last executing test programs: 7.790085333s ago: executing program 2 (id=11404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000040007301"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2401, 0x0) r1 = io_uring_setup(0x6e88, &(0x7f0000000080)={0x0, 0x4db0, 0x2, 0x6, 0x1e}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000500040000000800000001000000a22fed488922e99dfd4b52883b378f80000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.553761985s ago: executing program 2 (id=11406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000000000f3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000050000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$trusted_overlay_redirect(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/225) 7.369207011s ago: executing program 2 (id=11407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 7.323634566s ago: executing program 2 (id=11408): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810f090000000000000001"], 0x24}}, 0x0) 7.27399163s ago: executing program 2 (id=11410): socket$netlink(0x10, 0x3, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="040000000000800008000000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r5 = open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) r7 = syz_open_pts(r5, 0x10000) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r8, 0x7, 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r11, @ANYBLOB="00006b746769643d0092", @ANYRES64=r11, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x3e, &(0x7f0000000000)=0xb, 0x4) sendmsg(r12, &(0x7f00000029c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0}, 0x0) syz_clone3(&(0x7f0000000740)={0x21096c000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000640)=0x0, {0x1c}, &(0x7f0000000680)=""/13, 0xd, &(0x7f00000006c0)=""/25, &(0x7f0000000700)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x7, {r5}}, 0x58) r14 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, r15, r15) r16 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfd, 0x80}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000001a40)={0x38ac, 0x3c, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x127, 0xcc, 0x0, 0x1, [@generic="e4d290830cd5762d662f5e3ec4de8b1879e3dbca691caafc73edd2a693b8b738d2d4da2ccb47e36e321c994471c874a20732e7f73dd8ac48923bcf64b3f3f8d9c1f687ff9fe0c4777e8e8e86f29f006eab8e5a5f98544d3b984f37108800458ea2edd5fefbcb8ec2f23650150387c8d1af2cd8c281e43456ff55576803a90ec125dbd3cd", @typed={0xc, 0x14a, 0x0, 0x0, @u64=0x74e008b7}, @typed={0x5, 0xbb, 0x0, 0x0, @str='\x00'}, @generic="7a8b1448c8071816f4ae182f1d821877923d1678feb45c835f1488796547ef582fd6cce8237fdb805a905bac28d454eadad0d40b234c28aafef98d02768c18500de9cc07dfc299d1c093db20d9885c5ce3e8d8f038a9876e8c00605c70e2db8a4c8ef784ca5c6a8520987b1b7231c3c173574d2ba7cb375b678621d679424efa0fbe73ca15382ef0c66385"]}, @generic="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", @nested={0x34c, 0x98, 0x0, 0x1, [@generic="9422cb07198f74c1fddbbf50518b602cd56f3a335954dc5513932145f8b4fd73015dd17141cb6195fb8a9cf1a1adb59eef753766c43f4630739eda6844ca92e730215e646f4197fb985c5e18ceccf5edf9e1035403b61c1681fc20bf790cefa9cecc32b0820240188b6b83896f3443e516a410a788fd7e0d73051807a51e4fa4db5852af715023d94f7a", @generic="72f0ae14a0b1a3d6bd449869f1bf348c3c3c6f19899617055446532c8aa928b7f942c5833e18db29b1dfe7a7bedbe0b5ba3ff5403043301434c7d45e2d09556147e71ebf727603843a8a8aa1a7778f63eaa2e546a387b8df88aaf108ad5331f528192570882aa5fe9e647bca01706e34d9cc2bf996f9634f03bf652f45fe2663238e486c75aaf93099a5f26fa007ad086e176a61631f6c859c68dd4079745b07229949cededf58f38231d0d61568a1dc5621ef342b419f083a93e17e64a6cdb81a43e7a467f087d1faffb46ad95a0c05f9a4dcd789e2d065b6fdf97c068d7cfbc0", @typed={0xde, 0xe9, 0x0, 0x0, @binary="f672fb0d9b36f7910170c3e00b3fcfb3953c460e8feb72b68704e847fe4f2a6de5d1d967c9dac8c56f8dbc188c4a276474a8a3a4e8976fe5168f6572ceb5c776162889428ab82ef46b0d3d5730b80afe774567b9e50d07655ecc90ec9c48322b65391c141449ca578b868f2a8b57c6f93d02c0bffce0275a92c7c2f6a213ebcd8f38a011e676a8060a9429e2ed5ed3fcfdaa434ea901ad06cf901efefd4c0c8c49bd339aaccde14aa1d576a29d59d18c6bdf7a49e69b2a4752fd8bc70123550f04b8e374133aaa4af585747c9ee1e73c084c7c3e7a27a4d80a70"}, @generic="8f2929ac9865267a4c12bc3b24420c118d9d4c8530f8348d88a2419c6f57fea3ad1b1ab67ab6e1a1457b6ba9465f83c779d1db3fd82d1d27b25fd43222a23a670ff45515da85d86b978b58ecfd1a66ac6a06915273b9849792a13d3e1acc63b2d0f83212d82b7d85892637ee6f4dc23a7b2f302f61da5d0a4dbebcafa753915979437b562bd5bc1b060f6f67aae1e09c1d246ea95150b9e3e1229e947ed1abf384e72b78b83ea5aa98aaa2eba782fa938c6a1855cb266ce8364dc43d16b433312907ffa49690206c784594a33887d6ad34c14c96854eb327ee298e562a474bda39be117071ffc09bcf7da28a65659e1f117527174ee065a4e0efe9c47f"]}, @generic="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", @typed={0x8, 0xd5, 0x0, 0x0, @pid}, @nested={0x2a1, 0xb1, 0x0, 0x1, [@typed={0x14, 0x15, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, @generic="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", @typed={0x4, 0x99}, @typed={0xf1, 0x3f, 0x0, 0x0, @binary="2a1814865ef96725e4bd0220f9298206fd9cffa8e0863952c688745f0e8ab1faf04ec6f5683ee3ca876f1bc02b66bcd2af86305f9b89bbf37b7d388e5a1d36a51f188c63d81bda2cd34ff38c4e2b578c9af32b6a0db1a4c606c00e3e0311857a6dafc3c2670e4c2b4cc94503a6f51a652b9675a89a83331a8a92e9686e6afc8379cd98a033d608df55ea147d720c8a63aa91f37a20c610d189f160369c9cf307b1b67bb4b732f694ff9dcae93723fcfd6bed134a4a476c01ec6d2351e418d13cdc56d532c65b5630ed151fbaa54c5f0bf0721613bb53ad17ecf77a5551acc20e4e80462fd7aaf30cc2f947dac1"}, @generic="4b84a59edcb2841ab1ffd2cd9c912feee121ebc4e23ad19346c8bb8148abe9d99db2a1d68ea66832d0742d9cdfc2b62c9c3232424f8a3a21a737273e8e2de9873820e61248bb399962b3a8011cfcb6f36f9bb301b993194592323881b1c67aa6555fbddeb8b0387ab3cfff702b448f3ddf6604e75ae0d62eea09135d7231a8fea30bd6798a731e4a36dbdec5951957e597a36592"]}, @nested={0x4a, 0x7e, 0x0, 0x1, [@generic="85a3a1ea445fd68e027d810aee75b5a05f3b723995f8dac6d4d4407a6001d7b25fafc2de8f061586d007571cf1e10beaf73543ac570940eb0c587a2aceb75c760cdc54fbb233"]}, @typed={0x8, 0x2d, 0x0, 0x0, @u32=0xfffff24c}, @nested={0x1126, 0xbd, 0x0, 0x1, [@generic="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", @typed={0x8, 0xa2, 0x0, 0x0, @ipv4=@loopback}, @generic, @typed={0x14, 0x140, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x8, 0x32, 0x0, 0x0, @uid=r6}, @generic="24193c974b738e5d4d7b0fb5c01a52a471bbeb5eb9a6a5f829e4", @typed={0x4, 0x30}, @generic="4f261b0d5aa581f9aa1205885c1370ef4b3780f647554fc9b63f8b711b53d49a7550da6fb818b5f47271fc18655c8855241522bdc9155e1523ef591a38a709ffda85445456483667a9495a9afaf06408987379b6952906ce743afaaff27af30ea7391d81c9b80f1a4670c8a0845fb682204fa68318e1af749c094c125dd11d8b8c216b5b258ede9e73d77fe1479497286a06fab499dc1e9b35800f1fd62be0d74bb7e3cbcd9bd627c51bee49b05749082d9c03dcdc0cd66d305178008ca09f1cf614c071c04cd8a4abdce463c87cf5e8fcf85a71740c0b3e3cbe4868e29a3745"]}]}, 0x38ac}, {&(0x7f0000000380)={0x18, 0x21, 0x300, 0x70bd25, 0x25dfdbfb, "", [@generic="91c2", @typed={0x4, 0x29}]}, 0x18}, {&(0x7f0000000480)={0x68, 0x3b, 0x401, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x58, 0x136, 0x0, 0x0, @binary="5735d83eb742e0c07324f0ff0c08bbb8cd9a991a1779f5c249091b130d03aa418edf6c9ef536d7767b5607f842bb287a681f26c0466ea6534c8bba552101cb19140d36a66031c5b5ea11dca676631ddef881fbcc"}]}, 0x68}], 0x3, &(0x7f0000000800)=[@rights={{0x1c, 0x1, 0x1, [r3, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r5, r12, r3]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, r15}}}, @rights={{0x1c, 0x1, 0x1, [r4, r16, r0]}}], 0xa0, 0x40}, 0x8014) 7.008797695s ago: executing program 2 (id=11417): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f00000014c0)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000000056a8850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x2, @val=@tracing}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) 3.354791111s ago: executing program 0 (id=11444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 3.172857088s ago: executing program 0 (id=11446): pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x20000004}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x89) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 2.836274329s ago: executing program 4 (id=11449): r0 = socket(0x10, 0x803, 0x0) write(r0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r2}, 0x18) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) signalfd4(r4, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000006b790095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='user.incfs.size\x00', &(0x7f0000000940)=""/110, 0x6e) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 2.307432488s ago: executing program 4 (id=11455): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd']) 2.306421378s ago: executing program 0 (id=11457): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) chdir(0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="000036c400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 2.230664375s ago: executing program 4 (id=11459): pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x20000004}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f00000000c0)) splice(r0, 0x0, r2, 0x0, 0x8000f28, 0x0) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x89) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 2.025643614s ago: executing program 0 (id=11460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r3) 1.256835545s ago: executing program 4 (id=11462): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r4], 0x30}}, 0x0) 1.150203704s ago: executing program 4 (id=11463): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) dup(r0) 873.89135ms ago: executing program 1 (id=11464): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000a23000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x30, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) unshare(0x8020600) 599.182435ms ago: executing program 4 (id=11465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe79, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000700), 0x200040, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000980)}}, 0x19) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000000000000000238a8aa4b0237500"/35], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1b, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa1000003a023a5665589710000000007010002000008000000b70300000800000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000820000002934040010000000184b0000faffffff0000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x9, &(0x7f0000000580)=""/9, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x26, r6, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xa, 0x5, 0x5}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[r3, r5, r0, r0, r8], &(0x7f0000000d00)=[{0x5, 0x5, 0x6, 0x3}], 0x10, 0x9, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r9, 0xffffff7f}, 0x10) 512.966943ms ago: executing program 1 (id=11466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000000000f3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000050000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$trusted_overlay_redirect(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x0, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/225) 488.602476ms ago: executing program 1 (id=11467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff", @ANYBLOB], 0x48) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) writev(r2, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r2]) (fail_nth: 2) 480.189776ms ago: executing program 3 (id=11468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 427.148531ms ago: executing program 3 (id=11469): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='trans=fd']) 426.611821ms ago: executing program 3 (id=11470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f00000000c0)=""/36, 0x89) 409.634283ms ago: executing program 3 (id=11471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 389.766075ms ago: executing program 3 (id=11472): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 372.578316ms ago: executing program 3 (id=11473): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lchown(&(0x7f00000014c0)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000000056a8850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @short}, 0x80, 0x0}}], 0x1, 0x2, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x6ffffffd, 0x0, 0xfffffffc, 0x15, 0x0, 0x669, 0x1, 0xffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt(r4, 0x1ff, 0x6, &(0x7f0000001ac0)=""/4096, &(0x7f0000000040)=0x1000) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 195.511113ms ago: executing program 1 (id=11474): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) open(0x0, 0xca040, 0x10) unshare(0x46060480) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_notify(0xffffffffffffffff, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000002c0), 0x4) write$sndseq(r0, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9d) 144.364417ms ago: executing program 0 (id=11475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRES32=r3, @ANYRES8=r1, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x81, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r9, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x28, r10, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r5, @ANYRESOCT=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r12}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r13, 0x5608, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x0, 0xffffff00, 0x8, 0x802, r8, 0x8, '\x00', 0x0, r9, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r14}, 0x10) 