last executing test programs: 1m57.956275394s ago: executing program 3 (id=49): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m57.783900505s ago: executing program 3 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @random="0133014010ff"}) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x9}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff0000000071104a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x17, 0x0, "d86ac46a073843d9f8060941f3d77262614c3cd1ba8b023fc00414f10c2b7974289520ce79fef70f5a2483620aef97999c7e0f07caa2360fa1374ae1dea4978f54b437d900"}, 0xd8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x80000000000008, &(0x7f0000000580)="0f", 0x1) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m56.799897616s ago: executing program 3 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) 1m56.742344916s ago: executing program 3 (id=65): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_rdma(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000140), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma']) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000900)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000940)='./file0\x00') prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='&\x00') open(&(0x7f0000000040)='./bus\x00', 0x46b42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x2000000, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf485263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc097fce47d85272036dc78388e3dc177e9b496", "b732676c181c2082669dd06388bd49bd03e6bbc2ebce21aa45a7fea6180766b9"}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1m56.241598257s ago: executing program 3 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4) r2 = io_uring_setup(0x6526, &(0x7f00000002c0)={0x0, 0x3c8f, 0x20, 0x0, 0x2ac}) r3 = io_uring_setup(0x55ab, &(0x7f0000000340)={0x0, 0xb8a2, 0x80, 0x0, 0x0, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000480)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xa145}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7}, &(0x7f0000000800), &(0x7f0000000280)=r8}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000000ac0)={@sco={0x1f, @none}, {0x0}, 0x0, 0x8}, 0xa0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r10 = creat(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0x15) ioctl$VT_DISALLOCATE(r10, 0x5608) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m52.162785211s ago: executing program 3 (id=120): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000300)={0x2a, 0x29, 0x2, {0x5, [{{0x20, 0x4, 0x4}, 0x1a, 0x6, 0x7, './file2'}]}}, 0x2a) sendfile(r1, r1, &(0x7f00000002c0), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 1m52.162434791s ago: executing program 32 (id=120): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000300)={0x2a, 0x29, 0x2, {0x5, [{{0x20, 0x4, 0x4}, 0x1a, 0x6, 0x7, './file2'}]}}, 0x2a) sendfile(r1, r1, &(0x7f00000002c0), 0x7f03) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 3.707731425s ago: executing program 0 (id=1581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) 3.608893116s ago: executing program 0 (id=1583): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xd20d, 0x2, 0x2, 0xfffffffe}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_usb_connect$uac1(0x4, 0xe8, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x74, 0xaf, 0x8f, 0x40, 0x2}, 0x2e, &(0x7f0000000780)=ANY=[@ANYBLOB="05256684efae348f293c0f2e00050710021474400003100b0a100302000003030c000b10010c86000505d8fff70a10030005000302080043950600bebfcfbccb3c"], 0x1, [{0x81, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]}]}) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0xffffff80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xf, 0xffe0}, {0x12, 0xe}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.414339486s ago: executing program 5 (id=1588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xd20d, 0x2, 0x2, 0xfffffffe}) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_usb_connect$uac1(0x4, 0xe8, &(0x7f0000000800)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902d60003010260010904000000010100000a240101010402010211240602030502000300070006000600bc09240806ff0303a3420c24020103020603020006060924030201010302080b24070506007f4d7b571c090401000001020000090401010101020000e13016072401080b030009050109000206090707250101039a000904020000010200000904020101010200000a2402010504ea62b1d30c24020102020205197621cf0c24020108040506e247f443072401090002000d240201020106024aefb6b9160905820940000c80ff072501028d0000ead33c499820b329966835466a2bfa11d5396e367a66bff00cb04c9fdd57498e78e9e603562e807e7c5d"], &(0x7f0000000740)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x250, 0x74, 0xaf, 0x8f, 0x40, 0x2}, 0x2e, &(0x7f0000000780)=ANY=[@ANYBLOB="05256684efae348f293c0f2e00050710021474400003100b0a100302000003030c000b10010c86000505d8fff70a10030005000302080043950600bebfcfbccb3c"], 0x1, [{0x81, &(0x7f0000000a00)=ANY=[@ANYBLOB="81031053d76b2cb51b4f2c06d7855bb753e5ab61cc5831956cc1d04b4f4d32bb854fbcaccfba2005699cb457578c308de9209214556a9764a72410436ebb3fbd153355b85d9cf0a4b96bb3df175e2cc18f37b755637a69f3a569426285aa3e97b824d98f80dde8b0030c0ef81b20d42116a206ff97db179bd61d1071015b0f2093d877ca510705fcf6b6769f9286c08f0cd7eb0b2a0e957908293bb676c07cec06231ae987267bd05c07b6e1277dd30b2e7c394305ae29ee7acce17f464ff9f68c5c53a8a8c74a53b007074a283d83331b060a506130cbd9566e831465510cc92de01cbfb79c11c4dc921ed6ca05ae0d3ea75c305af34bbbe74cf96c2aee86b9391014c5a76d08b868bd45926e27d110fa84cd8d10cdd1e8963feb95665f0febd5ce8468345be69041c2829791f30562a82a53296b21c471e248dbfd511df3e25e5e6c60e6ab0645f7e20a72d93c6e7a7449af233609ad36cd455c700ab9a73a7c3fca3b5bf31fef47e857f42599260528fef6b357ede6cc77908e9a18abf856276f0be0805efc3f40662dab201f1feff561c061fc4af26c2f61db0b3956a05cfca3ec5c9c9e04f6883e92fd28c5eec46e21139d84c4bd9dfe1d09ff2167cc5148b72d9f12ed0ef92624f8eea6e36d3525059e1da41c5750e6f4cfa0b2d1d5cb0d09cbc33519d0910d018eedda77156b9cb6c540e9e159f459d4788e457ebbf83e8cc7f335"]}]}) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r5, &(0x7f0000001000/0x3000)=nil, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="104d955d1910e1e805b99d2899ba0eecf2d005a8c6dcd67c021e0ac186f816be1b771666d01ee12a373aa9930eed67e14e07f7be9be893581fa91f39aaaa9295748d701b2c204f630f5db804b3d5baf01c96507da1959361f87ce73706c2b62e5c5a3f0ce171006b381fc17ef5675bc4b20968f250df12b6ef9391485656d21f1f3c8705292429a9ba66d97be2f94fc18603d0b8fe9ae06555bfc767a6977c178c8a684773fa1c3401ea479c3ffe390ae7b351aaa580ad306ab81e8ca92c643749cdef1f8eb5c795ad8a324b821ec4ab3ab0dec2c14457c19072163aec859e03d19ba912e0813e6bab653ea49a1a161afa786ce725fffb9903d925083ac0eec668d7e2dfd3f1cd22121cbb55d51910f974f2ab4da9436a0dc763f69de28713b35baa2b901d4fa40d1b71ec1a3c68c82806c3df896ccceeca7e9baadeec8154b2133fb2249d351936bbafbe380f69402d350604ba58e616f43fd64cbcdb215d7e213a61bebdbdb7f07ef425c98045935b78d1826aa97b883f7d8b38f1fbf8ead6fc89df20b836b2031d24004b1b99aa9c3a84f3480c6fd07bb7093a27797cefd8cd34b8f7cf55bbe265c473e981776fa46722f374d5d809ad70d8305a671f7a54c8394ee1c67a817347135dacb40f98eca6e7da9a32f6fd4c73bbf5ecb540616f95ce802de391793a22a186d5d3e9d52b53408cb8946d9940ce55e1edae3325a036aed3d24a2d73f7809a14d8cc1e42909cc031408e9c09681505f536186f2e4947283a39674ee4679da8211ba9df22d11dc12951e57f8552d976bcc51bb602699480119eed11d399617962b1e49b203ea42798c5ec2d92a507e4bede48d370507acb641eca3ace1badddfee676ea0d504f26e2289b943ab90f88b5abc19604aed28f3852898ba6c079271f46de62da38def3477b084c8ed2ad3c5dabf6ad2e1e2aaa9f20685cd2e0d96f0deefc336d0c6f1db1598c62b6b45e4cfb79ac37a5cbffa72ed5e6d64442cd325626c2c3e42d5e312b9ec0d9307107d85bb403872eb8292ded04be5ca0b7b24c36d7e60501e77265877ec7c3f7cefaea092c6d4f0062b5bc87ffb3b0a19b2b16f121ebe83e0c5488587853f75dddaf9e26be0431568b5d8bdfbff55531b7f248517754dc1a68f925eafb7dbf1075dab3e20ea047e2f36cc7d309d223eb30b8181a56df32d1fce10168379de8abd77286819d72d262881687076cb7b94fa5c1c23a93f759cde54326180e613447967fa37be06d899e69fb7ab700783fa2552bfba3f2148abf0b72b218a41f7756255b24050cc83315ee789118e5b122824a816b746d1436da64252e64f8067f5011b7262ce90f5ab28e46d0dc6f16435334a884157bbf3f931e9d8112d8506f15c2ce0523511fac9ae0b73e51e4d573dd4e950723764dad24683c1c75f9738fd757c1ec73b054d5ddce1b2a5d57d482a55c926dd38aa3dcf46884a9305cd8bd5d11735c715941663d0746a2691ff2d46ba4f10d4adacd9d1dfd73372512b6f2a2a573e73506b7b54cb0377953cd8df6f933166088b5f775733533f98067766b64b9859a05c98a05d207abb5d4b26410e02b71875e4dbcb463fe4848c89508c12265aab6f8520226a2140d7d5f805c469ce53ea1be24bf8f5abc2a25cc9c80fd927bcbe7c0bea917f4548b835005b6f311b79ebed5e9a7e972b9151157041244c78a2e4049bd408587552f8a4c2f32d59afeefb50ca3d41dab01b529f8770450fd62bd5e2fd712c3ee66add5d49b63f62f8fe9ee4c01b4fae578d3feb95a3064458a8af3b31a247ccc4e13dc3dde564570b1c7cfdb70e3c1e14ceccd84e9b98b3603a88ee67fc249a7f410b27e17331cff2b44ca83331c25939b38714029f92346727c4cc14e61fc55472a603be46e56aa54f2aabf1b0cb89cbe16bef81a9085c4f31d1f8cf505f7d729f1baf83317180790d077bbf0b1c911278f042d27aac2ee8fca9745637e1340c0892807bdeb3a7814aefc2e4d2f1d8f9b3af879dc3f6dbb769821af5e6ca183c783fd2e9ebf6b2d4b93e63ea0f17a13d655f4bbeeee61ca833e205b47bc097188411c7d0ebe62e9894d68d341160e6aca7b4898ae647a6c1aa16a96792d7286a77c6d2970b7a6a6295e60504462d1ce6018c57af413b91b8bb3eefa1535cae85d0aebe36a7cb3aec7f6ff60c750ffe0f27d78d5445da65727d7f4b8eacb9650281dc93d9b2d0dc0df87be0aa5bf56674476228bcf8748decd30671ca3e0b6054ada8a56159cd672db7aa0c30ffb86659263a05aaf7346ae6b41655a14f0ea87b8e97315cd9d36e15761f1aa2fd1fa605cd32217d1f0752a7aed41d0fc56eed058c9f92320fc1567df9c147112009c10b3f8ae3abeb08ee0ebfce302e5037bcdc7158dc607d239a0d2d621d6a6d4e0d7b7c00465a50a2425b3e599afc9a5c481bf8b29a620fece8c3b0b9d6e18fb1f07bad009b286cfe1c7944046bbd668b9227848dac8f5f5005fabbb608f5509882eb0cc4809aa6e4a2271101e1ff95c56255ae468cb30e72471ba4988d8a2fea784fd6f62f0f6af443edd0740bda14cd8540f7dc9a70819f8a446dde3978d0777980651154041eb2b6f7d3db7961d69aebc141a4bbdefc5b6d7c8bb7d69d09ec62fd84994e48679e161fcce2dbae78bc8d4786fa17eb0f5e4f7753a1cd63ed6d23774866d5ccf58d4398ae547716d7979ef700e51394aeef0a16e447075ec21ea8a09c909221d444288e42c5e62d30e56e43a143392a9155be3d295bcfe0f9ea03ae3850ea8578c962dbef26217dc9eac09c872b9387dbd11b4f52ba1896092b7eb11c3b95150e2ed5e57d25000ed2b3cdf91e3d8c79ec048f675906e93eaf4f8545d70c1b60863b176f8cc6abffbf78d4fb2aefae7c9159c96b6574ebe10736f2c7b4e9f56ba91b1a8afdaa5cf94ac6f2fc51aec70af5898cd8b45db81d3afb7a2d05715780b82861246b1735dc4ff8e1e14737b86f8e89254cdde8dfcf8ef370fd4da943fd0a9e0418bb6b6929e9b862439c42dff613a28a957fc2ff50be66bbb51f144e5dc574d0ccf69f307a2d427fa543dc30889dc19b3c149f0ec31c4e0be65939a20c093cdbed1d5601455a3263564931f1fbff3b61e0384ef6d5e5973e848da6ee306f0c3c72537efd1eff9265823569bdb458d6eee8eb09d92e8d6fe08dcea8a8b29f3e88ba136fc9de04f630fb40ae7da4e6649cdfb6c4463018a3bf0d7401e96782ca033f25893549765c2bf6aea37c9894204834d1aa31094dcce4510b614a0f1ed3b4f7b4f071864d4f52fb8a5f5bf55891eecb34c48bdcbb3b42affcfcc724090202c0dd200b1ea8cd22feaaa200b6d0ce231cea740c8674c2e3fea5d7d25f4420b0464ecfd86584f1492f33da5c426f51a9a8b138e5991451f84939bb524aea57805b097b9d042e33b7b381b984cffd5fb94e9b301800f196c2e4b6a7e05f4b44c97f178e00d55df80f4d8b15089e6776b957a4f3e31b21bd2ff7ef877a699a155b3ed313fd7f8272eec57e9591fd8ebe73801420e2da7c1309bdf90b36b341ac7f9d3d6210a0b62c66f172e24d479199456d012abe8bfcbd96cd9be2d041e90ef2ef959cf1771576e76040bd3c7abd30f72c9af57a2f337a0a54478928e562070c276af317fae40e697b7caee915e02a2307b1cd968aa1bc007f271f746a242e775bf034d35e90793450dd8966a33898696bd7b66eba6e2e12fa0ac61296e1e83dbfe38663cc0f49ce1ede544473b90d9c15bb3ab0efac87c90e192946055d89dca7531e323050174e49e7f0c647c4673044b8b198d80f9850bd34e93a4cf85e842455c10c5809d3781a2c7f077ed860819757e75d9fc8dee55cf6cf02133c7b9f64c30e2dccc393f0bc4acf7d9e1c24aadaf1c264abe64e37fdd9cce367625f7b7a2f549b002cfbc85d8a2993c484ecd8842c4c253ceec202c02b24fe56847d7662c3126018ce6003efff8deecf8d5aef2b2e9c72d71e540b65073efdab76f9a34aab980469c1a90c3fce054d81bc40eff7213421a56ad49c38241551785468e436777babab70d2a7411da4b45acec0fe3e103664fc025f76b862b6e0e96d3bc79ef50d0fd5168a14c1ad775ea6b72a2d0f6a149fb188f39ad970185353476e0541163cb0fe3f0f73436d752e9e974c55017beefaed7ba2b74b46bf24df59d7380d64c3d031a522970b6f35901b1b2b7b6e986257712afdc22de1fede4baf88a6d057305cd281120e292743117164d62450adb8a7322ebbdd2a779d0a57e59c7fa4569ed692ef9e01b9a76e9cd0b72b9e06aa37659ca6ffd07ef57a78df194e5bf0123d118324fe0f8dd533b365cd4dc52b66b62d81d5ee57f36779f778d4d889c23f2c0c0559fd2979faa92c7c59fa79c76b9e72808cdb56f53b04c89f2e3bee2d5941e4e7d1c1d61f1a616ce311a9c5f5513607985907a03333fde6ad59c1a093db01bd8a62e9bfc7759f31ae2a646862946f3c334f10ee6c4ac65cb0adc3519802721f73cfe26f1778693e338d6a75b71eacb762aa3f7e9a62d1df42cd1e9845465f4d8b66aff394c4ad625d67c3330fc3c37e3e5fc81c91c171cc720348db5ee50c2e56caf90ca082366287593bae620b0810095a4a1027526d587f0b418d776edfe8f7597d05c52b3de4decf15e13865ff66d63b405b36a2e1bb853f3b4ff3d7a69f6f602f09fcfe0ce9513faad5b3e76fccda621a4af65cd756ffd16cb298398472f125d6aaa2b2e508039d7fb37b84a3d7e24391eb0346ee009edbc564a91c06ae9f7c4528d12ecec94d7c06c01a698e7ed3a9d492013418b7f150980c9907c15ec5f85cf79fc112bd63f848fcdf204de8dbee6e4eb706633aa897cdaf13faa8d8fddc4b40ac61984819018dba72cc24277a585c1a832cc9e192ac71a0fd32ca48283541809c4f172cae03cb4cb88bbb4b4fdadd68564bb596df993f62381cc39884b87489ba09202883ac3048457384bdb74a55c28cc8e589b9f55e7cb49ecbf65f08cd9d8d9c710befbb5043095659cd549a10b84c84401d4ea5f72345fc36211bf8c24bba7c32fcc6b0baa9e8562f27ca5d324cfbebcc5888d9e67b3cf434425dfc703372496e58cbd5f5bd5040d0c6a1bcf301124fcd4cfda01d240a1a5b46b780555b9261d3ceb7ba79dc1ee07193459f5cc42e5b97ade28bc7f6d2477b11a3c1b9626734e77e853f25b3734f354324a450505f19b88b924c720b2bfb2c4342c917e8495032ef84a311951aa26d3955c923308ba12a277644efbb03c4b11bf94c2e6b34e499ad033c7266f2334a62a13fe574b48a25b4866fa45f17ba3935be298aa4ddf57d63b134019206974906d7a596d0d48055d0d646fdc84ac782f87da9a96d3ae6071917247b159b61562e908e8767f05f7bb3c8fe5395995893e524049da58cf9e69d8501e906f7096a6480d415540d3c48b5000f9c099ef48475e2b369e2df225e53a1b488588645144d9ca81c9795efa1dd540d537d2c3039c8201ec2c82c50249c0c13814589f9813171f7db8bfe742d68fdf30a7da3b57fe103649949b22b34f8ed9d618bde42045573be1cbfcf4e9be75ff1e1bded07c236790b4f03034421cc2911fffd9fdfc31e96d4b41b3f3760c1cb5a07caa11150fcb59af2046f5a7a77937d04fa14924384b5ddde2f9f5dac8b0d9b490b7eb382006afe278535c74799bcdf5c737f65a305242c7841ab4120260b8ee3159caf7036e322e643426cd87ed2640170847eeefd40d9c43c99f4d799c588c5685865b97e63e21f13a71"], &(0x7f0000000240)='GPL\x00', 0xffffff80, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xf, 0xffe0}, {0x12, 0xe}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.876984587s ago: executing program 5 (id=1594): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x105740, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) dup3(r2, r3, 0x0) 2.857604206s ago: executing program 5 (id=1595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0xb00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x8000, 0x14, @empty, @private1, 0x7, 0x700, 0x281}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x1000000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}]}}]}, 0x48}}, 0x0) get_mempolicy(&(0x7f0000001440), &(0x7f0000001480), 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x3c) socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xdb, 0x800, 0x3, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x20, 0x48f, 0xfffffff8}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x6}]}) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.996811538s ago: executing program 5 (id=1611): socket(0x10, 0x803, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x200]}, 0x8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x1, 0x3, 0x4, 0xe, 0x20792e8b, 0x0, 0x8, 0xffff, 0x80, 0x40, 0x4, 0x3, 0x15, 0x8, 0x80000001, 0x7, 0x13a, 0x1, 0x7f, 0x97d4, 0x9, 0x2, 0x488, 0x4, 0x4, 0x7bff, 0x4, 0x1, 0x5, 0x200, 0x5, 0x7, 0x9, 0x4e45, 0x1, 0x0, 0x8, 0x9, 0x4, 0x6, 0x4, 0x3, 0x5, 0xd97, 0x0, 0x10000, 0x7f, 0xffffffff, 0x3b, 0xb, 0x5, 0x0, 0x9, 0x4, 0xb7, 0xf86, 0x2, 0x6, 0x6, 0xa, 0x1000, 0x4, 0x3, 0xe, 0xaba, 0x32e, 0x400, 0x9, 0x2, 0x5, 0x7fff, 0x2, 0x3, 0x1000, 0x5, 0x7, 0xffffffff, 0x400, 0x3, 0x4, 0x66, 0x1, 0x1, 0x17dc6cc9, 0x0, 0x9, 0x2, 0xffff, 0x3, 0x1, 0x2, 0x8, 0x4, 0x4, 0x9, 0xffffffff, 0x7f, 0x2, 0x0, 0x1, 0x4b9, 0x9, 0x484f, 0x10, 0x40, 0x42e, 0x80000001, 0x3, 0x6, 0x9, 0x7, 0x4, 0x3, 0xbe, 0x8, 0x1, 0x38a, 0x7, 0x6, 0xd, 0x1, 0x6, 0x1, 0xd823, 0xdb60, 0xd27a, 0x2, 0xdbba, 0x80000000, 0x7ff, 0x4, 0xfff, 0x1, 0x4, 0xffff9628, 0x800, 0x100, 0x8c, 0x1, 0x7b, 0x2af0, 0x9, 0x3, 0xf, 0xfc80, 0x7, 0x8000, 0x8, 0x6, 0x4, 0x7, 0xeb02, 0x10, 0x5, 0xfda, 0x3, 0x2, 0xc3b, 0x9, 0x9, 0x4000, 0x5, 0xf, 0x18000, 0x8, 0xb74, 0x2, 0xa, 0x4, 0xffff, 0x6, 0x8, 0x10000, 0x80, 0x9be, 0x8bb2, 0xffff, 0xe, 0x2, 0x5, 0x4, 0xb0c, 0x400, 0x8, 0x2, 0xd5b3, 0x520000, 0x0, 0x8, 0xa8a, 0x80000000, 0x2, 0x7f, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1ff, 0x3f0, 0x100, 0x2, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x98d, 0xe3d, 0x101, 0x7, 0x5, 0xffffffff, 0x1, 0x100, 0x8, 0x1, 0x6, 0x10, 0x10, 0x7, 0x6, 0x9b9, 0x4edd, 0x9a, 0x0, 0x9, 0x8, 0x7ff80, 0xb574, 0x7d, 0x27d, 0x3, 0x0, 0x5, 0x4, 0x800, 0x9, 0x800, 0xf8, 0x5, 0x10001, 0x0, 0x1, 0x1, 0x8f, 0xf, 0x9, 0x6000000, 0xb, 0x6, 0x9]}]}}]}, 0x45c}}, 0x44080) socket(0x10, 0x3, 0x0) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000008c0)={@val={0x0, 0x8863}, @val={0x1, 0x0, 0x200, 0x9, 0x1, 0x7ea}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@val={0x88a8, 0x5}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "22cc51", 