [ 48.097079][ T4533] dvmrp0: left allmulticast mode [ 48.149870][ T2157] bridge_slave_1: left allmulticast mode [ 48.155567][ T2157] bridge_slave_1: left promiscuous mode [ 48.161287][ T2157] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.169092][ T2157] bridge_slave_0: left allmulticast mode [ 48.174807][ T2157] bridge_slave_0: left promiscuous mode [ 48.180481][ T2157] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.270526][ T2157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.280895][ T2157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.291197][ T2157] bond0 (unregistering): Released all slaves [ 48.312037][ T4537] lo speed is unknown, defaulting to 1000 [ 48.334423][ T2157] hsr_slave_0: left promiscuous mode [ 48.340361][ T2157] hsr_slave_1: left promiscuous mode [ 48.350687][ T2157] veth1_macvtap: left promiscuous mode [ 48.356176][ T2157] veth0_macvtap: left promiscuous mode [ 48.361713][ T2157] veth1_vlan: left promiscuous mode [ 48.367060][ T2157] veth0_vlan: left promiscuous mode [ 48.449572][ T2157] team0 (unregistering): Port device team_slave_1 removed [ 48.459255][ T2157] team0 (unregistering): Port device team_slave_0 removed [ 48.496193][ T35] lo speed is unknown, defaulting to 1000 [ 48.538779][ T4537] chnl_net:caif_netlink_parms(): no params data found [ 48.543747][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 48.558861][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.566279][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.574386][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.581854][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.596146][ T4572] loop4: detected capacity change from 0 to 1024 [ 48.612018][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.619160][ T4537] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.626560][ T4537] bridge_slave_0: entered allmulticast mode [ 48.633463][ T4537] bridge_slave_0: entered promiscuous mode [ 48.633886][ T4572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.640560][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.658792][ T4537] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.664946][ T4572] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 48.666172][ T4537] bridge_slave_1: entered allmulticast mode [ 48.678258][ T4572] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.678258][ T4572] [ 48.678276][ T4572] EXT4-fs (loop4): Total free blocks count 0 [ 48.685556][ T4537] bridge_slave_1: entered promiscuous mode [ 48.694009][ T4572] EXT4-fs (loop4): Free/Dirty block details [ 48.694026][ T4572] EXT4-fs (loop4): free_blocks=0 [ 48.694040][ T4572] EXT4-fs (loop4): dirty_blocks=0 [ 48.721948][ T4572] EXT4-fs (loop4): Block reservation details [ 48.721965][ T4572] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 48.751678][ T4537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.771475][ T4537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.782607][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.804342][ T4585] mmap: syz.2.409 (4585) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.810487][ T4586] loop0: detected capacity change from 0 to 512 [ 48.824237][ T4537] team0: Port device team_slave_0 added [ 48.831592][ T4537] team0: Port device team_slave_1 added [ 48.841934][ T4588] loop2: detected capacity change from 0 to 512 [ 48.854741][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.861892][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.862154][ T4586] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 48.887965][ T4537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.896717][ T4586] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.907235][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.913151][ T4586] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.919659][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.945673][ T4586] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 48.960313][ T4537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.968023][ T4588] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.410: corrupted xattr block 95: invalid header [ 48.978865][ T4586] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.408: bg 0: block 40: padding at end of block bitmap is not set [ 49.001334][ T4588] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 49.006856][ T4586] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.018888][ T4588] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.410: bg 0: block 7: invalid block bitmap [ 49.031264][ T4586] EXT4-fs (loop0): 1 truncate cleaned up [ 49.040082][ T4588] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.051208][ T4586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.055493][ T4588] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.410: corrupted xattr block 95: invalid header [ 49.078124][ T4586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.080858][ T4588] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 49.101081][ T4588] EXT4-fs (loop2): 1 orphan inode deleted [ 49.103352][ T4537] hsr_slave_0: entered promiscuous mode [ 49.107411][ T4588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.124721][ T4537] hsr_slave_1: entered promiscuous mode [ 49.140969][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.181285][ T4597] FAULT_INJECTION: forcing a failure. [ 49.181285][ T4597] name failslab, interval 1, probability 0, space 0, times 0 [ 49.194087][ T4597] CPU: 0 UID: 0 PID: 4597 Comm: syz.2.411 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 49.204486][ T4597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.214569][ T4597] Call Trace: [ 49.217874][ T4597] [ 49.220828][ T4597] dump_stack_lvl+0xf2/0x150 [ 49.225539][ T4597] dump_stack+0x15/0x20 [ 49.229770][ T4597] should_fail_ex+0x223/0x230 [ 49.234577][ T4597] ? audit_log_start+0x34c/0x6b0 [ 49.239526][ T4597] should_failslab+0x8f/0xb0 [ 49.244158][ T4597] kmem_cache_alloc_noprof+0x4c/0x290 [ 49.249850][ T4597] audit_log_start+0x34c/0x6b0 [ 49.254640][ T4597] audit_seccomp+0x4b/0x130 [ 49.259224][ T4597] __seccomp_filter+0x6fa/0x1180 [ 49.264254][ T4597] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.269911][ T4597] ? vfs_write+0x596/0x920 [ 49.274411][ T4597] __secure_computing+0x9f/0x1c0 [ 49.279372][ T4597] syscall_trace_enter+0xd1/0x1f0 [ 49.284478][ T4597] ? fpregs_assert_state_consistent+0x83/0xa0 [ 49.290569][ T4597] do_syscall_64+0xaa/0x1c0 [ 49.295090][ T4597] ? clear_bhb_loop+0x55/0xb0 [ 49.299825][ T4597] ? clear_bhb_loop+0x55/0xb0 [ 49.304606][ T4597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.310533][ T4597] RIP: 0033:0x7f0e71f5e819 [ 49.314960][ T4597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.334640][ T4597] RSP: 002b:00007f0e705d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 49.343058][ T4597] RAX: ffffffffffffffda RBX: 00007f0e72115fa0 RCX: 00007f0e71f5e819 [ 49.351108][ T4597] RDX: 0000000000001000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 49.359188][ T4597] RBP: 00007f0e705d7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.359208][ T4597] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 49.359238][ T4597] R13: 0000000000000000 R14: 00007f0e72115fa0 R15: 00007ffde74f0d58 [ 49.383464][ T4597] [ 49.388552][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.414395][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.440634][ T4537] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.450185][ T4537] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.470492][ T4599] dvmrp0: entered allmulticast mode [ 49.479375][ T4537] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.488320][ T4537] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.497464][ T4608] dvmrp0: left allmulticast mode [ 49.547776][ T4537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.561582][ T4537] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.572818][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.579924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.595129][ T4614] loop0: detected capacity change from 0 to 1024 [ 49.602414][ T4613] loop4: detected capacity change from 0 to 2048 [ 49.614103][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.621263][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.631710][ T4614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.658239][ T4613] Alternate GPT is invalid, using primary GPT. [ 49.664693][ T4613] loop4: p2 p3 p7 [ 49.678232][ T4618] loop2: detected capacity change from 0 to 512 [ 49.705496][ T4618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.718708][ T4618] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.727334][ T4537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.738501][ T4618] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.419: corrupted xattr block 85: invalid header [ 49.752852][ T4618] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 49.780569][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.809543][ T4634] cgroup: none used incorrectly [ 49.825352][ T4634] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.422'. [ 49.911774][ T4537] veth0_vlan: entered promiscuous mode [ 49.920241][ T4537] veth1_vlan: entered promiscuous mode [ 49.931595][ T4652] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.935443][ T4658] loop2: detected capacity change from 0 to 1024 [ 49.942265][ T4537] veth0_macvtap: entered promiscuous mode [ 49.956886][ T4537] veth1_macvtap: entered promiscuous mode [ 49.968584][ T4658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.982048][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.992747][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.005704][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.015296][ T4537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.025838][ T4537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.036376][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.045976][ T4537] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.054774][ T4537] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.063807][ T4537] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.072638][ T4537] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.092526][ T4664] dvmrp0: entered allmulticast mode [ 50.101252][ T4664] dvmrp0: left allmulticast mode [ 50.170588][ T4670] loop4: detected capacity change from 0 to 512 [ 50.189228][ T4670] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.213295][ T4671] ieee802154 phy0 wpan0: encryption failed: -22 [ 50.353347][ T4689] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 50.367248][ T4689] netlink: 88 bytes leftover after parsing attributes in process `syz.5.436'. [ 50.454817][ T4703] FAULT_INJECTION: forcing a failure. [ 50.454817][ T4703] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.468282][ T4703] CPU: 0 UID: 0 PID: 4703 Comm: syz.4.443 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 50.478536][ T4703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.488649][ T4703] Call Trace: [ 50.491937][ T4703] [ 50.494873][ T4703] dump_stack_lvl+0xf2/0x150 [ 50.499569][ T4703] dump_stack+0x15/0x20 [ 50.503745][ T4703] should_fail_ex+0x223/0x230 [ 50.508478][ T4703] should_fail_alloc_page+0xfd/0x110 [ 50.513779][ T4703] __alloc_pages_noprof+0x109/0x340 [ 50.519008][ T4703] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 50.524402][ T4703] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 50.529857][ T4703] handle_mm_fault+0xdd7/0x2ac0 [ 50.534752][ T4703] exc_page_fault+0x296/0x650 [ 50.539445][ T4703] asm_exc_page_fault+0x26/0x30 [ 50.544381][ T4703] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 50.550336][ T4703] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 50.570076][ T4703] RSP: 0018:ffffc9001110fd00 EFLAGS: 00050206 [ 50.576145][ T4703] RAX: ffff888102065cf8 RBX: 0000000020005040 RCX: 0000000000000040 [ 50.584186][ T4703] RDX: 0000000000000000 RSI: ffff888115091fc0 RDI: 0000000020005000 [ 50.592163][ T4703] RBP: 000000001fffc0b1 R08: 0000000080000000 R09: 0000000000000000 [ 50.600139][ T4703] R10: 0001888115091000 R11: 0001888115091fff R12: 0000000000001000 [ 50.608168][ T4703] R13: 00007fffffffefff R14: 0000000020004040 R15: ffff888115091000 [ 50.616188][ T4703] _copy_to_user+0x7c/0xa0 [ 50.620683][ T4703] environ_read+0x230/0x360 [ 50.625255][ T4703] vfs_readv+0x3e2/0x660 [ 50.629532][ T4703] ? __pfx_environ_read+0x10/0x10 [ 50.634597][ T4703] __x64_sys_preadv+0xf4/0x1c0 [ 50.639426][ T4703] x64_sys_call+0x2680/0x2dc0 [ 50.644334][ T4703] do_syscall_64+0xc9/0x1c0 [ 50.648866][ T4703] ? clear_bhb_loop+0x55/0xb0 [ 50.653612][ T4703] ? clear_bhb_loop+0x55/0xb0 [ 50.658344][ T4703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.664275][ T4703] RIP: 0033:0x7f5ad453e819 [ 50.668737][ T4703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.688403][ T4703] RSP: 002b:00007f5ad2bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 50.696874][ T4703] RAX: ffffffffffffffda RBX: 00007f5ad46f5fa0 RCX: 00007f5ad453e819 [ 50.705002][ T4703] RDX: 0000000000000001 RSI: 0000000020001400 RDI: 0000000000000004 [ 50.712980][ T4703] RBP: 00007f5ad2bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.720980][ T4703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.728970][ T4703] R13: 0000000000000000 R14: 00007f5ad46f5fa0 R15: 00007fffb6b3d188 [ 50.737030][ T4703] [ 50.750728][ T4706] IPv6: Can't replace route, no match found [ 50.834307][ T4718] SELinux: Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped). [ 50.919929][ T4726] loop5: detected capacity change from 0 to 512 [ 50.966276][ T4726] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.992441][ T4726] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.073050][ T4754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.466'. [ 51.082789][ T4754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.090011][ T4754] IPv6: NLM_F_CREATE should be set when creating new route [ 51.097256][ T4754] IPv6: NLM_F_CREATE should be set when creating new route [ 51.157831][ T4763] loop5: detected capacity change from 0 to 764 [ 51.237259][ T4776] loop5: detected capacity change from 0 to 2048 [ 51.242694][ T4747] loop0: detected capacity change from 0 to 1024 [ 51.251376][ T4747] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.262493][ T4747] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.273923][ T4747] JBD2: no valid journal superblock found [ 51.279807][ T4747] EXT4-fs (loop0): Could not load journal inode [ 51.295941][ T4776] Alternate GPT is invalid, using primary GPT. [ 51.302447][ T4776] loop5: p2 p3 p7 [ 51.465967][ T4802] netlink: 220 bytes leftover after parsing attributes in process `syz.4.485'. [ 51.571377][ T4815] loop2: detected capacity change from 0 to 512 [ 51.580672][ T4815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.582499][ T4821] cgroup: none used incorrectly [ 51.592566][ T4815] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.638233][ T4815] loop2: detected capacity change from 512 to 511 [ 51.645837][ T4815] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #18: comm syz.2.491: corrupted xattr block 20: invalid header [ 51.660186][ T4815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.491: bg 0: block 16368: padding at end of block bitmap is not set [ 51.701585][ T4839] loop5: detected capacity change from 0 to 512 [ 51.715333][ T4840] SET target dimension over the limit! [ 51.727947][ T4843] delete_channel: no stack [ 51.733812][ T4839] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.747055][ T4839] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 51.893686][ T4853] dvmrp0: entered allmulticast mode [ 51.900023][ T4853] dvmrp0: left allmulticast mode [ 51.903261][ T4855] cgroup: none used incorrectly [ 51.937204][ T4858] dvmrp0: entered allmulticast mode [ 51.944652][ T4858] dvmrp0: left allmulticast mode [ 52.035176][ T4866] loop5: detected capacity change from 0 to 2048 [ 52.073086][ T4866] Alternate GPT is invalid, using primary GPT. [ 52.079526][ T4866] loop5: p2 p3 p7 [ 52.182426][ T4876] netlink: 180 bytes leftover after parsing attributes in process `syz.5.515'. [ 52.191973][ T4876] netlink: 56 bytes leftover after parsing attributes in process `syz.5.515'. [ 52.252708][ T4877] FAULT_INJECTION: forcing a failure. [ 52.252708][ T4877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.266025][ T4877] CPU: 0 UID: 0 PID: 4877 Comm: syz.5.515 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 52.276475][ T4877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.286605][ T4877] Call Trace: [ 52.289915][ T4877] [ 52.292856][ T4877] dump_stack_lvl+0xf2/0x150 [ 52.297538][ T4877] dump_stack+0x15/0x20 [ 52.301777][ T4877] should_fail_ex+0x223/0x230 [ 52.306488][ T4877] should_fail+0xb/0x10 [ 52.310673][ T4877] should_fail_usercopy+0x1a/0x20 [ 52.315806][ T4877] copy_page_from_iter_atomic+0x228/0xf80 [ 52.321693][ T4877] ? shmem_write_begin+0xa2/0x180 [ 52.326737][ T4877] ? shmem_write_begin+0xda/0x180 [ 52.331781][ T4877] generic_perform_write+0x2f1/0x4a0 [ 52.337196][ T4877] shmem_file_write_iter+0xc2/0xe0 [ 52.342388][ T4877] do_iter_readv_writev+0x394/0x450 [ 52.347659][ T4877] vfs_writev+0x2d4/0x880 [ 52.352002][ T4877] ? proc_fail_nth_write+0x12a/0x150 [ 52.357316][ T4877] __se_sys_pwritev2+0x100/0x1c0 [ 52.362301][ T4877] __x64_sys_pwritev2+0x78/0x90 [ 52.367163][ T4877] x64_sys_call+0x2afe/0x2dc0 [ 52.371887][ T4877] do_syscall_64+0xc9/0x1c0 [ 52.376454][ T4877] ? clear_bhb_loop+0x55/0xb0 [ 52.381318][ T4877] ? clear_bhb_loop+0x55/0xb0 [ 52.386099][ T4877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.392034][ T4877] RIP: 0033:0x7f32cda1e819 [ 52.396453][ T4877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.416082][ T4877] RSP: 002b:00007f32cc076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 52.424504][ T4877] RAX: ffffffffffffffda RBX: 00007f32cdbd6080 RCX: 00007f32cda1e819 [ 52.432635][ T4877] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000006 [ 52.441049][ T4877] RBP: 00007f32cc076090 R08: 0000000000000000 R09: 0000000000000010 [ 52.449193][ T4877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.457222][ T4877] R13: 0000000000000000 R14: 00007f32cdbd6080 R15: 00007ffd3d6519a8 [ 52.465274][ T4877] [ 52.469269][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 52.469284][ T29] audit: type=1326 audit(1732453264.896:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 52.499033][ T29] audit: type=1326 audit(1732453264.896:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4807 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 52.500018][ T4868] loop0: detected capacity change from 0 to 1024 [ 52.530992][ T4868] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.539679][ T4877] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.541962][ T4868] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.563965][ T3326] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /94/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=786432, rec_len=513, size=2048 fake=0 [ 52.582114][ T29] audit: type=1400 audit(1732453264.977:3893): avc: denied { unmount } for pid=3326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.603528][ T29] audit: type=1326 audit(1732453264.977:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.618731][ T4879] cgroup: none used incorrectly [ 52.627119][ T29] audit: type=1326 audit(1732453264.977:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.638716][ T4868] JBD2: no valid journal superblock found [ 52.655483][ T29] audit: type=1326 audit(1732453264.977:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.661206][ T4868] EXT4-fs (loop0): Could not load journal inode [ 52.684919][ T29] audit: type=1326 audit(1732453264.977:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.714264][ T29] audit: type=1326 audit(1732453264.977:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.737679][ T29] audit: type=1326 audit(1732453264.987:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.761247][ T29] audit: type=1326 audit(1732453264.987:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 52.790741][ T4882] dvmrp0: entered allmulticast mode [ 52.797502][ T4882] dvmrp0: left allmulticast mode [ 52.882026][ C1] hrtimer: interrupt took 26727 ns [ 52.934440][ T4894] 9pnet_virtio: no channels available for device 127.0.0.1 [ 52.987600][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.044700][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.055876][ T4900] ieee802154 phy0 wpan0: encryption failed: -22 [ 53.093234][ T4905] cgroup: none used incorrectly [ 53.113357][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.161951][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.198256][ T4917] dvmrp0: entered allmulticast mode [ 53.205155][ T4917] dvmrp0: left allmulticast mode [ 53.252546][ T55] bridge_slave_1: left allmulticast mode [ 53.258240][ T55] bridge_slave_1: left promiscuous mode [ 53.263942][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.283645][ T55] bridge_slave_0: left allmulticast mode [ 53.289406][ T55] bridge_slave_0: left promiscuous mode [ 53.295146][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.295223][ T4925] 9pnet_virtio: no channels available for device 127.0.0.1 [ 53.336019][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.536'. [ 53.442245][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.462227][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.473369][ T55] bond0 (unregistering): Released all slaves [ 53.481481][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.486559][ T4948] loop4: detected capacity change from 0 to 512 [ 53.489279][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.511964][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.519587][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.540562][ T4948] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.544507][ T4945] loop3: detected capacity change from 0 to 8192 [ 53.558556][ T4945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.571074][ T4948] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.583461][ T55] hsr_slave_0: left promiscuous mode [ 53.589616][ T55] hsr_slave_1: left promiscuous mode [ 53.597823][ T55] veth1_macvtap: left promiscuous mode [ 53.603352][ T55] veth0_macvtap: left promiscuous mode [ 53.609006][ T55] veth1_vlan: left promiscuous mode [ 53.614300][ T55] veth0_vlan: left promiscuous mode [ 53.658148][ T4959] loop0: detected capacity change from 0 to 512 [ 53.679717][ T4959] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.697117][ T4959] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 53.736908][ T55] team0 (unregistering): Port device team_slave_1 removed [ 53.747565][ T55] team0 (unregistering): Port device team_slave_0 removed [ 53.796423][ T4945] IPv6: Can't replace route, no match found [ 53.884047][ T4980] loop3: detected capacity change from 0 to 512 [ 53.907462][ T4980] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.915537][ T4907] chnl_net:caif_netlink_parms(): no params data found [ 53.928286][ T4980] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.021658][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.028869][ T4907] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.036557][ T4907] bridge_slave_0: entered allmulticast mode [ 54.043063][ T4907] bridge_slave_0: entered promiscuous mode [ 54.049848][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.056990][ T4907] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.064250][ T4907] bridge_slave_1: entered allmulticast mode [ 54.071179][ T4907] bridge_slave_1: entered promiscuous mode [ 54.123248][ T4907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.160130][ T4907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.205496][ T5008] loop4: detected capacity change from 0 to 8192 [ 54.207129][ T5014] loop3: detected capacity change from 0 to 512 [ 54.220277][ T4907] team0: Port device team_slave_0 