102.548661ms ago: executing program 0 (id=11476): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x402c5342, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) clock_adjtime(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='hrtimer_start\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x101, 0x0, 0x3, 0x7ffc1ffb}]}) munlock(&(0x7f0000fed000/0x11000)=nil, 0x11000) munlockall() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc94a180, 0x0, 0xfeb0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 36.115797ms ago: executing program 1 (id=11477): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 0s ago: executing program 1 (id=11478): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) llistxattr(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="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", 0x5c5}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): filesystem 00000000-0000-0000-0000-000000000000. [ 938.371969][ T6763] loop3: detected capacity change from 0 to 512 [ 938.387612][ T6766] netlink: 'syz.1.10649': attribute type 21 has an invalid length. [ 938.402013][ T6757] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 938.422089][ T6763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.473430][ T6757] EXT4-fs (loop2): orphan cleanup on readonly fs [ 938.507537][ T6763] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 938.510168][ T6757] __quota_error: 152 callbacks suppressed [ 938.510187][ T6757] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 938.534002][ T6757] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 938.573294][ T6757] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 938.582949][ T6757] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10638: bg 0: block 40: padding at end of block bitmap is not set [ 938.608424][ T444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.618039][ T6757] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 938.632773][ T6757] EXT4-fs (loop2): 1 truncate cleaned up [ 938.638653][ T29] audit: type=1400 audit(1726801436.360:36800): avc: denied { read } for pid=6764 comm="syz.1.10649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 938.659739][ T6757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 938.676412][ T6757] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 938.691640][ T29] audit: type=1400 audit(1726801436.420:36801): avc: denied { ioctl } for pid=6764 comm="syz.1.10649" path="socket:[132138]" dev="sockfs" ino=132138 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 938.792936][ T6800] loop3: detected capacity change from 0 to 512 [ 938.801867][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 938.826377][ T6800] syz.3.10659[6800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 938.826515][ T6800] syz.3.10659[6800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 938.886525][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10660'. [ 938.910680][ T6800] siw: device registration error -23 [ 938.925816][ T29] audit: type=1326 audit(1726801436.650:36802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 938.949581][ T29] audit: type=1326 audit(1726801436.650:36803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 938.977313][ T29] audit: type=1326 audit(1726801436.700:36804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 938.986785][ T444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.001339][ T29] audit: type=1326 audit(1726801436.700:36805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 939.034161][ T29] audit: type=1326 audit(1726801436.700:36806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 939.057785][ T29] audit: type=1326 audit(1726801436.700:36807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 939.081583][ T29] audit: type=1326 audit(1726801436.710:36808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.4.10655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 939.245401][ T4247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.295250][ T6819] loop2: detected capacity change from 0 to 512 [ 939.338478][ T6819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.363583][ T6819] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 939.405014][ T4247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.424017][ T6830] 9pnet_fd: Insufficient options for proto=fd [ 939.674176][ T6851] 9pnet_fd: Insufficient options for proto=fd [ 939.727350][ T6856] loop0: detected capacity change from 0 to 512 [ 939.748216][ T6856] ext4: Unknown parameter 'euid>00000000000000060928' [ 939.781218][ T6860] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 939.929465][ T6877] loop2: detected capacity change from 0 to 512 [ 939.977140][ T6877] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 940.000205][ T6881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10687'. [ 940.017238][ T6877] EXT4-fs (loop2): orphan cleanup on readonly fs [ 940.057942][ T6877] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 940.091241][ T6889] loop3: detected capacity change from 0 to 512 [ 940.098015][ T6889] ext4: Unknown parameter 'euid>00000000000000060928' [ 940.118847][ T6877] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 940.144326][ T6891] 9pnet_fd: Insufficient options for proto=fd [ 940.149799][ T6877] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10675: bg 0: block 40: padding at end of block bitmap is not set [ 940.188548][ T6877] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 940.214993][ T6877] EXT4-fs (loop2): 1 truncate cleaned up [ 940.236208][ T6877] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 940.343636][ T6905] loop4: detected capacity change from 0 to 512 [ 940.380699][ T6905] syz.4.10698[6905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.380848][ T6905] syz.4.10698[6905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.548730][ T6905] siw: device registration error -23 [ 940.578489][ T6910] loop1: detected capacity change from 0 to 512 [ 940.636606][ T6910] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.684155][ T6914] syz.4.10700[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.684245][ T6914] syz.4.10700[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.756330][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10700'. [ 940.842622][ T6927] loop4: detected capacity change from 0 to 512 [ 940.862809][ T6927] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.907648][ T6934] can: request_module (can-proto-0) failed. [ 940.959556][ T6939] can: request_module (can-proto-0) failed. [ 941.104409][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10714'. [ 941.156301][ T6960] loop4: detected capacity change from 0 to 512 [ 941.167614][ T6960] ext4: Unknown parameter 'euid>00000000000000060928' [ 941.252465][ T6966] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 941.273049][ T6967] loop2: detected capacity change from 0 to 512 [ 941.283840][ T6966] loop0: detected capacity change from 0 to 1024 [ 941.298740][ T6966] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 941.311829][ T6966] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 941.323182][ T6966] EXT4-fs error (device loop0): ext4_get_journal_inode:5740: inode #32: comm syz.0.10717: iget: special inode unallocated [ 941.340530][ T6966] EXT4-fs (loop0): no journal found [ 941.345812][ T6966] EXT4-fs (loop0): can't get journal size [ 941.360059][ T6967] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 941.374290][ T6966] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.10717: iget: special inode unallocated [ 941.409477][ T6967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 941.420704][ T6966] EXT4-fs (loop0): failed to initialize system zone (-117) [ 941.442409][ T6966] EXT4-fs (loop0): mount failed [ 941.459285][ T6967] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 941.513261][ T6967] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 941.549982][ T6967] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10712: bg 0: block 40: padding at end of block bitmap is not set [ 941.585216][ T6967] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 941.605186][ T6967] EXT4-fs (loop2): 1 truncate cleaned up [ 941.625336][ T6967] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 941.909225][ T6987] loop3: detected capacity change from 0 to 512 [ 941.918878][ T6987] syz.3.10725[6987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 941.919085][ T6987] syz.3.10725[6987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 941.946370][ T6987] siw: device registration error -23 [ 941.964106][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.973389][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.982164][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.990833][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.999393][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.002162][ T6995] loop3: detected capacity change from 0 to 512 [ 942.014325][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.015975][ T6995] ext4: Unknown parameter 'euid>00000000000000060928' [ 942.093677][ T6999] loop3: detected capacity change from 0 to 512 [ 942.110007][ T6999] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 942.294461][ T7010] can: request_module (can-proto-0) failed. [ 942.751021][ T7016] syz.2.10735[7016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 942.751163][ T7016] syz.2.10735[7016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.789833][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 944.789852][ T29] audit: type=1400 audit(1726801442.520:37054): avc: denied { unlink } for pid=4531 comm="syz-executor" name="file0" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 944.862492][ T7025] loop2: detected capacity change from 0 to 512 [ 944.868088][ T7024] loop3: detected capacity change from 0 to 512 [ 944.875356][ T7024] ext4: Unknown parameter 'euid>00000000000000060928' [ 944.893026][ T7025] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.916011][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10736'. [ 944.929998][ T7035] loop4: detected capacity change from 0 to 512 [ 944.999613][ T7039] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 945.008274][ T7039] unsupported nla_type 65024 [ 945.012616][ T7035] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 945.031439][ T7040] loop1: detected capacity change from 0 to 512 [ 945.039510][ T29] audit: type=1326 audit(1726801442.770:37055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.063255][ T29] audit: type=1326 audit(1726801442.770:37056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.086907][ T29] audit: type=1326 audit(1726801442.770:37057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.110515][ T29] audit: type=1326 audit(1726801442.770:37058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.134165][ T29] audit: type=1326 audit(1726801442.770:37059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.157805][ T29] audit: type=1326 audit(1726801442.770:37060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.181418][ T29] audit: type=1326 audit(1726801442.770:37061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.210941][ T29] audit: type=1326 audit(1726801442.930:37062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.234707][ T29] audit: type=1326 audit(1726801442.930:37063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7036 comm="syz.2.10743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 945.282639][ T7040] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 945.344556][ T7053] netlink: 'syz.4.10748': attribute type 21 has an invalid length. [ 945.412999][ T7059] loop1: detected capacity change from 0 to 128 [ 945.652960][ T7076] syz.1.10755[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.653086][ T7076] syz.1.10755[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.773402][ T7091] netlink: 'syz.1.10762': attribute type 21 has an invalid length. [ 945.812071][ T7094] netlink: 'syz.0.10763': attribute type 21 has an invalid length. [ 945.900182][ T7104] can: request_module (can-proto-0) failed. [ 946.007835][ T7124] netlink: 'syz.3.10775': attribute type 21 has an invalid length. [ 946.045706][ T7129] netlink: 'syz.2.10777': attribute type 21 has an invalid length. [ 946.064765][ T7131] can: request_module (can-proto-0) failed. [ 946.090300][ T7134] syz.3.10779[7134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.090387][ T7134] syz.3.10779[7134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 946.106612][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.129701][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.321759][ T7151] netlink: 'syz.4.10786': attribute type 21 has an invalid length. [ 946.333789][ T7153] loop1: detected capacity change from 0 to 512 [ 946.348821][ T7153] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.471835][ T7171] loop4: detected capacity change from 0 to 1024 [ 946.481903][ T7171] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 946.491856][ T7171] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 946.502970][ T7171] EXT4-fs (loop4): invalid journal inode [ 946.509055][ T7171] EXT4-fs (loop4): can't get journal size [ 946.525159][ T7171] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.10794: blocks 48-48 from inode overlap system zone [ 946.539623][ T7171] EXT4-fs (loop4): failed to initialize system zone (-117) [ 946.546958][ T7171] EXT4-fs (loop4): mount failed [ 946.572502][ T7182] netlink: 'syz.4.10799': attribute type 21 has an invalid length. [ 946.600604][ T7186] loop1: detected capacity change from 0 to 512 [ 946.607341][ T7186] ext4: Unknown