0x348, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @private0, {[@srh={0x6, 0x8, 0x4, 0x4, 0x0, 0x68, 0xfffe, [@empty, @empty, @empty, @mcast1]}, @fragment={0x2b, 0x0, 0x2, 0x1, 0x0, 0x3, 0x66}, @fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x66}, @dstopts={0x88, 0x23, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @pad1, @ra={0x5, 0x2, 0x8da}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @generic={0x9, 0xfb, "9db8603763cee0af4b4f6b13ed327720f0d9c2f095bfa833fe8cab9ae6bfa17d1f0bfb0ec79ba4ddcebb5dbfbe212db4a833ebee9783cd06fa4acfaf34c437a774b418745b89dda69c32dbb2ed908188a8acf484e5963aa0f40dc39bcf0ea79b268fcdfd47861fe1ef6c045d4202a678336ba1838b0b278e12f39125eb02be5f3e4e886b1397ae19b55a7f41c7b1ff5658413b326378e93da38b2beb9eb883ebd1b64b103bfc99f91e6a44484befe0298cd0e5b03c37cd7795ba7cf16d54cdab3e693dfedcfbc99119a3c319f354630c8e2c287312648ec2cba00555db254e4f008fbe336d525cc373a295972471eee2adb731bc5ab0566d755e6f"}]}, @routing={0x2c, 0xa, 0x0, 0x9, 0x0, [@remote, @remote, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x2f, 0xa, 0x2, 0xc5, 0x0, [@mcast2, @empty, @mcast2, @mcast2, @remote]}, @dstopts={0x3c, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x56, 0x8, [0xcba8, 0x8, 0x3f56000, 0xc, 0xffffffffffffaa57]}}]}, @routing={0x51b1baa92c0814da, 0x8, 0x2, 0x3, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast1]}, @routing={0x62, 0x2, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x3b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x1, [0x0]}]}], @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7fff, 0x0, 0x1, 0x200, 0x2, 0x1, 0x4e20, 0x4e24, 0x1, 0x0, 0x0, 0x0, 0x1}, [{0x3, 0x6, 0x8000, 0xffffffff, 0x6a1, 0x520, 0x6, 0x9}, {0x40, 0xffffffff, 0x3, 0x3, 0x3ff, 0x8f, 0xe, 0x2}]}}}}}}}, 0x394) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.959568188s ago: executing program 5 (id=1612): syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x20c810, &(0x7f00000001c0)=ANY=[], 0xd, 0x2bd, &(0x7f0000000ec0)="$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") syz_open_procfs(0x0, &(0x7f00000010c0)='net/raw6\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x200) sendfile(0xffffffffffffffff, r1, 0x0, 0xe065) 1.928120908s ago: executing program 5 (id=1613): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffe6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000069500000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x8540, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r12}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) iopl(0x3) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xffffffffffffffc1, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x3, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.539738808s ago: executing program 4 (id=1620): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.082264589s ago: executing program 4 (id=1630): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f00000004c0), 0x1, 0x573, &(0x7f0000001140)="$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") chdir(&(0x7f0000000080)='./file0\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000002700)=ANY=[], 0xe01, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052fa, 0x0, 0x0, 0xd}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="78020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x278}, 0x1, 0x0, 0x0, 0x8080}, 0x8d) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdc, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0x4, 0x8}, {0x2, 0xa18b0e1}]}, 0x14, 0x0) 1.081595049s ago: executing program 1 (id=1632): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r3) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000180)=0xa98) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x8000000, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0x4}, 0x68) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000780)={0x0, 0x2, 0x10, 0x2, 0x8}, &(0x7f00000007c0)=0x18) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7", 0xd0}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e40bd678517886e0c9ec482da71", 0x50}], 0x5}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6b", 0x2a}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc", 0x39}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0xc0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r7, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 705.392379ms ago: executing program 2 (id=1634): syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) syz_open_procfs(0x0, &(0x7f00000010c0)='net/raw6\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x200) sendfile(r0, r2, 0x0, 0xe065) 703.836189ms ago: executing program 4 (id=1635): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x400002}}]}, 0x2, 0x45c, &(0x7f0000000a40)="$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") 703.209589ms ago: executing program 2 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0xb00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x8000, 0x14, @empty, @private1, 0x7, 0x700, 0x281}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x1000000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}]}}]}, 0x48}}, 0x0) get_mempolicy(&(0x7f0000001440), &(0x7f0000001480), 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x3c) socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xdb, 0x800, 0x3, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x20, 0x48f, 0xfffffff8}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 651.422369ms ago: executing program 0 (id=1637): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000006815b5487e5e91c27d1c02998b9ac340674b9f18ee1eac73de6a4f7b0674067aebd163007a0b0b0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x400002}}]}, 0x2, 0x45c, &(0x7f0000000a40)="$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") 580.995409ms ago: executing program 1 (id=1638): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x1000}) r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0xfffe, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="ac", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x4008800) 553.12926ms ago: executing program 1 (id=1639): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x20, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 545.783789ms ago: executing program 2 (id=1640): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4004550c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 501.464529ms ago: executing program 4 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x6, r0}, 0x38) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x40047452, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001439) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f0000000240)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close(r2) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000280)="fa8e", 0x2}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 487.550819ms ago: executing program 1 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a141000000000000000000008000400", @ANYRES32=r3], 0x3c}}, 0xc010) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x4000000000010046) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095adc0b93898e7f5d8a5f54e06c594e08b263594dc381c185e72a7a85ca1dde61b6ed5ba1eca3782"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x800448f0, &(0x7f0000000040)={0x1, 0x3, "6d6cbd", 0x3, 0x4}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030030000000600000000032890081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 452.40474ms ago: executing program 0 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "8442a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deb200000000000000000000ac1d00", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000080)=0x13) r4 = syz_io_uring_setup(0x6908, &(0x7f00000006c0)={0x0, 0x2, 0x10100}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x339}, &(0x7f0000000000)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000140)={0xff02, 0x4, 0x0, 0x3, 0x0, "f78c5603939fd820"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0xa) syz_emit_ethernet(0x32, &(0x7f0000000340)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x4}, 0x18) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ptrace$ARCH_SET_GS(0x1e, r8, 0x0, 0x1001) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") socket$inet(0x2, 0x2, 0x8) 369.10816ms ago: executing program 4 (id=1644): socket(0x10, 0x803, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x200]}, 0x8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x1, 0x3, 0x4, 0xe, 0x20792e8b, 0x0, 0x8, 0xffff, 0x80, 0x40, 0x4, 0x3, 0x15, 0x8, 0x80000001, 0x7, 0x13a, 0x1, 0x7f, 0x97d4, 0x9, 0x2, 0x488, 0x4, 0x4, 0x7bff, 0x4, 0x1, 0x5, 0x200, 0x5, 0x7, 0x9, 0x4e45, 0x1, 0x0, 0x8, 0x9, 0x4, 0x6, 0x4, 0x3, 0x5, 0xd97, 0x0, 0x10000, 0x7f, 0xffffffff, 0x3b, 0xb, 0x5, 0x0, 0x9, 0x4, 0xb7, 0xf86, 0x2, 0x6, 0x6, 0xa, 0x1000, 0x4, 0x3, 0xe, 0xaba, 0x32e, 0x400, 0x9, 0x2, 0x5, 0x7fff, 0x2, 0x3, 0x1000, 0x5, 0x7, 0xffffffff, 0x400, 0x3, 0x4, 0x66, 0x1, 0x1, 0x17dc6cc9, 0x0, 0x9, 0x2, 0xffff, 0x3, 0x1, 0x2, 0x8, 0x4, 0x4, 0x9, 0xffffffff, 0x7f, 0x2, 0x0, 0x1, 0x4b9, 0x9, 0x484f, 0x10, 0x40, 0x42e, 0x80000001, 0x3, 0x6, 0x9, 0x7, 0x4, 0x3, 0xbe, 0x8, 0x1, 0x38a, 0x7, 0x6, 0xd, 0x1, 0x6, 0x1, 0xd823, 0xdb60, 0xd27a, 0x2, 0xdbba, 0x80000000, 0x7ff, 0x4, 0xfff, 0x1, 0x4, 0xffff9628, 0x800, 0x100, 0x8c, 0x1, 0x7b, 0x2af0, 0x9, 0x3, 0xf, 0xfc80, 0x7, 0x8000, 0x8, 0x6, 0x4, 0x7, 0xeb02, 0x10, 0x5, 0xfda, 0x3, 0x2, 0xc3b, 0x9, 0x9, 0x4000, 0x5, 0xf, 0x18000, 0x8, 0xb74, 0x2, 0xa, 0x4, 0xffff, 0x6, 0x8, 0x10000, 0x80, 0x9be, 0x8bb2, 0xffff, 0xe, 0x2, 0x5, 0x4, 0xb0c, 0x400, 0x8, 0x2, 0xd5b3, 0x520000, 0x0, 0x8, 0xa8a, 0x80000000, 0x2, 0x7f, 0x4, 0x4, 0x3, 0x0, 0x3, 0x1, 0x1, 0x1ff, 0x3f0, 0x100, 0x2, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x98d, 0xe3d, 0x101, 0x7, 0x5, 0xffffffff, 0x1, 0x100, 0x8, 0x1, 0x6, 0x10, 0x10, 0x7, 0x6, 0x9b9, 0x4edd, 0x9a, 0x0, 0x9, 0x8, 0x7ff80, 0xb574, 0x7d, 0x27d, 0x3, 0x0, 0x5, 0x4, 0x800, 0x9, 0x800, 0xf8, 0x5, 0x10001, 0x0, 0x1, 0x1, 0x8f, 0xf, 0x9, 0x6000000, 0xb, 0x6, 0x9]}]}}]}, 0x45c}}, 0x44080) socket(0x10, 0x3, 0x0) dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="019800000000000020001280"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000008c0)={@val={0x0, 0x8863}, @val={0x1, 0x0, 0x200, 0x9, 0x1, 0x7ea}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@val={0x88a8, 0x5}, {0x8100, 0x1, 0x0, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x2, 0x6, "22cc51", 0x348, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @private0, {[@srh={0x6, 0x8, 0x4, 0x4, 0x0, 0x68, 0xfffe, [@empty, @empty, @empty, @mcast1]}, @fragment={0x2b, 0x0, 0x2, 0x1, 0x0, 0x3, 0x66}, @fragment={0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x66}, @dstopts={0x88, 0x23, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @pad1, @ra={0x5, 0x2, 0x8da}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @generic={0x9, 0xfb, "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"}]}, @routing={0x2c, 0xa, 0x0, 0x9, 0x0, [@remote, @remote, @remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @routing={0x2f, 0xa, 0x2, 0xc5, 0x0, [@mcast2, @empty, @mcast2, @mcast2, @remote]}, @dstopts={0x3c, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x56, 0x8, [0xcba8, 0x8, 0x3f56000, 0xc, 0xffffffffffffaa57]}}]}, @routing={0x51b1baa92c0814da, 0x8, 0x2, 0x3, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @mcast1]}, @routing={0x62, 0x2, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x3b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x1, [0x0]}]}], @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x7fff, 0x0, 0x1, 0x200, 0x2, 0x1, 0x4e20, 0x4e24, 0x1, 0x0, 0x0, 0x0, 0x1}, [{0x3, 0x6, 0x8000, 0xffffffff, 0x6a1, 0x520, 0x6, 0x9}, {0x40, 0xffffffff, 0x3, 0x3, 0x3ff, 0x8f, 0xe, 0x2}]}}}}}}}, 0x394) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d8005000100000000000500040000000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 368.76357ms ago: executing program 4 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x400002}}]}, 0x2, 0x45c, &(0x7f0000000a40)="$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") 364.36343ms ago: executing program 0 (id=1646): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f00000008c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x73b, 0x200}, 0x280, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x180, 0xffffff80, 0x178, 0x0, 0x178, 0x2a0, 0x230, 0x258, 0x2a0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x138, 0x180, 0x12, {0x959f1400, 0x28f5c}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}, @common=@unspec=@limit={{0x48}, {0x0, 0x412}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'hsr0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x50) lsm_list_modules(0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x40000000009}, 0x18) r2 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2f5}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x0}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000002c0)={[{@errors_continue}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x563, &(0x7f00000021c0)="$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") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) ioctl$TCXONC(r5, 0x540a, 0x2) 130.78288ms ago: executing program 2 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0xff00, 0x7f, 0x0, 0x0, 0x0, 0xffffff7f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 130.27655ms ago: executing program 1 (id=1648): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r0}, 0x18) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff2}, {0x3, 0xfff2}}}, 0x24}}, 0x0) unlink(0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0x10}}}, 0x24}}, 0x801) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000002100)=""/4099, 0x1003}], 0x1, 0x50, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x71}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x24}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) 98.90139ms ago: executing program 2 (id=1649): socket$nl_generic(0x11, 0x3, 0x10) (async) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x36a, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x334, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x19, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac"}, {0x1f, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bc"}]}}}}}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000380)="034dfaee78ee892ee39a6115575c25e539a54190e3844922e0e11939bd08843952", &(0x7f0000000280)=""/155}, 0x19) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@data_journal}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") (async) creat(0x0, 0x0) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x2}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x40800000000003}, 0x100000, 0x7f, 0x3, 0x1, 0x0, 0x8, 0xbffc, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x165) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0x4c01, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async, rerun: 32) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x163345) (rerun: 32) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) 9.0492ms ago: executing program 1 (id=1650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0xb00, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x8000, 0x14, @empty, @private1, 0x7, 0x700, 0x281}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x1000000, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x1000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfff}]}}]}, 0x48}}, 0x0) get_mempolicy(&(0x7f0000001440), &(0x7f0000001480), 0x4, &(0x7f0000ffb000/0x3000)=nil, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x3c) socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xdb, 0x800, 0x3, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x20, 0x48f, 0xfffffff8}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 8.70368ms ago: executing program 0 (id=1651): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b00), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x400002}}]}, 0x2, 0x45c, &(0x7f0000000a40)="$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") 0s ago: executing program 2 (id=1652): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000280)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): noring removed orlov option [ 126.565471][ T8058] loop2: detected capacity change from 0 to 256 [ 126.585091][ T8060] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.587659][ T8050] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 126.613715][ T8050] EXT4-fs (loop4): too many log groups per flexible block group [ 126.621463][ T8050] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 126.637713][ T8050] EXT4-fs (loop4): mount failed [ 126.648316][ T8050] netlink: 'syz.4.1181': attribute type 4 has an invalid length. [ 126.668585][ T8066] loop1: detected capacity change from 0 to 512 [ 126.689698][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 126.708081][ T8076] Unknown options in mask 5 [ 126.712646][ T8066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.728814][ T8066] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.822061][ T8085] FAULT_INJECTION: forcing a failure. [ 126.822061][ T8085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.835235][ T8085] CPU: 0 UID: 0 PID: 8085 Comm: syz.2.1194 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 