last executing test programs: 1m11.703727592s ago: executing program 2 (id=990): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x8000, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r1, &(0x7f00000030c0)=[{0x0}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 1m11.636898692s ago: executing program 2 (id=991): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18103b0100000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r4, 0x4, 0x8070bd2d, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000054) 1m11.575422502s ago: executing program 2 (id=994): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 1m11.502520952s ago: executing program 2 (id=996): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x68040200) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685", 0x2b, 0x4000000, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000010a"], 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100001024f231bea84a422a0a0d0b615790000000000000010000000900010073797a30000000001400009b17f6950000000000000000000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x24040800) recvmmsg(r5, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4205, r7, 0x1, &(0x7f00000006c0)={&(0x7f00000002c0)=""/42, 0x2a}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x9, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) socket$netlink(0x10, 0x3, 0x0) 1m10.583803609s ago: executing program 2 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18103b0100000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r4, 0x4, 0x8070bd2d, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000054) 1m10.022064787s ago: executing program 2 (id=1019): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e700000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a0001046f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 1m9.994497227s ago: executing program 32 (id=1019): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e700000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a0001046f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 45.266904371s ago: executing program 1 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) get_robust_list(r1, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) unlink(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x1725, 0x0, &(0x7f0000000740), &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvfrom$x25(r3, 0x0, 0x0, 0x103, &(0x7f00000007c0), 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 45.190682891s ago: executing program 1 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x1000004, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 45.084485691s ago: executing program 1 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 44.84378751s ago: executing program 1 (id=1704): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @generic={0x1e, "953af30f2fd862d16cb587413dda"}, @nl=@unspec, @hci={0x1f, 0x1, 0x2}, 0xc, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)='veth0_to_bridge\x00', 0x7, 0x96, 0xc}) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000c, &(0x7f0000000040), 0xde, 0x529, &(0x7f00000008c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000c, &(0x7f0000000040), 0xde, 0x529, &(0x7f00000008c0)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x9, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002180), r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0xe}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0xe}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r8, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @mcast1, 0x3ff}, 0x1c) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r9, 0x0, 0x4}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) (async) write$binfmt_elf32(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4604030003000000000000000002003e00000000000103000038000000000000000f000000000020000100040000000000000000000300000008000000f30000008100000004"], 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='snd_soc_jack_irq\x00', r11}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='snd_soc_jack_irq\x00', r11}, 0x18) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) close(r10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 44.7438188s ago: executing program 1 (id=1707): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x4}, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000cff5000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="00000000014006002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6], 0x40}}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pivot_root(0x0, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x138, 0x138, 0x98, 0x98, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0xff0000ff, 0x0, 'geneve1\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x2a}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="51fedb3c3e3e3f43b58643d33c22c68bbec3e73edeb22d2546f89c6e349c8bfd002449d591e67f7d8059f750e8f36cec91c470427c3d0a0e3f9ad53507189407ffe15678ba96a036a96d2f0cf11db957368c7ccf4401bf56ef3a93861c40c64e3cc65f5c83439b2be1253485c90c7a6dc110109a44294318f6efef571441ab8f0523d18841599498654e4df7c515c2ba6bc8a027dee488c8542831ad6af9fa5dbddde81f3228766b0cb9b07dfffd63111f73407ff0f64d61b3f912f54aef", 0xbe}], 0x1, &(0x7f0000000740)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xd, [@private=0xa010101, @multicast2, @multicast1, @empty, @multicast2, @remote, @rand_addr=0x64010102]}, @noop, @noop, @lsrr={0x83, 0xf, 0x20, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x4, [{@multicast1, 0x6}]}, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0xd, [{@empty, 0xffff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x60}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd3}}], 0xa8}, 0x4000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 44.576108979s ago: executing program 1 (id=1712): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x7, 0x8, 0xf77b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 44.57376396s ago: executing program 33 (id=1712): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x7, 0x8, 0xf77b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 34.505031243s ago: executing program 0 (id=1944): socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000380)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 34.436561312s ago: executing program 0 (id=1945): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/227, 0xe3}], 0x1}, 0x0) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 34.403313652s ago: executing program 0 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES8=r1, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000011"], 0x24}}, 0x0) 34.347911012s ago: executing program 0 (id=1948): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xprtrdma_frwr_dereg\x00', 0xffffffffffffffff, 0x0, 0x400001fffffffff}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus/../file0\x00', 0x64) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) getresuid(&(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)=0x0) mount$9p_xen(&(0x7f0000000780), &(0x7f00000007c0)='./file2\x00', &(0x7f0000000800), 0x401, &(0x7f0000000980)={'trans=xen,', {[{@ignoreqv}, {@noextend}, {@fscache}, {@posixacl}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, 'sysfs\x00'}}, {@uid_gt={'uid>', r2}}]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43, 0x4f]}, 0x31) r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x180000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000740)=0x499, 0x4) write$binfmt_register(r4, &(0x7f0000000880)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x57a, 0x3a, 'usta=', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f, 0x0]}, 0x2e) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', 0x0, 0x8000, 0x700, 0x7fffffff, 0x3, {{0x3b, 0x4, 0x3, 0x1a, 0xec, 0x68, 0x0, 0x2, 0x2f, 0x0, @multicast2, @empty, {[@noop, @cipso={0x86, 0x66, 0x0, [{0x6, 0x7, "a5190614f0"}, {0x2, 