parameter 'euid>00000000000000060928' [ 946.745301][ T7199] can: request_module (can-proto-0) failed. [ 946.959084][ T7222] 9pnet_fd: Insufficient options for proto=fd [ 947.000899][ T7227] syz.2.10813[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.001005][ T7227] syz.2.10813[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.190552][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 947.236105][ T7241] netlink: 'syz.4.10817': attribute type 21 has an invalid length. [ 947.324228][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.331345][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.357933][ T7213] bridge_slave_0: entered allmulticast mode [ 947.381757][ T7213] bridge_slave_0: entered promiscuous mode [ 947.420171][ T7258] syz.2.10823[7258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.420295][ T7258] syz.2.10823[7258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.445582][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.464199][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.474707][ T7213] bridge_slave_1: entered allmulticast mode [ 947.481389][ T7213] bridge_slave_1: entered promiscuous mode [ 947.504110][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.513859][ T2708] bridge_slave_1: left allmulticast mode [ 947.517517][ T7262] syz.2.10824[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.519666][ T2708] bridge_slave_1: left promiscuous mode [ 947.519691][ T7262] syz.2.10824[7262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 947.531242][ T2708] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.557200][ T2708] bridge_slave_0: left allmulticast mode [ 947.562934][ T2708] bridge_slave_0: left promiscuous mode [ 947.568606][ T2708] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.581955][ T2708] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 947.608585][ T2708] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 947.669224][ T2708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.696891][ T2708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.723350][ T2708] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 947.734229][ T2708] bond0 (unregistering): Released all slaves [ 947.745078][ T2708] bond1 (unregistering): Released all slaves [ 947.768634][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.797920][ T7213] team0: Port device team_slave_0 added [ 947.810369][ T7213] team0: Port device team_slave_1 added [ 947.827298][ T2708] tipc: Disabling bearer [ 947.833151][ T2708] tipc: Left network mode [ 947.843586][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.846068][ T7279] loop3: detected capacity change from 0 to 256 [ 947.850733][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.869688][ T7279] msdos: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 947.882873][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.930834][ T7215] coredump: 1159(syz.3.10812): written to core: VMAs: 29, size 89030656; core: 60007086 bytes, pos 89038848 [ 947.949964][ T2708] hsr_slave_0: left promiscuous mode [ 947.959504][ T2708] hsr_slave_1: left promiscuous mode [ 947.965549][ T2708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.974400][ T7291] 9pnet_fd: Insufficient options for proto=fd [ 948.006639][ T2708] pim6reg (unregistering): left allmulticast mode [ 948.101013][ T2708] team0 (unregistering): Port device team_slave_1 removed [ 948.127832][ T2708] team0 (unregistering): Port device team_slave_0 removed [ 948.181511][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.188555][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.214619][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.248803][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10833'. [ 948.269803][ T7213] hsr_slave_0: entered promiscuous mode [ 948.276196][ T7213] hsr_slave_1: entered promiscuous mode [ 948.282683][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.293351][ T7213] Cannot create hsr debugfs directory [ 948.469440][ T7318] FAULT_INJECTION: forcing a failure. [ 948.469440][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.477032][ T2708] IPVS: stop unused estimator thread 0... [ 948.482721][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.4.10835 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 948.500228][ T7318] Tainted: [W]=WARN [ 948.504036][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 948.514156][ T7318] Call Trace: [ 948.517439][ T7318] [ 948.520419][ T7318] dump_stack_lvl+0xf2/0x150 [ 948.525162][ T7318] dump_stack+0x15/0x20 [ 948.529355][ T7318] should_fail_ex+0x229/0x230 [ 948.534131][ T7318] should_fail+0xb/0x10 [ 948.538307][ T7318] should_fail_usercopy+0x1a/0x20 [ 948.543420][ T7318] strncpy_from_user+0x25/0x270 [ 948.548359][ T7318] __se_sys_fremovexattr+0xcd/0x250 [ 948.553665][ T7318] __x64_sys_fremovexattr+0x31/0x40 [ 948.558921][ T7318] x64_sys_call+0x2779/0x2d60 [ 948.563621][ T7318] do_syscall_64+0xc9/0x1c0 [ 948.568205][ T7318] ? clear_bhb_loop+0x55/0xb0 [ 948.572899][ T7318] ? clear_bhb_loop+0x55/0xb0 [ 948.577598][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.583581][ T7318] RIP: 0033:0x7f7e803ddef9 [ 948.588003][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.607638][ T7318] RSP: 002b:00007f7e7f051038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 948.616060][ T7318] RAX: ffffffffffffffda RBX: 00007f7e80595f80 RCX: 00007f7e803ddef9 [ 948.624032][ T7318] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 948.632050][ T7318] RBP: 00007f7e7f051090 R08: 0000000000000000 R09: 0000000000000000 [ 948.640036][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.648012][ T7318] R13: 0000000000000000 R14: 00007f7e80595f80 R15: 00007fff0eca1978 [ 948.655996][ T7318] [ 948.729328][ T7331] loop4: detected capacity change from 0 to 512 [ 948.787405][ T7331] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 948.797794][ T7213] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 948.804580][ T7336] 9pnet: Could not find request transport: fd0x0000000000000004 [ 948.819736][ T7213] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 948.832722][ T7213] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 948.866436][ T7213] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 948.906690][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10843'. [ 948.921004][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.933704][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.957451][ T7213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 948.968051][ T7213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 948.982865][ T2708] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.990050][ T2708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.999493][ T2708] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.006644][ T2708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.058917][ T7360] loop3: detected capacity change from 0 to 512 [ 949.070582][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.083800][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.105573][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.113817][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10846'. [ 949.124672][ T7360] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 949.207331][ T7213] veth0_vlan: entered promiscuous mode [ 949.223747][ T7213] veth1_vlan: entered promiscuous mode [ 949.243901][ T7213] veth0_macvtap: entered promiscuous mode [ 949.254590][ T7213] veth1_macvtap: entered promiscuous mode [ 949.269438][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.280044][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.289940][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.294063][ T7381] 9pnet: Could not find request transport: fd0x0000000000000004 [ 949.300450][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.317994][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.328876][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.338863][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.349456][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.359333][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.369795][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.379711][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.390151][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.400064][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.410650][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.420656][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.431189][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.442241][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.450931][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10855'. [ 949.460917][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.477990][ T7387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.492054][ T7388] netlink: 'syz.3.10854': attribute type 21 has an invalid length. [ 949.506315][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.516828][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.526759][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.537295][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.547228][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.557751][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.567615][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.578133][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.588019][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 949.598679][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.611957][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.621150][ T7213] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.630101][ T7213] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.638886][ T7213] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.647656][ T7213] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.681531][ T7390] loop2: detected capacity change from 0 to 512 [ 949.744690][ T7397] loop1: detected capacity change from 0 to 2048 [ 949.754589][ T7390] siw: device registration error -23 [ 949.767920][ T7398] can: request_module (can-proto-0) failed. [ 949.778375][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10859'. [ 949.803480][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 949.803497][ T29] audit: type=1400 audit(1726801447.530:37434): avc: denied { setattr } for pid=7396 comm="syz.1.10858" name="blkio.throttle.io_serviced_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 949.922460][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10866'. [ 949.968143][ T7421] loop1: detected capacity change from 0 to 512 [ 949.977646][ T7432] loop4: detected capacity change from 0 to 512 [ 949.999341][ T7421] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 950.017353][ T7430] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10869'. [ 950.030008][ T29] audit: type=1326 audit(1726801447.760:37435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.050486][ T7430] loop2: detected capacity change from 0 to 4096 [ 950.053712][ T29] audit: type=1326 audit(1726801447.760:37436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.083593][ T29] audit: type=1326 audit(1726801447.760:37437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.107255][ T29] audit: type=1326 audit(1726801447.760:37438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.107287][ T29] audit: type=1326 audit(1726801447.760:37439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.107321][ T29] audit: type=1326 audit(1726801447.760:37440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.107349][ T29] audit: type=1326 audit(1726801447.760:37441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.107458][ T29] audit: type=1326 audit(1726801447.760:37442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 950.107554][ T29] audit: type=1326 audit(1726801447.760:37443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7429 comm="syz.2.10869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 950.373850][ T7454] can: request_module (can-proto-0) failed. [ 950.381529][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10875'. [ 950.492168][ T7471] loop2: detected capacity change from 0 to 256 [ 950.501720][ T7471] msdos: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 950.510117][ T7468] loop4: detected capacity change from 0 to 512 [ 950.565025][ T7489] 9pnet_fd: Insufficient options for proto=fd [ 950.567680][ T7468] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 950.740181][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10891'. [ 950.749449][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10891'. [ 950.790879][ T7523] sctp: [Deprecated]: syz.0.10895 (pid 7523) Use of int in maxseg socket option. [ 950.790879][ T7523] Use struct sctp_assoc_value instead [ 950.831194][ T7525] bpf_get_probe_write_proto: 18 callbacks suppressed [ 950.831209][ T7525] syz.2.10896[7525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.838219][ T7525] syz.2.10896[7525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 950.855355][ T7528] netlink: 'syz.0.10897': attribute type 21 has an invalid length. [ 950.877469][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10896'. [ 951.103426][ T7546] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 951.115840][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10903'. [ 951.142655][ T7556] FAULT_INJECTION: forcing a failure. [ 951.142655][ T7556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.144246][ T7558] syz.0.10909[7558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.155866][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.4.10908 