126.846013][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.856061][ T8085] Call Trace: [ 126.859370][ T8085] [ 126.862298][ T8085] dump_stack_lvl+0xf2/0x150 [ 126.866952][ T8085] dump_stack+0x15/0x1a [ 126.871160][ T8085] should_fail_ex+0x223/0x230 [ 126.875928][ T8085] should_fail+0xb/0x10 [ 126.880078][ T8085] should_fail_usercopy+0x1a/0x20 [ 126.885204][ T8085] strncpy_from_user+0x25/0x210 [ 126.890051][ T8085] ? bpf_trace_run3+0x12b/0x1d0 [ 126.894911][ T8085] ? strlen+0x19/0x30 [ 126.898976][ T8085] strncpy_from_user_nofault+0x66/0xe0 [ 126.904483][ T8085] bpf_probe_read_compat_str+0xb3/0x130 [ 126.910058][ T8085] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 126.915530][ T8085] bpf_trace_run3+0x10c/0x1d0 [ 126.920224][ T8085] ? __kfree_skb+0x102/0x150 [ 126.924834][ T8085] ? __kfree_skb+0x102/0x150 [ 126.929408][ T8085] ? __kfree_skb+0x102/0x150 [ 126.933980][ T8085] __traceiter_kmem_cache_free+0x33/0x50 [ 126.939601][ T8085] ? __kfree_skb+0x102/0x150 [ 126.944178][ T8085] kmem_cache_free+0x237/0x2d0 [ 126.948926][ T8085] ? nlmon_xmit+0x51/0x60 [ 126.953238][ T8085] __kfree_skb+0x102/0x150 [ 126.957682][ T8085] consume_skb+0x49/0x160 [ 126.962007][ T8085] nlmon_xmit+0x51/0x60 [ 126.966215][ T8085] dev_hard_start_xmit+0x119/0x3f0 [ 126.971359][ T8085] __dev_queue_xmit+0x100a/0x2090 [ 126.976371][ T8085] ? bsearch+0x98/0xc0 [ 126.980445][ T8085] ? __dev_queue_xmit+0x186/0x2090 [ 126.985646][ T8085] ? __skb_clone+0x2d0/0x2f0 [ 126.990229][ T8085] __netlink_deliver_tap+0x3be/0x4f0 [ 126.995599][ T8085] netlink_unicast+0x64a/0x670 [ 127.000407][ T8085] netlink_sendmsg+0x5cc/0x6e0 [ 127.005167][ T8085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.010447][ T8085] __sock_sendmsg+0x140/0x180 [ 127.015120][ T8085] ____sys_sendmsg+0x312/0x410 [ 127.019878][ T8085] __sys_sendmsg+0x19d/0x230 [ 127.024554][ T8085] __x64_sys_sendmsg+0x46/0x50 [ 127.029393][ T8085] x64_sys_call+0x2734/0x2dc0 [ 127.034060][ T8085] do_syscall_64+0xc9/0x1c0 [ 127.038554][ T8085] ? clear_bhb_loop+0x55/0xb0 [ 127.043219][ T8085] ? clear_bhb_loop+0x55/0xb0 [ 127.047891][ T8085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.053921][ T8085] RIP: 0033:0x7fd92b2aff19 [ 127.058327][ T8085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.077928][ T8085] RSP: 002b:00007fd929927058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.086330][ T8085] RAX: ffffffffffffffda RBX: 00007fd92b475fa0 RCX: 00007fd92b2aff19 [ 127.094314][ T8085] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 127.102273][ T8085] RBP: 00007fd9299270a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.110234][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.118195][ T8085] R13: 0000000000000000 R14: 00007fd92b475fa0 R15: 00007ffc3addc1c8 [ 127.126165][ T8085] [ 127.132149][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 127.154041][ T8087] loop2: detected capacity change from 0 to 512 [ 127.160830][ T8087] EXT4-fs: Ignoring removed oldalloc option [ 127.177761][ T8090] loop5: detected capacity change from 0 to 256 [ 127.200037][ T8087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1195: Parent and EA inode have the same ino 15 [ 127.205132][ T8094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 127.220466][ T8087] EXT4-fs (loop2): Remounting filesystem read-only [ 127.227137][ T8087] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 127.245629][ T8087] EXT4-fs (loop2): 1 orphan inode deleted [ 127.257975][ T8087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.270272][ T8087] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 127.277281][ T8087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.359203][ T8107] loop4: detected capacity change from 0 to 512 [ 127.366571][ T8107] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.377487][ T8111] FAULT_INJECTION: forcing a failure. [ 127.377487][ T8111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.390678][ T8111] CPU: 1 UID: 0 PID: 8111 Comm: syz.2.1205 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 127.401362][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.411420][ T8111] Call Trace: [ 127.414708][ T8111] [ 127.417629][ T8111] dump_stack_lvl+0xf2/0x150 [ 127.422226][ T8111] dump_stack+0x15/0x1a [ 127.426422][ T8111] should_fail_ex+0x223/0x230 [ 127.431098][ T8111] should_fail+0xb/0x10 [ 127.435251][ T8111] should_fail_usercopy+0x1a/0x20 [ 127.440317][ T8111] _copy_from_user+0x1e/0xb0 [ 127.445063][ T8111] simple_transaction_get+0xed/0x120 [ 127.450352][ T8111] selinux_transaction_write+0x86/0x100 [ 127.455964][ T8111] ? __pfx_selinux_transaction_write+0x10/0x10 [ 127.462132][ T8111] vfs_write+0x281/0x920 [ 127.466436][ T8111] ? putname+0xcf/0xf0 [ 127.470496][ T8111] ? __fget_files+0x17c/0x1c0 [ 127.475293][ T8111] ksys_write+0xe8/0x1b0 [ 127.479540][ T8111] __x64_sys_write+0x42/0x50 [ 127.484132][ T8111] x64_sys_call+0x287e/0x2dc0 [ 127.488977][ T8111] do_syscall_64+0xc9/0x1c0 [ 127.493469][ T8111] ? clear_bhb_loop+0x55/0xb0 [ 127.498145][ T8111] ? clear_bhb_loop+0x55/0xb0 [ 127.502882][ T8111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.508778][ T8111] RIP: 0033:0x7fd92b2aff19 [ 127.513182][ T8111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.532780][ T8111] RSP: 002b:00007fd929927058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.541241][ T8111] RAX: ffffffffffffffda RBX: 00007fd92b475fa0 RCX: 00007fd92b2aff19 [ 127.549313][ T8111] RDX: 0000000000000056 RSI: 00000000200004c0 RDI: 0000000000000005 [ 127.557287][ T8111] RBP: 00007fd9299270a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.565317][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.573275][ T8111] R13: 0000000000000000 R14: 00007fd92b475fa0 R15: 00007ffc3addc1c8 [ 127.581316][ T8111] [ 127.587188][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.595774][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.604883][ T8107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.659255][ T8116] Unknown options in mask 5 [ 127.664331][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.677195][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.684611][ T8118] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 127.716345][ T8120] loop4: detected capacity change from 0 to 512 [ 127.731076][ T8120] EXT4-fs: Ignoring removed orlov option [ 127.749202][ T8120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 127.759234][ T8120] EXT4-fs (loop4): too many log groups per flexible block group [ 127.767027][ T8120] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 127.780491][ T8120] EXT4-fs (loop4): mount failed [ 127.789633][ T8122] loop1: detected capacity change from 0 to 512 [ 127.804825][ T8120] netlink: 'syz.4.1208': attribute type 4 has an invalid length. [ 127.821048][ T8130] loop2: detected capacity change from 0 to 512 [ 127.829966][ T8122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.842699][ T8122] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.854303][ T8130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.863812][ T8122] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1209: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 127.883570][ T8130] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.895163][ T8122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 127.902241][ T8130] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1212: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 127.904197][ T8122] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1209: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 127.930956][ T8130] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 127.938055][ T8140] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1209: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 127.945987][ T8130] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1212: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 127.963466][ T8122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 127.979390][ T8130] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 127.988735][ T8141] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1212: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 128.005721][ T8140] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 128.016798][ T8122] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1209: bg 0: block 18: invalid block bitmap [ 128.025090][ T8140] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1209: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 128.045022][ T8141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 128.054901][ T8130] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1212: bg 0: block 18: invalid block bitmap [ 128.064582][ T8141] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1212: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 128.072175][ T8140] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 128.090502][ T8141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 128.107766][ T8130] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1212: Failed to acquire dquot type 1 [ 128.117802][ T8141] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1212: Failed to acquire dquot type 1 [ 128.120086][ T8122] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1209: Failed to acquire dquot type 1 [ 128.130686][ T8140] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1209: Failed to acquire dquot type 1 [ 128.208986][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.222080][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.302286][ T8159] loop2: detected capacity change from 0 to 512 [ 128.320939][ T8159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.333787][ T8159] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.370168][ T8167] loop1: detected capacity change from 0 to 512 [ 128.380454][ T8167] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.408081][ T8167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.435735][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.479022][ T8170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'. [ 128.556612][ T8174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1224'. [ 128.581926][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.590546][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.600082][ T8176] FAULT_INJECTION: forcing a failure. [ 128.600082][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.613228][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.4.1225 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 128.623912][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.634040][ T8176] Call Trace: [ 128.637313][ T8176] [ 128.640286][ T8176] dump_stack_lvl+0xf2/0x150 [ 128.644972][ T8176] dump_stack+0x15/0x1a [ 128.649138][ T8176] should_fail_ex+0x223/0x230 [ 128.653900][ T8176] should_fail+0xb/0x10 [ 128.658086][ T8176] should_fail_usercopy+0x1a/0x20 [ 128.663095][ T8176] _copy_from_user+0x1e/0xb0 [ 128.667674][ T8176] copy_from_sockptr_offset+0x6b/0xb0 [ 128.673083][ T8176] do_ipt_set_ctl+0x69b/0x8b0 [ 128.677748][ T8176] ? tcp_release_cb+0xfe/0x380 [ 128.682501][ T8176] nf_setsockopt+0x195/0x1b0 [ 128.687133][ T8176] ip_setsockopt+0xea/0x100 [ 128.691674][ T8176] ipv6_setsockopt+0xef/0x130 [ 128.696382][ T8176] tcp_setsockopt+0x93/0xb0 [ 128.700898][ T8176] sock_common_setsockopt+0x64/0x80 [ 128.706084][ T8176] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 128.712123][ T8176] __sys_setsockopt+0x187/0x200 [ 128.716973][ T8176] __x64_sys_setsockopt+0x66/0x80 [ 128.722055][ T8176] x64_sys_call+0x282e/0x2dc0 [ 128.726733][ T8176] do_syscall_64+0xc9/0x1c0 [ 128.731311][ T8176] ? clear_bhb_loop+0x55/0xb0 [ 128.735985][ T8176] ? clear_bhb_loop+0x55/0xb0 [ 128.740678][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.746597][ T8176] RIP: 0033:0x7f0b996dff19 [ 128.751017][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.770663][ T8176] RSP: 002b:00007f0b97d57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.779064][ T8176] RAX: ffffffffffffffda RBX: 00007f0b998a5fa0 RCX: 00007f0b996dff19 [ 128.787118][ T8176] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000008 [ 128.795151][ T8176] RBP: 00007f0b97d570a0 R08: 0000000000000248 R09: 0000000000000000 [ 128.803138][ T8176] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.811109][ T8176] R13: 0000000000000000 R14: 00007f0b998a5fa0 R15: 00007ffc16214748 [ 128.819170][ T8176] [ 128.911968][ T8180] loop0: detected capacity change from 0 to 128 [ 128.930850][ T8180] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.943476][ T8180] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.977554][ T8180] netlink: 'syz.0.1226': attribute type 4 has an invalid length. [ 128.990065][ T8180] netlink: 'syz.0.1226': attribute type 4 has an invalid length. [ 129.010740][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.143375][ T8196] loop5: detected capacity change from 0 to 8192 [ 129.214415][ T8202] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.223233][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.250877][ T8204] FAULT_INJECTION: forcing a failure. [ 129.250877][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.255105][ T8206] Unknown options in mask 5 [ 129.264006][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: syz.5.1238 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 129.279209][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.289275][ T8204] Call Trace: [ 129.292553][ T8204] [ 129.295536][ T8204] dump_stack_lvl+0xf2/0x150 [ 129.300204][ T8204] dump_stack+0x15/0x1a [ 129.304438][ T8204] should_fail_ex+0x223/0x230 [ 129.309109][ T8204] should_fail+0xb/0x10 [ 129.313294][ T8204] should_fail_usercopy+0x1a/0x20 [ 129.318348][ T8204] _copy_to_user+0x20/0xa0 [ 129.322759][ T8204] simple_read_from_buffer+0xa0/0x110 [ 129.328128][ T8204] proc_fail_nth_read+0xf9/0x140 [ 129.333141][ T8204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.338753][ T8204] vfs_read+0x1a2/0x700 [ 129.342905][ T8204] ? __rcu_read_unlock+0x4e/0x70 [ 129.347861][ T8204] ? __fget_files+0x17c/0x1c0 [ 129.352537][ T8204] ksys_read+0xe8/0x1b0 [ 129.356725][ T8204] __x64_sys_read+0x42/0x50 [ 129.361298][ T8204] x64_sys_call+0x2874/0x2dc0 [ 129.366115][ T8204] do_syscall_64+0xc9/0x1c0 [ 129.370672][ T8204] ? clear_bhb_loop+0x55/0xb0 [ 129.375341][ T8204] ? clear_bhb_loop+0x55/0xb0 [ 129.380015][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.386034][ T8204] RIP: 0033:0x7f91f0b5e92c [ 129.390459][ T8204] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.410064][ T8204] RSP: 002b:00007f91ef1d1050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.418470][ T8204] RAX: ffffffffffffffda RBX: 00007f91f0d25fa0 RCX: 00007f91f0b5e92c [ 129.426485][ T8204] RDX: 000000000000000f RSI: 00007f91ef1d10b0 RDI: 0000000000000005 [ 129.434465][ T8204] RBP: 00007f91ef1d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.442557][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.450553][ T8204] R13: 0000000000000000 R14: 00007f91f0d25fa0 R15: 00007ffe46aeb798 [ 129.458627][ T8204] [ 129.493031][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 129.493046][ T29] audit: type=1326 audit(1733822069.140:11612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.508089][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.522843][ T29] audit: type=1326 audit(1733822069.140:11613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.541658][ T8214] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8214 comm=syz.0.1235 [ 129.554859][ T29] audit: type=1326 audit(1733822069.140:11614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.581371][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.590698][ T29] audit: type=1326 audit(1733822069.140:11615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.621973][ T29] audit: type=1326 audit(1733822069.140:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.645635][ T29] audit: type=1326 audit(1733822069.140:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.669192][ T29] audit: type=1326 audit(1733822069.140:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.693174][ T29] audit: type=1326 audit(1733822069.140:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.716687][ T29] audit: type=1326 audit(1733822069.140:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.740453][ T29] audit: type=1326 audit(1733822069.140:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8210 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b996dff19 code=0x7ffc0000 [ 129.767032][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1242'. [ 129.792407][ T8229] xt_TPROXY: Can be used only with -p tcp or -p udp [ 129.815852][ T8231] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.835159][ T8233] loop2: detected capacity change from 0 to 512 [ 129.850481][ T8233] EXT4-fs: Ignoring removed orlov option [ 129.869824][ T8233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.882461][ T8237] Unknown options in mask 5 [ 129.897502][ T8233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.908308][ T8233] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1247: bg 0: block 248: padding at end of block bitmap is not set [ 129.923075][ T8233] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1247: Failed to acquire dquot type 1 [ 129.941994][ T8233] EXT4-fs (loop2): 1 truncate cleaned up [ 129.950227][ T8233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.965182][ T8242] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1251'. [ 