0x11, "ca83b6f45fa120abb31e0122ab288f"}, {0x7, 0x9, "46093fe2392c6b"}, {0x1, 0xf, "c1de15dedfe8d39e9c2c0e6f67"}, {0x5, 0xc, "f4bde4dba81e03bcf1be"}, {0x5, 0x9, "e588d4310c16dd"}, {0x7, 0xc, "90e54f3f5f57093f3a43"}, {0x5, 0xf, "2a4ad018813946e1baa77e94e0"}]}, @timestamp_prespec={0x44, 0x3c, 0x48, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x2}, {@remote, 0x1}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010102, 0x10001}, {@remote, 0x7}, {@broadcast, 0x80000000}]}, @timestamp_prespec={0x44, 0x1c, 0x13, 0x3, 0x3, [{@multicast2, 0x5}, {@broadcast, 0x8}, {@private=0xa010100, 0x358e}]}, @end, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x5, 0x10, "931e8bff9a89c7f602d71b724935"}]}, @noop, @end]}}}}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000200), 0x0, 0x0, &(0x7f0000000340)=""/72, 0x48}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESHEX=r9], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xac842b7c6966b18c, 0x16, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @generic={0x6, 0x4, 0x3, 0x7, 0x1}, @generic={0x2, 0x6, 0x8, 0x9, 0x445}, @ldst={0x3, 0x2, 0x4, 0x6, 0x8, 0xfffffffffffffff8, 0x1f}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x44, '\x00', r7, @fallback=0xd, r5, 0x8, &(0x7f0000000d40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x4, 0x2, 0xfffffff9}, 0x10, r10, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000dc0)=[{0x3, 0x2, 0xc, 0x9}, {0x2, 0x4, 0x10, 0xb}, {0x4, 0x1, 0x9, 0x9}, {0x4, 0x4, 0xd, 0xa}, {0x1, 0x2, 0x4, 0x6}], 0x10, 0x100, @void, @value}, 0x94) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48010) 33.6411702s ago: executing program 0 (id=1954): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f00003ca000/0x4000)=nil, 0x4000, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 33.36823023s ago: executing program 0 (id=1963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000100000900010073797a30000000000800054000000023200011800e000100636f6e"], 0xa4}}, 0x4) (fail_nth: 9) 33.298841099s ago: executing program 34 (id=1963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000100000900010073797a30000000000800054000000023200011800e000100636f6e"], 0xa4}}, 0x4) (fail_nth: 9) 2.927521338s ago: executing program 5 (id=2502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000004c0), 0x0, 0x20000080, &(0x7f0000000040)={0x11, 0x8100, r3, 0x306, 0x7, 0x6, @remote}, 0x14) 2.816055988s ago: executing program 5 (id=2505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x30385, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x400) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000040)=0xffffffffffff2d76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='mpol=interleave=relativV']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000001380)="0ed9d16f", 0x4, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b32336d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bh}, {}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4ce, &(0x7f0000001f80)="$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") init_module(&(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x49, 0x6, 0x6, 0x5, 0x2, 0x3, 0x1, 0x308, 0x40, 0x30e, 0xffff0bb9, 0x6, 0x38, 0x2, 0x5, 0x40, 0x80}, [{0x2, 0x4, 0x4, 0xe718, 0x100, 0x1, 0xd, 0x5}, {0x4, 0x1, 0x5, 0x8001, 0xfffffffffffff801, 0x6, 0x9}], "ad7bd23a4cdc92bd5a383b21"}, 0xbc, &(0x7f0000000080)='(\x00') add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000500)={0x1, &(0x7f0000000000)=[{0x6}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') 2.580098367s ago: executing program 5 (id=2510): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x2c, &(0x7f0000000400)="170000000200020000ffbe8c5ee17688a2006c008d5f00000000000057fc5ad90200bb6a88000006080000000000000200df01800a000007bdff59100ac457615473a23a65cfe2153de4a18dd47a463ddc7a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2a8084cd36276a3afffb743aea7abbfaa5c22872fb1e158f137a028709464e5aac00c3029a6dea1e8528e856217ede7f254697992500e18", 0xf3) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, &(0x7f0000001dc0)={0xf, 0x70, 0x100000}, 0x20) truncate(&(0x7f0000000b40)='./file1\x00', 0x9) r4 = inotify_init1(0x80000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file1\x00', 0x0, 0x4004, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)=0x0) syz_open_procfs$namespace(r5, &(0x7f0000000340)='ns/mnt\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000100)='ns/time_for_children\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) execve(&(0x7f0000000380)='./file1\x00', &(0x7f0000000680)={[&(0x7f00000003c0)='rpfilter\x00', &(0x7f0000000500)='mangle\x00', &(0x7f0000000540)='MARK\x00', &(0x7f0000000600)='gretap0\x00']}, &(0x7f0000000780)={[&(0x7f00000006c0)='ns/mnt\x00', &(0x7f0000000700)='%#,\x00', &(0x7f0000000740)='devgroup\x00']}) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x438, 0xf0, 0x438, 0x878, 0x230, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'erspan0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r14 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x2d, 0x0, @val=@iter={&(0x7f0000000040)=@task={r7, r8, r1}, 0x10}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r14, 0x4) 1.756198825s ago: executing program 5 (id=2526): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x1, 0x40000}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r7, r7) keyctl$unlink(0x9, r6, r7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x181002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 1.565636644s ago: executing program 5 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x1000004, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1.383212294s ago: executing program 5 (id=2536): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) io_uring_setup(0x1dd4, &(0x7f0000000000)={0x0, 0x61e5, 0x2, 0x2, 0xa6}) syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0xd967, 0x2, 0x2, 0x198}, &(0x7f0000000380), &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.330876663s ago: executing program 3 (id=2537): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000004e0000000000000000000000850000006b0000009500000000000007"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) unshare(0x20040400) r5 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_enter(r6, 0x3c79, 0x4099, 0x1e, &(0x7f0000000580)={[0xd2]}, 0x8) syz_clone3(&(0x7f0000000340)={0x200000, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240), {0x1}, &(0x7f0000000480)=""/225, 0xe1, &(0x7f0000000a00)=""/4096, &(0x7f0000000280)=[r5, r5], 0x2}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r9}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) 1.203454943s ago: executing program 3 (id=2538): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r0}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000060000000000200000000000e8d10bf542c4bdb72c282962585668c762eb74f0782c82918e865d694848c1fa5d24ccec4681968db5506bac8f7691c32aafc13fc11cd269d0723e4ff098716a69a27a7365246260578f4a2ba42f2a52925c8589299b8b59df24068e859a75601ed4"], 0x24, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x200b414, 0x0, 0x40, 0x0, &(0x7f0000000480)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) 925.517592ms ago: executing program 4 (id=2544): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x20, 0x0, 0x4, 0x1, 0x10119, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000001480)={[{@errors_continue}, {@resuid}, {@noload}, {@dioread_lock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@lazytime}]}, 0xfe, 0x479, &(0x7f00000004c0)="$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") msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/4096) 850.480762ms ago: executing program 7 (id=2545): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) close(r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x200002}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 771.380492ms ago: executing program 7 (id=2546): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) close(r3) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) 740.111472ms ago: executing program 7 (id=2547): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) r3 = eventfd2(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$lock(r4, 0x6, &(0x7f00000002c0)={0x2, 0x1, 0xb2, 0xff}) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x4000, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) 683.207222ms ago: executing program 4 (id=2548): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/227, 0xe3}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 674.220412ms ago: executing program 3 (id=2550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 629.687192ms ago: executing program 4 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18103b0100000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000054) 629.262612ms ago: executing program 6 (id=2552): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000002880)="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", 0x120}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710e", 0x14}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000002700)="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", 0x13c}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6233430", 0x1b}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 596.519392ms ago: executing program 6 (id=2553): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 596.125742ms ago: executing program 3 (id=2554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x800000000009000) truncate(&(0x7f00000002c0)='./file1\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) socket(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/66}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004689d6a4c9b3fd171e31d5f63415"], 0x48) 530.303861ms ago: executing program 4 (id=2555): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x8900c, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x6, 0x7ffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x6, 0xffffffffffffffff, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x1, 0x40000}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r7, r7) keyctl$unlink(0x9, r6, r7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0xd85fd000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101881, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x181002, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 476.205091ms ago: executing program 6 (id=2556): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000003c0)={0x280000, 0x200000, 0x7, 0x3, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000007100)="5802009400140091d491323b478925450db4564df63e79dbf050a10004226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395f49d6b51602f4da57b8c63e261d39a587443ea57010400001edc9a25472100cec5db2fc1cbe257e9b980f2ec8dc1b2523ab4ca4b8780ff8bfe6a69678307b71a16c987f1b71ffe920fd3683314cb99ac30d01b", 0x8f}], 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='rpc_xdr_overflow\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x4a7, &(0x7f0000003080)="$eJzs3M9rHGUfAPDvbLLp7zfp+/bt+7a2Gq3F4o+kSav24EFFwYOCoId6jElaa7eNNBFsCRpF6lEK3sWj4F/gzYuoBxG8KniUQtEgtPUUmV9NstnNr266bfbzgc0+z8wzM893Zp7dZ+bJbAAdqz/9k0TsjIhfIqI3zy4u0J+/3ZidHr05Oz2axNzca38kWbnrs9OjZdFyuR1F5kglovJxEs8mS7c7efHS2ZFabfxCkR+cOvfO4OTFS0+cOTdyevz0+PnhEyeOHxt6+qnhJ1sSZxrX9f3vTxzY99IbV14ZPXnlze+/Squ192A+f2EcK7rZIKAG+tO99udcpn7e4TXU/V6wa0E66W5jRViTrohID1c1a/+90RXzB683XvyorZUDNlT63bSl+eyZOWATS6LdNQDao/yiT69/y9cd6nrcFa49F9FTpG/MTo/euBV/d1SK6dUN3H5/RJyc+fvz9BVrvQ8BALAOWd/m8Ub9v0rszd7zsY5/FWMofRGxOyL+HRH/iYg9EfHfiKzs/yLi//nCc72r3H5/XX5p/6dytWGdWyTt/z0TZTd4Yf+vUr71dRW5XVn81eTUmdr40WKfHInqljQ/tMw2vnnh50+bzVvY/0tf6fbLvmBRgavddTfoxkamRlq1E659GLG/e77vOx9/cmskID0D9kXE/rWsuCfbPZkzj355oFmxleNfRgvGmea+iHgk7/vPRF38pWT58cnBrVEbPzpYnhVL/fDT5Vebbf+24m+B9Phvj0XHv65E719JPl5bjVpt/MLk2rdx+ddPml7TrPf870lez8asf3wrn/beyNTUhaGInuTlLF9e02XTh+eXLfNl+TT+I4canP+755dJ478vItKT+GBE3B8RDxR1fzAiHoqIQ8vE/93zD7+9TPxJJNHW4z8Wjdt/oS9ZOF6/jkTX2W+/bjZivrrjfzxmss/aXPb5t0RlUW61FWzBLgQAAIC7XnrVvDOSykCe7t8ZlcrAQP4//Htie6U2MTn12KmJd8+P5c8I9EW1Ut7p6l1wP3QomSnWmOeHi3vF5fxjxS2Vz7q2ZfmB0YnaWJtjh063Y3H7j7L9p37vanftgA3neS3oXPXtv9KmegB33mq+/xtfC/S0vC7AndWg/W9rVE5rh83H9T90rkbt/4O6vLEA2JyWtv/fGvxkHbAZ6f9D52ra/v2SK2x6Wjl0pNt5rn/9ifJhgfWvZ+uqn/C/RxI3I+K21lMOzm5kVbfF/JSIrRF3xa7rhETaYlYqc7i6cpnVJwz3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm8M/AQAA//8/kt+l") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xfffffffffffffe00, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x0, 0xd, 0x0, 0x9, 0x0}) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) lseek(r3, 0x67, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3}, 0x20) openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_fc_stats\x00', r1, 0x0, 0xf16e}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x4d, 0x10100a, 0x3, 0x8000106, 0x3, 0xfffffffd, 0x400, 0x0, 0x7cce8c743ee810df}) mkdir(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000500)={0x800080, 0x10000, 0x2, 0x0, 0x48, 0x9}) close(0x3) 431.839621ms ago: executing program 4 (id=2557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) rt_sigsuspend(0x0, 0x0) 375.056931ms ago: executing program 4 (id=2558): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) fstatfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x801, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x538, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) 358.710501ms ago: executing program 7 (id=2559): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000020c0)=""/156, &(0x7f0000000040)=0x9c) lsetxattr$security_selinux(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x0) 358.306731ms ago: executing program 3 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', '', [], 0xa, "b5f19f3863d5"}, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="68249894012f"], 0x157) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0x40, 0x16002c, 0xffc, 0x4, 0x40002, 0xfffffffd, 0x7, 0x0, 0x0, 0x3}) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) select(0x40, &(0x7f0000000080)={0x10, 0x0, 0x100000000, 0x3, 0xffffffffffffff19, 0x9, 0x6, 0xa0ab}, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0xb8c5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x7, &(0x7f0000000200)={0x5, 0xb}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x7, 0x1}}, 0x20) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r4, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb0}, 0x1, 0x7a00}, 0x24008080) recvmsg(r8, &(0x7f0000000380)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000540)=""/87, 0x57}], 0x2, &(0x7f0000000300)=""/43, 0x2b}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 240.304851ms ago: executing program 7 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x1000004, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 89.86075ms ago: executing program 6 (id=2562): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/227, 0xe3}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 80.26358ms ago: executing program 3 (id=2563): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb", 0xa4}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000002880)="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", 0x120}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710e", 0x14}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff", 0x29}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a4678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000062635399677c089645ecee7fdddf4f74597a84ed4f771ab273c5720d5cc397c0be582a0b23f749ff982cd036ac23aa6a072cfed3e03efb9f3f267516af3477a4d8caba0b615c1fa14f19d2cf694102c0d9dcc23d55940ea1d4ecbc7c54c342e9094a6c0e69514e6ded11", 0x13c}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6233430", 0x1b}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 78.87001ms ago: executing program 7 (id=2564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}, 0x0) recvfrom$l2tp6(r5, 0x0, 