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 951.156040][ T7558] syz.0.10909[7558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.167287][ T7556] Tainted: [W]=WARN [ 951.167298][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 951.167313][ T7556] Call Trace: [ 951.167320][ T7556] [ 951.167329][ T7556] dump_stack_lvl+0xf2/0x150 [ 951.167371][ T7556] dump_stack+0x15/0x20 [ 951.219634][ T7556] should_fail_ex+0x229/0x230 [ 951.224357][ T7556] should_fail+0xb/0x10 [ 951.228520][ T7556] should_fail_usercopy+0x1a/0x20 [ 951.233690][ T7556] _copy_from_user+0x1e/0xd0 [ 951.238293][ T7556] copy_msghdr_from_user+0x54/0x2a0 [ 951.243503][ T7556] __sys_sendmsg+0x171/0x270 [ 951.248195][ T7556] __x64_sys_sendmsg+0x46/0x50 [ 951.252979][ T7556] x64_sys_call+0x2689/0x2d60 [ 951.257666][ T7556] do_syscall_64+0xc9/0x1c0 [ 951.262185][ T7556] ? clear_bhb_loop+0x55/0xb0 [ 951.266878][ T7556] ? clear_bhb_loop+0x55/0xb0 [ 951.271612][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.277582][ T7556] RIP: 0033:0x7f7e803ddef9 [ 951.282019][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.301766][ T7556] RSP: 002b:00007f7e7f051038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.310260][ T7556] RAX: ffffffffffffffda RBX: 00007f7e80595f80 RCX: 00007f7e803ddef9 [ 951.318279][ T7556] RDX: 0000000000000000 RSI: 0000000020000800 RDI: 0000000000000004 [ 951.326287][ T7556] RBP: 00007f7e7f051090 R08: 0000000000000000 R09: 0000000000000000 [ 951.334269][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.342285][ T7556] R13: 0000000000000000 R14: 00007f7e80595f80 R15: 00007fff0eca1978 [ 951.350277][ T7556] [ 951.434150][ T7573] syz.3.10915[7573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.434267][ T7573] syz.3.10915[7573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 951.479625][ T7578] netlink: 'syz.3.10917': attribute type 21 has an invalid length. [ 951.821709][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10923'. [ 951.833277][ T7612] loop3: detected capacity change from 0 to 512 [ 951.993831][ T7630] can: request_module (can-proto-0) failed. [ 952.071188][ T7636] 9pnet_fd: Insufficient options for proto=fd [ 952.079393][ T7637] 9pnet_fd: Insufficient options for proto=fd [ 952.254656][ T7645] +}[@[7645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 952.254797][ T7645] +}[@[7645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 952.363637][ T7648] FAULT_INJECTION: forcing a failure. [ 952.363637][ T7648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.387647][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.4.10935 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 952.399556][ T7648] Tainted: [W]=WARN [ 952.403450][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 952.413525][ T7648] Call Trace: [ 952.416807][ T7648] [ 952.419739][ T7648] dump_stack_lvl+0xf2/0x150 [ 952.424375][ T7648] dump_stack+0x15/0x20 [ 952.428616][ T7648] should_fail_ex+0x229/0x230 [ 952.433372][ T7648] should_fail+0xb/0x10 [ 952.437531][ T7648] should_fail_usercopy+0x1a/0x20 [ 952.442563][ T7648] _copy_from_user+0x1e/0xd0 [ 952.447200][ T7648] move_addr_to_kernel+0x82/0x120 [ 952.452235][ T7648] __sys_connect+0x74/0x1b0 [ 952.456778][ T7648] __x64_sys_connect+0x41/0x50 [ 952.461560][ T7648] x64_sys_call+0x2220/0x2d60 [ 952.466271][ T7648] do_syscall_64+0xc9/0x1c0 [ 952.470871][ T7648] ? clear_bhb_loop+0x55/0xb0 [ 952.475564][ T7648] ? clear_bhb_loop+0x55/0xb0 [ 952.480265][ T7648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.486180][ T7648] RIP: 0033:0x7f7e803ddef9 [ 952.490607][ T7648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.510261][ T7648] RSP: 002b:00007f7e7f051038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 952.518775][ T7648] RAX: ffffffffffffffda RBX: 00007f7e80595f80 RCX: 00007f7e803ddef9 [ 952.526828][ T7648] RDX: 000000000000000c RSI: 0000000020000000 RDI: 0000000000000003 [ 952.534880][ T7648] RBP: 00007f7e7f051090 R08: 0000000000000000 R09: 0000000000000000 [ 952.542902][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.550878][ T7648] R13: 0000000000000000 R14: 00007f7e80595f80 R15: 00007fff0eca1978 [ 952.558862][ T7648] [ 952.705222][ T7660] loop0: detected capacity change from 0 to 512 [ 952.773703][ T7660] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 952.780070][ T7632] coredump: 1224(syz.3.10928): written to core: VMAs: 29, size 89030656; core: 60007086 bytes, pos 89038848 [ 952.954467][ T7671] netlink: 'syz.0.10944': attribute type 21 has an invalid length. [ 953.041863][ T7633] coredump: 551(syz.2.10929): written to core: VMAs: 29, size 91127808; core: 62108334 bytes, pos 91136000 [ 953.241408][ T7682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10947'. [ 953.277184][ T7687] +}[@[7687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.277256][ T7687] +}[@[7687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 953.338637][ T7692] can: request_module (can-proto-0) failed. [ 953.425315][ T7704] can: request_module (can-proto-0) failed. [ 953.507173][ T7712] can: request_module (can-proto-0) failed. [ 953.514425][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10959'. [ 953.551040][ T7720] loop4: detected capacity change from 0 to 1024 [ 953.558481][ T7720] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 953.568869][ T7720] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 953.580847][ T7720] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: inode #32: comm syz.4.10960: iget: special inode unallocated [ 953.594226][ T7720] EXT4-fs (loop4): no journal found [ 953.599561][ T7720] EXT4-fs (loop4): can't get journal size [ 953.608744][ T7720] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.10960: iget: special inode unallocated [ 953.622444][ T7720] EXT4-fs (loop4): failed to initialize system zone (-117) [ 953.629884][ T7720] EXT4-fs (loop4): mount failed [ 953.729846][ T7731] can: request_module (can-proto-0) failed. [ 953.790366][ T7740] netlink: 'syz.0.10970': attribute type 10 has an invalid length. [ 953.815136][ T7740] team0: Device hsr_slave_0 failed to register rx_handler [ 953.850456][ T7745] loop2: detected capacity change from 0 to 512 [ 953.860111][ T7744] netlink: 'syz.3.10971': attribute type 10 has an invalid length. [ 953.883453][ T7744] team0: Device hsr_slave_0 failed to register rx_handler [ 953.895656][ T7745] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 953.897325][ T7751] loop4: detected capacity change from 0 to 512 [ 953.964142][ T7761] 9pnet_fd: Insufficient options for proto=fd [ 953.995876][ T7765] can: request_module (can-proto-0) failed. [ 954.310379][ T7779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.324086][ T7779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.377780][ T7781] loop1: detected capacity change from 0 to 512 [ 954.384403][ T7781] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 954.492134][ T7791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.500682][ T7791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.746718][ T7797] can: request_module (can-proto-0) failed. [ 954.767943][ T7800] 9pnet_fd: Insufficient options for proto=fd [ 954.847372][ T7814] loop3: detected capacity change from 0 to 512 [ 954.894811][ T7814] siw: device registration error -23 [ 954.909822][ T7822] netlink: 'syz.2.11002': attribute type 21 has an invalid length. [ 954.943589][ T7825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.952988][ T7825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.057809][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 955.057827][ T29] audit: type=1326 audit(1726801452.790:37760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.089063][ T29] audit: type=1326 audit(1726801452.820:37761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.120839][ T29] audit: type=1326 audit(1726801452.840:37762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.144570][ T29] audit: type=1326 audit(1726801452.840:37763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.168328][ T29] audit: type=1326 audit(1726801452.840:37764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.192349][ T29] audit: type=1326 audit(1726801452.840:37765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.216251][ T29] audit: type=1326 audit(1726801452.840:37766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.239939][ T29] audit: type=1326 audit(1726801452.840:37767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.263612][ T29] audit: type=1326 audit(1726801452.840:37768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.287260][ T29] audit: type=1326 audit(1726801452.840:37769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.1.11005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 955.315250][ T7837] netlink: 'syz.1.11008': attribute type 21 has an invalid length. [ 955.323328][ T7839] __nla_validate_parse: 5 callbacks suppressed [ 955.323358][ T7839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11007'. [ 955.530967][ T7845] netlink: 'syz.1.11010': attribute type 21 has an invalid length. [ 955.774574][ T7870] sctp: [Deprecated]: syz.0.11020 (pid 7870) Use of int in maxseg socket option. [ 955.774574][ T7870] Use struct sctp_assoc_value instead [ 955.829634][ T7875] netlink: 'syz.0.11023': attribute type 1 has an invalid length. [ 955.959262][ T7894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11032'. [ 955.968479][ T7894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11032'. [ 956.008973][ T7901] sctp: [Deprecated]: syz.3.11034 (pid 7901) Use of int in maxseg socket option. [ 956.008973][ T7901] Use struct sctp_assoc_value instead [ 956.054773][ T7905] netlink: 'syz.3.11037': attribute type 1 has an invalid length. [ 956.102535][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11038'. [ 956.251161][ T7926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11045'. [ 956.373146][ T7938] netlink: 'syz.4.11049': attribute type 1 has an invalid length. [ 956.422512][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11050'. [ 956.527891][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11055'. [ 956.552604][ T7956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11057'. [ 956.662385][ T7969] loop4: detected capacity change from 0 to 1024 [ 956.670175][ T7969] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 956.680474][ T7969] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 956.691175][ T7969] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: inode #32: comm syz.4.11062: iget: special inode unallocated [ 956.708816][ T7969] EXT4-fs (loop4): no journal found [ 956.714168][ T7969] EXT4-fs (loop4): can't get journal size [ 956.739317][ T7969] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.11062: iget: special inode unallocated [ 956.758275][ T7977] bpf_get_probe_write_proto: 14 callbacks suppressed [ 956.758296][ T7977] +}[@[7977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.765187][ T7977] +}[@[7977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.784561][ T7969] EXT4-fs (loop4): failed to initialize system zone (-117) [ 956.808333][ T7969] EXT4-fs (loop4): mount failed [ 956.886124][ T7983] netlink: 'syz.4.11066': attribute type 21 has an invalid length. [ 956.903486][ T7985] syz.0.11067[7985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.903558][ T7985] syz.0.11067[7985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.916745][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.940706][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.968870][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11068'. [ 957.012152][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11069'. [ 957.165961][ T8003] netlink: 'syz.2.11075': attribute type 1 has an invalid length. [ 957.217473][ T7963] coredump: 90(syz.1.11059): written to core: VMAs: 29, size 91127808; core: 62104238 bytes, pos 91136000 [ 957.360672][ T8015] loop1: detected capacity change from 0 to 1024 [ 957.367640][ T8015] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 957.377543][ T8015] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 957.388107][ T8015] EXT4-fs error (device loop1): ext4_get_journal_inode:5740: inode #32: comm syz.1.11080: iget: special inode unallocated [ 957.401028][ T8015] EXT4-fs (loop1): no journal found [ 957.406256][ T8015] EXT4-fs (loop1): can't get journal size [ 957.412875][ T8015] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.11080: iget: special inode unallocated [ 957.426172][ T8015] EXT4-fs (loop1): failed to initialize system zone (-117) [ 957.433445][ T8015] EXT4-fs (loop1): mount failed [ 957.488222][ T8023] loop1: detected capacity change from 0 to 764 [ 957.494097][ T8025] +}[@[8025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 957.494629][ T8025] +}[@[8025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 957.517554][ T8023] rock: directory entry would overflow storage [ 957.523730][ T8023] rock: sig=0x4654, size=5, remaining=4 [ 957.527271][ T8020] loop0: detected capacity change from 0 to 512 [ 957.545941][ T8020] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 957.582801][ T8020] EXT4-fs mount: 46 callbacks suppressed [ 957.582819][ T8020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.605479][ T8020] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.11081: corrupted inode contents [ 957.620189][ T8020] EXT4-fs error (device loop0): ext4_dirty_inode:6011: inode #2: comm syz.0.11081: mark_inode_dirty error [ 957.632622][ T8020] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.11081: corrupted inode contents [ 957.667885][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 