130.017211][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.064725][ T8246] loop2: detected capacity change from 0 to 512 [ 130.071712][ T8246] EXT4-fs: Ignoring removed orlov option [ 130.085949][ T8244] loop5: detected capacity change from 0 to 512 [ 130.094318][ T8246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 130.103455][ T8246] EXT4-fs (loop2): too many log groups per flexible block group [ 130.111261][ T8246] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 130.125711][ T8246] EXT4-fs (loop2): mount failed [ 130.144547][ T8246] netlink: 'syz.2.1252': attribute type 4 has an invalid length. [ 130.156496][ T8244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.169245][ T8244] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.180965][ T8244] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1253: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 130.198961][ T8244] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 130.208063][ T8244] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1253: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 130.226521][ T8244] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 130.238217][ T8261] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1253: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 130.255176][ T8244] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1253: bg 0: block 18: invalid block bitmap [ 130.280421][ T8267] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 130.290623][ T8244] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1253: Failed to acquire dquot type 1 [ 130.303538][ T8261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 130.307013][ T8270] loop2: detected capacity change from 0 to 512 [ 130.313906][ T8261] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1253: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 130.337370][ T8270] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.346459][ T8270] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 130.364200][ T8273] loop0: detected capacity change from 0 to 256 [ 130.369500][ T8261] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 130.386373][ T8261] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1253: Failed to acquire dquot type 1 [ 130.398192][ T8270] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 130.406471][ T8270] System zones: 0-2, 18-18, 34-34 [ 130.412507][ T8270] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.435940][ T8270] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1260: bg 0: block 18: invalid block bitmap [ 130.449844][ T8270] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 130.458955][ T8270] EXT4-fs (loop2): 1 truncate cleaned up [ 130.459773][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.464961][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.499312][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.533655][ T8282] loop5: detected capacity change from 0 to 512 [ 130.546168][ T8282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.562141][ T8282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.574988][ T8282] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.658323][ T8300] FAULT_INJECTION: forcing a failure. [ 130.658323][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 130.671033][ T8300] CPU: 0 UID: 0 PID: 8300 Comm: syz.2.1273 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 130.673953][ T8302] FAULT_INJECTION: forcing a failure. [ 130.673953][ T8302] name failslab, interval 1, probability 0, space 0, times 0 [ 130.681699][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.704413][ T8300] Call Trace: [ 130.707752][ T8300] [ 130.710670][ T8300] dump_stack_lvl+0xf2/0x150 [ 130.715259][ T8300] dump_stack+0x15/0x1a [ 130.719420][ T8300] should_fail_ex+0x223/0x230 [ 130.724197][ T8300] should_failslab+0x8f/0xb0 [ 130.728828][ T8300] kmem_cache_alloc_noprof+0x52/0x320 [ 130.734239][ T8300] ? skb_clone+0x154/0x1f0 [ 130.738647][ T8300] skb_clone+0x154/0x1f0 [ 130.742955][ T8300] __netlink_deliver_tap+0x2bd/0x4f0 [ 130.748238][ T8300] netlink_unicast+0x64a/0x670 [ 130.753069][ T8300] netlink_sendmsg+0x5cc/0x6e0 [ 130.757852][ T8300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.763126][ T8300] __sock_sendmsg+0x140/0x180 [ 130.767797][ T8300] ____sys_sendmsg+0x312/0x410 [ 130.772551][ T8300] __sys_sendmsg+0x19d/0x230 [ 130.777137][ T8300] __x64_sys_sendmsg+0x46/0x50 [ 130.781887][ T8300] x64_sys_call+0x2734/0x2dc0 [ 130.786597][ T8300] do_syscall_64+0xc9/0x1c0 [ 130.791087][ T8300] ? clear_bhb_loop+0x55/0xb0 [ 130.795754][ T8300] ? clear_bhb_loop+0x55/0xb0 [ 130.800419][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.806440][ T8300] RIP: 0033:0x7fd92b2aff19 [ 130.810842][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.830438][ T8300] RSP: 002b:00007fd929927058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.838906][ T8300] RAX: ffffffffffffffda RBX: 00007fd92b475fa0 RCX: 00007fd92b2aff19 [ 130.846942][ T8300] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 130.854923][ T8300] RBP: 00007fd9299270a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.862891][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.870910][ T8300] R13: 0000000000000000 R14: 00007fd92b475fa0 R15: 00007ffc3addc1c8 [ 130.878939][ T8300] [ 130.881943][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.1.1271 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 130.892632][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.897928][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.902758][ T8302] Call Trace: [ 130.902767][ T8302] [ 130.902775][ T8302] dump_stack_lvl+0xf2/0x150 [ 130.922565][ T8302] dump_stack+0x15/0x1a [ 130.926766][ T8302] should_fail_ex+0x223/0x230 [ 130.931435][ T8302] should_failslab+0x8f/0xb0 [ 130.936022][ T8302] kmem_cache_alloc_node_noprof+0x59/0x320 [ 130.941819][ T8302] ? __alloc_skb+0x10b/0x310 [ 130.946466][ T8302] __alloc_skb+0x10b/0x310 [ 130.950914][ T8302] alloc_skb_with_frags+0x80/0x450 [ 130.956014][ T8302] ? __rcu_read_unlock+0x4e/0x70 [ 130.960947][ T8302] ? avc_has_perm_noaudit+0x1cc/0x210 [ 130.966318][ T8302] ? ref_tracker_alloc+0x1f5/0x2f0 [ 130.971425][ T8302] sock_alloc_send_pskb+0x435/0x4f0 [ 130.976746][ T8302] ? lock_sock_nested+0x10f/0x140 [ 130.981846][ T8302] ? __rcu_read_unlock+0x4e/0x70 [ 130.986779][ T8302] raw_sendmsg+0x1a6/0x4f0 [ 130.991190][ T8302] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 130.997239][ T8302] ieee802154_sock_sendmsg+0x4e/0x60 [ 131.002516][ T8302] __sock_sendmsg+0x140/0x180 [ 131.007243][ T8302] ____sys_sendmsg+0x312/0x410 [ 131.012074][ T8302] __sys_sendmsg+0x19d/0x230 [ 131.016756][ T8302] __x64_sys_sendmsg+0x46/0x50 [ 131.021579][ T8302] x64_sys_call+0x2734/0x2dc0 [ 131.026316][ T8302] do_syscall_64+0xc9/0x1c0 [ 131.030871][ T8302] ? clear_bhb_loop+0x55/0xb0 [ 131.035612][ T8302] ? clear_bhb_loop+0x55/0xb0 [ 131.040285][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.046255][ T8302] RIP: 0033:0x7f665bd0ff19 [ 131.050657][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.070325][ T8302] RSP: 002b:00007f665a381058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.078801][ T8302] RAX: ffffffffffffffda RBX: 00007f665bed5fa0 RCX: 00007f665bd0ff19 [ 131.086761][ T8302] RDX: 0000000000000080 RSI: 0000000020000100 RDI: 0000000000000004 [ 131.094722][ T8302] RBP: 00007f665a3810a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.102693][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.110703][ T8302] R13: 0000000000000000 R14: 00007f665bed5fa0 R15: 00007ffdf7b9e1c8 [ 131.118710][ T8302] [ 131.166460][ T8310] loop1: detected capacity change from 0 to 512 [ 131.188823][ T8310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.204512][ T8304] loop5: detected capacity change from 0 to 512 [ 131.210922][ T8310] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.260826][ T8317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1278'. [ 131.274068][ T8317] loop2: detected capacity change from 0 to 512 [ 131.319857][ T8317] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.320913][ T8304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.335258][ T8317] EXT4-fs (loop2): mount failed [ 131.347182][ T8304] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.380463][ T8304] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1274: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 131.450238][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1275'. [ 131.772605][ T8335] loop2: detected capacity change from 0 to 512 [ 131.806473][ T8335] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.903300][ T8335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.087497][ T8343] loop4: detected capacity change from 0 to 512 [ 132.097202][ T8343] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 132.132663][ T8343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.188674][ T8349] loop0: detected capacity change from 0 to 2048 [ 132.197563][ T8349] EXT4-fs (loop0): failed to initialize system zone (-117) [ 132.205376][ T8349] EXT4-fs (loop0): mount failed [ 132.358994][ T8304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.368227][ T8326] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1274: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 132.397817][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.414154][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.478719][ T8304] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1274: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 132.545589][ T8304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.596213][ T8326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.616977][ T8363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8363 comm=syz.4.1290 [ 132.648324][ T8326] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1274: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 132.703212][ T8304] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1274: bg 0: block 18: invalid block bitmap [ 132.731709][ T8326] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 132.780303][ T8304] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1274: Failed to acquire dquot type 1 [ 132.793694][ T8369] loop0: detected capacity change from 0 to 512 [ 132.820119][ T8369] EXT4-fs: Ignoring removed orlov option [ 132.835438][ T8326] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1274: Failed to acquire dquot type 1 [ 132.890052][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.899518][ T8369] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 132.916212][ T8369] EXT4-fs (loop0): too many log groups per flexible block group [ 132.924006][ T8369] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 132.934661][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.976106][ T8369] EXT4-fs (loop0): mount failed [ 133.043748][ T8369] netlink: 'syz.0.1296': attribute type 4 has an invalid length. [ 133.072231][ T8385] loop5: detected capacity change from 0 to 1024 [ 133.120836][ T8385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.198457][ T8396] loop0: detected capacity change from 0 to 256 [ 133.265302][ T8393] loop2: detected capacity change from 0 to 8192 [ 133.280073][ T8401] loop1: detected capacity change from 0 to 512 [ 133.345328][ T8385] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 133.362591][ T8385] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 133.374894][ T8385] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.374894][ T8385] [ 133.384633][ T8385] EXT4-fs (loop5): Total free blocks count 0 [ 133.390664][ T8385] EXT4-fs (loop5): Free/Dirty block details [ 133.396574][ T8385] EXT4-fs (loop5): free_blocks=68451041280 [ 133.402442][ T8385] EXT4-fs (loop5): dirty_blocks=16 [ 133.407643][ T8385] EXT4-fs (loop5): Block reservation details [ 133.413711][ T8385] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 133.427443][ T8401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.441160][ T8401] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.558307][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.570354][ T8434] loop0: detected capacity change from 0 to 512 [ 133.597259][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1309'. [ 133.624377][ T8438] loop5: detected capacity change from 0 to 512 [ 133.631144][ T8438] EXT4-fs: Ignoring removed orlov option [ 133.655587][ T8434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.669094][ T8434] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.690482][ T8438] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 133.698682][ T8438] EXT4-fs (loop5): too many log groups per flexible block group [ 133.706363][ T8438] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 133.713382][ T8438] EXT4-fs (loop5): mount failed [ 133.771422][ T8434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1318'. [ 133.823881][ T8449] loop4: detected capacity change from 0 to 512 [ 133.836928][ T8449] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.841567][ T8438] netlink: 'syz.5.1317': attribute type 4 has an invalid length. [ 133.867983][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.878731][ T8449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.944461][ T8456] loop0: detected capacity change from 0 to 512 [ 133.955786][ T8456] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.971927][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.031781][ T8456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.099372][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.188101][ T3984] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.228644][ T8474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8474 comm=syz.4.1324 [ 134.255727][ T8478] loop0: detected capacity change from 0 to 512 [ 134.309913][ T8478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.309993][ T8478] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.415823][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'. [ 134.469958][ T8497] SELinux: syz.1.1338 (8497) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 134.499824][ T8500] loop5: detected capacity change from 0 to 512 [ 134.508093][ T8500] EXT4-fs: Ignoring removed oldalloc option [ 134.538944][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.553064][ T8500] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.1340: Parent and EA inode have the same ino 15 [ 134.569209][ T8503] loop1: detected capacity change from 0 to 256 [ 134.576096][ T8500] EXT4-fs (loop5): Remounting filesystem read-only [ 134.582674][ T8500] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 134.638850][ T8500] EXT4-fs (loop5): 1 orphan inode deleted [ 134.672066][ T8500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.697410][ T29] kauditd_printk_skb: 711 callbacks suppressed [ 134.697422][ T29] audit: type=1400 audit(1733822074.340:12322): avc: denied { create } for pid=8510 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.735238][ T8509] loop2: detected capacity change from 0 to 512 [ 134.752584][ T8500] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 134.773286][ T8509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.794536][ T8509] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.796780][ T29] audit: type=1400 audit(1733822074.430:12323): avc: denied { name_bind } for pid=8510 comm="syz.0.1344" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 134.805404][ T8500] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.826066][ T29] audit: type=1400 audit(1733822074.430:12324): avc: denied { node_bind } for pid=8510 comm="syz.0.1344" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 134.826092][ T29] audit: type=1400 audit(1733822074.430:12325): avc: denied { ioctl } for pid=8510 comm="syz.0.1344" path="socket:[18766]" dev="sockfs" ino=18766 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.839173][ T8518] loop1: detected capacity change from 0 to 256 [ 135.015540][ T29] audit: type=1326 audit(1733822074.650:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 135.039877][ T8519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1341'. [ 135.061540][ T29] audit: type=1326 audit(1733822074.650:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 135.085124][ T29] audit: type=1326 audit(1733822074.690:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 135.085247][ T8525] loop5: detected capacity change from 0 to 512 [ 135.108528][ T29] audit: type=1326 audit(1733822074.690:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 135.108594][ T29] audit: type=1326 audit(1733822074.690:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 135.161804][ T29] audit: type=1326 audit(1733822074.690:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8520 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 135.251525][ T8525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.270818][ T8525] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.290404][ T8549] loop0: detected capacity change from 0 to 256 [ 135.302048][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1349'. [ 135.322039][ T3820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.411189][ T8572] loop0: detected capacity change from 0 to 512 [ 135.423956][ T8572] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.445056][ T8574] : renamed from vlan1 (while UP) [ 135.454989][ T8572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.506213][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.560184][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.617256][ T8591] dccp_invalid_packet: P.Data Offset(100) too large [ 135.643397][ T8593] loop4: detected capacity change from 0 to 512 [ 135.669508][ T8593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.691211][ T8593] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.721591][ T8593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 135.757005][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.793340][ T8601] loop4: detected capacity change from 0 to 512 [ 135.807973][ T8601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.828935][ T8601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.845477][ T8601] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.897889][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.968427][ T8609] loop4: detected capacity change from 0 to 512 [ 135.979350][ T8609] EXT4-fs: Ignoring removed oldalloc option [ 135.988665][ T8609] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1373: Parent and EA inode have the same ino 15 [ 136.001373][ T8609] EXT4-fs (loop4): Remounting filesystem read-only [ 136.007920][ T8609] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 136.018022][ T8609] EXT4-fs (loop4): 1 orphan inode deleted [ 136.024227][ T8609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.036386][ T8609] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 136.043161][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.209520][ T8622] loop4: detected capacity change from 0 to 512 [ 136.214168][ T8618] loop5: detected capacity change from 0 to 512 [ 136.225413][ T8618] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.240265][ T8622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.253116][ T8622] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.386720][ T8634] loop0: detected capacity change from 0 to 1024 [ 136.393854][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1376'. [ 136.460433][ T8634] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 136.475391][ T8634] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 136.487770][ T8634] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.487770][ T8634] [ 136.497459][ T8634] EXT4-fs (loop0): Total free blocks count 0 [ 136.503429][ T8634] EXT4-fs (loop0): Free/Dirty block details [ 136.509336][ T8634] EXT4-fs (loop0): free_blocks=68451041280 [ 136.515138][ T8634] EXT4-fs (loop0): dirty_blocks=16 [ 136.520363][ T8634] EXT4-fs (loop0): Block reservation details [ 136.526351][ T8634] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 136.586345][ T8639] loop2: detected capacity change from 0 to 512 [ 136.606942][ T8639] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.616703][ T8648] loop0: detected capacity change from 0 to 512 [ 136.626517][ T8639] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1382: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 136.643741][ T8648] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.644323][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 136.661967][ T8639] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1382: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 136.678682][ T8639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 136.678969][ T8651] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1382: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 136.701386][ T8639] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1382: bg 0: block 18: invalid block bitmap [ 136.717566][ T8651] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 136.717819][ T8639] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1382: Failed to acquire dquot type 1 [ 136.730966][ T8651] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1382: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 136.760270][ T8651] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 136.775538][ T8651] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1382: Failed to acquire dquot type 1 [ 136.802327][ T8655] loop1: detected capacity change from 0 to 1024 [ 136.868137][ T8665] loop1: detected capacity change from 0 to 1024 [ 136.882658][ T8669] loop2: detected capacity change from 0 to 512 [ 136.890452][ T8669] EXT4-fs: Ignoring removed oldalloc option [ 136.898253][ T8669] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1391: Parent and EA inode have the same ino 15 [ 136.911147][ T8669] EXT4-fs (loop2): Remounting filesystem read-only [ 136.917787][ T8669] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 136.928272][ T8669] EXT4-fs (loop2): 1 orphan inode deleted [ 136.934483][ T8669] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 136.936980][ T8665] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 136.956925][ T8665] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 136.969286][ T8665] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.969286][ T8665] [ 136.978973][ T8665] EXT4-fs (loop1): Total free blocks count 0 [ 136.984996][ T8665] EXT4-fs (loop1): Free/Dirty block details [ 136.990929][ T8665] EXT4-fs (loop1): free_blocks=68451041280 [ 136.996800][ T8665] EXT4-fs (loop1): dirty_blocks=16 [ 137.001915][ T8665] EXT4-fs (loop1): Block reservation details [ 137.007955][ T8665] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 137.152635][ T8691] loop4: detected capacity change from 0 to 1024 [ 137.173873][ T8687] loop2: detected capacity change from 0 to 512 [ 137.201583][ T8687] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.202810][ T8700] FAULT_INJECTION: forcing a failure. [ 137.202810][ T8700] name failslab, interval 1, probability 0, space 0, times 0 [ 137.220718][ T8687] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 137.224761][ T8700] CPU: 1 UID: 0 PID: 8700 Comm: syz.5.1400 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 137.242077][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 137.251663][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.251678][ T8700] Call Trace: [ 137.251684][ T8700] [ 137.251691][ T8700] dump_stack_lvl+0xf2/0x150 [ 137.281484][ T8700] dump_stack+0x15/0x1a [ 137.285686][ T8700] should_fail_ex+0x223/0x230 [ 137.290366][ T8700] should_failslab+0x8f/0xb0 [ 137.294958][ T8700] kmem_cache_alloc_noprof+0x52/0x320 [ 137.300324][ T8700] ? skb_clone+0x154/0x1f0 [ 137.304735][ T8700] skb_clone+0x154/0x1f0 [ 137.308975][ T8700] __netlink_deliver_tap+0x2bd/0x4f0 [ 137.314257][ T8700] netlink_unicast+0x64a/0x670 [ 137.319091][ T8700] netlink_sendmsg+0x5cc/0x6e0 [ 137.323850][ T8700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.329190][ T8700] __sock_sendmsg+0x140/0x180 [ 137.333900][ T8700] ____sys_sendmsg+0x312/0x410 [ 137.338660][ T8700] __sys_sendmsg+0x19d/0x230 [ 137.343251][ T8700] __x64_sys_sendmsg+0x46/0x50 [ 137.348028][ T8700] x64_sys_call+0x2734/0x2dc0 [ 137.352697][ T8700] do_syscall_64+0xc9/0x1c0 [ 137.357243][ T8700] ? clear_bhb_loop+0x55/0xb0 [ 137.361911][ T8700] ? clear_bhb_loop+0x55/0xb0 [ 137.366581][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.372998][ T8700] RIP: 0033:0x7f91f0b5ff19 [ 137.377403][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.397131][ T8700] RSP: 002b:00007f91ef1d1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.405586][ T8700] RAX: ffffffffffffffda RBX: 00007f91f0d25fa0 RCX: 00007f91f0b5ff19 [ 137.413548][ T8700] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 137.421523][ T8700] RBP: 00007f91ef1d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 137.429496][ T8700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.437462][ T8700] R13: 0000000000000000 R14: 00007f91f0d25fa0 R15: 00007ffe46aeb798 [ 137.445468][ T8700] [ 137.466904][ T8687] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 137.485208][ T8702] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 137.503617][ T8687] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 137.514819][ T8702] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 137.520421][ T8687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1398: bg 0: block 18: invalid block bitmap [ 137.524959][ T8702] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1398: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 137.537288][ T8687] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1398: Failed to acquire dquot type 1 [ 137.553711][ T8702] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 137.588947][ T8709] loop1: detected capacity change from 0 to 512 [ 137.595247][ T8702] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1398: Failed to acquire dquot type 1 [ 137.648476][ T8709] EXT4-fs: Ignoring removed orlov option [ 137.663771][ T8719] loop2: detected capacity change from 0 to 512 [ 137.686882][ T8720] loop5: detected capacity change from 0 to 512 [ 137.695159][ T8720] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.710758][ T8709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 137.717221][ T8719] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.720388][ T8709] EXT4-fs (loop1): too many log groups per flexible block group [ 137.736884][ T8709] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 137.745185][ T8709] EXT4-fs (loop1): mount failed [ 137.832393][ T8733] loop5: detected capacity change from 0 to 256 [ 137.843835][ T8709] netlink: 'syz.1.1403': attribute type 4 has an invalid length. [ 137.874264][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1407'. [ 138.504187][ T8739] loop4: detected capacity change from 0 to 2048 [ 138.646217][ T8758] loop1: detected capacity change from 0 to 512 [ 138.689635][ T8757] loop0: detected capacity change from 0 to 512 [ 138.748006][ T8757] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.771732][ T8757] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1420: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 138.783057][ T8776] loop4: detected capacity change from 0 to 512 [ 138.795249][ T8776] EXT4-fs: Ignoring removed oldalloc option [ 138.811654][ T8777] loop1: detected capacity change from 0 to 512 [ 138.819759][ T8757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 138.835982][ T8777] EXT4-fs: Ignoring removed orlov option [ 138.842920][ T8780] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1420: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 138.847834][ T8776] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1426: Parent and EA inode have the same ino 15 [ 138.876927][ T8776] EXT4-fs (loop4): Remounting filesystem read-only [ 138.883529][ T8776] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 138.884417][ T8757] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1420: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 138.910221][ T8776] EXT4-fs (loop4): 1 orphan inode deleted [ 138.915991][ T8757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 138.925484][ T8776] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 138.927131][ T8777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 138.940180][ T8780] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 138.942423][ T8777] EXT4-fs (loop1): too many log groups per flexible block group [ 138.956929][ T8777] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 138.957676][ T8784] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.967752][ T8777] EXT4-fs (loop1): mount failed [ 139.002490][ T8774] netlink: 'syz.1.1424': attribute type 4 has an invalid length. [ 139.015533][ T8780] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1420: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 139.040893][ T8789] loop5: detected capacity change from 0 to 512 [ 139.044740][ T8757] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1420: bg 0: block 18: invalid block bitmap [ 139.073767][ T8780] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 139.097237][ T8757] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1420: Failed to acquire dquot type 1 [ 139.114337][ T8780] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1420: Failed to acquire dquot type 1 [ 139.144188][ T8789] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.304259][ T8803] FAULT_INJECTION: forcing a failure. [ 139.304259][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 139.317046][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.0.1433 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 139.327755][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.337813][ T8803] Call Trace: [ 139.341089][ T8803] [ 139.344031][ T8803] dump_stack_lvl+0xf2/0x150 [ 139.348726][ T8803] dump_stack+0x15/0x1a [ 139.352898][ T8803] should_fail_ex+0x223/0x230 [ 139.357573][ T8803] should_failslab+0x8f/0xb0 [ 139.362181][ T8803] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 139.367896][ T8803] ? __d_alloc+0x3d/0x340 [ 139.372219][ T8803] __d_alloc+0x3d/0x340 [ 139.376379][ T8803] d_alloc_parallel+0x54/0xc60 [ 139.381140][ T8803] ? selinux_inode_permission+0x341/0x410 [ 139.386876][ T8803] ? lockref_get_not_dead+0x118/0x1b0 [ 139.392320][ T8803] ? down_read+0x171/0x4b0 [ 139.396774][ T8803] __lookup_slow+0x8d/0x250 [ 139.401272][ T8803] lookup_slow+0x3c/0x60 [ 139.405521][ T8803] walk_component+0x1f5/0x230 [ 139.410216][ T8803] ? path_lookupat+0xfd/0x2b0 [ 139.414900][ T8803] path_lookupat+0x10a/0x2b0 [ 139.419519][ T8803] filename_lookup+0x150/0x340 [ 139.424338][ T8803] filename_getxattr+0x5c/0x150 [ 139.429206][ T8803] path_getxattrat+0x160/0x290 [ 139.434014][ T8803] __x64_sys_lgetxattr+0x5f/0x70 [ 139.438958][ T8803] x64_sys_call+0x2720/0x2dc0 [ 139.443631][ T8803] do_syscall_64+0xc9/0x1c0 [ 139.448204][ T8803] ? clear_bhb_loop+0x55/0xb0 [ 139.452928][ T8803] ? clear_bhb_loop+0x55/0xb0 [ 139.457609][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.463516][ T8803] RIP: 0033:0x7fca12e8ff19 [ 139.467933][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.487621][ T8803] RSP: 002b:00007fca11501058 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 139.496027][ T8803] RAX: ffffffffffffffda RBX: 00007fca13055fa0 RCX: 00007fca12e8ff19 [ 139.503990][ T8803] RDX: 0000000020000340 RSI: 0000000020000300 RDI: 00000000200002c0 [ 139.511964][ T8803] RBP: 00007fca115010a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.519944][ T8803] R10: 00000000000000b7 R11: 0000000000000246 R12: 0000000000000001 [ 139.527905][ T8803] R13: 0000000000000000 R14: 00007fca13055fa0 R15: 00007ffc6ca83898 [ 139.535876][ T8803] [ 139.540316][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1428'. [ 139.574557][ T8807] FAULT_INJECTION: forcing a failure. [ 139.574557][ T8807] name failslab, interval 1, probability 0, space 0, times 0 [ 139.586410][ T8805] loop2: detected capacity change from 0 to 8192 [ 139.587249][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.0.1435 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 139.604163][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.614248][ T8807] Call Trace: [ 139.617518][ T8807] [ 139.620542][ T8807] dump_stack_lvl+0xf2/0x150 [ 139.625201][ T8807] dump_stack+0x15/0x1a [ 139.629474][ T8807] should_fail_ex+0x223/0x230 [ 139.634153][ T8807] should_failslab+0x8f/0xb0 [ 139.638749][ T8807] __kmalloc_cache_node_noprof+0x56/0x320 [ 139.644534][ T8807] ? __get_vm_area_node+0xfb/0x1c0 [ 139.649737][ T8807] ? strncpy_from_user+0x183/0x210 [ 139.654981][ T8807] __get_vm_area_node+0xfb/0x1c0 [ 139.659971][ T8807] __vmalloc_node_range_noprof+0x280/0xe80 [ 139.665772][ T8807] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 139.671312][ T8807] ? avc_has_perm_noaudit+0x1cc/0x210 [ 139.676683][ T8807] ? selinux_capable+0x1f2/0x260 [ 139.681662][ T8807] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 139.687268][ T8807] __vmalloc_noprof+0x5e/0x70 [ 139.691940][ T8807] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 139.697476][ T8807] bpf_prog_alloc_no_stats+0x49/0x380 [ 139.702843][ T8807] ? bpf_prog_alloc+0x28/0x150 [ 139.707597][ T8807] bpf_prog_alloc+0x3a/0x150 [ 139.712177][ T8807] bpf_prog_load+0x4d1/0x1070 [ 139.716918][ T8807] ? __rcu_read_unlock+0x4e/0x70 [ 139.721858][ T8807] __sys_bpf+0x463/0x7a0 [ 139.726162][ T8807] __x64_sys_bpf+0x43/0x50 [ 139.730666][ T8807] x64_sys_call+0x2914/0x2dc0 [ 139.735378][ T8807] do_syscall_64+0xc9/0x1c0 [ 139.739873][ T8807] ? clear_bhb_loop+0x55/0xb0 [ 139.744538][ T8807] ? clear_bhb_loop+0x55/0xb0 [ 139.749212][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.755106][ T8807] RIP: 0033:0x7fca12e8ff19 [ 139.759553][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.779200][ T8807] RSP: 002b:00007fca11501058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.787604][ T8807] RAX: ffffffffffffffda RBX: 00007fca13055fa0 RCX: 00007fca12e8ff19 [ 139.795564][ T8807] RDX: 0000000000000094 RSI: 0000000020000400 RDI: 0000000000000005 [ 139.803526][ T8807] RBP: 00007fca115010a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.811489][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.819526][ T8807] R13: 0000000000000001 R14: 00007fca13055fa0 R15: 00007ffc6ca83898 [ 139.827510][ T8807] [ 139.830687][ T8807] syz.0.1435: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 139.840017][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 139.840032][ T29] audit: type=1400 audit(1733822079.480:12908): avc: denied { write } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.846636][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.0.1435 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 139.846662][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.852811][ T29] audit: type=1400 audit(1733822079.480:12909): avc: denied { remove_name } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.852833][ T29] audit: type=1400 audit(1733822079.480:12910): avc: denied { rename } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.852852][ T29] audit: type=1400 audit(1733822079.480:12911): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.874361][ T8807] Call Trace: [ 139.874370][ T8807] [ 139.874391][ T8807] dump_stack_lvl+0xf2/0x150 [ 139.885075][ T29] audit: type=1400 audit(1733822079.480:12912): avc: denied { unlink } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.895111][ T8807] dump_stack+0x15/0x1a [ 139.917771][ T29] audit: type=1400 audit(1733822079.480:12913): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.940115][ T8807] warn_alloc+0x145/0x1b0 [ 139.940143][ T8807] ? strncpy_from_user+0x183/0x210 [ 139.940178][ T8807] __vmalloc_node_range_noprof+0x2a5/0xe80 [ 140.036206][ T8807] ? avc_has_perm_noaudit+0x1cc/0x210 [ 140.041588][ T8807] ? selinux_capable+0x1f2/0x260 [ 140.046518][ T8807] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 140.052098][ T8807] __vmalloc_noprof+0x5e/0x70 [ 140.056854][ T8807] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 140.062405][ T8807] bpf_prog_alloc_no_stats+0x49/0x380 [ 140.067899][ T8807] ? bpf_prog_alloc+0x28/0x150 [ 140.072727][ T8807] bpf_prog_alloc+0x3a/0x150 [ 140.077308][ T8807] bpf_prog_load+0x4d1/0x1070 [ 140.082076][ T8807] ? __rcu_read_unlock+0x4e/0x70 [ 140.087019][ T8807] __sys_bpf+0x463/0x7a0 [ 140.091333][ T8807] __x64_sys_bpf+0x43/0x50 [ 140.095796][ T8807] x64_sys_call+0x2914/0x2dc0 [ 140.100488][ T8807] do_syscall_64+0xc9/0x1c0 [ 140.104980][ T8807] ? clear_bhb_loop+0x55/0xb0 [ 140.109647][ T8807] ? clear_bhb_loop+0x55/0xb0 [ 140.114370][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.120265][ T8807] RIP: 0033:0x7fca12e8ff19 [ 140.124668][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.144308][ T8807] RSP: 002b:00007fca11501058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.152789][ T8807] RAX: ffffffffffffffda RBX: 00007fca13055fa0 RCX: 00007fca12e8ff19 [ 140.160850][ T8807] RDX: 0000000000000094 RSI: 0000000020000400 RDI: 0000000000000005 [ 140.168812][ T8807] RBP: 00007fca115010a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.176791][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.184751][ T8807] R13: 0000000000000001 R14: 00007fca13055fa0 R15: 00007ffc6ca83898 [ 140.192718][ T8807] [ 140.195785][ T8807] Mem-Info: [ 140.199027][ T8807] active_anon:9054 inactive_anon:10 isolated_anon:0 [ 140.199027][ T8807] active_file:6734 inactive_file:17967 isolated_file:0 [ 140.199027][ T8807] unevictable:0 dirty:496 writeback:0 [ 140.199027][ T8807] slab_reclaimable:2968 slab_unreclaimable:15550 [ 140.199027][ T8807] mapped:31901 shmem:4278 pagetables:1214 [ 140.199027][ T8807] sec_pagetables:0 bounce:0 [ 140.199027][ T8807] kernel_misc_reclaimable:0 [ 140.199027][ T8807] free:1883311 free_pcp:8614 free_cma:0 [ 140.243958][ T8807] Node 0 active_anon:36216kB inactive_anon:40kB active_file:26936kB inactive_file:71868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127604kB dirty:1984kB writeback:0kB shmem:17112kB writeback_tmp:0kB kernel_stack:3408kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no [ 140.272002][ T8807] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.298940][ T8807] lowmem_reserve[]: 0 2866 7844 0 [ 140.304113][ T29] audit: type=1400 audit(1733822079.940:12914): avc: denied { mount } for pid=8810 comm="syz.4.1437" name="/" dev="hugetlbfs" ino=18044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 140.304119][ T8807] Node 0 [ 140.304128][ T8807] DMA32 free:2950280kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 140.358127][ T8807] lowmem_reserve[]: 0 0 4978 0 [ 140.363016][ T8807] Node 0 Normal free:4567084kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:36332kB inactive_anon:40kB active_file:26936kB inactive_file:71868kB unevictable:0kB writepending:1984kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:30816kB local_pcp:28948kB free_cma:0kB [ 140.373326][ T8811] loop4: detected capacity change from 0 to 2048 [ 140.393585][ T8807] lowmem_reserve[]: 0 0 0 0 [ 140.393635][ T8807] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.417243][ T8807] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950280kB [ 140.433445][ T8807] Node 0 Normal: 82*4kB (UME) 137*8kB (UM) 110*16kB (UE) 206*32kB (UME) 242*64kB (UE) 151*128kB (UME) 125*256kB (U) 100*512kB (UME) 145*1024kB (UME) 61*2048kB (UME) 1017*4096kB (UM) = 4566832kB [ 140.452762][ T8807] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 140.462094][ T8807] 29210 total pagecache pages [ 140.466778][ T8807] 7 pages in swap cache [ 140.470988][ T8807] Free swap = 123488kB [ 140.472761][ T8811] EXT4-fs (loop4): failed to initialize system zone (-117) [ 140.475113][ T8807] Total swap = 124996kB [ 140.475122][ T8807] 2097051 pages RAM [ 140.475128][ T8807] 0 pages HighMem/MovableOnly [ 140.475133][ T8807] 80181 pages reserved [ 140.499292][ T29] audit: type=1400 audit(1733822080.140:12915): avc: denied { ioctl } for pid=8814 comm="syz.0.1438" path="socket:[19193]" dev="sockfs" ino=19193 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.525018][ T8811] EXT4-fs (loop4): mount failed [ 140.555123][ T29] audit: type=1400 audit(1733822080.190:12916): avc: denied { block_suspend } for pid=8814 comm="syz.0.1438" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.589457][ T8818] loop2: detected capacity change from 0 to 256 [ 140.607181][ T29] audit: type=1326 audit(1733822080.240:12917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.5.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f0b5ff19 code=0x7ffc0000 [ 140.632561][ T8821] loop5: detected capacity change from 0 to 512 [ 140.641988][ T8821] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.732174][ T8835] loop4: detected capacity change from 0 to 1024 [ 140.768167][ T8835] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1445: Failed to acquire dquot type 0 [ 140.785127][ T8835] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 140.799658][ T8835] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.1445: corrupted inode contents [ 140.812031][ T8835] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #13: comm syz.4.1445: mark_inode_dirty error [ 140.836750][ T8835] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.1445: corrupted inode contents [ 140.851670][ T8835] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.1445: mark_inode_dirty error [ 140.873951][ T8835] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.1445: corrupted inode contents [ 140.878182][ T8847] loop1: detected capacity change from 0 to 512 [ 140.893727][ T8847] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 140.903865][ T8835] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 140.912855][ T8835] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.1445: corrupted inode contents [ 140.926606][ T8835] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.1445: mark_inode_dirty error [ 140.948154][ T8835] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 140.962048][ T8835] EXT4-fs (loop4): 1 truncate cleaned up [ 140.983434][ T8835] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1445: Failed to acquire dquot type 0 [ 141.001233][ T8851] loop1: detected capacity change from 0 to 512 [ 141.024407][ T8851] ext4 filesystem being mounted at /270/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.072243][ T8856] loop4: detected capacity change from 0 to 512 [ 141.098017][ T8857] loop5: detected capacity change from 0 to 512 [ 141.105416][ T8856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.114228][ T8857] EXT4-fs: Ignoring removed orlov option [ 141.149481][ T8856] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.152518][ T8857] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 141.168641][ T8857] EXT4-fs (loop5): too many log groups per flexible block group [ 141.176543][ T8857] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 141.183476][ T8857] EXT4-fs (loop5): mount failed [ 141.194726][ T8857] netlink: 'syz.5.1453': attribute type 4 has an invalid length. [ 141.255779][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1451'. [ 141.411461][ T8868] loop0: detected capacity change from 0 to 2048 [ 141.451226][ T8868] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 141.491372][ T8868] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 141.503708][ T8868] EXT4-fs (loop0): This should not happen!! Data will be lost [ 141.503708][ T8868] [ 141.513447][ T8868] EXT4-fs (loop0): Total free blocks count 0 [ 141.519445][ T8868] EXT4-fs (loop0): Free/Dirty block details [ 141.525329][ T8868] EXT4-fs (loop0): free_blocks=2415919104 [ 141.531088][ T8868] EXT4-fs (loop0): dirty_blocks=16 [ 141.536227][ T8868] EXT4-fs (loop0): Block reservation details [ 141.542223][ T8868] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 141.601991][ T8874] loop2: detected capacity change from 0 to 8192 [ 142.000256][ T8883] loop5: detected capacity change from 0 to 512 [ 142.018030][ T8883] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.206086][ T8893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8893 comm=syz.2.1463 [ 142.229936][ T8895] loop0: detected capacity change from 0 to 512 [ 142.289004][ T8895] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 142.304098][ T8900] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1465'. [ 142.320188][ T8901] loop4: detected capacity change from 0 to 512 [ 142.334017][ T8901] EXT4-fs: Ignoring removed oldalloc option [ 142.343432][ T8903] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.1468'. [ 142.384378][ T8901] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1467: Parent and EA inode have the same ino 15 [ 142.435718][ T8901] EXT4-fs (loop4): Remounting filesystem read-only [ 142.442286][ T8901] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 142.462108][ T8909] loop0: detected capacity change from 0 to 256 [ 142.466189][ T8900] loop1: detected capacity change from 0 to 8192 [ 142.491519][ T8900] vfat: Unknown parameter 'Q _ւC?&o> \vQydOsNNl2Xˏu<j'Z-C\Y>P [ 142.491519][ T8900] FW!ofB1v}gd [ 142.491519][ T8900] 5"9*w>k[%A-2!E"M1U37uUWtDra\q*M5ޅ-l50' [ 142.515683][ T8901] EXT4-fs (loop4): 1 orphan inode deleted [ 142.521722][ T8901] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 142.619964][ T8900] loop1: detected capacity change from 0 to 164 [ 142.639045][ T8900] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 142.732247][ T8921] loop1: detected capacity change from 0 to 512 [ 142.732558][ T3376] IPVS: starting estimator thread 0... [ 142.742350][ T8922] loop5: detected capacity change from 0 to 128 [ 142.757889][ T8912] loop4: detected capacity change from 0 to 8192 [ 142.765121][ T8922] msdos: Unknown parameter '˟faf)\`u% ;0].l}rhpaBRZ2+lGLϊ]yBX' [ 142.792591][ T8914] Cannot find del_set index 0 as target [ 142.806873][ T8921] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.826754][ T8923] IPVS: using max 2832 ests per chain, 141600 per kthread [ 142.958198][ T8936] SELinux: policydb version 0 does not match my version range 15-33 [ 142.966552][ T8936] SELinux: failed to load policy [ 143.024496][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'. [ 143.168728][ T8952] loop0: detected capacity change from 0 to 512 [ 143.180960][ T8950] block device autoloading is deprecated and will be removed. [ 143.189665][ T8950] syz.5.1480: attempt to access beyond end of device [ 143.189665][ T8950] md0: rw=2048, sector=14336, nr_sectors = 8 limit=0 [ 143.226225][ T8952] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.1481: corrupted xattr block 95: invalid header [ 143.246903][ T8954] dccp_invalid_packet: P.Data Offset(100) too large [ 143.270797][ T8952] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1481: bg 0: block 7: invalid block bitmap [ 143.336601][ T8952] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 143.351980][ T8962] FAULT_INJECTION: forcing a failure. [ 143.351980][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.365101][ T8962] CPU: 0 UID: 0 PID: 8962 Comm: syz.5.1483 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 143.375785][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.385911][ T8962] Call Trace: [ 143.389195][ T8962] [ 143.392128][ T8962] dump_stack_lvl+0xf2/0x150 [ 143.396733][ T8962] dump_stack+0x15/0x1a [ 143.400896][ T8962] should_fail_ex+0x223/0x230 [ 143.405633][ T8962] should_fail+0xb/0x10 [ 143.409791][ T8962] should_fail_usercopy+0x1a/0x20 [ 143.414887][ T8962] _copy_from_user+0x1e/0xb0 [ 143.419691][ T8962] kstrtouint_from_user+0x76/0xe0 [ 143.424714][ T8962] ? 0xffffffff81000000 [ 143.428891][ T8962] ? selinux_file_permission+0x22a/0x360 [ 143.434588][ T8962] proc_fail_nth_write+0x4f/0x150 [ 143.439694][ T8962] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.445395][ T8962] vfs_write+0x281/0x920 [ 143.449669][ T8962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.455218][ T8962] ? __fget_files+0x17c/0x1c0 [ 143.459934][ T8962] ksys_write+0xe8/0x1b0 [ 143.464200][ T8962] __x64_sys_write+0x42/0x50 [ 143.468867][ T8962] x64_sys_call+0x287e/0x2dc0 [ 143.473539][ T8962] do_syscall_64+0xc9/0x1c0 [ 143.478070][ T8962] ? clear_bhb_loop+0x55/0xb0 [ 143.482742][ T8962] ? clear_bhb_loop+0x55/0xb0 [ 143.487477][ T8962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.493416][ T8962] RIP: 0033:0x7f91f0b5e9cf [ 143.497851][ T8962] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.517516][ T8962] RSP: 002b:00007f91ef1d1050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.525924][ T8962] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f91f0b5e9cf [ 143.533897][ T8962] RDX: 0000000000000001 RSI: 00007f91ef1d10b0 RDI: 0000000000000008 [ 143.541957][ T8962] RBP: 00007f91ef1d10a0 R08: 0000000000000000 R09: 0000000000000000 [ 143.549923][ T8962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 143.557998][ T8962] R13: 0000000000000000 R14: 00007f91f0d25fa0 R15: 00007ffe46aeb798 [ 143.566053][ T8962] [ 143.582931][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.601359][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.620443][ T8952] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.1481: corrupted xattr block 95: invalid header [ 143.669012][ T8952] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 143.688715][ T8952] EXT4-fs (loop0): 1 orphan inode deleted [ 143.866423][ T8965] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1486'. [ 143.880264][ T8967] FAULT_INJECTION: forcing a failure. [ 143.880264][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 143.892901][ T8967] CPU: 1 UID: 0 PID: 8967 Comm: syz.4.1487 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 143.903640][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.913715][ T8967] Call Trace: [ 143.916988][ T8967] [ 143.919949][ T8967] dump_stack_lvl+0xf2/0x150 [ 143.924621][ T8967] dump_stack+0x15/0x1a [ 143.928924][ T8967] should_fail_ex+0x223/0x230 [ 143.933680][ T8967] should_failslab+0x8f/0xb0 [ 143.938297][ T8967] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 143.944642][ T8967] ? sidtab_sid2str_get+0xb8/0x140 [ 143.949874][ T8967] kmemdup_noprof+0x2a/0x60 [ 143.954441][ T8967] sidtab_sid2str_get+0xb8/0x140 [ 143.959426][ T8967] security_sid_to_context_core+0x1eb/0x2f0 [ 143.965338][ T8967] security_sid_to_context+0x27/0x30 [ 143.970666][ T8967] selinux_lsmprop_to_secctx+0x2c/0x40 [ 143.976135][ T8967] security_lsmprop_to_secctx+0x4a/0x90 [ 143.981690][ T8967] audit_log_task_context+0x93/0x1c0 [ 143.987109][ T8967] audit_log_task+0xf9/0x1c0 [ 143.991700][ T8967] audit_seccomp+0x68/0x130 [ 143.996213][ T8967] __seccomp_filter+0x6fa/0x1180 [ 144.001205][ T8967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.006914][ T8967] ? vfs_write+0x596/0x920 [ 144.011335][ T8967] __secure_computing+0x9f/0x1c0 [ 144.016292][ T8967] syscall_trace_enter+0xd1/0x1f0 [ 144.021326][ T8967] ? fpregs_assert_state_consistent+0x83/0xa0 [ 144.027409][ T8967] do_syscall_64+0xaa/0x1c0 [ 144.031906][ T8967] ? clear_bhb_loop+0x55/0xb0 [ 144.036693][ T8967] ? clear_bhb_loop+0x55/0xb0 [ 144.041472][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.047373][ T8967] RIP: 0033:0x7f0b996dff19 [ 144.051824][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.071488][ T8967] RSP: 002b:00007f0b97d57058 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 144.079904][ T8967] RAX: ffffffffffffffda RBX: 00007f0b998a5fa0 RCX: 00007f0b996dff19 [ 144.087891][ T8967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.095855][ T8967] RBP: 00007f0b97d570a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.103816][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.111786][ T8967] R13: 0000000000000000 R14: 00007f0b998a5fa0 R15: 00007ffc16214748 [ 144.119756][ T8967] [ 144.176133][ T8965] loop5: detected capacity change from 0 to 8192 [ 144.221914][ T8965] vfat: Unknown parameter 'Q _ւC?