added [ 54.230185][ T4907] team0: Port device team_slave_1 added [ 54.240170][ T5018] dvmrp0: entered allmulticast mode [ 54.257859][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.264957][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.291061][ T4907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.305372][ T5014] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.317210][ T5018] dvmrp0: left allmulticast mode [ 54.338340][ T5014] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 54.345485][ T4907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.355840][ T4907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.381829][ T4907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.426158][ T4907] hsr_slave_0: entered promiscuous mode [ 54.436922][ T4907] hsr_slave_1: entered promiscuous mode [ 54.444030][ T4907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.453772][ T4907] Cannot create hsr debugfs directory [ 54.462733][ T5035] dvmrp0: entered allmulticast mode [ 54.508303][ T5035] dvmrp0: left allmulticast mode [ 54.581174][ T4907] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.650482][ T4907] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.681677][ T4907] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.696802][ T4907] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.739602][ T4907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.751964][ T5052] loop0: detected capacity change from 0 to 512 [ 54.757968][ T4907] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.789082][ T4907] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.799656][ T4907] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.829678][ T5052] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.863326][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.870473][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.881845][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.889027][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.913767][ T5059] loop3: detected capacity change from 0 to 512 [ 54.958135][ T5064] dvmrp0: entered allmulticast mode [ 54.973250][ T5064] dvmrp0: left allmulticast mode [ 54.979062][ T5059] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.994679][ T5059] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 55.055651][ T4907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.285836][ T5099] loop0: detected capacity change from 0 to 512 [ 55.331778][ T5106] loop3: detected capacity change from 0 to 512 [ 55.359165][ T5108] dvmrp0: entered allmulticast mode [ 55.365298][ T5108] dvmrp0: left allmulticast mode [ 55.383080][ T4907] veth0_vlan: entered promiscuous mode [ 55.392650][ T4907] veth1_vlan: entered promiscuous mode [ 55.427631][ T4907] veth0_macvtap: entered promiscuous mode [ 55.435742][ T4907] veth1_macvtap: entered promiscuous mode [ 55.447576][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.460239][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.471657][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.480021][ T4907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.490510][ T4907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.501212][ T4907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.510052][ T4907] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.518831][ T4907] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.527562][ T4907] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.536446][ T4907] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.555423][ T5099] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.587991][ T5106] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.601413][ T5106] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 55.614638][ T5099] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 55.666567][ T5121] 9pnet_virtio: no channels available for device 127.0.0.1 [ 55.736411][ T5125] ieee802154 phy0 wpan0: encryption failed: -22 [ 55.874023][ T5142] loop3: detected capacity change from 0 to 2048 [ 55.875279][ T5147] loop6: detected capacity change from 0 to 512 [ 55.889505][ T5146] 9pnet_virtio: no channels available for device 127.0.0.1 [ 55.911957][ T5147] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.935459][ T5142] Alternate GPT is invalid, using primary GPT. [ 55.941936][ T5142] loop3: p2 p3 p7 [ 55.962734][ T5147] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.007324][ T5140] usb usb4: usbfs: process 5140 (syz.4.610) did not claim interface 0 before use [ 56.052673][ T5162] loop3: detected capacity change from 0 to 512 [ 56.070481][ T5160] syz.6.617: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 56.079419][ T5162] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.085110][ T5160] CPU: 0 UID: 0 PID: 5160 Comm: syz.6.617 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 56.105595][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.115803][ T5160] Call Trace: [ 56.119081][ T5160] [ 56.122025][ T5160] dump_stack_lvl+0xf2/0x150 [ 56.126692][ T5160] dump_stack+0x15/0x20 [ 56.130907][ T5160] warn_alloc+0x145/0x1b0 [ 56.135268][ T5160] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 56.141173][ T5160] ? common_lsm_audit+0x8d5/0xfc0 [ 56.146214][ T5160] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 56.152208][ T5160] __vmalloc_node_range_noprof+0xaa/0xe80 [ 56.158035][ T5160] ? avc_denied+0xf1/0x110 [ 56.162619][ T5160] ? slow_avc_audit+0xf9/0x140 [ 56.167397][ T5160] ? xskq_create+0x36/0xd0 [ 56.171880][ T5160] vmalloc_user_noprof+0x59/0x70 [ 56.176829][ T5160] ? xskq_create+0x79/0xd0 [ 56.181259][ T5160] xskq_create+0x79/0xd0 [ 56.185546][ T5160] xsk_init_queue+0x82/0xd0 [ 56.190061][ T5160] xsk_setsockopt+0x409/0x520 [ 56.194749][ T5160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 56.200481][ T5160] __sys_setsockopt+0x187/0x200 [ 56.205350][ T5160] __x64_sys_setsockopt+0x66/0x80 [ 56.210471][ T5160] x64_sys_call+0x282e/0x2dc0 [ 56.215229][ T5160] do_syscall_64+0xc9/0x1c0 [ 56.219874][ T5160] ? clear_bhb_loop+0x55/0xb0 [ 56.224573][ T5160] ? clear_bhb_loop+0x55/0xb0 [ 56.229677][ T5160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.235693][ T5160] RIP: 0033:0x7ff74ff3e819 [ 56.240113][ T5160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.259773][ T5160] RSP: 002b:00007ff74e5b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 56.268207][ T5160] RAX: ffffffffffffffda RBX: 00007ff7500f5fa0 RCX: 00007ff74ff3e819 [ 56.276224][ T5160] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000012 [ 56.284233][ T5160] RBP: 00007ff74ffb175e R08: 0000000000000020 R09: 0000000000000000 [ 56.292280][ T5160] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 56.300269][ T5160] R13: 0000000000000000 R14: 00007ff7500f5fa0 R15: 00007fff2df8f588 [ 56.308379][ T5160] [ 56.311598][ T5160] Mem-Info: [ 56.315016][ T5160] active_anon:3184 inactive_anon:0 isolated_anon:0 [ 56.315016][ T5160] active_file:19628 inactive_file:1923 isolated_file:0 [ 56.315016][ T5160] unevictable:0 dirty:592 writeback:0 [ 56.315016][ T5160] slab_reclaimable:2836 slab_unreclaimable:13631 [ 56.315016][ T5160] mapped:28488 shmem:440 pagetables:711 [ 56.315016][ T5160] sec_pagetables:0 bounce:0 [ 56.315016][ T5160] kernel_misc_reclaimable:0 [ 56.315016][ T5160] free:1894570 free_pcp:8767 free_cma:0 [ 56.350156][ T5164] loop0: detected capacity change from 0 to 1024 [ 56.359826][ T5160] Node 0 active_anon:13316kB inactive_anon:0kB active_file:78512kB inactive_file:7692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:113952kB dirty:2368kB writeback:0kB shmem:2224kB writeback_tmp:0kB kernel_stack:2768kB pagetables:2844kB sec_pagetables:0kB all_unreclaimable? no [ 56.368025][ T5162] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.393971][ T5160] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 56.406584][ T5164] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.431254][ T5160] lowmem_reserve[]: 0 2866 7844 0 [ 56.431298][ T5160] Node 0 DMA32 free:2950416kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953948kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 56.442154][ T5164] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.448737][ T5164] JBD2: no valid journal superblock found [ 56.475896][ T5160] lowmem_reserve[]: 0 0 4978 0 [ 56.485560][ T5164] EXT4-fs (loop0): Could not load journal inode [ 56.491328][ T5160] Node 0 Normal free:4612520kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:13276kB inactive_anon:0kB active_file:78512kB inactive_file:7712kB unevictable:0kB writepending:2376kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:30980kB local_pcp:28788kB free_cma:0kB [ 56.532878][ T5160] lowmem_reserve[]: 0 0 0 0 [ 56.532994][ T5160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 56.538038][ T5167] netlink: 140 bytes leftover after parsing attributes in process `syz.6.617'. [ 56.550331][ T5160] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950416kB [ 56.576348][ T5160] Node 0 Normal: 368*4kB (M) 595*8kB (M) 483*16kB (UM) 171*32kB (ME) 169*64kB (UM) 9*128kB (UME) 21*256kB (UME) 11*512kB (UME) 7*1024kB (UE) 12*2048kB (UME) 1108*4096kB (UM) = 4612520kB [ 56.594840][ T5160] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 56.604228][ T5160] 22128 total pagecache pages [ 56.608976][ T5160] 0 pages in swap cache [ 56.613190][ T5160] Free swap = 124580kB [ 56.617377][ T5160] Total swap = 124996kB [ 56.621863][ T5160] 2097051 pages RAM [ 56.625693][ T5160] 0 pages HighMem/MovableOnly [ 56.630471][ T5160] 80172 pages reserved [ 56.755490][ T5188] loop5: detected capacity change from 0 to 512 [ 56.807381][ T5188] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.819254][ T5193] loop6: detected capacity change from 0 to 2048 [ 56.830125][ T5188] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 56.854730][ T5198] 9pnet: Could not find request transport: rd [ 56.907061][ T5193] Alternate GPT is invalid, using primary GPT. [ 56.913434][ T5193] loop6: p2 p3 p7 [ 56.956946][ T5211] loop3: detected capacity change from 0 to 512 [ 56.960730][ T5213] cgroup: release_agent respecified [ 56.986654][ T5211] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.009109][ T5211] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 57.085107][ T5229] 9pnet: Could not find request transport: rd [ 57.106754][ T5234] loop6: detected capacity change from 0 to 512 [ 57.154898][ T5233] loop3: detected capacity change from 0 to 8192 [ 57.174243][ T5234] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.187789][ T5233] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.222484][ T5246] loop4: detected capacity change from 0 to 2048 [ 57.226369][ T5233] IPv6: Can't replace route, no match found [ 57.249332][ T5252] cgroup: release_agent respecified [ 57.269267][ T5246] Alternate GPT is invalid, using primary GPT. [ 57.275672][ T5246] loop4: p2 p3 p7 [ 57.279576][ T5234] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 57.345624][ T5260] loop6: detected capacity change from 0 to 512 [ 57.394841][ T5264] 9pnet: Could not find request transport: rd [ 57.412889][ T5260] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.426942][ T5274] loop3: detected capacity change from 0 to 512 [ 57.456383][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 57.456401][ T29] audit: type=1400 audit(1732453269.904:4525): avc: denied { create } for pid=5279 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.470155][ T5260] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 57.506509][ T5274] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 57.514704][ T5274] System zones: 0-2, 18-18, 34-35 [ 57.521846][ T29] audit: type=1400 audit(1732453269.954:4526): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.546332][ T29] audit: type=1400 audit(1732453269.954:4527): avc: denied { open } for pid=3324 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.570927][ T29] audit: type=1400 audit(1732453269.954:4528): avc: denied { ioctl } for pid=3324 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 57.582462][ T5274] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.596896][ T29] audit: type=1400 audit(1732453270.025:4529): avc: denied { map_create } for pid=5291 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.626156][ T29] audit: type=1400 audit(1732453270.025:4530): avc: denied { map_read map_write } for pid=5291 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.645956][ T29] audit: type=1400 audit(1732453270.025:4531): avc: denied { mount } for pid=5258 comm="syz.3.655" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.682951][ T5295] loop0: detected capacity change from 0 to 2048 [ 57.683989][ T5274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.655'. [ 57.692205][ T29] audit: type=1400 audit(1732453270.065:4532): avc: denied { prog_load } for pid=5268 comm="syz.5.