957.717124][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 957.741862][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 957.766544][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 957.767165][ T8038] rock: directory entry would overflow storage [ 957.793322][ T8038] rock: sig=0x4f50, size=4, remaining=3 [ 957.798981][ T8038] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 957.807731][ T8037] netlink: 'syz.3.11087': attribute type 1 has an invalid length. [ 957.816862][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 957.846733][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 957.890864][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /279/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 957.901368][ T8042] loop3: detected capacity change from 0 to 764 [ 957.990061][ T8042] rock: directory entry would overflow storage [ 957.996343][ T8042] rock: sig=0x4654, size=5, remaining=4 [ 958.161949][ T8045] loop4: detected capacity change from 0 to 512 [ 958.177401][ T8045] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 958.404312][ T8051] syz.2.11091[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.404379][ T8051] syz.2.11091[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 958.440246][ T8051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.475041][ T8051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.491400][ T8049] rock: directory entry would overflow storage [ 958.497693][ T8049] rock: sig=0x4f50, size=4, remaining=3 [ 958.503273][ T8049] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 958.861093][ T8045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.098955][ T8044] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz.4.11090: corrupted inode contents [ 959.129995][ T8044] EXT4-fs error (device loop4): ext4_dirty_inode:6011: inode #2: comm syz.4.11090: mark_inode_dirty error [ 959.162800][ T8044] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz.4.11090: corrupted inode contents [ 959.284095][ T3063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.359123][ T8058] loop4: detected capacity change from 0 to 1024 [ 959.386410][ T8058] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 959.416324][ T8058] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 959.436940][ T8058] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: inode #32: comm syz.4.11093: iget: special inode unallocated [ 959.486829][ T8058] EXT4-fs (loop4): no journal found [ 959.492111][ T8058] EXT4-fs (loop4): can't get journal size [ 959.521593][ T8058] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.11093: iget: special inode unallocated [ 959.565607][ T8058] EXT4-fs (loop4): failed to initialize system zone (-117) [ 959.590064][ T8058] EXT4-fs (loop4): mount failed [ 959.853993][ T8075] loop4: detected capacity change from 0 to 512 [ 959.871382][ T8075] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 959.925822][ T8079] netlink: 'syz.3.11098': attribute type 1 has an invalid length. [ 959.971418][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.006509][ T8075] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz.4.11097: corrupted inode contents [ 960.032231][ T8075] EXT4-fs error (device loop4): ext4_dirty_inode:6011: inode #2: comm syz.4.11097: mark_inode_dirty error [ 960.061656][ T8075] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz.4.11097: corrupted inode contents [ 960.129608][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 960.161084][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 960.229583][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 960.283413][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 960.362260][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 960.406002][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 960.439252][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 960.439269][ T29] audit: type=1326 audit(1726801458.120:38025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.469184][ T29] audit: type=1326 audit(1726801458.120:38026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.492750][ T29] audit: type=1326 audit(1726801458.120:38027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.516385][ T29] audit: type=1326 audit(1726801458.120:38028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f907fc2c890 code=0x7ffc0000 [ 960.540071][ T29] audit: type=1326 audit(1726801458.120:38029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f907fc2c890 code=0x7ffc0000 [ 960.563692][ T29] audit: type=1326 audit(1726801458.120:38030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.587377][ T29] audit: type=1326 audit(1726801458.120:38031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.610870][ T29] audit: type=1326 audit(1726801458.120:38032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.634551][ T29] audit: type=1326 audit(1726801458.120:38033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.658128][ T29] audit: type=1326 audit(1726801458.130:38034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 960.717716][ T8092] 9pnet_fd: Insufficient options for proto=fd [ 960.842321][ T3063] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /379/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 960.949092][ T8097] loop1: detected capacity change from 0 to 512 [ 960.967715][ T8097] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 961.053839][ T8097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 961.095141][ T8097] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.11104: corrupted inode contents [ 961.139759][ T8097] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #2: comm syz.1.11104: mark_inode_dirty error [ 961.167455][ T4531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.209729][ T8097] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.11104: corrupted inode contents [ 961.312975][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 961.339043][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 961.390727][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 961.408334][ T8091] coredump: 620(syz.2.11102): written to core: VMAs: 29, size 89030656; core: 60011182 bytes, pos 89038848 [ 961.423738][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 961.447148][ T8114] sctp: [Deprecated]: syz.0.11109 (pid 8114) Use of int in maxseg socket option. [ 961.447148][ T8114] Use struct sctp_assoc_value instead [ 961.451254][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 961.509677][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 961.590730][ T7213] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /41/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 961.900044][ T8128] can: request_module (can-proto-0) failed. [ 962.041623][ T8138] loop3: detected capacity change from 0 to 512 [ 962.059790][ T8138] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 962.069569][ T8141] loop0: detected capacity change from 0 to 512 [ 962.079243][ T8138] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 962.096718][ T8138] EXT4-fs (loop3): orphan cleanup on readonly fs [ 962.113929][ T8141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.129454][ T8138] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 962.159842][ T8141] syz.0.11120[8141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.159916][ T8141] syz.0.11120[8141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.179631][ T8138] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 962.237869][ T8141] siw: device registration error -23 [ 962.245687][ T8138] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.11119: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 962.278153][ T4531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.441005][ T8138] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.11119: couldn't read orphan inode 13 (err -117) [ 962.479133][ T8138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 962.563329][ T8138] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 962.583379][ T8138] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm +}[@: deleted inode referenced: 12 [ 962.611782][ T8138] EXT4-fs error (device loop3): ext4_lookup:1815: inode #2: comm +}[@: deleted inode referenced: 12 [ 962.653267][ T444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.682889][ T8157] loop2: detected capacity change from 0 to 1024 [ 962.696911][ T8157] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 962.736435][ T8157] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 962.748652][ T8161] syz.3.11127[8161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.748832][ T8161] syz.3.11127[8161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.760870][ T8157] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: inode #32: comm syz.2.11126: iget: special inode unallocated [ 962.797159][ T8157] EXT4-fs (loop2): no journal found [ 962.802412][ T8157] EXT4-fs (loop2): can't get journal size [ 962.812656][ T8157] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #32: comm syz.2.11126: iget: special inode unallocated [ 962.867129][ T8157] EXT4-fs (loop2): failed to initialize system zone (-117) [ 962.883198][ T8157] EXT4-fs (loop2): mount failed [ 963.022325][ T8177] loop3: detected capacity change from 0 to 1024 [ 963.047189][ T8177] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 963.066684][ T8177] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 963.076893][ T8180] can: request_module (can-proto-0) failed. [ 963.107220][ T8177] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: inode #32: comm syz.3.11134: iget: special inode unallocated [ 963.138271][ T8185] netlink: 'syz.0.11137': attribute type 21 has an invalid length. [ 963.147285][ T8177] EXT4-fs (loop3): no journal found [ 963.152547][ T8177] EXT4-fs (loop3): can't get journal size [ 963.177651][ T8177] EXT4-fs error (device loop3): ext4_protect_reserved_inode:160: inode #32: comm syz.3.11134: iget: special inode unallocated [ 963.211008][ T8177] EXT4-fs (loop3): failed to initialize system zone (-117) [ 963.228735][ T8177] EXT4-fs (loop3): mount failed [ 963.246338][ T8191] syz.0.11139[8191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.246442][ T8191] syz.0.11139[8191] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.261453][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11140'. [ 963.378756][ T8200] loop0: detected capacity change from 0 to 512 [ 963.392611][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11141'. [ 963.407067][ T8205] loop3: detected capacity change from 0 to 512 [ 963.414365][ T8200] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 963.430913][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.445048][ T8205] syz.3.11143[8205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.445149][ T8205] syz.3.11143[8205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 963.467735][ T8200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.520528][ T8200] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.11142: corrupted inode contents [ 963.553785][ T8200] EXT4-fs error (device loop0): ext4_dirty_inode:6011: inode #2: comm syz.0.11142: mark_inode_dirty error [ 963.580892][ T8205] siw: device registration error -23 [ 963.596766][ T8200] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz.0.11142: corrupted inode contents [ 963.634567][ T444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.667992][ T8217] loop2: detected capacity change from 0 to 256 [ 963.697527][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 963.757279][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 963.777380][ T8223] Process accounting resumed [ 963.797847][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 963.804978][ T8223] loop3: detected capacity change from 0 to 1024 [ 963.839617][ T8223] EXT4-fs: Ignoring removed nobh option [ 963.845334][ T8223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 963.846778][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 963.852015][ T8223] ext4: Bad value for 'resgid' [ 963.877461][ T8223] ext4: Bad value for 'resgid' [ 963.902655][ T8217] FAT-fs (loop2): Directory bread(block 64) failed [ 963.909307][ T8217] FAT-fs (loop2): Directory bread(block 65) failed [ 963.915910][ T8217] FAT-fs (loop2): Directory bread(block 66) failed [ 963.923506][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 963.958372][ T8217] FAT-fs (loop2): Directory bread(block 67) failed [ 963.964985][ T8217] FAT-fs (loop2): Directory bread(block 68) failed [ 963.966973][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11149'. [ 963.987741][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 964.016610][ T8217] FAT-fs (loop2): Directory bread(block 69) failed [ 964.023177][ T8217] FAT-fs (loop2): Directory bread(block 70) failed [ 964.047292][ T8217] FAT-fs (loop2): Directory bread(block 71) failed [ 964.053958][ T4531] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /292/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 964.086661][ T8217] FAT-fs (loop2): Directory bread(block 72) failed [ 964.093452][ T8217] FAT-fs (loop2): Directory bread(block 73) failed [ 964.116822][ T8227] netlink: 'syz.3.11150': attribute type 21 has an invalid length. [ 964.188643][ T8217] syz.2.11146: attempt to access beyond end of device [ 964.188643][ T8217] loop2: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 964.268705][ T8217] syz.2.11146: attempt to access beyond end of device [ 964.268705][ T8217] loop2: rw=2049, sector=1228, nr_sectors = 4 limit=256 [ 964.282481][ T8217] Buffer I/O error on dev loop2, logical block 307, lost async page write [ 964.326646][ T8217] syz.2.11146: attempt