&o> \vQydOsNNl2Xˏu<j'Z-C\Y>P [ 144.221914][ T8965] FW!ofB1v}gd [ 144.221914][ T8965] 5"9*w>k[%A-2!E"M1U37uUWtDra\q*M5ޅ-l50' [ 144.260321][ T8973] loop4: detected capacity change from 0 to 512 [ 144.274325][ T8978] loop1: detected capacity change from 0 to 512 [ 144.281436][ T8978] EXT4-fs: Ignoring removed oldalloc option [ 144.301697][ T8971] loop0: detected capacity change from 0 to 8192 [ 144.318078][ T8978] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1488: Parent and EA inode have the same ino 15 [ 144.331473][ T8978] EXT4-fs (loop1): Remounting filesystem read-only [ 144.338055][ T8978] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 144.349705][ T8978] EXT4-fs (loop1): 1 orphan inode deleted [ 144.351326][ T8965] loop5: detected capacity change from 0 to 164 [ 144.355757][ T8978] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 144.381591][ T8983] loop0: detected capacity change from 0 to 512 [ 144.389453][ T8973] ext4 filesystem being mounted at /314/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.403505][ T8983] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.414456][ T8973] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1489: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 144.437424][ T8965] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 144.456961][ T8973] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 144.466397][ T8973] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1489: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 144.483743][ T8988] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1489: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 144.501473][ T8973] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 144.505952][ T8988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 144.520285][ T8988] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1489: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 144.536989][ T8988] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 144.556357][ T8988] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1489: bg 0: block 18: invalid block bitmap [ 144.569652][ T8988] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1489: Failed to acquire dquot type 1 [ 144.575739][ T8973] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1489: Failed to acquire dquot type 1 [ 144.596322][ T8994] loop5: detected capacity change from 0 to 256 [ 144.656052][ T8997] dccp_invalid_packet: P.Data Offset(100) too large [ 144.681620][ T8998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8998 comm=syz.0.1492 [ 144.763912][ T9006] SELinux: policydb version 0 does not match my version range 15-33 [ 144.764871][ T9005] loop1: detected capacity change from 0 to 512 [ 144.778671][ T9005] EXT4-fs: Ignoring removed oldalloc option [ 144.784046][ T9006] SELinux: failed to load policy [ 144.798059][ T9005] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1497: Parent and EA inode have the same ino 15 [ 144.811773][ T9005] EXT4-fs (loop1): Remounting filesystem read-only [ 144.818341][ T9005] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 144.828493][ T9005] EXT4-fs (loop1): 1 orphan inode deleted [ 144.834512][ T9005] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 144.903339][ T9009] loop4: detected capacity change from 0 to 512 [ 144.913397][ T9011] loop5: detected capacity change from 0 to 8192 [ 144.953834][ T9009] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.967058][ T9020] loop1: detected capacity change from 0 to 256 [ 144.993788][ T9015] loop2: detected capacity change from 0 to 512 [ 145.008892][ T29] kauditd_printk_skb: 732 callbacks suppressed [ 145.008906][ T29] audit: type=1326 audit(1733822084.650:13641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.108920][ T29] audit: type=1326 audit(1733822084.690:13642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.132636][ T29] audit: type=1326 audit(1733822084.690:13643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.156251][ T29] audit: type=1326 audit(1733822084.690:13644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.179693][ T29] audit: type=1326 audit(1733822084.690:13645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.203199][ T29] audit: type=1326 audit(1733822084.690:13646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.226772][ T29] audit: type=1326 audit(1733822084.690:13647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.250298][ T29] audit: type=1326 audit(1733822084.690:13648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.298959][ T9015] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.316017][ T29] audit: type=1326 audit(1733822084.950:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.355046][ T9036] loop1: detected capacity change from 0 to 512 [ 145.363987][ T9015] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1502: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 145.391856][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1499'. [ 145.434254][ T9015] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 145.469956][ T9036] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.485624][ T29] audit: type=1326 audit(1733822084.950:13650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9017 comm="syz.1.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665bd0ff19 code=0x7ffc0000 [ 145.514670][ T9015] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1502: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 145.667477][ T9042] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1502: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 146.327885][ T9015] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 146.350614][ T9015] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1502: bg 0: block 18: invalid block bitmap [ 146.680078][ T9042] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 147.183920][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1505'. [ 147.208325][ T9015] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1502: Failed to acquire dquot type 1 [ 147.220885][ T9042] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1502: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 147.385645][ T9042] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 147.403333][ T9061] loop0: detected capacity change from 0 to 512 [ 147.416747][ T9042] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1502: Failed to acquire dquot type 1 [ 147.440249][ T9061] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.478338][ T9059] loop4: detected capacity change from 0 to 128 [ 147.480977][ T9063] loop5: detected capacity change from 0 to 512 [ 147.501320][ T9063] EXT4-fs: Ignoring removed orlov option [ 147.508373][ T9059] msdos: Unknown parameter '˟faf)\`u% ;0].l}rhpaBRZ2+lGLϊ]yBX' [ 147.559518][ T9070] loop2: detected capacity change from 0 to 512 [ 147.572524][ T9063] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 147.580935][ T9063] EXT4-fs (loop5): too many log groups per flexible block group [ 147.588639][ T9063] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 147.596976][ T9070] EXT4-fs: Ignoring removed oldalloc option [ 147.626804][ T9070] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1513: Parent and EA inode have the same ino 15 [ 147.678341][ T9063] EXT4-fs (loop5): mount failed [ 147.687223][ T9070] EXT4-fs (loop2): Remounting filesystem read-only [ 147.693777][ T9070] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 147.742140][ T9063] netlink: 'syz.5.1511': attribute type 4 has an invalid length. [ 147.782114][ T9070] EXT4-fs (loop2): 1 orphan inode deleted [ 147.798524][ T9070] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 147.848727][ T9085] loop2: detected capacity change from 0 to 512 [ 147.857672][ T9085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.879640][ T9085] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.008191][ T9091] loop2: detected capacity change from 0 to 512 [ 148.016016][ T9091] EXT4-fs: Ignoring removed oldalloc option [ 148.032167][ T9091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1520: Parent and EA inode have the same ino 15 [ 148.046071][ T9091] EXT4-fs (loop2): Remounting filesystem read-only [ 148.052726][ T9091] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 148.063976][ T9091] EXT4-fs (loop2): 1 orphan inode deleted [ 148.070292][ T9091] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 148.195953][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 148.234024][ T9102] loop1: detected capacity change from 0 to 512 [ 148.241349][ T9102] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.319710][ T9110] tipc: Started in network mode [ 148.324719][ T9110] tipc: Node identity 101, cluster identity 4711 [ 148.331366][ T9110] tipc: Node number set to 257 [ 148.341033][ T9114] loop5: detected capacity change from 0 to 1024 [ 148.349345][ T9114] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 148.364447][ T9114] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 148.383039][ T9117] loop1: detected capacity change from 0 to 512 [ 148.385311][ T9114] EXT4-fs (loop5): mount failed [ 148.394169][ T9117] EXT4-fs: Ignoring removed oldalloc option [ 148.405588][ T9117] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.1528: Parent and EA inode have the same ino 15 [ 148.420153][ T9117] EXT4-fs (loop1): Remounting filesystem read-only [ 148.426822][ T9117] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 148.437528][ T9117] EXT4-fs (loop1): 1 orphan inode deleted [ 148.443718][ T9117] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 148.490455][ T9124] loop1: detected capacity change from 0 to 512 [ 148.509253][ T9124] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.524057][ T9130] loop5: detected capacity change from 0 to 256 [ 148.652135][ T9139] loop4: detected capacity change from 0 to 512 [ 148.660057][ T9139] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 148.718977][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1531'. [ 149.019554][ T9150] loop4: detected capacity change from 0 to 512 [ 149.089245][ T9152] loop0: detected capacity change from 0 to 512 [ 149.112097][ T9150] EXT4-fs: Ignoring removed oldalloc option [ 149.134703][ T9152] EXT4-fs: Ignoring removed oldalloc option [ 149.159129][ T9150] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1541: Parent and EA inode have the same ino 15 [ 149.175940][ T9154] loop2: detected capacity change from 0 to 512 [ 149.199761][ T9152] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1542: Parent and EA inode have the same ino 15 [ 149.218876][ T9154] EXT4-fs: Ignoring removed orlov option [ 149.230890][ T9150] EXT4-fs (loop4): Remounting filesystem read-only [ 149.237470][ T9150] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 149.265978][ T9152] EXT4-fs (loop0): Remounting filesystem read-only [ 149.272593][ T9152] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 149.286402][ T9154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 149.294984][ T9150] EXT4-fs (loop4): 1 orphan inode deleted [ 149.302447][ T9154] EXT4-fs (loop2): too many log groups per flexible block group [ 149.310142][ T9154] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 149.351813][ T9150] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 149.358709][ T9152] EXT4-fs (loop0): 1 orphan inode deleted [ 149.376928][ T9152] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 149.409258][ T9154] EXT4-fs (loop2): mount failed [ 149.518940][ T9165] loop5: detected capacity change from 0 to 256 [ 149.667251][ T9172] loop4: detected capacity change from 0 to 512 [ 149.706083][ T9174] loop2: detected capacity change from 0 to 512 [ 149.716512][ T9176] loop5: detected capacity change from 0 to 512 [ 149.725193][ T9172] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.737288][ T9174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.752215][ T9176] EXT4-fs: Ignoring removed oldalloc option [ 149.775849][ T9176] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.1551: Parent and EA inode have the same ino 15 [ 149.795937][ T9174] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.825657][ T9176] EXT4-fs (loop5): Remounting filesystem read-only [ 149.832300][ T9176] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 149.843712][ T9176] EXT4-fs (loop5): 1 orphan inode deleted [ 149.852725][ T9176] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 149.944660][ T9186] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.947655][ T9188] loop4: detected capacity change from 0 to 512 [ 149.983627][ T9188] EXT4-fs: Ignoring removed oldalloc option [ 150.026836][ T9188] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1556: Parent and EA inode have the same ino 15 [ 150.042743][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 150.042759][ T29] audit: type=1326 audit(1733822089.680:14009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.072557][ T29] audit: type=1326 audit(1733822089.680:14010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.080559][ T9202] loop5: detected capacity change from 0 to 512 [ 150.096167][ T29] audit: type=1326 audit(1733822089.680:14011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.125903][ T29] audit: type=1326 audit(1733822089.680:14012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.149564][ T29] audit: type=1326 audit(1733822089.680:14013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.173241][ T9188] EXT4-fs (loop4): Remounting filesystem read-only [ 150.173433][ T29] audit: type=1326 audit(1733822089.750:14014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.179823][ T9188] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 150.180150][ T9188] EXT4-fs (loop4): 1 orphan inode deleted [ 150.203232][ T29] audit: type=1326 audit(1733822089.750:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.214595][ T9188] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 150.219167][ T29] audit: type=1326 audit(1733822089.750:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.245424][ T9202] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.249045][ T29] audit: type=1326 audit(1733822089.750:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.275790][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9208 comm=syz.2.1563 [ 150.281511][ T29] audit: type=1326 audit(1733822089.750:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9199 comm="syz.2.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd92b2aff19 code=0x7ffc0000 [ 150.341011][ T9208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9208 comm=syz.2.1563 [ 150.356196][ T9211] loop2: detected capacity change from 0 to 256 [ 150.390678][ T9211] FAT-fs (loop2): Directory bread(block 64) failed [ 150.399233][ T9211] FAT-fs (loop2): Directory bread(block 65) failed [ 150.414144][ T9211] FAT-fs (loop2): Directory bread(block 66) failed [ 150.415295][ T9215] loop4: detected capacity change from 0 to 512 [ 150.421021][ T9211] FAT-fs (loop2): Directory bread(block 67) failed [ 150.430147][ T9217] SELinux: policydb version 0 does not match my version range 15-33 [ 150.434239][ T9211] FAT-fs (loop2): Directory bread(block 68) failed [ 150.448378][ T9211] FAT-fs (loop2): Directory bread(block 69) failed [ 150.448868][ T9217] SELinux: failed to load policy [ 150.455118][ T9211] FAT-fs (loop2): Directory bread(block 70) failed [ 150.455141][ T9211] FAT-fs (loop2): Directory bread(block 71) failed [ 150.473634][ T9211] FAT-fs (loop2): Directory bread(block 72) failed [ 150.476315][ T9215] EXT4-fs: Ignoring removed oldalloc option [ 150.489589][ T9211] FAT-fs (loop2): Directory bread(block 73) failed [ 150.498302][ T9215] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1566: Parent and EA inode have the same ino 15 [ 150.498512][ T9219] loop5: detected capacity change from 0 to 512 [ 150.511706][ T9215] EXT4-fs (loop4): Remounting filesystem read-only [ 150.523424][ T9215] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 150.533597][ T9215] EXT4-fs (loop4): 1 orphan inode deleted [ 150.539810][ T9215] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 150.553254][ T9219] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.635842][ T9229] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 150.674555][ T9233] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.699410][ T9233] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.700617][ T9234] loop0: detected capacity change from 0 to 512 [ 150.716560][ T9234] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.724480][ T9234] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 150.829424][ T9233] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.863785][ T9242] FAULT_INJECTION: forcing a failure. [ 150.863785][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 150.876530][ T9242] CPU: 0 UID: 0 PID: 9242 Comm: syz.0.1575 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 150.887261][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.897300][ T9242] Call Trace: [ 150.900645][ T9242] [ 150.903645][ T9242] dump_stack_lvl+0xf2/0x150 [ 150.908228][ T9242] dump_stack+0x15/0x1a [ 150.912401][ T9242] should_fail_ex+0x223/0x230 [ 150.917130][ T9242] should_failslab+0x8f/0xb0 [ 150.921759][ T9242] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 150.927566][ T9242] ? __d_alloc+0x3d/0x340 [ 150.931892][ T9242] ? selinux_inode_permission+0x341/0x410 [ 150.937604][ T9242] __d_alloc+0x3d/0x340 [ 150.941804][ T9242] d_alloc_parallel+0x54/0xc60 [ 150.946571][ T9242] ? __rcu_read_unlock+0x4e/0x70 [ 150.951564][ T9242] ? __d_lookup+0x342/0x370 [ 150.956070][ T9242] ? down_read+0x171/0x4b0 [ 150.960515][ T9242] path_openat+0x6c8/0x1fa0 [ 150.965033][ T9242] do_filp_open+0x107/0x230 [ 150.969523][ T9242] do_open_execat+0xd0/0x280 [ 150.974105][ T9242] open_exec+0x3d/0x60 [ 150.978171][ T9242] bm_register_write+0x83a/0xb00 [ 