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 57.698512][ T5274] netlink: 16 bytes leftover after parsing attributes in process `syz.3.655'. [ 57.717516][ T29] audit: type=1400 audit(1732453270.065:4533): avc: denied { bpf } for pid=5268 comm="syz.5.661" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.726351][ T5274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.655'. [ 57.746892][ T29] audit: type=1400 audit(1732453270.065:4534): avc: denied { perfmon } for pid=5268 comm="syz.5.661" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 57.777051][ T5274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.655'. [ 57.785594][ T5269] loop5: detected capacity change from 0 to 1024 [ 57.803409][ T5269] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.814356][ T5269] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.829932][ T5295] Alternate GPT is invalid, using primary GPT. [ 57.836425][ T5295] loop0: p2 p3 p7 [ 57.845556][ T5269] JBD2: no valid journal superblock found [ 57.851337][ T5269] EXT4-fs (loop5): Could not load journal inode [ 57.956538][ T5312] cgroup: release_agent respecified [ 58.027549][ T5321] loop6: detected capacity change from 0 to 512 [ 58.050382][ T5321] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.062584][ T5321] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.229915][ T5350] loop0: detected capacity change from 0 to 512 [ 58.254606][ T5350] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.269687][ T5350] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.288916][ T5359] xt_HMARK: proto mask must be zero with L3 mode [ 58.296234][ T5361] loop3: detected capacity change from 0 to 512 [ 58.325249][ T5361] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.337948][ T5361] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.396278][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 58.412367][ T5370] loop5: detected capacity change from 0 to 512 [ 58.423549][ T5370] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 58.430200][ T5375] loop0: detected capacity change from 0 to 1024 [ 58.438241][ T5370] System zones: 0-2, 18-18, 34-35 [ 58.446042][ T5370] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.467772][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.702'. [ 58.476748][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.702'. [ 58.485649][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.702'. [ 58.495872][ T5370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.702'. [ 58.545252][ T5391] IPv6: Can't replace route, no match found [ 58.559329][ T5393] loop5: detected capacity change from 0 to 512 [ 58.583722][ T5393] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.596692][ T5393] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.703011][ T5401] loop5: detected capacity change from 0 to 512 [ 58.731301][ T5401] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.743235][ T5401] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 58.820504][ T5399] loop3: detected capacity change from 0 to 1024 [ 58.827916][ T5399] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.839011][ T5399] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 58.851035][ T5399] JBD2: no valid journal superblock found [ 58.856805][ T5399] EXT4-fs (loop3): Could not load journal inode [ 58.899428][ T5410] loop4: detected capacity change from 0 to 2048 [ 59.118510][ T5428] loop5: detected capacity change from 0 to 512 [ 59.129025][ T5428] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.142252][ T5428] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 59.335353][ T5458] loop5: detected capacity change from 0 to 512 [ 59.361372][ T5458] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.386565][ T5458] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 59.455542][ T5471] loop0: detected capacity change from 0 to 2048 [ 59.476608][ T5476] loop6: detected capacity change from 0 to 1024 [ 59.508991][ T5471] Alternate GPT is invalid, using primary GPT. [ 59.515380][ T5471] loop0: p2 p3 p7 [ 59.602158][ T5496] loop3: detected capacity change from 0 to 1024 [ 59.613578][ T5498] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.631481][ T5496] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 59.643981][ T5496] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.643981][ T5496] [ 59.653672][ T5496] EXT4-fs (loop3): Total free blocks count 0 [ 59.659719][ T5496] EXT4-fs (loop3): Free/Dirty block details [ 59.665649][ T5496] EXT4-fs (loop3): free_blocks=0 [ 59.670610][ T5496] EXT4-fs (loop3): dirty_blocks=0 [ 59.675758][ T5496] EXT4-fs (loop3): Block reservation details [ 59.681775][ T5496] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 59.852639][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.869574][ T5530] loop0: detected capacity change from 0 to 1024 [ 59.886346][ T5529] loop4: detected capacity change from 0 to 512 [ 59.917199][ T5529] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 59.925349][ T5529] System zones: 0-2, 18-18, 34-35 [ 59.931514][ T5529] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.945949][ T5529] netlink: 36 bytes leftover after parsing attributes in process `syz.4.765'. [ 59.991224][ T5544] dvmrp0: entered allmulticast mode [ 59.997939][ T5544] dvmrp0: left allmulticast mode [ 60.116160][ T5559] cgroup: release_agent respecified [ 60.328988][ T5592] xt_HMARK: proto mask must be zero with L3 mode [ 60.335792][ T5594] loop6: detected capacity change from 0 to 512 [ 60.638359][ T5611] loop3: detected capacity change from 0 to 1024 [ 61.057518][ T5637] loop0: detected capacity change from 0 to 1024 [ 61.095766][ T5643] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.307070][ T5669] loop4: detected capacity change from 0 to 512 [ 61.311742][ T5671] loop5: detected capacity change from 0 to 512 [ 61.337807][ T5671] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.351679][ T5671] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 61.518762][ T5694] cgroup: release_agent respecified [ 61.536398][ T5697] cgroup: release_agent respecified [ 61.559800][ T5698] loop3: detected capacity change from 0 to 2048 [ 61.621888][ T5698] Alternate GPT is invalid, using primary GPT. [ 61.628336][ T5698] loop3: p2 p3 p7 [ 61.695013][ T5708] loop3: detected capacity change from 0 to 2048 [ 61.730177][ T5708] Alternate GPT is invalid, using primary GPT. [ 61.736670][ T5708] loop3: p2 p3 p7 [ 61.868485][ T5724] cgroup: release_agent respecified [ 61.925630][ T5733] dvmrp0: entered allmulticast mode [ 61.927954][ T5729] 9pnet: Could not find request transport: rd [ 61.931799][ T5733] dvmrp0: left allmulticast mode [ 62.134032][ T5752] loop5: detected capacity change from 0 to 1024 [ 62.322629][ T5773] cgroup: release_agent respecified [ 62.406832][ T5781] loop4: detected capacity change from 0 to 512 [ 62.514321][ T5787] loop0: detected capacity change from 0 to 1024 [ 62.710120][ T29] kauditd_printk_skb: 1978 callbacks suppressed [ 62.710137][ T29] audit: type=1326 audit(1732453275.191:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.739825][ T29] audit: type=1326 audit(1732453275.191:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.763187][ T29] audit: type=1326 audit(1732453275.191:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.786859][ T5792] loop3: detected capacity change from 0 to 512 [ 62.794504][ T29] audit: type=1326 audit(1732453275.191:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.817955][ T29] audit: type=1326 audit(1732453275.191:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.823511][ T5792] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 62.841323][ T29] audit: type=1326 audit(1732453275.191:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.850436][ T5792] System zones: [ 62.872734][ T29] audit: type=1326 audit(1732453275.191:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.876292][ T5792] 0-2, 18-18 [ 62.899678][ T29] audit: type=1326 audit(1732453275.191:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.902939][ T5792] , 34-35 [ 62.926167][ T29] audit: type=1326 audit(1732453275.191:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.926198][ T29] audit: type=1326 audit(1732453275.191:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5790 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91d659e819 code=0x7ffc0000 [ 62.929188][ T5792] [ 62.931640][ T5792] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.995970][ T5792] __nla_validate_parse: 3 callbacks suppressed [ 62.995988][ T5792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.874'. [ 63.011236][ T5792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 63.020224][ T5792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.874'. [ 63.029305][ T5792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.874'. [ 63.471232][ T8] IPVS: starting estimator thread 0... [ 63.564830][ T5842] IPVS: using max 1920 ests per chain, 96000 per kthread [ 63.581809][ T5853] dvmrp0: entered allmulticast mode [ 63.588749][ T5853] dvmrp0: left allmulticast mode [ 63.600593][ T5856] loop5: detected capacity change from 0 to 1024 [ 63.856726][ T5874] team0 (unregistering): Port device team_slave_0 removed [ 63.865831][ T5874] team0 (unregistering): Port device team_slave_1 removed [ 64.254843][ T5878] loop3: detected capacity change from 0 to 512 [ 64.294998][ T5878] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 64.330223][ T5878] System zones: 0-2, 18-18, 34-35 [ 64.358945][ T5878] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.433355][ T5878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.909'. [ 64.442392][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.909'. [ 64.451292][ T5878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.909'. [ 64.510386][ T5878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.909'. [ 64.585645][ T5882] loop4: detected capacity change from 0 to 8192 [ 64.864000][ T5892] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.045487][ T5894] loop5: detected capacity change from 0 to 2048 [ 65.056995][ T5896] loop6: detected capacity change from 0 to 2048 [ 65.142626][ T5894] Alternate GPT is invalid, using primary GPT. [ 65.149084][ T5894] loop5: p2 p3 p7 [ 65.155696][ T5896] Alternate GPT is invalid, using primary GPT. [ 65.162089][ T5896] loop6: p2 p3 p7 [ 65.205703][ T5900] cgroup: release_agent respecified [ 65.451073][ T5911] loop5: detected capacity change from 0 to 1024 [ 65.547285][ T5919] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.579785][ T5923] dvmrp0: entered allmulticast mode [ 65.586110][ T5923] dvmrp0: left allmulticast mode [ 65.628848][ T5924] loop0: detected capacity change from 0 to 512 [ 65.705641][ T5924] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 65.724640][ T5924] System zones: 0-2, 18-18, 34-35 [ 65.745045][ T5924] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.785708][ T5924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.926'. [ 65.794735][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 65.798371][ T5936] loop4: detected capacity change from 0 to 8192 [ 65.811893][ T5936] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.828770][ T5936] IPv6: Can't replace route, no match found [ 65.865295][ T5938] loop4: detected capacity change from 0 to 128 [ 65.961215][ T5944] FAULT_INJECTION: forcing a failure. [ 65.961215][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 65.974096][ T5944] CPU: 1 UID: 0 PID: 5944 Comm: syz.4.936 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 65.984418][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.994544][ T5944] Call Trace: [ 65.997947][ T5944] [ 66.000891][ T5944] dump_stack_lvl+0xf2/0x150 [ 66.005599][ T5944] dump_stack+0x15/0x20 [ 66.009837][ T5944] should_fail_ex+0x223/0x230 [ 66.014535][ T5944] ? tcf_idr_create+0x42/0x4c0 [ 66.019418][ T5944] should_failslab+0x8f/0xb0 [ 66.024033][ T5944] __kmalloc_noprof+0xa5/0x370 [ 66.028829][ T5944] tcf_idr_create+0x42/0x4c0 [ 66.033446][ T5944] tcf_police_init+0x299/0xc80 [ 66.038286][ T5944] tcf_action_init_1+0x339/0x490 [ 66.043324][ T5944] ? tc_action_load_ops+0x1a9/0x410 [ 66.048590][ T5944] tcf_action_init+0x1cc/0x610 [ 66.053389][ T5944] ? is_reg64+0xda/0x290 [ 66.057800][ T5944] tc_ctl_action+0x292/0x840 [ 66.062875][ T5944] ? __pfx_tc_ctl_action+0x10/0x10 [ 66.068146][ T5944] rtnetlink_rcv_msg+0x6aa/0x710 [ 66.073105][ T5944] ? ref_tracker_free+0x3a5/0x410 [ 66.078150][ T5944] ? __dev_queue_xmit+0x186/0x2090 [ 66.083270][ T5944] ? ref_tracker_alloc+0x1f5/0x2f0 [ 66.088550][ T5944] netlink_rcv_skb+0x12c/0x230 [ 66.093415][ T5944] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 66.098907][ T5944] rtnetlink_rcv+0x1c/0x30 [ 66.103386][ T5944] netlink_unicast+0x599/0x670 [ 66.108162][ T5944] netlink_sendmsg+0x5cc/0x6e0 [ 66.112996][ T5944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.118398][ T5944] __sock_sendmsg+0x140/0x180 [ 66.123162][ T5944] ____sys_sendmsg+0x312/0x410 [ 66.127947][ T5944] __sys_sendmsg+0x19d/0x230 [ 66.132652][ T5944] __x64_sys_sendmsg+0x46/0x50 [ 66.137480][ T5944] x64_sys_call+0x2734/0x2dc0 [ 66.142203][ T5944] do_syscall_64+0xc9/0x1c0 [ 66.146745][ T5944] ? clear_bhb_loop+0x55/0xb0 [ 66.151589][ T5944] ? clear_bhb_loop+0x55/0xb0 [ 66.156305][ T5944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.162234][ T5944] RIP: 0033:0x7f5ad453e819 [ 66.166713][ T5944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.186442][ T5944] RSP: 002b:00007f5ad2bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.194876][ T5944] RAX: ffffffffffffffda RBX: 00007f5ad46f5fa0 RCX: 00007f5ad453e819 [ 66.202935][ T5944] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000003 [ 66.210922][ T5944] RBP: 00007f5ad2bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.218963][ T5944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.227010][ T5944] R13: 0000000000000000 R14: 00007f5ad46f5fa0 R15: 00007fffb6b3d188 [ 66.235007][ T5944] [ 66.283370][ T5950] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.306972][ T5952] cgroup: release_agent respecified [ 66.327706][ T5956] 9pnet: Could not find request transport: rd [ 66.396947][ T5967] xt_HMARK: proto mask must be zero with L3 mode [ 66.481364][ T5983] loop0: detected capacity change from 0 to 1024 [ 66.540051][ T5993] loop5: detected capacity change from 0 to 512 [ 66.562763][ T5993] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.574793][ T5993] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 66.732000][ T6001] loop5: detected capacity change from 0 to 512 [ 66.740731][ T6001] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 66.748829][ T6001] System zones: 0-2, 18-18, 34-35 [ 66.754967][ T6001] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.246844][ T6005] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.263426][ T3319] EXT4-fs unmount: 92 callbacks suppressed [ 67.263451][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.319189][ T6007] loop0: detected capacity change from 0 to 8192 [ 67.326463][ T6007] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.342720][ T6007] IPv6: Can't replace route, no match found [ 67.442773][ T6024] loop0: detected capacity change from 0 to 512 [ 67.458275][ T6024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.461542][ T6026] loop6: detected capacity change from 0 to 2048 [ 67.471594][ T6024] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.490834][ T6024] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 67.507908][ T6031] 9pnet: Could not find request transport: rd [ 67.514815][ T4537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.524537][ T6026] loop6: p2 < > [ 67.534326][ T6034] FAULT_INJECTION: forcing a failure. [ 67.534326][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 67.547121][ T6034] CPU: 0 UID: 0 PID: 6034 Comm: syz.4.975 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 67.557383][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.567454][ T6034] Call Trace: [ 67.570734][ T6034] [ 67.573676][ T6034] dump_stack_lvl+0xf2/0x150 [ 67.578306][ T6034] dump_stack+0x15/0x20 [ 67.582561][ T6034] should_fail_ex+0x223/0x230 [ 67.587260][ T6034] ? audit_log_start+0x34c/0x6b0 [ 67.592217][ T6034] should_failslab+0x8f/0xb0 [ 67.596860][ T6034] kmem_cache_alloc_noprof+0x4c/0x290 [ 67.602361][ T6034] audit_log_start+0x34c/0x6b0 [ 67.607201][ T6034] audit_seccomp+0x4b/0x130 [ 67.611766][ T6034] __seccomp_filter+0x6fa/0x1180 [ 67.616723][ T6034] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.622455][ T6034] ? vfs_write+0x596/0x920 [ 67.626904][ T6034] ? putname+0xcf/0xf0 [ 67.630995][ T6034] __secure_computing+0x9f/0x1c0 [ 67.636091][ T6034] syscall_trace_enter+0xd1/0x1f0 [ 67.641144][ T6034] ? fpregs_assert_state_consistent+0x83/0xa0 [ 67.647267][ T6034] do_syscall_64+0xaa/0x1c0 [ 67.651963][ T6034] ? clear_bhb_loop+0x55/0xb0 [ 67.656663][ T6034] ? clear_bhb_loop+0x55/0xb0 [ 67.661386][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.667329][ T6034] RIP: 0033:0x7f5ad453e819 [ 67.671776][ T6034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.691453][ T6034] RSP: 002b:00007f5ad2bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 67.699897][ T6034] RAX: ffffffffffffffda RBX: 00007f5ad46f5fa0 RCX: 00007f5ad453e819 [ 67.707871][ T6034] RDX: 0000000000000002 RSI: 0000000000600000 RDI: 0000000020000000 [ 67.711572][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 67.711588][ T29] audit: type=1326 audit(1732453280.204:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32cda157e7 code=0x7ffc0000 [ 67.715832][ T6034] RBP: 00007f5ad2bb7090 R08: 0000000000000008 R09: 0000000000000000 [ 67.715851][ T6034] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.715866][ T6034] R13: 0000000000000000 R14: 00007f5ad46f5fa0 R15: 00007fffb6b3d188 [ 67.715887][ T6034] [ 67.716089][ T6034] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 67.746523][ T29] audit: type=1326 audit(1732453280.214:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32cd9ba1a9 code=0x7ffc0000 [ 67.753527][ T6034] audit: out of memory in audit_log_start [ 67.761628][ T29] audit: type=1326 audit(1732453280.214:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32cda157e7 code=0x7ffc0000 [ 67.832915][ T29] audit: type=1326 audit(1732453280.214:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32cd9ba1a9 code=0x7ffc0000 [ 67.856367][ T29] audit: type=1326 audit(1732453280.214:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 67.856381][ T6040] loop4: detected capacity change from 0 to 8192 [ 67.857373][ T6040] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.879727][ T29] audit: type=1326 audit(1732453280.244:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f32cda157e7 code=0x7ffc0000 [ 67.879763][ T29] audit: type=1326 audit(1732453280.244:7332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f32cd9ba1a9 code=0x7ffc0000 [ 67.879834][ T29] audit: type=1326 audit(1732453280.244:7333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6035 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f32cda1e819 code=0x7ffc0000 [ 67.968415][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.984098][ T6040] IPv6: Can't replace route, no match found [ 68.111355][ T6063] __nla_validate_parse: 10 callbacks suppressed [ 68.111373][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.6.987'. [ 68.185725][ T6067] 9pnet: Could not find request transport: rd [ 68.296793][ T6076] loop6: detected capacity change from 0 to 8192 [ 68.304591][ T6076] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.320016][ T6076] IPv6: Can't replace route, no match found [ 68.376584][ T6084] loop0: detected capacity change from 0 to 128 [ 68.384807][ T6084] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.397506][ T6084] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.451145][ T6087] loop4: detected capacity change from 0 to 512 [ 68.503199][ T6087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 68.511373][ T6087] System zones: 0-2, 18-18, 34-35 [ 68.519775][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.533324][ T6087] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.546892][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 68.555881][ T6087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.996'. [ 68.564765][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 68.574616][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 68.590225][ T6096] loop5: detected capacity change from 0 to 1024 [ 68.626147][ T6096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.658077][ T6094] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 68.670581][ T6094] EXT4-fs (loop5): This should not happen!! Data will be lost [ 68.670581][ T6094] [ 68.680322][ T6094] EXT4-fs (loop5): Total free blocks count 0 [ 68.686345][ T6094] EXT4-fs (loop5): Free/Dirty block details [ 68.692267][ T6094] EXT4-fs (loop5): free_blocks=0 [ 68.697311][ T6094] EXT4-fs (loop5): dirty_blocks=0 [ 68.702369][ T6094] EXT4-fs (loop5): Block reservation details [ 68.708371][ T6094] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 68.721924][ T6103] loop6: detected capacity change from 0 to 1024 [ 68.744211][ T6103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.123764][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.333225][ T4537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.505351][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.521558][ T6113] loop5: detected capacity change from 0 to 8192 [ 69.609344][ T6123] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.709764][ T6123] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.890520][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.950698][ T6123] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.997464][ T6123] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.062974][ T6123] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.081269][ T6123] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.090441][ T6144] loop6: detected capacity change from 0 to 1024 [ 70.102607][ T6123] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.113164][ T6144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.115467][ T6123] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.144003][ T6148] loop0: detected capacity change from 0 to 1024 [ 70.173145][ T6148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.174447][ T6144] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 70.197792][ T6144] EXT4-fs (loop6): This should not happen!! Data will be lost [ 70.197792][ T6144] [ 70.207522][ T6144] EXT4-fs (loop6): Total free blocks count 0 [ 70.209573][ T6148] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 70.213508][ T6144] EXT4-fs (loop6): Free/Dirty block details [ 70.213524][ T6144] EXT4-fs (loop6): free_blocks=0 [ 70.213536][ T6144] EXT4-fs (loop6): dirty_blocks=0 [ 70.213548][ T6144] EXT4-fs (loop6): Block reservation details [ 70.225926][ T6148] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.225926][ T6148] [ 70.225949][ T6148] EXT4-fs (loop0): Total free blocks count 0 [ 70.231834][ T6144] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 70.236784][ T6148] EXT4-fs (loop0): Free/Dirty block details [ 70.236850][ T6148] EXT4-fs (loop0): free_blocks=0 [ 70.280307][ T6148] EXT4-fs (loop0): dirty_blocks=0 [ 70.285454][ T6148] EXT4-fs (loop0): Block reservation details [ 70.291475][ T6148] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 70.332580][ T6155] 9pnet: Could not find request transport: rd [ 70.397779][ T6167] loop3: detected capacity change from 0 to 512 [ 70.425984][ T6167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.438957][ T6167] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.445984][ T6173] loop5: detected capacity change from 0 to 512 [ 70.456423][ T6167] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 70.475066][ T6173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.487806][ T6173] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.505725][ T6173] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 70.516728][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.585460][ T4537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.613786][ T6181] loop3: detected capacity change from 0 to 8192 [ 70.863921][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.895518][ T6203] loop6: detected capacity change from 0 to 512 [ 70.915026][ T6203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.928607][ T6203] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.942635][ T6203] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 70.943519][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.002229][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.176941][ T6232] loop6: detected capacity change from 0 to 1024 [ 71.203009][ T6232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.228190][ T6239] loop0: detected capacity change from 0 to 1024 [ 71.247392][ T6239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.396340][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.404983][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.675504][ T6257] FAULT_INJECTION: forcing a failure. [ 71.675504][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 71.688248][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.3.1060 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 71.698599][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.708670][ T6257] Call Trace: [ 71.711946][ T6257] [ 71.714874][ T6257] dump_stack_lvl+0xf2/0x150 [ 71.719525][ T6257] dump_stack+0x15/0x20 [ 71.723756][ T6257] should_fail_ex+0x223/0x230 [ 71.728459][ T6257] ? nsim_fib_event_nb+0x1ae/0xd40 [ 71.733605][ T6257] should_failslab+0x8f/0xb0 [ 71.738275][ T6257] __kmalloc_cache_noprof+0x4b/0x2a0 [ 71.743643][ T6257] nsim_fib_event_nb+0x1ae/0xd40 [ 71.748631][ T6257] ? fib6_add+0xfe/0x21c0 [ 71.753149][ T6257] ? fib6_add+0x19d7/0x21c0 [ 71.757722][ T6257] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 71.763298][ T6257] atomic_notifier_call_chain+0x76/0x1d0 [ 71.769055][ T6257] call_fib_notifiers+0x66/0xa0 [ 71.773984][ T6257] call_fib6_notifiers+0x32/0x40 [ 71.779086][ T6257] call_fib6_multipath_entry_notifiers+0x8a/0xc0 [ 71.785554][ T6257] inet6_rtm_newroute+0xdb9/0x1260 [ 71.790683][ T6257] ? __mod_memcg_lruvec_state+0x141/0x290 [ 71.796491][ T6257] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 71.802062][ T6257] rtnetlink_rcv_msg+0x6aa/0x710 [ 71.807062][ T6257] ? ref_tracker_free+0x3a5/0x410 [ 71.812107][ T6257] ? __dev_queue_xmit+0x186/0x2090 [ 71.817234][ T6257] ? ref_tracker_alloc+0x1f5/0x2f0 [ 71.822483][ T6257] netlink_rcv_skb+0x12c/0x230 [ 71.827271][ T6257] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.832840][ T6257] rtnetlink_rcv+0x1c/0x30 [ 71.837266][ T6257] netlink_unicast+0x599/0x670 [ 71.842128][ T6257] netlink_sendmsg+0x5cc/0x6e0 [ 71.846904][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.852308][ T6257] __sock_sendmsg+0x140/0x180 [ 71.857064][ T6257] ____sys_sendmsg+0x312/0x410 [ 71.861864][ T6257] __sys_sendmsg+0x19d/0x230 [ 71.866493][ T6257] __x64_sys_sendmsg+0x46/0x50 [ 71.871265][ T6257] x64_sys_call+0x2734/0x2dc0 [ 71.875967][ T6257] do_syscall_64+0xc9/0x1c0 [ 71.880675][ T6257] ? clear_bhb_loop+0x55/0xb0 [ 71.885398][ T6257] ? clear_bhb_loop+0x55/0xb0 [ 71.890163][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.896091][ T6257] RIP: 0033:0x7f91d659e819 [ 71.900513][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.920168][ T6257] RSP: 002b:00007f91d4c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.928585][ T6257] RAX: ffffffffffffffda RBX: 00007f91d6755fa0 RCX: 00007f91d659e819 [ 71.936574][ T6257] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 71.944569][ T6257] RBP: 00007f91d4c17090 R08: 0000000000000000 R09: 0000000000000000 [ 71.952582][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.960556][ T6257] R13: 0000000000000000 R14: 00007f91d6755fa0 R15: 00007ffe2fd92528 [ 71.968537][ T6257] [ 71.974811][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.003149][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.099134][ T6272] loop3: detected capacity change from 0 to 1024 [ 72.108369][ T6270] loop0: detected capacity change from 0 to 8192 [ 72.115737][ T6270] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.131993][ T6270] IPv6: Can't replace route, no match found [ 72.152214][ T6272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.251622][ T6286] dvmrp0: entered allmulticast mode [ 72.257794][ T6286] dvmrp0: left allmulticast mode [ 72.277157][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 72.435233][ T6298] Falling back ldisc for ttyS3. [ 72.519182][ T6316] loop6: detected capacity change from 0 to 1024 [ 72.526033][ T6316] EXT4-fs: Ignoring removed orlov option [ 72.532408][ T6316] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.557118][ T6316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.570241][ T6319] loop0: detected capacity change from 0 to 1024 [ 72.573824][ T6316] netlink: 15998 bytes leftover after parsing attributes in process `syz.6.1087'. [ 72.585901][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.603243][ T6319] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 72.615767][ T6319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.615767][ T6319] [ 72.625756][ T6319] EXT4-fs (loop0): Total free blocks count 0 [ 72.631770][ T6319] EXT4-fs (loop0): Free/Dirty block details [ 72.637717][ T6319] EXT4-fs (loop0): free_blocks=0 [ 72.643200][ T6319] EXT4-fs (loop0): dirty_blocks=0 [ 72.648279][ T6319] EXT4-fs (loop0): Block reservation details [ 72.654373][ T6319] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 72.661391][ T6325] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.662133][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.694439][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 72.694468][ T29] audit: type=1326 audit(1732453285.216:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.724209][ T29] audit: type=1326 audit(1732453285.216:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.747728][ T29] audit: type=1326 audit(1732453285.216:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.771161][ T29] audit: type=1326 audit(1732453285.216:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.794673][ T29] audit: type=1326 audit(1732453285.226:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.800476][ T6334] loop6: detected capacity change from 0 to 8192 [ 72.817998][ T29] audit: type=1400 audit(1732453285.226:8011): avc: denied { name_bind } for pid=6327 comm="syz.4.1091" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 72.818037][ T29] audit: type=1400 audit(1732453285.226:8012): avc: denied { node_bind } for pid=6327 comm="syz.4.1091" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 72.818078][ T29] audit: type=1326 audit(1732453285.226:8013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.858094][ T6335] loop4: detected capacity change from 0 to 512 [ 72.866817][ T29] audit: type=1326 audit(1732453285.226:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.866888][ T29] audit: type=1326 audit(1732453285.226:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6327 comm="syz.4.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ad453e819 code=0x7ffc0000 [ 72.946022][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.975203][ T6335] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 72.983742][ T6335] System zones: 0-2, 18-18, 34-35 [ 72.997772][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.014736][ T6335] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.030513][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1091'. [ 73.039713][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1091'. [ 73.048762][ T6335] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1091'. [ 73.087122][ T6349] loop3: detected capacity change from 0 to 8192 [ 73.094754][ T6349] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.109943][ T6349] IPv6: Can't replace route, no match found [ 73.253933][ T6360] loop3: detected capacity change from 0 to 1024 [ 73.273408][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.351175][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.528542][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.542513][ T6376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pid=6376 comm=syz.0.1111 [ 73.585952][ T6381] FAULT_INJECTION: forcing a failure. [ 73.585952][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 73.598667][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.4.1113 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 73.609121][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.619284][ T6381] Call Trace: [ 73.622583][ T6381] [ 73.625527][ T6381] dump_stack_lvl+0xf2/0x150 [ 73.630150][ T6381] dump_stack+0x15/0x20 [ 73.634418][ T6381] should_fail_ex+0x223/0x230 [ 73.639164][ T6381] ? audit_log_start+0x34c/0x6b0 [ 73.644149][ T6381] should_failslab+0x8f/0xb0 [ 73.648799][ T6381] kmem_cache_alloc_noprof+0x4c/0x290 [ 73.654329][ T6381] audit_log_start+0x34c/0x6b0 [ 73.659182][ T6381] audit_seccomp+0x4b/0x130 [ 73.663757][ T6381] __seccomp_filter+0x6fa/0x1180 [ 73.668742][ T6381] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.674399][ T6381] ? vfs_write+0x596/0x920 [ 73.678840][ T6381] ? putname+0xcf/0xf0 [ 73.682940][ T6381] __secure_computing+0x9f/0x1c0 [ 73.687890][ T6381] syscall_trace_enter+0xd1/0x1f0 [ 73.692988][ T6381] do_syscall_64+0xaa/0x1c0 [ 73.697544][ T6381] ? clear_bhb_loop+0x55/0xb0 [ 73.702239][ T6381] ? clear_bhb_loop+0x55/0xb0 [ 73.707006][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.712923][ T6381] RIP: 0033:0x7f5ad453e819 [ 73.717342][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.737024][ T6381] RSP: 002b:00007f5ad2bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 73.745454][ T6381] RAX: ffffffffffffffda RBX: 00007f5ad46f5fa0 RCX: 00007f5ad453e819 [ 73.753465][ T6381] RDX: 00000000fffffceb RSI: 0000000020004600 RDI: 0000000000000005 [ 73.761517][ T6381] RBP: 00007f5ad2bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.769531][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.777638][ T6381] R13: 0000000000000000 R14: 00007f5ad46f5fa0 R15: 00007fffb6b3d188 [ 73.785625][ T6381] [ 73.969566][ T6397] 9pnet: Could not find request transport: rd [ 74.011046][ T6402] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.019995][ T6402] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.028887][ T6402] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.037776][ T6402] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 74.047011][ T6402] geneve2: entered promiscuous mode [ 74.047829][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.052591][ T6402] geneve2: entered allmulticast mode [ 74.145575][ T6410] loop3: detected capacity change from 0 to 8192 [ 74.153325][ T6410] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.170572][ T6410] IPv6: Can't replace route, no match found [ 74.309657][ T6425] loop0: detected