to access beyond end of device [ 964.326646][ T8217] loop2: rw=2049, sector=1232, nr_sectors = 60 limit=256 [ 965.202138][ T8253] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11157'. [ 965.242231][ T8255] can: request_module (can-proto-0) failed. [ 965.384314][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11161'. [ 965.489946][ T8273] loop3: detected capacity change from 0 to 512 [ 965.508197][ T8273] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 965.555024][ T8273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.571706][ T8273] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.11164: corrupted inode contents [ 965.583851][ T8273] EXT4-fs error (device loop3): ext4_dirty_inode:6011: inode #2: comm syz.3.11164: mark_inode_dirty error [ 965.596856][ T8273] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.11164: corrupted inode contents [ 965.647787][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 965.709964][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 965.774290][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 965.835891][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 965.879467][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 965.900849][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 965.907064][ T29] audit: type=1326 audit(1726801463.630:38121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 965.930712][ T29] audit: type=1326 audit(1726801463.630:38122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 965.961305][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 966.018815][ T444] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /567/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 966.026593][ T29] audit: type=1326 audit(1726801463.680:38123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.063160][ T29] audit: type=1326 audit(1726801463.680:38124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.087021][ T29] audit: type=1326 audit(1726801463.680:38125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.110747][ T29] audit: type=1326 audit(1726801463.680:38126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.134354][ T29] audit: type=1326 audit(1726801463.680:38127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.158027][ T29] audit: type=1326 audit(1726801463.680:38128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.181640][ T29] audit: type=1326 audit(1726801463.680:38129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 966.205252][ T29] audit: type=1326 audit(1726801463.680:38130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8281 comm="syz.2.11167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907fc2def9 code=0x7ffc0000 [ 967.169741][ T8297] 9pnet_fd: Insufficient options for proto=fd [ 968.200453][ T3063] EXT4-fs error: 11 callbacks suppressed [ 968.200470][ T3063] EXT4-fs error (device loop4): ext4_do_update_inode:5151: inode #2: comm syz-executor: corrupted inode contents [ 968.258696][ T3063] EXT4-fs error (device loop4): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 968.317677][ T3063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.465176][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11175'. [ 968.861419][ T8316] 9pnet_fd: Insufficient options for proto=fd [ 969.003837][ T4531] EXT4-fs error: 11 callbacks suppressed [ 969.003858][ T4531] EXT4-fs error (device loop0): ext4_do_update_inode:5151: inode #2: comm syz-executor: corrupted inode contents [ 969.024137][ T4531] EXT4-fs error (device loop0): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 969.049469][ T4531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.145662][ T8325] +}[@[8325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.145728][ T8325] +}[@[8325] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.226246][ T8327] netlink: 'syz.0.11179': attribute type 21 has an invalid length. [ 969.388868][ T8335] loop0: detected capacity change from 0 to 1024 [ 969.407740][ T8335] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 969.434257][ T8335] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 969.460644][ T8335] EXT4-fs error (device loop0): ext4_get_journal_inode:5740: inode #32: comm syz.0.11183: iget: special inode unallocated [ 969.502759][ T8335] EXT4-fs (loop0): no journal found [ 969.508042][ T8335] EXT4-fs (loop0): can't get journal size [ 969.589807][ T8340] sctp: [Deprecated]: syz.4.11185 (pid 8340) Use of int in maxseg socket option. [ 969.589807][ T8340] Use struct sctp_assoc_value instead [ 969.604432][ T8335] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.11183: iget: special inode unallocated [ 969.664503][ T8335] EXT4-fs (loop0): failed to initialize system zone (-117) [ 969.706650][ T8335] EXT4-fs (loop0): mount failed [ 969.761448][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11187'. [ 969.783450][ T7213] EXT4-fs error: 11 callbacks suppressed [ 969.783468][ T7213] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz-executor: corrupted inode contents [ 969.829181][ T7213] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 969.847225][ T7213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.888461][ T8358] loop1: detected capacity change from 0 to 512 [ 969.929787][ T8358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.956662][ T8358] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.988430][ T8358] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11108: bg 0: block 128: padding at end of block bitmap is not set [ 970.038315][ T8319] coredump: 709(syz.2.11177): written to core: VMAs: 31, size 91258880; core: 62116638 bytes, pos 91267072 [ 970.039322][ T8358] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.11108: Failed to acquire dquot type 1 [ 970.185778][ T7213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.262109][ T8382] netlink: 'syz.0.11196': attribute type 1 has an invalid length. [ 970.529345][ T8394] can: request_module (can-proto-0) failed. [ 970.553160][ T8397] netlink: 'syz.1.11201': attribute type 21 has an invalid length. [ 970.564541][ T8398] 9pnet_fd: Insufficient options for proto=fd [ 970.648200][ T8400] loop2: detected capacity change from 0 to 2048 [ 970.708310][ T8400] Alternate GPT is invalid, using primary GPT. [ 970.714617][ T8400] loop2: p1 p2 p3 [ 970.742841][ T8400] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 971.019474][ T8420] can: request_module (can-proto-0) failed. [ 971.189712][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 971.189729][ T29] audit: type=1326 audit(1726801468.920:38917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.456618][ T29] audit: type=1326 audit(1726801468.960:38918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.480419][ T29] audit: type=1326 audit(1726801468.960:38919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.504147][ T29] audit: type=1326 audit(1726801468.960:38920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.527836][ T29] audit: type=1326 audit(1726801468.960:38921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.551602][ T29] audit: type=1326 audit(1726801468.960:38922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.575238][ T29] audit: type=1326 audit(1726801468.960:38923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.598850][ T29] audit: type=1326 audit(1726801468.960:38924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.622507][ T29] audit: type=1326 audit(1726801468.960:38925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 971.646083][ T29] audit: type=1326 audit(1726801468.960:38926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8423 comm="syz.1.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f08360ddef9 code=0x7ffc0000 [ 972.158397][ T8443] 9pnet_fd: Insufficient options for proto=fd [ 972.172135][ T8459] can: request_module (can-proto-0) failed. [ 972.246440][ T444] EXT4-fs error: 11 callbacks suppressed [ 972.246457][ T444] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz-executor: corrupted inode contents [ 972.264279][ T444] EXT4-fs error (device loop3): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 972.277748][ T444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.309265][ T8389] coredump: 709(syz.0.11198): written to core: VMAs: 29, size 91127808; core: 62108334 bytes, pos 91136000 [ 972.325988][ T8466] loop4: detected capacity change from 0 to 512 [ 972.370984][ T8470] sctp: [Deprecated]: syz.0.11226 (pid 8470) Use of int in maxseg socket option. [ 972.370984][ T8470] Use struct sctp_assoc_value instead [ 972.413756][ T8466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.438694][ T8466] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 972.524535][ T3063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.548704][ T8478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8478 comm=syz.4.11228 [ 972.571080][ T8478] loop4: detected capacity change from 0 to 1764 [ 972.883012][ T8497] netlink: 'syz.1.11236': attribute type 1 has an invalid length. [ 972.947415][ T8450] coredump: 729(syz.2.11219): written to core: VMAs: 31, size 91258880; core: 62116638 bytes, pos 91267072 [ 972.970507][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11238'. [ 972.997524][ T8504] 9pnet_fd: Insufficient options for proto=fd [ 973.148504][ T8513] +}[@[8513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 973.150031][ T8513] +}[@[8513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 973.293117][ T8532] sctp: [Deprecated]: syz.1.11252 (pid 8532) Use of int in maxseg socket option. [ 973.293117][ T8532] Use struct sctp_assoc_value instead [ 973.330946][ T8525] loop2: detected capacity change from 0 to 512 [ 973.361732][ T8525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 973.375043][ T8525] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 973.432714][ T4247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 973.487836][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11263'. [ 973.687405][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11277'. [ 974.045121][ T8634] 9pnet_fd: Insufficient options for proto=fd [ 974.201395][ T8643] loop1: detected capacity change from 0 to 2048 [ 974.237816][ T8643] Alternate GPT is invalid, using primary GPT. [ 974.244199][ T8643] loop1: p1 p2 p3 [ 974.300145][ T8649] can: request_module (can-proto-0) failed. [ 974.322398][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11308'. [ 974.437286][ T8674] netlink: 'syz.0.11316': attribute type 21 has an invalid length. [ 974.503094][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11320'. [ 974.558867][ T8689] +}[@[8689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.559029][ T8689] +}[@[8689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 974.640187][ T8701] loop4: detected capacity change from 0 to 512 [ 974.681137][ T8701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.696726][ T8701] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.718774][ T8714] 9pnet_fd: Insufficient options for proto=fd [ 974.750392][ T8701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11329: bg 0: block 128: padding at end of block bitmap is not set [ 974.774101][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11334'. [ 974.790872][ T8701] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.11329: Failed to acquire dquot type 1 [ 974.819876][ T8719] can: request_module (can-proto-0) failed. [ 974.880764][ T3063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.097652][ T8756] can: request_module (can-proto-0) failed. [ 975.126277][ T8761] loop4: detected capacity change from 0 to 512 [ 975.151003][ T8761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.164300][ T8761] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 975.213467][ T8761] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11350: bg 0: block 128: padding at end of block bitmap is not set [ 975.226773][ T8704] coredump: 753(syz.0.11327): written to core: VMAs: 29, size 89030656; core: 60011182 bytes, pos 89038848 [ 975.230302][ T8761] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.11350: Failed to acquire dquot type 1 [ 975.324931][ T8771] netlink: 'syz.1.11353': attribute type 21 has an invalid length. [ 975.345316][ T3063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 975.406856][ T8777] loop1: detected capacity change from 0 to 1024 [ 975.413703][ T8777] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 975.423471][ T8777] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 975.434147][ T8777] EXT4-fs error (device loop1): ext4_get_journal_inode:5740: inode #32: comm syz.1.11355: iget: special inode unallocated [ 975.447544][ T8777] EXT4-fs (loop1): no journal found [ 975.452755][ T8777] EXT4-fs (loop1): can't get journal size [ 975.459742][ T8777] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.11355: iget: special inode unallocated [ 975.472980][ T8777] EXT4-fs (loop1): failed to initialize system zone (-117) [ 975.480709][ T8777] EXT4-fs (loop1): mount failed [ 975.562217][ T8794] can: request_module (can-proto-0) failed. [ 975.639536][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11364'. [ 975.736157][ T8810] loop1: detected capacity change from 0 to 1764 [ 975.816738][ T8812] netlink: 'syz.2.11366': attribute type 21 has an invalid length. [ 975.931996][ T8822] loop3: detected capacity change from 0 to 512 [ 975.950548][ T8822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 975.963465][ T8822] syz.3.11371[8822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 975.963608][ T8822] syz.3.11371[8822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 976.005577][ T8822] siw: device registration error -23 [ 