150.983096][ T9242] ? __pfx_bm_register_write+0x10/0x10 [ 150.988557][ T9242] vfs_write+0x281/0x920 [ 150.992810][ T9242] ? putname+0xcf/0xf0 [ 150.996886][ T9242] ? __fget_files+0x17c/0x1c0 [ 151.001587][ T9242] ksys_write+0xe8/0x1b0 [ 151.005852][ T9242] __x64_sys_write+0x42/0x50 [ 151.010486][ T9242] x64_sys_call+0x287e/0x2dc0 [ 151.015236][ T9242] do_syscall_64+0xc9/0x1c0 [ 151.019770][ T9242] ? clear_bhb_loop+0x55/0xb0 [ 151.024455][ T9242] ? clear_bhb_loop+0x55/0xb0 [ 151.029130][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.035036][ T9242] RIP: 0033:0x7fca12e8ff19 [ 151.039508][ T9242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.059263][ T9242] RSP: 002b:00007fca11501058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.067670][ T9242] RAX: ffffffffffffffda RBX: 00007fca13055fa0 RCX: 00007fca12e8ff19 [ 151.075633][ T9242] RDX: 000000000000002d RSI: 0000000020000a40 RDI: 0000000000000006 [ 151.083593][ T9242] RBP: 00007fca115010a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.091557][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.099547][ T9242] R13: 0000000000000000 R14: 00007fca13055fa0 R15: 00007ffc6ca83898 [ 151.107515][ T9242] [ 151.121551][ T9233] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.145112][ T9242] binfmt_misc: register: failed to install interpreter file ./file0 [ 151.198491][ T9233] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.215595][ T9233] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.231604][ T9233] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.248075][ T9233] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.259420][ T9257] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 151.265971][ T9252] loop1: detected capacity change from 0 to 8192 [ 151.266020][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.277397][ T9252] vfat: Unknown parameter '' [ 151.280579][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 151.368243][ T9268] dccp_invalid_packet: P.Data Offset(100) too large [ 151.434903][ T9261] vhci_hcd: connection closed [ 151.435168][ T40] vhci_hcd: stop threads [ 151.444343][ T40] vhci_hcd: release socket [ 151.448851][ T40] vhci_hcd: disconnect device [ 151.468001][ T9279] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.032022][ T9292] loop4: detected capacity change from 0 to 512 [ 152.047365][ T9292] EXT4-fs: Ignoring removed oldalloc option [ 152.058706][ T9292] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1593: Parent and EA inode have the same ino 15 [ 152.073272][ T9292] EXT4-fs (loop4): Remounting filesystem read-only [ 152.079901][ T9292] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 152.094164][ T9301] loop2: detected capacity change from 0 to 512 [ 152.101535][ T9292] EXT4-fs (loop4): 1 orphan inode deleted [ 152.103143][ T9301] EXT4-fs: Ignoring removed orlov option [ 152.113972][ T9292] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 152.133617][ T9301] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c118, mo2=0002] [ 152.141855][ T9301] EXT4-fs (loop2): too many log groups per flexible block group [ 152.149590][ T9301] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 152.157297][ T9301] EXT4-fs (loop2): mount failed [ 152.182804][ T9309] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.223516][ T9314] loop4: detected capacity change from 0 to 2048 [ 152.267248][ T9314] Alternate GPT is invalid, using primary GPT. [ 152.273587][ T9314] loop4: p2 p3 p7 [ 152.278988][ T9323] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.316036][ T9325] syz.1.1605[9325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.316170][ T9325] syz.1.1605[9325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.329071][ T3837] udevd[3837]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 152.329581][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 152.344845][ T9325] syz.1.1605[9325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.373549][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 152.463317][ T9338] dccp_invalid_packet: P.Data Offset(100) too large [ 152.464173][ T9337] loop2: detected capacity change from 0 to 128 [ 152.479776][ T9337] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.526590][ T9337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1041 sclass=netlink_route_socket pid=9337 comm=syz.2.1610 [ 152.915567][ T9388] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 152.946940][ T9390] loop5: detected capacity change from 0 to 256 [ 153.045112][ T9393] netlink: 'syz.5.1613': attribute type 13 has an invalid length. [ 153.053169][ T9393] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1613'. [ 153.063145][ T9393] syz_tun: refused to change device tx_queue_len [ 153.069546][ T9393] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 153.365805][ T9405] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.388315][ T9409] syz.2.1621 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 153.403586][ T9411] FAULT_INJECTION: forcing a failure. [ 153.403586][ T9411] name failslab, interval 1, probability 0, space 0, times 0 [ 153.416318][ T9411] CPU: 1 UID: 0 PID: 9411 Comm: syz.1.1619 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 153.427035][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.437198][ T9411] Call Trace: [ 153.440531][ T9411] [ 153.443453][ T9411] dump_stack_lvl+0xf2/0x150 [ 153.448056][ T9411] dump_stack+0x15/0x1a [ 153.452210][ T9411] should_fail_ex+0x223/0x230 [ 153.456891][ T9411] should_failslab+0x8f/0xb0 [ 153.461480][ T9411] kmem_cache_alloc_node_noprof+0x59/0x320 [ 153.467358][ T9411] ? __alloc_skb+0x10b/0x310 [ 153.471935][ T9411] ? __rtnl_unlock+0x99/0xb0 [ 153.476618][ T9411] __alloc_skb+0x10b/0x310 [ 153.481036][ T9411] netlink_ack+0xef/0x4f0 [ 153.485358][ T9411] ? __dev_queue_xmit+0x186/0x2090 [ 153.490459][ T9411] netlink_rcv_skb+0x19c/0x230 [ 153.495213][ T9411] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.500667][ T9411] rtnetlink_rcv+0x1c/0x30 [ 153.505128][ T9411] netlink_unicast+0x599/0x670 [ 153.509882][ T9411] netlink_sendmsg+0x5cc/0x6e0 [ 153.514664][ T9411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.519944][ T9411] __sock_sendmsg+0x140/0x180 [ 153.524641][ T9411] ____sys_sendmsg+0x312/0x410 [ 153.529396][ T9411] __sys_sendmsg+0x19d/0x230 [ 153.534099][ T9411] __x64_sys_sendmsg+0x46/0x50 [ 153.538930][ T9411] x64_sys_call+0x2734/0x2dc0 [ 153.543937][ T9411] do_syscall_64+0xc9/0x1c0 [ 153.548458][ T9411] ? clear_bhb_loop+0x55/0xb0 [ 153.553203][ T9411] ? clear_bhb_loop+0x55/0xb0 [ 153.557871][ T9411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.563799][ T9411] RIP: 0033:0x7f665bd0ff19 [ 153.568205][ T9411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.587873][ T9411] RSP: 002b:00007f665a381058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.596277][ T9411] RAX: ffffffffffffffda RBX: 00007f665bed5fa0 RCX: 00007f665bd0ff19 [ 153.604237][ T9411] RDX: 000000000400c804 RSI: 0000000020000040 RDI: 0000000000000003 [ 153.612259][ T9411] RBP: 00007f665a3810a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.620225][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.628238][ T9411] R13: 0000000000000000 R14: 00007f665bed5fa0 R15: 00007ffdf7b9e1c8 [ 153.636205][ T9411] [ 153.824676][ T9437] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.831141][ T9435] loop4: detected capacity change from 0 to 1024 [ 153.841129][ T9437] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 153.853878][ T9439] FAULT_INJECTION: forcing a failure. [ 153.853878][ T9439] name failslab, interval 1, probability 0, space 0, times 0 [ 153.866672][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.2.1633 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 153.877378][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.887452][ T9439] Call Trace: [ 153.890739][ T9439] [ 153.893755][ T9439] dump_stack_lvl+0xf2/0x150 [ 153.898372][ T9439] dump_stack+0x15/0x1a [ 153.902633][ T9439] should_fail_ex+0x223/0x230 [ 153.907316][ T9439] ? tcf_action_init_1+0x121/0x490 [ 153.912481][ T9439] should_failslab+0x8f/0xb0 [ 153.917089][ T9439] __kmalloc_cache_noprof+0x4e/0x320 [ 153.922387][ T9439] tcf_action_init_1+0x121/0x490 [ 153.927382][ T9439] ? tc_action_load_ops+0x1a9/0x410 [ 153.932595][ T9439] tcf_action_init+0x1cc/0x610 [ 153.937431][ T9439] tc_ctl_action+0x292/0x840 [ 153.942050][ T9439] ? xa_load+0xb9/0xe0 [ 153.946152][ T9439] ? __pfx_tc_ctl_action+0x10/0x10 [ 153.951292][ T9439] rtnetlink_rcv_msg+0x6aa/0x710 [ 153.956247][ T9439] ? ref_tracker_free+0x3a5/0x410 [ 153.961315][ T9439] ? __dev_queue_xmit+0x186/0x2090 [ 153.966447][ T9439] netlink_rcv_skb+0x12c/0x230 [ 153.971238][ T9439] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.976717][ T9439] rtnetlink_rcv+0x1c/0x30 [ 153.981222][ T9439] netlink_unicast+0x599/0x670 [ 153.986006][ T9439] netlink_sendmsg+0x5cc/0x6e0 [ 153.990793][ T9439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.996095][ T9439] __sock_sendmsg+0x140/0x180 [ 154.000797][ T9439] ____sys_sendmsg+0x312/0x410 [ 154.005574][ T9439] __sys_sendmsg+0x19d/0x230 [ 154.010196][ T9439] __x64_sys_sendmsg+0x46/0x50 [ 154.015022][ T9439] x64_sys_call+0x2734/0x2dc0 [ 154.019760][ T9439] do_syscall_64+0xc9/0x1c0 [ 154.024262][ T9439] ? clear_bhb_loop+0x55/0xb0 [ 154.029080][ T9439] ? clear_bhb_loop+0x55/0xb0 [ 154.033752][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.039654][ T9439] RIP: 0033:0x7fd92b2aff19 [ 154.044064][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.063743][ T9439] RSP: 002b:00007fd929927058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.072262][ T9439] RAX: ffffffffffffffda RBX: 00007fd92b475fa0 RCX: 00007fd92b2aff19 [ 154.080293][ T9439] RDX: 0000000000008044 RSI: 0000000020000000 RDI: 0000000000000003 [ 154.088254][ T9439] RBP: 00007fd9299270a0 R08: 0000000000000000 R09: 0000000000000000 [ 154.096296][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.104256][ T9439] R13: 0000000000000000 R14: 00007fd92b475fa0 R15: 00007ffc3addc1c8 [ 154.112260][ T9439] [ 154.122716][ T9435] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.1630: attempt to clear invalid blocks 1634560256 len 1 [ 154.228994][ T9447] loop4: detected capacity change from 0 to 512 [ 154.253851][ T9447] EXT4-fs: Ignoring removed oldalloc option [ 154.270328][ T9451] loop0: detected capacity change from 0 to 512 [ 154.278540][ T9447] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1635: Parent and EA inode have the same ino 15 [ 154.293922][ T9447] EXT4-fs (loop4): Remounting filesystem read-only [ 154.300625][ T9447] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 154.301340][ T9451] EXT4-fs: Ignoring removed oldalloc option [ 154.310991][ T9447] EXT4-fs (loop4): 1 orphan inode deleted [ 154.322688][ T9447] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 154.356220][ T9451] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1637: Parent and EA inode have the same ino 15 [ 154.373244][ T9462] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.381152][ T9451] EXT4-fs (loop0): Remounting filesystem read-only [ 154.387743][ T9451] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 154.398267][ T9451] EXT4-fs (loop0): 1 orphan inode deleted [ 154.404692][ T9451] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 154.424772][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1642'. [ 154.434115][ T9466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.441333][ T9466] IPv6: NLM_F_CREATE should be set when creating new route [ 154.448580][ T9466] IPv6: NLM_F_CREATE should be set when creating new route [ 154.455808][ T9466] IPv6: NLM_F_CREATE should be set when creating new route [ 154.493709][ T9469] loop0: detected capacity change from 0 to 512 [ 154.499366][ T9473] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 154.542001][ T9477] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 154.565022][ T9477] GUP no longer grows the stack in syz.0.1646 (9477): 20004000-2000a000 (20002000) [ 154.574444][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.1646 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 154.585159][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 154.585873][ T9479] loop4: detected capacity change from 0 to 512 [ 154.595257][ T9477] Call Trace: [ 154.595268][ T9477] [ 154.595276][ T9477] dump_stack_lvl+0xf2/0x150 [ 154.609795][ T9479] EXT4-fs: Ignoring removed oldalloc option [ 154.612710][ T9477] dump_stack+0x15/0x1a [ 154.612746][ T9477] __get_user_pages+0x209b/0x2670 [ 154.627976][ T9477] ? __rcu_read_unlock+0x4e/0x70 [ 154.632926][ T9477] get_user_pages_remote+0x1df/0x790 [ 154.638321][ T9477] __access_remote_vm+0x15b/0x580 [ 154.643347][ T9477] access_remote_vm+0x34/0x50 [ 154.648052][ T9477] proc_pid_cmdline_read+0x3e6/0x660 [ 154.653384][ T9477] vfs_readv+0x3e2/0x660 [ 154.657621][ T9477] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 154.663535][ T9477] __x64_sys_preadv+0xf4/0x1c0 [ 154.668340][ T9477] x64_sys_call+0x2680/0x2dc0 [ 154.673038][ T9477] do_syscall_64+0xc9/0x1c0 [ 154.677562][ T9477] ? clear_bhb_loop+0x55/0xb0 [ 154.682278][ T9477] ? clear_bhb_loop+0x55/0xb0 [ 154.686986][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.692888][ T9477] RIP: 0033:0x7fca12e8ff19 [ 154.697351][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.716953][ T9477] RSP: 002b:00007fca11501058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 154.725420][ T9477] RAX: ffffffffffffffda RBX: 00007fca13055fa0 RCX: 00007fca12e8ff19 [ 154.733403][ T9477] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 [ 154.741364][ T9477] RBP: 00007fca12f03cc8 R08: 00000000fffffff9 R09: 0000000000000000 [ 154.749327][ T9477] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 154.757287][ T9477] R13: 0000000000000000 R14: 00007fca13055fa0 R15: 00007ffc6ca83898 [ 154.765301][ T9477] [ 154.784190][ T9483] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1648'. [ 154.784698][ T9477] loop0: detected capacity change from 0 to 1024 [ 154.801104][ T9477] EXT4-fs: Ignoring removed nobh option [ 154.806860][ T9477] EXT4-fs: Ignoring removed orlov option [ 154.831911][ T9490] loop2: detected capacity change from 0 to 512 [ 154.858147][ T9479] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.1645: Parent and EA inode have the same ino 15 [ 154.873229][ T9479] EXT4-fs (loop4): Remounting filesystem read-only [ 154.879978][ T9479] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 154.893384][ T9479] EXT4-fs (loop4): 1 orphan inode deleted [ 154.900010][ T9479] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 154.902421][ T9497] loop0: detected capacity change from 0 to 512 [ 154.924376][ T9500] loop2: detected capacity change from 0 to 256 [ 154.935816][ T9497] EXT4-fs: Ignoring removed oldalloc option [ 154.942650][ T3837] ================================================================== [ 154.950743][ T3837] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 154.958126][ T3837] [ 154.960438][ T3837] write to 0xffff8881006310ae of 1 bytes by task 9500 on cpu 0: [ 154.968054][ T3837] set_blocksize+0x215/0x270 [ 154.972638][ T3837] sb_min_blocksize+0x63/0xe0 [ 154.977302][ T3837] fat_fill_super+0x33a/0x1bf0 [ 154.982051][ T3837] vfat_fill_super+0x24/0x30 [ 154.986635][ T3837] get_tree_bdev_flags+0x29f/0x310 [ 154.991762][ T3837] get_tree_bdev+0x1f/0x30 [ 154.996172][ T3837] vfat_get_tree+0x1c/0x30 [ 155.000578][ T3837] vfs_get_tree+0x56/0x1e0 [ 155.004984][ T3837] do_new_mount+0x227/0x690 [ 155.009482][ T3837] path_mount+0x49b/0xb30 [ 155.013813][ T3837] __se_sys_mount+0x27c/0x2d0 [ 155.018486][ T3837] __x64_sys_mount+0x67/0x80 [ 155.023082][ T3837] x64_sys_call+0x2c84/0x2dc0 [ 155.027766][ T3837] do_syscall_64+0xc9/0x1c0 [ 155.032266][ T3837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.038167][ T3837] [ 155.040478][ T3837] read to 0xffff8881006310ae of 1 bytes by task 3837 on cpu 1: [ 155.048009][ T3837] do_mpage_readpage+0x55/0xcb0 [ 155.052857][ T3837] mpage_readahead+0x1ad/0x2d0 [ 155.057618][ T3837] blkdev_readahead+0x1c/0x30 [ 155.062287][ T3837] read_pages+0xa0/0x540 [ 155.066525][ T3837] page_cache_ra_unbounded+0x2b8/0x310 [ 155.071976][ T3837] page_cache_sync_ra+0x252/0x670 [ 155.076987][ T3837] filemap_get_pages+0x2c1/0x10e0 [ 155.082003][ T3837] filemap_read+0x221/0x6a0 [ 155.086498][ T3837] blkdev_read_iter+0x20e/0x2c0 [ 155.091341][ T3837] vfs_read+0x5dc/0x700 [ 155.095489][ T3837] ksys_read+0xe8/0x1b0 [ 155.099636][ T3837] __x64_sys_read+0x42/0x50 [ 155.104130][ T3837] x64_sys_call+0x2874/0x2dc0 [ 155.108797][ T3837] do_syscall_64+0xc9/0x1c0 [ 155.113291][ T3837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.119181][ T3837] [ 155.121487][ T3837] value changed: 0x0c -> 0x09 [ 155.126145][ T3837] [ 155.128452][ T3837] Reported by Kernel Concurrency Sanitizer on: [ 155.134584][ T3837] CPU: 1 UID: 0 PID: 3837 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 155.144833][ T3837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.154877][ T3837] ================================================================== [ 155.193889][ T9497] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1651: Parent and EA inode have the same ino 15 [ 155.215431][ T9497] EXT4-fs (loop0): Remounting filesystem read-only [ 155.222012][ T9497] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 155.232100][ T9497] EXT4-fs (loop0): 1 orphan inode deleted [ 155.238278][ T9497] SELinux: (dev loop0, type ext4) getxattr errno 5