0x0, 0x120, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(0x0, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_setup(0x18000, &(0x7f00000002c0)=0x0) io_pgetevents(r8, 0x1, 0x7, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0xff]}, 0x8}) setitimer(0x1, &(0x7f0000000240)={{0x0, 0xea60}, {r6, r7/1000+60000}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 273.13µs ago: executing program 6 (id=2565): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18103b0100000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000054) 0s ago: executing program 6 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) kernel console output (not intermixed with test programs): date_inode:5154: inode #2: comm syz.7.2213: corrupted inode contents [ 128.763693][ T35] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.01 Device [syz0] on syz1 [ 128.817593][ T9664] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2213: mark_inode_dirty error [ 128.838036][ T9664] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2213: corrupted inode contents [ 128.859647][ T9664] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2213: mark_inode_dirty error [ 128.877346][ T9664] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2213: corrupted inode contents [ 128.896649][ T9664] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2213: mark_inode_dirty error [ 129.022901][ T9681] syz.3.2220: attempt to access beyond end of device [ 129.022901][ T9681] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 129.036481][ T9681] FAT-fs (loop7): unable to read boot sector [ 129.117749][ T9690] SELinux: syz.7.2222 (9690) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 129.165817][ T9693] loop3: detected capacity change from 0 to 512 [ 129.193435][ T9693] EXT4-fs (loop3): failed to initialize system zone (-117) [ 129.201548][ T9698] FAULT_INJECTION: forcing a failure. [ 129.201548][ T9698] name failslab, interval 1, probability 0, space 0, times 0 [ 129.203859][ T9700] loop4: detected capacity change from 0 to 512 [ 129.214230][ T9698] CPU: 0 UID: 0 PID: 9698 Comm: syz.7.2227 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 129.214265][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.214358][ T9698] Call Trace: [ 129.214366][ T9698] [ 129.214376][ T9698] dump_stack_lvl+0xf2/0x150 [ 129.214414][ T9698] dump_stack+0x15/0x1a [ 129.214462][ T9698] should_fail_ex+0x24a/0x260 [ 129.214497][ T9698] should_failslab+0x8f/0xb0 [ 129.214534][ T9698] kmem_cache_alloc_noprof+0x52/0x320 [ 129.214559][ T9698] ? sk_prot_alloc+0x41/0x190 [ 129.214588][ T9698] sk_prot_alloc+0x41/0x190 [ 129.214663][ T9698] sk_alloc+0x33/0x360 [ 129.214683][ T9698] ? inet_create+0x39c/0x750 [ 129.214721][ T9698] inet_create+0x3b8/0x750 [ 129.214758][ T9698] __sock_create+0x2e9/0x5a0 [ 129.214838][ T9698] sock_create_kern+0x38/0x50 [ 129.214877][ T9698] udp_sock_create4+0x67/0x2a0 [ 129.214903][ T9698] wg_socket_init+0x244/0x620 [ 129.214939][ T9698] ? __pfx_wg_receive+0x10/0x10 [ 129.215036][ T9698] wg_set_device+0x374/0x1230 [ 129.215087][ T9698] ? __nla_parse+0x40/0x60 [ 129.215131][ T9698] ? genl_family_rcv_msg_attrs_parse+0x148/0x1a0 [ 129.215165][ T9698] ? genl_family_rcv_msg_attrs_parse+0x182/0x1a0 [ 129.215214][ T9698] genl_rcv_msg+0x620/0x6d0 [ 129.215243][ T9698] ? __pfx_wg_set_device+0x10/0x10 [ 129.215286][ T9698] ? __dev_queue_xmit+0xb6e/0x2090 [ 129.215325][ T9698] netlink_rcv_skb+0x12c/0x230 [ 129.215371][ T9698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.215529][ T9698] genl_rcv+0x28/0x40 [ 129.215554][ T9698] netlink_unicast+0x599/0x670 [ 129.215731][ T9698] netlink_sendmsg+0x5cc/0x6e0 [ 129.215776][ T9698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.215887][ T9698] __sock_sendmsg+0x140/0x180 [ 129.215928][ T9698] ____sys_sendmsg+0x326/0x4b0 [ 129.216024][ T9698] __sys_sendmsg+0x19d/0x230 [ 129.216074][ T9698] __x64_sys_sendmsg+0x46/0x50 [ 129.216107][ T9698] x64_sys_call+0x2734/0x2dc0 [ 129.216173][ T9698] do_syscall_64+0xc9/0x1c0 [ 129.216225][ T9698] ? clear_bhb_loop+0x55/0xb0 [ 129.216259][ T9698] ? clear_bhb_loop+0x55/0xb0 [ 129.216294][ T9698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.216401][ T9698] RIP: 0033:0x7fd59cdbd169 [ 129.216422][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.216492][ T9698] RSP: 002b:00007fd59b421038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.216517][ T9698] RAX: ffffffffffffffda RBX: 00007fd59cfd5fa0 RCX: 00007fd59cdbd169 [ 129.216533][ T9698] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 129.216549][ T9698] RBP: 00007fd59b421090 R08: 0000000000000000 R09: 0000000000000000 [ 129.216565][ T9698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.216580][ T9698] R13: 0000000000000000 R14: 00007fd59cfd5fa0 R15: 00007ffcae5b0c88 [ 129.216603][ T9698] [ 129.216663][ T9698] wireguard: wg0: Could not create IPv4 socket [ 129.221619][ T9700] EXT4-fs: inline encryption not supported [ 129.236347][ T9693] EXT4-fs (loop3): mount failed [ 129.491107][ T9700] EXT4-fs mount: 21 callbacks suppressed [ 129.491131][ T9700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.555563][ T9712] loop6: detected capacity change from 0 to 1024 [ 129.563769][ T9700] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.594709][ T9700] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2228: corrupted inode contents [ 129.618809][ T9700] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2228: mark_inode_dirty error [ 129.640897][ T9712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.657984][ T9700] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2228: corrupted inode contents [ 129.683069][ T9714] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2228: corrupted inode contents [ 129.730290][ T9714] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2228: mark_inode_dirty error [ 129.758412][ T9714] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2228: corrupted inode contents [ 129.771520][ T9714] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2228: mark_inode_dirty error [ 129.805450][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.805687][ T9714] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2228: corrupted inode contents [ 129.841213][ T9714] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2228: mark_inode_dirty error [ 129.859988][ T9726] loop6: detected capacity change from 0 to 1024 [ 129.868222][ T9726] EXT4-fs: Ignoring removed nobh option [ 129.873849][ T9726] EXT4-fs: Ignoring removed bh option [ 129.883699][ T9728] syz.3.2235: attempt to access beyond end of device [ 129.883699][ T9728] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 129.912606][ T9728] FAT-fs (loop7): unable to read boot sector [ 129.921486][ T9726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.922164][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.975889][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.011102][ T9734] loop6: detected capacity change from 0 to 2048 [ 130.049484][ T9734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.053646][ T9738] loop4: detected capacity change from 0 to 2048 [ 130.170969][ T9734] FAULT_INJECTION: forcing a failure. [ 130.170969][ T9734] name failslab, interval 1, probability 0, space 0, times 0 [ 130.185075][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.6.2237 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 130.185160][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.185173][ T9734] Call Trace: [ 130.185181][ T9734] [ 130.185190][ T9734] dump_stack_lvl+0xf2/0x150 [ 130.185300][ T9734] dump_stack+0x15/0x1a [ 130.185361][ T9734] should_fail_ex+0x24a/0x260 [ 130.185393][ T9734] should_failslab+0x8f/0xb0 [ 130.185431][ T9734] kmem_cache_alloc_noprof+0x52/0x320 [ 130.185509][ T9734] ? ext4_init_io_end+0x31/0xb0 [ 130.185543][ T9734] ext4_init_io_end+0x31/0xb0 [ 130.185576][ T9734] ext4_do_writepages+0x6c5/0x2130 [ 130.185618][ T9734] ? xa_load+0xb9/0xe0 [ 130.185723][ T9734] ? mod_objcg_state+0x2ea/0x4f0 [ 130.185761][ T9734] ? __mod_memcg_lruvec_state+0x141/0x290 [ 130.185799][ T9734] ? __rcu_read_unlock+0x4e/0x70 [ 130.185825][ T9734] ? mod_objcg_state+0x3a7/0x4f0 [ 130.185926][ T9734] ? should_fail_ex+0x31/0x260 [ 130.186002][ T9734] ? __rcu_read_unlock+0x4e/0x70 [ 130.186068][ T9734] ext4_writepages+0x159/0x2e0 [ 130.186170][ T9734] ? __pfx_ext4_writepages+0x10/0x10 [ 130.186194][ T9734] do_writepages+0x1d8/0x480 [ 130.186228][ T9734] ? __rcu_read_unlock+0x4e/0x70 [ 130.186254][ T9734] ? mntput_no_expire+0x70/0x3d0 [ 130.186292][ T9734] ? _raw_spin_unlock+0x26/0x50 [ 130.186339][ T9734] ? wbc_attach_and_unlock_inode+0x8f/0x2d0 [ 130.186375][ T9734] filemap_write_and_wait_range+0x146/0x360 [ 130.186489][ T9734] ext4_punch_hole+0xbf/0x7e0 [ 130.186529][ T9734] ? proc_fail_nth_write+0x12a/0x150 [ 130.186562][ T9734] ext4_fallocate+0x1f1/0x1170 [ 130.186609][ T9734] vfs_fallocate+0x368/0x3b0 [ 130.186647][ T9734] __x64_sys_fallocate+0x78/0xc0 [ 130.186684][ T9734] x64_sys_call+0x43c/0x2dc0 [ 130.186777][ T9734] do_syscall_64+0xc9/0x1c0 [ 130.186911][ T9734] ? clear_bhb_loop+0x55/0xb0 [ 130.186993][ T9734] ? clear_bhb_loop+0x55/0xb0 [ 130.187016][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.187043][ T9734] RIP: 0033:0x7f99205cd169 [ 130.187059][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.187131][ T9734] RSP: 002b:00007f991ec31038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 130.187148][ T9734] RAX: ffffffffffffffda RBX: 00007f99207e5fa0 RCX: 00007f99205cd169 [ 130.187159][ T9734] RDX: 0000000000001800 RSI: 0000000000000003 RDI: 000000000000000a [ 130.187176][ T9734] RBP: 00007f991ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 130.187186][ T9734] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000001 [ 130.187196][ T9734] R13: 0000000000000000 R14: 00007f99207e5fa0 R15: 00007fffaae4aad8 [ 130.187212][ T9734] [ 130.189620][ T9738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.470358][ T9738] team0: Port device bond0 added [ 130.482481][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.494418][ T9745] bridge0: port 1(team0) entered blocking state [ 130.500937][ T9745] bridge0: port 1(team0) entered disabled state [ 130.508039][ T9745] team0: entered allmulticast mode [ 130.513324][ T9745] bond0: entered allmulticast mode [ 130.519649][ T9745] team0: left allmulticast mode [ 130.524651][ T9745] bond0: left allmulticast mode [ 130.535212][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2241'. [ 130.591738][ T9755] syz.4.2243: attempt to access beyond end of device [ 130.591738][ T9755] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 130.605420][ T9755] FAT-fs (loop9): unable to read boot sector [ 130.648231][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.652394][ T9762] loop4: detected capacity change from 0 to 512 [ 130.655832][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.664086][ T9762] EXT4-fs: inline encryption not supported [ 130.670029][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.670874][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.670932][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.670961][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.670991][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671066][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671091][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671120][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671148][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671179][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671209][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671237][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671354][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671382][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.671411][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.700538][ T9762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.702386][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.713829][ T9762] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.719052][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719088][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719116][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719200][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719228][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719333][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719380][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719404][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719428][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719456][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.719557][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 130.720200][ T9] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.01 Device [syz0] on syz1 [ 130.792456][ T9756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.818336][ T9762] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2246: corrupted inode contents [ 130.850377][ T9756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.989186][ T9762] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2246: mark_inode_dirty error [ 131.003090][ T9772] syz.5.2249: attempt to access beyond end of device [ 131.003090][ T9772] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 131.018121][ T9772] FAT-fs (loop11): unable to read boot sector [ 131.029563][ T9762] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2246: corrupted inode contents [ 131.050620][ T9773] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2246: corrupted inode contents [ 131.079556][ T9773] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2246: mark_inode_dirty error [ 131.092297][ T9773] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2246: corrupted inode contents [ 131.106271][ T9773] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2246: mark_inode_dirty error [ 131.124120][ T9780] loop3: detected capacity change from 0 to 256 [ 131.131358][ T9773] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.2246: corrupted inode contents [ 131.144347][ T9780] FAULT_INJECTION: forcing a failure. [ 131.144347][ T9780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.144432][ T9780] CPU: 0 UID: 0 PID: 9780 Comm: syz.3.2254 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 131.144460][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.144474][ T9780] Call Trace: [ 131.144483][ T9780] [ 131.144493][ T9780] dump_stack_lvl+0xf2/0x150 [ 131.144524][ T9780] dump_stack+0x15/0x1a [ 131.144550][ T9780] should_fail_ex+0x24a/0x260 [ 131.144593][ T9780] should_fail+0xb/0x10 [ 131.144623][ T9780] should_fail_usercopy+0x1a/0x20 [ 131.144662][ T9780] _copy_to_user+0x20/0xa0 [ 131.144685][ T9780] simple_read_from_buffer+0xa0/0x110 [ 131.144754][ T9780] proc_fail_nth_read+0xf9/0x140 [ 131.144790][ T9780] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.144906][ T9780] vfs_read+0x19b/0x6f0 [ 131.144942][ T9780] ? __rcu_read_unlock+0x4e/0x70 [ 131.144974][ T9780] ? __fget_files+0x17c/0x1c0 [ 131.145025][ T9780] ksys_read+0xe8/0x1b0 [ 131.145107][ T9780] __x64_sys_read+0x42/0x50 [ 131.145141][ T9780] x64_sys_call+0x2874/0x2dc0 [ 131.145176][ T9780] do_syscall_64+0xc9/0x1c0 [ 131.145247][ T9780] ? clear_bhb_loop+0x55/0xb0 [ 131.145359][ T9780] ? clear_bhb_loop+0x55/0xb0 [ 131.145394][ T9780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.145431][ T9780] RIP: 0033:0x7f016099bb7c [ 131.145451][ T9780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 131.145475][ T9780] RSP: 002b:00007f015f007030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.145558][ T9780] RAX: ffffffffffffffda RBX: 00007f0160bb5fa0 RCX: 00007f016099bb7c [ 131.145574][ T9780] RDX: 000000000000000f RSI: 00007f015f0070a0 RDI: 0000000000000004 [ 131.145590][ T9780] RBP: 00007f015f007090 R08: 0000000000000000 R09: 0000000000000000 [ 131.145606][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.145660][ T9780] R13: 0000000000000000 R14: 00007f0160bb5fa0 R15: 00007fffea35f848 [ 131.145683][ T9780] [ 131.173195][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2255'. [ 131.184342][ T9773] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.2246: mark_inode_dirty error [ 131.234609][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.304251][ T9789] loop3: detected capacity change from 0 to 2048 [ 131.315786][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.412376][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.420122][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.421362][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.427892][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.427920][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428014][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428041][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428107][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428132][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428159][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428184][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428206][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428233][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428295][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428322][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428346][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428441][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428465][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428491][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428517][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428543][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428566][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428592][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428666][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428692][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428718][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428740][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.428766][ T3375] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 131.429112][ T3375] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.01 Device [syz0] on syz1 [ 131.521661][ T9793] loop7: detected capacity change from 0 to 1024 [ 131.601747][ T9794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.648137][ T9797] loop6: detected capacity change from 0 to 512 [ 131.648330][ T9797] EXT4-fs: inline encryption not supported [ 131.649954][ T9798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.661520][ T9794] team0: Device bond0 failed to register rx_handler [ 131.678311][ T9793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.716783][ T9798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.742625][ T9797] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.759534][ T9799] bridge0: port 3(team0) entered blocking state [ 131.762464][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 131.765946][ T9799] bridge0: port 3(team0) entered disabled state [ 131.779803][ T9797] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.784460][ T9799] team0: entered allmulticast mode [ 131.797482][ T9799] team_slave_0: entered allmulticast mode [ 131.803280][ T9799] team_slave_1: entered allmulticast mode [ 131.810425][ T9799] team0: entered promiscuous mode [ 131.815508][ T9799] team_slave_0: entered promiscuous mode [ 131.821361][ T9799] team_slave_1: entered promiscuous mode [ 131.827313][ T9799] bridge0: port 3(team0) entered blocking state [ 131.833835][ T9799] bridge0: port 3(team0) entered forwarding state [ 131.849333][ T9805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.858024][ T9805] bridge0: port 1(batadv0) entered blocking state [ 131.864609][ T9805] bridge0: port 1(batadv0) entered disabled state [ 131.871473][ T9805] batadv0: entered allmulticast mode [ 131.877680][ T9805] batadv0: entered promiscuous mode [ 131.879142][ T8956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.883513][ T9805] bridge0: port 1(batadv0) entered blocking state [ 131.898710][ T9805] bridge0: port 1(batadv0) entered forwarding state [ 131.908458][ T9797] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2262: corrupted inode contents [ 131.924816][ T9797] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2262: mark_inode_dirty error [ 131.939518][ T9797] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2262: corrupted inode contents [ 131.954793][ T9810] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2262: corrupted inode contents [ 131.968678][ T9810] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2262: mark_inode_dirty error [ 131.980846][ T9810] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2262: corrupted inode contents [ 131.993609][ T9810] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2262: mark_inode_dirty error [ 132.005471][ T9810] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2262: corrupted inode contents [ 132.019059][ T9810] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2262: mark_inode_dirty error [ 132.071379][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.094354][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 132.094373][ T29] audit: type=1326 audit(1740832383.332:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.139896][ T29] audit: type=1326 audit(1740832383.372:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.164208][ T29] audit: type=1326 audit(1740832383.372:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.188869][ T29] audit: type=1326 audit(1740832383.372:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.212302][ T29] audit: type=1326 audit(1740832383.372:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.235859][ T29] audit: type=1326 audit(1740832383.372:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.259289][ T29] audit: type=1326 audit(1740832383.372:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.283169][ T29] audit: type=1326 audit(1740832383.372:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.308839][ T29] audit: type=1326 audit(1740832383.372:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.332953][ T29] audit: type=1326 audit(1740832383.372:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9822 comm="syz.6.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 132.357790][ T5043] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 132.367096][ T5043] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 132.436326][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.443908][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.451470][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.459388][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.466939][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.475280][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.483396][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.492471][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.500507][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.507982][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.515702][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.523756][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.531466][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.539422][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.547111][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.554571][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.563273][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.570926][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.578595][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.586175][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.593792][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.601472][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.608924][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.616813][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.624311][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.632225][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.640190][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.647643][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.655125][ T3375] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 132.662925][ T3375] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.01 Device [syz0] on syz1 [ 132.703222][ T9844] syz.6.2275: attempt to access beyond end of device [ 132.703222][ T9844] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 132.717867][ T9844] FAT-fs (loop13): unable to read boot sector [ 132.884531][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.892382][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.900601][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.906181][ T9868] x_tables: duplicate underflow at hook 2 [ 132.909254][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.922026][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.930747][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.938359][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.946592][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.954651][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.962158][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.969636][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.977177][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.984972][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 132.993130][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.001624][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.009335][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.017713][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.026705][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.034505][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.043000][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.052897][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.061020][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.071236][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.071268][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.082838][ T9858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.089374][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.089407][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.089434][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.089531][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.089556][ T3375] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 133.109495][ T3375] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.01 Device [syz0] on syz1 [ 133.115891][ T9858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.259306][ T9889] loop4: detected capacity change from 0 to 1024 [ 133.271548][ T9889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.340172][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.444591][ T9905] loop4: detected capacity change from 0 to 1024 [ 133.454575][ T9905] EXT4-fs: Ignoring removed nobh option [ 133.463719][ T9905] EXT4-fs: Ignoring removed bh option [ 133.479893][ T9905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.521329][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.568430][ T9911] netlink: 436 bytes leftover after parsing attributes in process `syz.4.2298'. [ 133.578696][ T9911] FAULT_INJECTION: forcing a failure. [ 133.578696][ T9911] name failslab, interval 1, probability 0, space 0, times 0 [ 133.592438][ T9911] CPU: 0 UID: 0 PID: 9911 Comm: syz.4.2298 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 133.592472][ T9911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.592556][ T9911] Call Trace: [ 133.592565][ T9911] [ 133.592576][ T9911] dump_stack_lvl+0xf2/0x150 [ 133.592608][ T9911] dump_stack+0x15/0x1a [ 133.592677][ T9911] should_fail_ex+0x24a/0x260 [ 133.592818][ T9911] should_failslab+0x8f/0xb0 [ 133.592855][ T9911] kmem_cache_alloc_noprof+0x52/0x320 [ 133.592881][ T9911] ? skb_clone+0x154/0x1f0 [ 133.592941][ T9911] skb_clone+0x154/0x1f0 [ 133.592968][ T9911] __netlink_deliver_tap+0x2bd/0x4f0 [ 133.593021][ T9911] netlink_sendskb+0x126/0x150 [ 133.593124][ T9911] netlink_unicast+0x291/0x670 [ 133.593166][ T9911] netlink_ack+0x4b7/0x4f0 [ 133.593210][ T9911] netlink_rcv_skb+0x19c/0x230 [ 133.593249][ T9911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 133.593313][ T9911] genl_rcv+0x28/0x40 [ 133.593339][ T9911] netlink_unicast+0x599/0x670 [ 133.593376][ T9911] netlink_sendmsg+0x5cc/0x6e0 [ 133.593415][ T9911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.593531][ T9911] __sock_sendmsg+0x140/0x180 [ 133.593587][ T9911] ____sys_sendmsg+0x326/0x4b0 [ 133.593621][ T9911] __sys_sendmsg+0x19d/0x230 [ 133.593740][ T9911] __x64_sys_sendmsg+0x46/0x50 [ 133.593771][ T9911] x64_sys_call+0x2734/0x2dc0 [ 133.593804][ T9911] do_syscall_64+0xc9/0x1c0 [ 133.593844][ T9911] ? clear_bhb_loop+0x55/0xb0 [ 133.593898][ T9911] ? clear_bhb_loop+0x55/0xb0 [ 133.593930][ T9911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.593965][ T9911] RIP: 0033:0x7f3d250fd169 [ 133.594030][ T9911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.594049][ T9911] RSP: 002b:00007f3d23767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.594069][ T9911] RAX: ffffffffffffffda RBX: 00007f3d25315fa0 RCX: 00007f3d250fd169 [ 133.594082][ T9911] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 133.594096][ T9911] RBP: 00007f3d23767090 R08: 0000000000000000 R09: 0000000000000000 [ 133.594111][ T9911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.594126][ T9911] R13: 0000000000000000 R14: 00007f3d25315fa0 R15: 00007ffeb247a708 [ 133.594152][ T9911] [ 133.595454][ T9900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.853476][ T9900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.918548][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.927959][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.933945][ T9914] loop6: detected capacity change from 0 to 512 [ 133.935910][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.953874][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.963286][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.972650][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.981820][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.990795][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 133.999733][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.008699][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.018341][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.026145][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.035073][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.044783][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.054574][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.063794][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.063909][ T9914] EXT4-fs (loop6): failed to initialize system zone (-117) [ 134.072817][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.089230][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.098175][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.102789][ T9914] EXT4-fs (loop6): mount failed [ 134.108068][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.120426][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.129483][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.138018][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.145802][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.153527][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.161341][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.170576][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.179690][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.188657][ T35] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 134.202397][ T35] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.01 