976.036980][ T444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.082830][ T8839] can: request_module (can-proto-0) failed. [ 976.104638][ T8844] +}[@[8844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 976.104787][ T8844] +}[@[8844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 976.164239][ T8850] netlink: 'syz.3.11381': attribute type 21 has an invalid length. [ 976.205590][ T8852] netlink: 'syz.3.11382': attribute type 21 has an invalid length. [ 976.367352][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 976.367370][ T29] audit: type=1326 audit(1726801474.100:39465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.398413][ T29] audit: type=1326 audit(1726801474.130:39466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.422395][ T29] audit: type=1326 audit(1726801474.130:39467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.446178][ T29] audit: type=1326 audit(1726801474.130:39468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.470098][ T29] audit: type=1326 audit(1726801474.130:39469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.493890][ T29] audit: type=1326 audit(1726801474.130:39470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.517870][ T29] audit: type=1326 audit(1726801474.130:39471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.542546][ T29] audit: type=1326 audit(1726801474.130:39472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.566359][ T29] audit: type=1326 audit(1726801474.130:39473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.590098][ T29] audit: type=1326 audit(1726801474.130:39474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.0.11383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf1a4adef9 code=0x7ffc0000 [ 976.755632][ T8879] 9pnet_fd: Insufficient options for proto=fd [ 976.804065][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 976.838444][ T8885] loop4: detected capacity change from 0 to 512 [ 976.851044][ T8885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.864361][ T8885] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 976.877625][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.884724][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.893619][ T8867] bridge_slave_0: entered allmulticast mode [ 976.900707][ T8867] bridge_slave_0: entered promiscuous mode [ 976.909266][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.916441][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.924020][ T8867] bridge_slave_1: entered allmulticast mode [ 976.931078][ T8867] bridge_slave_1: entered promiscuous mode [ 976.948412][ T3063] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.971879][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.983468][ T2710] bridge_slave_1: left allmulticast mode [ 976.989342][ T2710] bridge_slave_1: left promiscuous mode [ 976.995296][ T2710] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.004140][ T2710] bridge_slave_0: left allmulticast mode [ 977.009833][ T2710] bridge_slave_0: left promiscuous mode [ 977.015478][ T2710] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.088665][ T2710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 977.097517][ T2710] bond_slave_0: left promiscuous mode [ 977.103799][ T2710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.113055][ T2710] bond_slave_1: left promiscuous mode [ 977.120636][ T2710] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 977.129610][ T2710] macvlan2: left promiscuous mode [ 977.134736][ T2710] team0: left promiscuous mode [ 977.139622][ T2710] team_slave_0: left promiscuous mode [ 977.145054][ T2710] team_slave_1: left promiscuous mode [ 977.151512][ T2710] team0: left allmulticast mode [ 977.156409][ T2710] team_slave_0: left allmulticast mode [ 977.162064][ T2710] team_slave_1: left allmulticast mode [ 977.169178][ T2710] bond0 (unregistering): Released all slaves [ 977.181170][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.202084][ T8867] team0: Port device team_slave_0 added [ 977.213699][ T2710] hsr_slave_0: left promiscuous mode [ 977.219484][ T2710] hsr_slave_1: left promiscuous mode [ 977.225290][ T2710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.273150][ T2710] team0 (unregistering): Port device team_slave_1 removed [ 977.283910][ T2710] team0 (unregistering): Port device team_slave_0 removed [ 977.324682][ T8867] team0: Port device team_slave_1 added [ 977.344995][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.352126][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.378087][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.391730][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.398766][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.424822][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.435768][ T8906] netlink: 'syz.0.11394': attribute type 21 has an invalid length. [ 977.462351][ T8867] hsr_slave_0: entered promiscuous mode [ 977.468627][ T8867] hsr_slave_1: entered promiscuous mode [ 977.474647][ T8867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 977.482285][ T8867] Cannot create hsr debugfs directory [ 977.761680][ T8867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 977.770988][ T8867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 977.783305][ T8867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 977.793049][ T8867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 977.802201][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11397'. [ 977.843318][ T8919] loop1: detected capacity change from 0 to 512 [ 977.862212][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.871482][ T8919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 977.874923][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.888516][ T8919] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 977.913047][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.920190][T10955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.920906][ T8919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.11398: bg 0: block 128: padding at end of block bitmap is not set [ 977.946043][ T2714] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.953128][ T2714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.963222][ T8919] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.11398: Failed to acquire dquot type 1 [ 978.093229][ T8938] loop2: detected capacity change from 0 to 512 [ 978.108969][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.149591][ T8938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.171573][ T8938] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 978.231540][ T4247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.272004][ T8867] veth0_vlan: entered promiscuous mode [ 978.281615][ T8867] veth1_vlan: entered promiscuous mode [ 978.301641][ T8867] veth0_macvtap: entered promiscuous mode [ 978.313708][ T8867] veth1_macvtap: entered promiscuous mode [ 978.325549][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.336141][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.346092][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.356599][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.366418][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.377140][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.387078][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.397528][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.407380][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.417819][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.427665][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.438188][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.448087][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.458578][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.468483][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.478936][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.488917][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.499429][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.523235][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.543256][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.553758][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.563609][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.574143][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.583982][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.594427][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.604362][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.614807][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.624690][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.635135][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.652345][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.662955][ T8867] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.671917][ T8867] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.680833][ T8867] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.689708][ T8867] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.765933][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11408'. [ 978.839919][ T8967] loop2: detected capacity change from 0 to 512 [ 978.849546][ T8967] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 978.904884][ T8967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.946106][ T8967] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.11410: corrupted inode contents [ 978.973907][ T8967] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #2: comm syz.2.11410: mark_inode_dirty error [ 979.000272][ T8967] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz.2.11410: corrupted inode contents [ 979.019138][ T7213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.034853][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 979.035432][ T8984] loop3: detected capacity change from 0 to 512 [ 979.062669][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 979.084844][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 979.108294][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 979.122955][ T8984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.131791][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 979.141999][ T8984] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.172577][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 979.189110][ T8984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.11415: bg 0: block 128: padding at end of block bitmap is not set [ 979.211811][ T8984] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.11415: Failed to acquire dquot type 1 [ 979.211822][ T4247] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /333/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 979.283358][ T8867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.321355][ T9001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11420'. [ 979.372378][ T9005] loop3: detected capacity change from 0 to 128 [ 979.384019][ T9005] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 979.396295][ T9005] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.603361][ T9016] loop0: detected capacity change from 0 to 512 [ 979.644702][ T8867] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 979.660620][ T9016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.673248][ T9016] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.696770][ T9016] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.11426: bg 0: block 128: padding at end of block bitmap is not set [ 979.721970][ T9016] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.11426: Failed to acquire dquot type 1 [ 979.744106][ T9022] loop3: detected capacity change from 0 to 512 [ 979.756454][ T9022] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 979.856010][ T9022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.890532][ T9022] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.11427: corrupted inode contents [ 979.911145][ T9022] EXT4-fs error (device loop3): ext4_dirty_inode:6011: inode #2: comm syz.3.11427: mark_inode_dirty error [ 979.935424][ T9022] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz.3.11427: corrupted inode contents [ 980.030227][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 980.100084][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 980.129014][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 980.185039][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 980.228478][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 980.281289][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 980.312251][ T8867] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz-executor: path /9/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 980.465114][ T9015] syz.0.11426 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 980.476275][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.0.11426 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 980.488248][ T9015] Tainted: [W]=WARN [ 980.492057][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 980.502119][ T9015] Call Trace: [ 980.505404][ T9015] [ 980.508346][ T9015] dump_stack_lvl+0xf2/0x150 [ 980.513033][ T9015] dump_stack+0x15/0x20 [ 980.517217][ T9015] dump_header+0x83/0x2d0 [ 980.521613][ T9015] oom_kill_process+0x341/0x4c0 [ 980.526546][ T9015] out_of_memory+0x9af/0xbe0 [ 980.531156][ T9015] ? __rcu_read_unlock+0x4e/0x70 [ 980.536203][ T9015] mem_cgroup_out_of_memory+0x13e/0x190 [ 980.541805][ T9015] try_charge_memcg+0x51b/0x810 [ 980.546682][ T9015] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 980.552771][ T9015] __read_swap_cache_async+0x2b7/0x520 [ 980.558246][ T9015] swap_cluster_readahead+0x276/0x3f0 [ 980.563754][ T9015] swapin_readahead+0xe4/0x760 [ 980.568608][ T9015] ? __filemap_get_folio+0x420/0x5b0 [ 980.573928][ T9015] ? swap_cache_get_folio+0x77/0x210 [ 980.579315][ T9015] do_swap_page+0x3da/0x1ef0 [ 980.583930][ T9015] ? cgroup_rstat_updated+0x99/0x550 [ 980.589316][ T9015] ? __rcu_read_lock+0x36/0x50 [ 980.594105][ T9015] ? pte_offset_map_nolock+0x124/0x1d0 [ 980.599621][ T9015] handle_mm_fault+0x8c5/0x2a40 [ 980.604513][ T9015] exc_page_fault+0x3b9/0x650 [ 980.609386][ T9015] asm_exc_page_fault+0x26/0x30 [ 980.614284][ T9015] RIP: 0033:0x7fcf1a3819ec [ 980.618751][ T9015] Code: 72 64 0f 1f 40 00 69 3d c6 3c e1 00 e8 03 00 00 48 8d 1d a7 45 2e 00 e8 72 c4 12 00 eb 0c 48 81 c3 d8 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 d8 00 00 [ 980.638372][ T9015] RSP: 002b:00007ffd7f0d68a0 EFLAGS: 00010216 [ 980.644463][ T9015] RAX: 0000000000000000 RBX: 00007fcf1a666058 RCX: 0000000000000000 [ 980.652521][ T9015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558be1c808 [ 980.660495][ T9015] RBP: 00007fcf1a667a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 980.668533][ T9015] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000ef5c8 [ 980.676516][ T9015] R13: 00007ffd7f0d69a0 R14: 0000000000000032 R15: ffffffffffffffff [ 980.684620][ T9015] [ 980.687985][ T9015] memory: usage 307200kB, limit 307200kB, failcnt 2667 [ 980.694891][ T9015] memory+swap: usage 308016kB, limit 9007199254740988kB, failcnt 0 [ 980.702905][ T9015] kmem: usage 307040kB, limit 9007199254740988kB, failcnt 0 [ 980.710244][ T9015] Memory cgroup stats for /syz0: [ 980.714626][ T9015] cache 106496 [ 980.722995][ T9015] rss 0 [ 980.725942][ T9015] shmem 0 [ 980.728952][ T9015] mapped_file 94208 [ 980.732782][ T9015] dirty 98304 [ 980.736082][ T9015] writeback 0 [ 980.739393][ T9015] workingset_refault_anon 6 [ 980.744006][ T9015] workingset_refault_file 2 [ 980.748578][ T9015] swap 835584 [ 980.751868][ T9015] swapcached 4096 [ 980.753647][ T9037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11432'. [ 980.755487][ T9015] pgpgin 716479 [ 980.755497][ T9015] pgpgout 716439 [ 980.755506][ T9015] pgfault 836903 [ 980.775165][ T9015] pgmajfault 11 [ 980.778810][ T9015] inactive_anon 4096 [ 980.782707][ T9015] active_anon 0 [ 980.786414][ T9015] inactive_file 98304 [ 980.790531][ T9015] active_file 61440 [ 980.794345][ T9015] unevictable 0 [ 980.797907][ T9015] hierarchical_memory_limit 314572800 [ 980.803288][ T9015] hierarchical_memsw_limit 9223372036854771712 [ 980.809501][ T9015] total_cache 106496 [ 980.813405][ T9015] total_rss 0 [ 980.816739][ T9015] total_shmem 0 [ 980.820248][ T9015] total_mapped_file 94208 [ 980.824578][ T9015] total_dirty 98304 [ 980.828415][ T9015] total_writeback 0 [ 980.832224][ T9015] total_workingset_refault_anon 6 [ 980.837287][ T9015] total_workingset_refault_file 2 [ 980.842441][ T9015] total_swap 835584 [ 980.846253][ T9015] total_swapcached 4096 [ 980.850448][ T9015] total_pgpgin 716479 [ 980.854435][ T9015] total_pgpgout 716439 [ 980.858551][ T9015] total_pgfault 836903 [ 980.862663][ T9015] total_pgmajfault 11 [ 980.862673][ T9015] total_inactive_anon 4096 [ 980.862680][ T9015] total_active_anon 0 [ 980.862688][ T9015] total_inactive_file 98304 [ 980.862695][ T9015] total_active_file 61440 [ 980.862703][ T9015] total_unevictable 0 [ 980.862710][ T9015] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11426,pid=9015,uid=0 [ 980.902655][ T9015] Memory cgroup out of memory: Killed process 9015 (syz.0.11426) total-vm:86984kB, anon-rss:740kB, file-rss:16036kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 981.259424][ T9059] loop1: detected capacity change from 0 to 764 [ 981.277386][ T9059] rock: directory entry would overflow storage [ 981.283571][ T9059] rock: sig=0x4654, size=5, remaining=4 [ 981.386635][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 981.386654][ T29] audit: type=1326 audit(1726801479.100:40114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.416418][ T29] audit: type=1326 audit(1726801479.100:40115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.440354][ T29] audit: type=1326 audit(1726801479.100:40116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.464224][ T29] audit: type=1326 audit(1726801479.100:40117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.487936][ T29] audit: type=1326 audit(1726801479.100:40118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e803dc890 code=0x7ffc0000 [ 981.511575][ T29] audit: type=1326 audit(1726801479.100:40119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e803dc890 code=0x7ffc0000 [ 981.535333][ T29] audit: type=1326 audit(1726801479.100:40120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.559096][ T29] audit: type=1326 audit(1726801479.100:40121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.588369][ T29] audit: type=1326 audit(1726801479.120:40122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.612140][ T29] audit: type=1326 audit(1726801479.130:40123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9060 comm="syz.4.11441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e803ddef9 code=0x7ffc0000 [ 981.651384][ T4531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.676848][ T9062] 9pnet_fd: Insufficient options for proto=fd [ 981.751325][ T9065] rock: directory entry would overflow storage [ 981.757680][ T9065] rock: sig=0x4f50, size=4, remaining=3 [ 981.763240][ T9065] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 981.929448][ T9069] loop0: detected capacity change from 0 to 512 [ 982.567466][ T9069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.586662][ T9069] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 982.727775][ T4531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.940453][ T9077] loop1: detected capacity change from 0 to 2048 [ 983.007983][ T9077] Alternate GPT is invalid, using primary GPT. [ 983.014337][ T9077] loop1: p1 p2 p3 [ 983.208968][ T9063] coredump: 1011(syz.4.11441): written to core: VMAs: 31, size 89161728; core: 60015390 bytes, pos 89169920 [ 983.561034][ T9093] 9pnet_fd: Insufficient options for proto=fd [ 983.775071][ T9103] 9pnet_fd: Insufficient options for proto=fd [ 983.798033][ T9105] loop0: detected capacity change from 0 to 512 [ 983.828182][ T9105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 983.850161][ T9107] loop1: detected capacity change from 0 to 512 [ 983.859690][ T9105] syz.0.11457[9105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.859849][ T9105] syz.0.11457[9105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 983.871456][ T9107] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 984.011345][ T9105] siw: device registration error -23 [ 984.052522][ T4531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.278487][ T9107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.311777][ T9107] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.11458: corrupted inode contents [ 984.323959][ T9107] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #2: comm syz.1.11458: mark_inode_dirty error [ 984.490318][ T9107] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.11458: corrupted inode contents [ 984.598100][ T7213] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.862808][ T9127] syz.4.11462[9127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 984.862890][ T9127] syz.4.11462[9127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 985.391703][ T4247] EXT4-fs error: 11 callbacks suppressed [ 985.391725][ T4247] EXT4-fs error (device loop2): ext4_do_update_inode:5151: inode #2: comm syz-executor: corrupted inode contents [ 985.440922][ T9137] syz.1.11464[9137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 985.440988][ T9137] syz.1.11464[9137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 985.470916][ T4247] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 985.494546][ T4247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.496461][ T8867] EXT4-fs error: 11 callbacks suppressed [ 985.496478][ T8867] EXT4-fs error (device loop3): ext4_do_update_inode:5151: inode #2: comm syz-executor: corrupted inode contents [ 985.526266][ T8867] EXT4-fs error (device loop3): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 985.539420][ T8867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.599775][ T9149] program syz.1.11467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.610244][ T9149] FAULT_INJECTION: forcing a failure. [ 985.610244][ T9149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.623411][ T9149] CPU: 0 UID: 0 PID: 9149 Comm: syz.1.11467 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 985.631555][ T9153] 9pnet_fd: Insufficient options for proto=fd [ 985.635315][ T9149] Tainted: [W]=WARN [ 985.645360][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 985.655434][ T9149] Call Trace: [ 985.658815][ T9149] [ 985.661801][ T9149] dump_stack_lvl+0xf2/0x150 [ 985.666503][ T9149] dump_stack+0x15/0x20 [ 985.670851][ T9149] should_fail_ex+0x229/0x230 [ 985.675559][ T9149] should_fail+0xb/0x10 [ 985.679734][ T9149] should_fail_usercopy+0x1a/0x20 [ 985.684844][ T9149] _copy_from_user+0x1e/0xd0 [ 985.689538][ T9149] scsi_ioctl+0x11dc/0x1540 [ 985.694085][ T9149] ? avc_has_perm+0xd4/0x160 [ 985.698713][ T9149] ? file_has_perm+0x329/0x370 [ 985.703508][ T9149] ? do_vfs_ioctl+0x96e/0x1530 [ 985.708408][ T9149] sg_ioctl+0xda4/0x1870 [ 985.712772][ T9149] ? __pfx_sg_ioctl+0x10/0x10 [ 985.717506][ T9149] __se_sys_ioctl+0xcd/0x140 [ 985.722131][ T9149] __x64_sys_ioctl+0x43/0x50 [ 985.726774][ T9149] x64_sys_call+0x15cc/0x2d60 [ 985.731508][ T9149] do_syscall_64+0xc9/0x1c0 [ 985.736027][ T9149] ? clear_bhb_loop+0x55/0xb0 [ 985.740803][ T9149] ? clear_bhb_loop+0x55/0xb0 [ 985.745568][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.751471][ T9149] RIP: 0033:0x7f08360ddef9 [ 985.755903][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.775528][ T9149] RSP: 002b:00007f0834d51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 985.784129][ T9149] RAX: ffffffffffffffda RBX: 00007f0836295f80 RCX: 00007f08360ddef9 [ 985.792323][ T9149] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 985.800344][ T9149] RBP: 00007f0834d51090 R08: 0000000000000000 R09: 0000000000000000 [ 985.808362][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.816356][ T9149] R13: 0000000000000000 R14: 00007f0836295f80 R15: 00007ffe68a007a8 [ 985.824378][ T9149] [ 985.941950][ T9168] sctp: [Deprecated]: syz.0.11475 (pid 9168) Use of int in maxseg socket option. [ 985.941950][ T9168] Use struct sctp_assoc_value instead [ 986.054586][ T2714] ================================================================== [ 986.062784][ T2714] BUG: KCSAN: assert: race in dequeue_entities+0x6df/0x760 [ 986.070016][ T2714] [ 986.072373][ T2714] race at unknown origin, with assert no writes to 0xffff8881001cb1e8 of 4 bytes by task 2714 on cpu 1: [ 986.083488][ T2714] dequeue_entities+0x6df/0x760 [ 986.088355][ T2714] pick_next_task_fair+0x7d/0x410 [ 986.093385][ T2714] __schedule+0x27c/0x940 [ 986.097735][ T2714] schedule+0x55/0xc0 [ 986.101727][ T2714] synchronize_rcu_expedited+0x611/0x7a0 [ 986.107366][ T2714] unregister_netdevice_many_notify+0xf13/0x11b0 [ 986.113701][ T2714] unregister_netdevice_many+0x19/0x20 [ 986.119173][ T2714] cleanup_net+0x411/0x810 [ 986.123602][ T2714] process_scheduled_works+0x483/0x9a0 [ 986.129090][ T2714] worker_thread+0x51d/0x6f0 [ 986.133688][ T2714] kthread+0x1d1/0x210 [ 986.137780][ T2714] ret_from_fork+0x4b/0x60 [ 986.142204][ T2714] ret_from_fork_asm+0x1a/0x30 [ 986.146983][ T2714] [ 986.149311][ T2714] value changed: 0x00000000 -> 0x00000001 [ 986.155027][ T2714] [ 986.157348][ T2714] Reported by Kernel Concurrency Sanitizer on: [ 986.163495][ T2714] CPU: 1 UID: 0 PID: 2714 Comm: kworker/u8:17 Tainted: G W 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 986.175564][ T2714] Tainted: [W]=WARN [ 986.179362][ T2714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 986.189438][ T2714] Workqueue: netns cleanup_net [ 986.194223][ T2714] ================================================================== [ 986.400353][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 986.400373][ T29] audit: type=1326 audit(1726801484.130:40489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2f0694ea7 code=0x7ffc0000 [ 986.430590][ T29] audit: type=1326 audit(1726801484.130:40490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2f0639879 code=0x7ffc0000 [ 986.454360][ T29] audit: type=1326 audit(1726801484.130:40491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f069def9 code=0x7ffc0000 [ 986.478172][ T29] audit: type=1326 audit(1726801484.140:40492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2f0694ea7 code=0x7ffc0000 [ 986.501722][ T29] audit: type=1326 audit(1726801484.140:40493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2f0639879 code=0x7ffc0000 [ 986.525373][ T29] audit: type=1326 audit(1726801484.140:40494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f069def9 code=0x7ffc0000 [ 986.549017][ T29] audit: type=1326 audit(1726801484.150:40495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2f0694ea7 code=0x7ffc0000 [ 986.572606][ T29] audit: type=1326 audit(1726801484.150:40496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa2f0639879 code=0x7ffc0000 [ 986.596130][ T29] audit: type=1326 audit(1726801484.150:40497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f069def9 code=0x7ffc0000 [ 986.619730][ T29] audit: type=1326 audit(1726801484.160:40498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.3.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa2f0694ea7 code=0x7ffc0000