capacity change from 0 to 1024 [ 74.357959][ T6425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.373905][ T6427] loop5: detected capacity change from 0 to 8192 [ 74.381682][ T6427] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.401882][ T6427] IPv6: Can't replace route, no match found [ 74.483830][ T6435] __nla_validate_parse: 1 callbacks suppressed [ 74.483864][ T6435] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1137'. [ 74.500164][ T6435] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1137'. [ 74.712908][ T6444] loop4: detected capacity change from 0 to 1024 [ 74.738194][ T6444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.091225][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.530534][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.667268][ T6475] 9pnet: Could not find request transport: rd [ 75.728941][ T6485] loop4: detected capacity change from 0 to 512 [ 75.750375][ T6485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.764758][ T6485] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.786325][ T6485] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 75.860576][ T6505] 9pnet: Could not find request transport: rd [ 75.938733][ T6514] loop3: detected capacity change from 0 to 512 [ 75.945479][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.974686][ T6514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.995973][ T6514] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.013068][ T6527] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1176'. [ 76.024336][ T6527] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1176'. [ 76.031044][ T6514] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 76.105186][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.123218][ T6540] loop6: detected capacity change from 0 to 1024 [ 76.143391][ T6542] dvmrp0: entered allmulticast mode [ 76.157402][ T6540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.158427][ T6542] dvmrp0: left allmulticast mode [ 76.208723][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.255735][ T6558] xt_TCPMSS: Only works on TCP SYN packets [ 76.380867][ T6569] loop6: detected capacity change from 0 to 8192 [ 76.392167][ T6580] FAULT_INJECTION: forcing a failure. [ 76.392167][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 76.405037][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.3.1199 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 76.415390][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.425559][ T6580] Call Trace: [ 76.428852][ T6580] [ 76.431797][ T6580] dump_stack_lvl+0xf2/0x150 [ 76.436495][ T6580] dump_stack+0x15/0x20 [ 76.440693][ T6580] should_fail_ex+0x223/0x230 [ 76.445434][ T6580] ? call_usermodehelper_setup+0x72/0x190 [ 76.451300][ T6580] should_failslab+0x8f/0xb0 [ 76.455908][ T6580] __kmalloc_cache_noprof+0x4b/0x2a0 [ 76.461265][ T6580] call_usermodehelper_setup+0x72/0x190 [ 76.466825][ T6580] ? __pfx_free_modprobe_argv+0x10/0x10 [ 76.472491][ T6580] __request_module+0x25a/0x3e0 [ 76.477444][ T6580] ? strcmp+0x21/0x50 [ 76.481456][ T6580] ? crypto_alg_mod_lookup+0x87/0x530 [ 76.487001][ T6580] crypto_alg_mod_lookup+0xa5/0x530 [ 76.492313][ T6580] crypto_alloc_tfm_node+0xaa/0x250 [ 76.497546][ T6580] crypto_alloc_aead+0x2f/0x40 [ 76.502387][ T6580] tls_set_sw_offload+0x57f/0x810 [ 76.507443][ T6580] tls_setsockopt+0x8f5/0xcb0 [ 76.512186][ T6580] sock_common_setsockopt+0x64/0x80 [ 76.517518][ T6580] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.523530][ T6580] __sys_setsockopt+0x187/0x200 [ 76.528396][ T6580] __x64_sys_setsockopt+0x66/0x80 [ 76.533451][ T6580] x64_sys_call+0x282e/0x2dc0 [ 76.538197][ T6580] do_syscall_64+0xc9/0x1c0 [ 76.542732][ T6580] ? clear_bhb_loop+0x55/0xb0 [ 76.547445][ T6580] ? clear_bhb_loop+0x55/0xb0 [ 76.552187][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.558091][ T6580] RIP: 0033:0x7f91d659e819 [ 76.562536][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.582239][ T6580] RSP: 002b:00007f91d4c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.590662][ T6580] RAX: ffffffffffffffda RBX: 00007f91d6755fa0 RCX: 00007f91d659e819 [ 76.598662][ T6580] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 76.606760][ T6580] RBP: 00007f91d4c17090 R08: 0000000000000028 R09: 0000000000000000 [ 76.614730][ T6580] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 76.622721][ T6580] R13: 0000000000000000 R14: 00007f91d6755fa0 R15: 00007ffe2fd92528 [ 76.630721][ T6580] [ 76.678510][ T6585] loop6: detected capacity change from 0 to 512 [ 76.701555][ T6585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.714758][ T6585] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.735577][ T6585] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 76.846779][ T6607] loop5: detected capacity change from 0 to 8192 [ 76.853620][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.865125][ T6612] loop3: detected capacity change from 0 to 1024 [ 76.872390][ T6612] EXT4-fs: Ignoring removed orlov option [ 76.885680][ T6612] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 76.895938][ T6607] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.913015][ T6607] IPv6: Can't replace route, no match found [ 76.931995][ T6612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.970777][ T6627] FAULT_INJECTION: forcing a failure. [ 76.970777][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.983947][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.5.1215 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 76.994369][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.004673][ T6627] Call Trace: [ 77.007963][ T6627] [ 77.010966][ T6627] dump_stack_lvl+0xf2/0x150 [ 77.013255][ T6612] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1209'. [ 77.015618][ T6627] dump_stack+0x15/0x20 [ 77.029043][ T6627] should_fail_ex+0x223/0x230 [ 77.033768][ T6627] should_fail+0xb/0x10 [ 77.037967][ T6627] should_fail_usercopy+0x1a/0x20 [ 77.043072][ T6627] _copy_from_user+0x1e/0xb0 [ 77.047684][ T6627] copy_msghdr_from_user+0x54/0x2a0 [ 77.052970][ T6627] ? __fget_files+0x17c/0x1c0 [ 77.057674][ T6627] do_recvmmsg+0x256/0x6d0 [ 77.062143][ T6627] __x64_sys_recvmmsg+0xe2/0x170 [ 77.067166][ T6627] x64_sys_call+0x2a9a/0x2dc0 [ 77.071897][ T6627] do_syscall_64+0xc9/0x1c0 [ 77.076423][ T6627] ? clear_bhb_loop+0x55/0xb0 [ 77.081122][ T6627] ? clear_bhb_loop+0x55/0xb0 [ 77.085818][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.091790][ T6627] RIP: 0033:0x7f32cda1e819 [ 77.096326][ T6627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.116086][ T6627] RSP: 002b:00007f32cc097038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 77.124586][ T6627] RAX: ffffffffffffffda RBX: 00007f32cdbd5fa0 RCX: 00007f32cda1e819 [ 77.132575][ T6627] RDX: 0000000000000001 RSI: 00000000200082c0 RDI: 0000000000000003 [ 77.140553][ T6627] RBP: 00007f32cc097090 R08: 0000000000000000 R09: 0000000000000000 [ 77.148532][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.156507][ T6627] R13: 0000000000000000 R14: 00007f32cdbd5fa0 R15: 00007ffd3d6519a8 [ 77.164518][ T6627] [ 77.207210][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.251095][ T6647] loop3: detected capacity change from 0 to 512 [ 77.267378][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.297472][ T6647] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.307707][ T6649] loop6: detected capacity change from 0 to 8192 [ 77.335167][ T6649] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.354155][ T6649] IPv6: Can't replace route, no match found [ 77.393413][ T6655] loop0: detected capacity change from 0 to 512 [ 77.416775][ T6647] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 77.433076][ T6660] xt_hashlimit: size too large, truncated to 1048576 [ 77.595672][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.696991][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 77.697006][ T29] audit: type=1326 audit(1732453290.236:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cfa3e819 code=0x7ffc0000 [ 77.747509][ T29] audit: type=1326 audit(1732453290.276:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5cfa3e819 code=0x7ffc0000 [ 77.821259][ T6672] 9pnet: Could not find request transport: rd [ 77.860683][ T6675] FAULT_INJECTION: forcing a failure. [ 77.860683][ T6675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.874115][ T6675] CPU: 0 UID: 0 PID: 6675 Comm: syz.0.1236 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 77.884490][ T6675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.894614][ T6675] Call Trace: [ 77.897938][ T6675] [ 77.900923][ T6675] dump_stack_lvl+0xf2/0x150 [ 77.905545][ T6675] dump_stack+0x15/0x20 [ 77.909877][ T6675] should_fail_ex+0x223/0x230 [ 77.914640][ T6675] should_fail+0xb/0x10 [ 77.918816][ T6675] should_fail_usercopy+0x1a/0x20 [ 77.923922][ T6675] _copy_from_user+0x1e/0xb0 [ 77.928521][ T6675] move_addr_to_kernel+0x82/0x120 [ 77.933604][ T6675] __sys_connect+0x67/0x1b0 [ 77.938142][ T6675] __x64_sys_connect+0x41/0x50 [ 77.943000][ T6675] x64_sys_call+0x22a7/0x2dc0 [ 77.947691][ T6675] do_syscall_64+0xc9/0x1c0 [ 77.952286][ T6675] ? clear_bhb_loop+0x55/0xb0 [ 77.957016][ T6675] ? clear_bhb_loop+0x55/0xb0 [ 77.961834][ T6675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.967820][ T6675] RIP: 0033:0x7fc5cfa3e819 [ 77.972315][ T6675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.991936][ T6675] RSP: 002b:00007fc5ce0b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 78.000360][ T6675] RAX: ffffffffffffffda RBX: 00007fc5cfbf5fa0 RCX: 00007fc5cfa3e819 [ 78.008410][ T6675] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000005 [ 78.016387][ T6675] RBP: 00007fc5ce0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.024362][ T6675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.032339][ T6675] R13: 0000000000000000 R14: 00007fc5cfbf5fa0 R15: 00007ffd744b92e8 [ 78.040347][ T6675] [ 78.162314][ T29] audit: type=1326 audit(1732453290.698:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.185867][ T29] audit: type=1326 audit(1732453290.698:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.209322][ T29] audit: type=1326 audit(1732453290.698:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.233322][ T29] audit: type=1326 audit(1732453290.698:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.233440][ T6685] loop6: detected capacity change from 0 to 2048 [ 78.256835][ T29] audit: type=1326 audit(1732453290.698:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.286886][ T29] audit: type=1326 audit(1732453290.698:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.310743][ T29] audit: type=1326 audit(1732453290.698:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff74ff3e819 code=0x7ffc0000 [ 78.334239][ T29] audit: type=1326 audit(1732453290.698:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.6.1241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff74ff3e853 code=0x7ffc0000 [ 78.364976][ T6697] IPv6: Can't replace route, no match found [ 78.398273][ T6685] Alternate GPT is invalid, using primary GPT. [ 78.404637][ T6685] loop6: p2 p3 p7 [ 78.437888][ T6706] xt_TCPMSS: Only works on TCP SYN packets [ 78.444245][ T6706] FAULT_INJECTION: forcing a failure. [ 78.444245][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 78.456930][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.6.1250 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 78.467295][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.472170][ T6711] loop5: detected capacity change from 0 to 1024 [ 78.477358][ T6706] Call Trace: [ 78.477370][ T6706] [ 78.477381][ T6706] dump_stack_lvl+0xf2/0x150 [ 78.494573][ T6706] dump_stack+0x15/0x20 [ 78.498763][ T6706] should_fail_ex+0x223/0x230 [ 78.503472][ T6706] ? __kvmalloc_node_noprof+0x72/0x170 [ 78.508961][ T6706] should_failslab+0x8f/0xb0 [ 78.513569][ T6706] __kmalloc_node_noprof+0xa8/0x380 [ 78.514662][ T6711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.518800][ T6706] __kvmalloc_node_noprof+0x72/0x170 [ 78.518834][ T6706] __nf_hook_entries_try_shrink+0x23a/0x440 [ 78.537296][ T6711] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 78.542087][ T6706] __nf_unregister_net_hook+0x31e/0x3f0 [ 78.554546][ T6711] EXT4-fs (loop5): This should not happen!! Data will be lost [ 78.554546][ T6711] [ 78.560064][ T6706] nf_unregister_net_hooks+0xb0/0xe0 [ 78.569711][ T6711] EXT4-fs (loop5): Total free blocks count 0 [ 78.569730][ T6711] EXT4-fs (loop5): Free/Dirty block details [ 78.569743][ T6711] EXT4-fs (loop5): free_blocks=0 [ 78.575009][ T6706] nf_defrag_ipv6_disable+0x80/0xa0 [ 78.581147][ T6711] EXT4-fs (loop5): dirty_blocks=0 [ 78.587114][ T6706] socket_mt_destroy+0x4b/0x80 [ 78.592111][ T6711] EXT4-fs (loop5): Block reservation details [ 78.592124][ T6711] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 78.619151][ T6706] ? __pfx_socket_mt_destroy+0x10/0x10 [ 78.624648][ T6706] translate_table+0xdf1/0x1040 [ 78.629530][ T6706] do_ip6t_set_ctl+0x7cc/0x8c0 [ 78.634327][ T6706] ? kstrtouint+0x77/0xc0 [ 78.638676][ T6706] ? __rcu_read_unlock+0x4e/0x70 [ 78.643709][ T6706] nf_setsockopt+0x195/0x1b0 [ 78.648308][ T6706] ipv6_setsockopt+0x10f/0x130 [ 78.653174][ T6706] udpv6_setsockopt+0x95/0xb0 [ 78.657886][ T6706] sock_common_setsockopt+0x64/0x80 [ 78.663103][ T6706] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 78.669102][ T6706] __sys_setsockopt+0x187/0x200 [ 78.674032][ T6706] __x64_sys_setsockopt+0x66/0x80 [ 78.679182][ T6706] x64_sys_call+0x282e/0x2dc0 [ 78.683970][ T6706] do_syscall_64+0xc9/0x1c0 [ 78.688519][ T6706] ? clear_bhb_loop+0x55/0xb0 [ 78.693272][ T6706] ? clear_bhb_loop+0x55/0xb0 [ 78.698038][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.703997][ T6706] RIP: 0033:0x7ff74ff3e819 [ 78.708454][ T6706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.728070][ T6706] RSP: 002b:00007ff74e5b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.736487][ T6706] RAX: ffffffffffffffda RBX: 00007ff7500f5fa0 RCX: 00007ff74ff3e819 [ 78.744537][ T6706] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 78.752519][ T6706] RBP: 00007ff74e5b1090 R08: 00000000000002f8 R09: 0000000000000000 [ 78.760499][ T6706] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 78.768472][ T6706] R13: 0000000000000000 R14: 00007ff7500f5fa0 R15: 00007fff2df8f588 [ 78.776468][ T6706] [ 78.802417][ T6718] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.845432][ T6725] IPv6: Can't replace route, no match found [ 78.870185][ T6729] syz.0.1259[6729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.870282][ T6729] syz.0.1259[6729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.882578][ T6729] syz.0.1259[6729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.935965][ T6736] loop6: detected capacity change from 0 to 1024 [ 78.970912][ T6736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.987506][ T6736] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 79.000011][ T6736] EXT4-fs (loop6): This should not happen!! Data will be lost [ 79.000011][ T6736] [ 79.009787][ T6736] EXT4-fs (loop6): Total free blocks count 0 [ 79.015797][ T6736] EXT4-fs (loop6): Free/Dirty block details [ 79.021805][ T6736] EXT4-fs (loop6): free_blocks=0 [ 79.026758][ T6736] EXT4-fs (loop6): dirty_blocks=0 [ 79.029257][ T6745] loop3: detected capacity change from 0 to 1024 [ 79.031965][ T6736] EXT4-fs (loop6): Block reservation details [ 79.044333][ T6736] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 79.050476][ T6745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.067833][ T6745] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 79.080237][ T6745] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.080237][ T6745] [ 79.089902][ T6745] EXT4-fs (loop3): Total free blocks count 0 [ 79.095906][ T6745] EXT4-fs (loop3): Free/Dirty block details [ 79.101872][ T6745] EXT4-fs (loop3): free_blocks=0 [ 79.106810][ T6745] EXT4-fs (loop3): dirty_blocks=0 [ 79.111864][ T6745] EXT4-fs (loop3): Block reservation details [ 79.117860][ T6745] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 79.233988][ T4537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.279693][ T6763] dvmrp0: entered allmulticast mode [ 79.286767][ T6763] dvmrp0: left allmulticast mode [ 79.305513][ T6765] loop4: detected capacity change from 0 to 2048 [ 79.344155][ T6765] Alternate GPT is invalid, using primary GPT. [ 79.350858][ T6765] loop4: p2 p3 p7 [ 79.412333][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 79.421333][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.428877][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.436411][ T6773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.443888][ T6773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.455409][ T6774] loop5: detected capacity change from 0 to 1024 [ 79.469298][ T6774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.490186][ T6774] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 79.502634][ T6774] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.502634][ T6774] [ 79.512382][ T6774] EXT4-fs (loop5): Total free blocks count 0 [ 79.518415][ T6774] EXT4-fs (loop5): Free/Dirty block details [ 79.524354][ T6774] EXT4-fs (loop5): free_blocks=0 [ 79.529327][ T6774] EXT4-fs (loop5): dirty_blocks=0 [ 79.534370][ T6774] EXT4-fs (loop5): Block reservation details [ 79.540411][ T6774] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 79.587968][ T6779] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.717610][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.771688][ T6793] 9pnet: Could not find request transport: r [ 79.810738][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.875415][ T6803] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.028841][ T6823] loop6: detected capacity change from 0 to 512 [ 80.060617][ T6825] loop3: detected capacity change from 0 to 1024 [ 80.089784][ T6825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.108386][ T6825] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 80.120913][ T6825] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.120913][ T6825] [ 80.130629][ T6825] EXT4-fs (loop3): Total free blocks count 0 [ 80.136882][ T6825] EXT4-fs (loop3): Free/Dirty block details [ 80.142952][ T6825] EXT4-fs (loop3): free_blocks=0 [ 80.147988][ T6825] EXT4-fs (loop3): dirty_blocks=0 [ 80.153034][ T6825] EXT4-fs (loop3): Block reservation details [ 80.159071][ T6825] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 80.229293][ T6837] 9pnet: Could not find request transport: rd [ 80.239004][ T4537] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.277434][ T6845] loop6: detected capacity change from 0 to 512 [ 80.296740][ T6845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.340728][ T6852] loop5: detected capacity change from 0 to 512 [ 80.346710][ T6845] xt_TCPMSS: Only works on TCP SYN packets [ 80.365475][ T4907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.392635][ T6861] FAULT_INJECTION: forcing a failure. [ 80.392635][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 80.405436][ T6861] CPU: 0 UID: 0 PID: 6861 Comm: syz.6.1311 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 80.415832][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.421001][ T6862] loop0: detected capacity change from 0 to 1024 [ 80.425894][ T6861] Call Trace: [ 80.425905][ T6861] [ 80.425915][ T6861] dump_stack_lvl+0xf2/0x150 [ 80.443208][ T6861] dump_stack+0x15/0x20 [ 80.447407][ T6861] should_fail_ex+0x223/0x230 [ 80.452140][ T6861] ? audit_log_start+0x34c/0x6b0 [ 80.457175][ T6861] should_failslab+0x8f/0xb0 [ 80.461815][ T6861] kmem_cache_alloc_noprof+0x4c/0x290 [ 80.465048][ T6862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.467192][ T6861] audit_log_start+0x34c/0x6b0 [ 80.483974][ T6861] audit_seccomp+0x4b/0x130 [ 80.488561][ T6861] __seccomp_filter+0x6fa/0x1180 [ 80.493581][ T6861] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 80.499234][ T6861] ? vfs_write+0x596/0x920 [ 80.503671][ T6861] __secure_computing+0x9f/0x1c0 [ 80.508721][ T6861] syscall_trace_enter+0xd1/0x1f0 [ 80.513790][ T6861] ? fpregs_assert_state_consistent+0x83/0xa0 [ 80.519885][ T6861] do_syscall_64+0xaa/0x1c0 [ 80.524533][ T6861] ? clear_bhb_loop+0x55/0xb0 [ 80.529267][ T6861] ? clear_bhb_loop+0x55/0xb0 [ 80.533963][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.539979][ T6861] RIP: 0033:0x7ff74ff3e819 [ 80.544488][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.564108][ T6861] RSP: 002b:00007ff74e5b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 80.572620][ T6861] RAX: ffffffffffffffda RBX: 00007ff7500f5fa0 RCX: 00007ff74ff3e819 [ 80.580606][ T6861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 80.588592][ T6861] RBP: 00007ff74e5b1090 R08: 0000000000000000 R09: 0000000000000000 [ 80.596651][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.604718][ T6861] R13: 0000000000000000 R14: 00007ff7500f5fa0 R15: 00007fff2df8f588 [ 80.612787][ T6861] [ 80.621615][ T6865] loop5: detected capacity change from 0 to 1024 [ 80.639173][ T6865] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 80.651570][ T6865] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.651570][ T6865] [ 80.661339][ T6865] EXT4-fs (loop5): Total free blocks count 0 [ 80.667445][ T6865] EXT4-fs (loop5): Free/Dirty block details [ 80.673358][ T6865] EXT4-fs (loop5): free_blocks=0 [ 80.678359][ T6865] EXT4-fs (loop5): dirty_blocks=0 [ 80.683399][ T6865] EXT4-fs (loop5): Block reservation details [ 80.689481][ T6865] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 80.895909][ T6874] 9pnet: Could not find request transport: rd [ 80.946444][ T6877] loop3: detected capacity change from 0 to 8192 [ 81.067455][ T6878] ================================================================== [ 81.075585][ T6878] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 81.083529][ T6878] [ 81.085887][ T6878] write to 0xffff888105ac3a28 of 4 bytes by task 6877 on cpu 0: [ 81.093626][ T6878] __mark_inode_dirty+0x24e/0x7e0 [ 81.098719][ T6878] mark_buffer_dirty+0x149/0x230 [ 81.103705][ T6878] block_write_end+0x123/0x210 [ 81.108493][ T6878] generic_write_end+0x5c/0x160 [ 81.113370][ T6878] fat_write_end+0x4e/0x160 [ 81.117892][ T6878] generic_perform_write+0x33c/0x4a0 [ 81.123304][ T6878] __generic_file_write_iter+0xa1/0x120 [ 81.128900][ T6878] generic_file_write_iter+0x77/0x1c0 [ 81.134343][ T6878] iter_file_splice_write+0x5f1/0x980 [ 81.139758][ T6878] direct_splice_actor+0x160/0x2c0 [ 81.144924][ T6878] splice_direct_to_actor+0x302/0x670 [ 81.150339][ T6878] do_splice_direct+0xd7/0x150 [ 81.155142][ T6878] do_sendfile+0x398/0x660 [ 81.159591][ T6878] __x64_sys_sendfile64+0x110/0x150 [ 81.164828][ T6878] x64_sys_call+0xfbd/0x2dc0 [ 81.169442][ T6878] do_syscall_64+0xc9/0x1c0 [ 81.173995][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.179930][ T6878] [ 81.182271][ T6878] read to 0xffff888105ac3a28 of 4 bytes by task 6878 on cpu 1: [ 81.189859][ T6878] __mark_inode_dirty+0x58/0x7e0 [ 81.194840][ T6878] fat_update_time+0x1e8/0x200 [ 81.199688][ T6878] touch_atime+0x14f/0x350 [ 81.204127][ T6878] filemap_splice_read+0x8a5/0x910 [ 81.209277][ T6878] splice_direct_to_actor+0x269/0x670 [ 81.214699][ T6878] do_splice_direct+0xd7/0x150 [ 81.219503][ T6878] do_sendfile+0x398/0x660 [ 81.223961][ T6878] __x64_sys_sendfile64+0x110/0x150 [ 81.229197][ T6878] x64_sys_call+0xfbd/0x2dc0 [ 81.233824][ T6878] do_syscall_64+0xc9/0x1c0 [ 81.238472][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.244403][ T6878] [ 81.246740][ T6878] value changed: 0x00000008 -> 0x00000038 [ 81.252472][ T6878] [ 81.254811][ T6878] Reported by Kernel Concurrency Sanitizer on: [ 81.260972][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.3.1316 Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 81.271405][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.281487][ T6878] ==================================================================