Device [syz0] on syz1 [ 134.257172][ T9946] loop3: detected capacity change from 0 to 1024 [ 134.277781][ T9946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.291999][ T9952] loop6: detected capacity change from 0 to 512 [ 134.300360][ T9952] EXT4-fs: inline encryption not supported [ 134.322555][ T9952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.346409][ T9952] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.401962][ T9952] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2305: corrupted inode contents [ 134.418295][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.430047][ T9968] loop7: detected capacity change from 0 to 1024 [ 134.438909][ T9952] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2305: mark_inode_dirty error [ 134.448648][ T9968] EXT4-fs: Ignoring removed nobh option [ 134.458644][ T9968] EXT4-fs: Ignoring removed bh option [ 134.469218][ T9952] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2305: corrupted inode contents [ 134.483647][ T9973] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2305: corrupted inode contents [ 134.497253][ T9968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.501322][ T9973] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2305: mark_inode_dirty error [ 134.534114][ T9973] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2305: corrupted inode contents [ 134.555092][ T9973] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2305: mark_inode_dirty error [ 134.569137][ T9973] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #2: comm syz.6.2305: corrupted inode contents [ 134.586347][ T9973] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #2: comm syz.6.2305: mark_inode_dirty error [ 134.600522][ T8956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.621680][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.704449][ T9991] loop7: detected capacity change from 0 to 8192 [ 134.827695][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.835634][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.844557][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.854346][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.863290][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.872069][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.880783][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.888864][ T9998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.888924][ T9998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.908328][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.916088][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.922662][T10041] loop5: detected capacity change from 0 to 1024 [ 134.925209][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.938807][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.946392][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.953891][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.962699][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.971881][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 134.975205][T10041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.980808][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.002006][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.010643][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.019664][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.028501][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.036009][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.044546][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.053729][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.062420][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.071077][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.079728][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.088443][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.096055][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.105135][ T35] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 135.115349][ T35] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.01 Device [syz0] on syz1 [ 135.180210][ T6277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.213420][T10055] loop4: detected capacity change from 0 to 512 [ 135.222174][T10055] EXT4-fs (loop4): failed to initialize system zone (-117) [ 135.230918][T10055] EXT4-fs (loop4): mount failed [ 135.390211][T10060] loop4: detected capacity change from 0 to 1024 [ 135.395071][T10062] loop3: detected capacity change from 0 to 512 [ 135.399688][T10060] EXT4-fs: Ignoring removed nobh option [ 135.410229][T10060] EXT4-fs: Ignoring removed bh option [ 135.417381][T10062] EXT4-fs: inline encryption not supported [ 135.418035][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.433688][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.444322][T10060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.465286][T10062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.480818][T10062] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.494880][T10062] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2321: corrupted inode contents [ 135.508890][T10062] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2321: mark_inode_dirty error [ 135.521275][T10062] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2321: corrupted inode contents [ 135.535669][T10062] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2321: corrupted inode contents [ 135.549649][T10062] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2321: mark_inode_dirty error [ 135.561335][T10062] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2321: corrupted inode contents [ 135.575958][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.580939][T10070] loop6: detected capacity change from 0 to 2048 [ 135.591665][T10062] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2321: mark_inode_dirty error [ 135.614647][T10062] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2321: corrupted inode contents [ 135.627684][T10062] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2321: mark_inode_dirty error [ 135.655561][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.665535][T10073] FAULT_INJECTION: forcing a failure. [ 135.665535][T10073] name failslab, interval 1, probability 0, space 0, times 0 [ 135.667868][T10070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.678404][T10073] CPU: 0 UID: 0 PID: 10073 Comm: syz.7.2324 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 135.678444][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.678475][T10073] Call Trace: [ 135.678483][T10073] [ 135.678492][T10073] dump_stack_lvl+0xf2/0x150 [ 135.678529][T10073] dump_stack+0x15/0x1a [ 135.678559][T10073] should_fail_ex+0x24a/0x260 [ 135.678608][T10073] should_failslab+0x8f/0xb0 [ 135.678725][T10073] kmem_cache_alloc_node_noprof+0x59/0x320 [ 135.678758][T10073] ? __alloc_skb+0x10b/0x310 [ 135.678787][T10073] __alloc_skb+0x10b/0x310 [ 135.678815][T10073] netlink_alloc_large_skb+0xad/0xe0 [ 135.678866][T10073] netlink_sendmsg+0x3b4/0x6e0 [ 135.678915][T10073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.678960][T10073] __sock_sendmsg+0x140/0x180 [ 135.679058][T10073] ____sys_sendmsg+0x326/0x4b0 [ 135.679095][T10073] __sys_sendmsg+0x19d/0x230 [ 135.679213][T10073] __x64_sys_sendmsg+0x46/0x50 [ 135.679246][T10073] x64_sys_call+0x2734/0x2dc0 [ 135.679283][T10073] do_syscall_64+0xc9/0x1c0 [ 135.679319][T10073] ? clear_bhb_loop+0x55/0xb0 [ 135.679408][T10073] ? clear_bhb_loop+0x55/0xb0 [ 135.679443][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.679479][T10073] RIP: 0033:0x7fd59cdbd169 [ 135.679503][T10073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.679526][T10073] RSP: 002b:00007fd59b421038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.679547][T10073] RAX: ffffffffffffffda RBX: 00007fd59cfd5fa0 RCX: 00007fd59cdbd169 [ 135.679561][T10073] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000007 [ 135.679577][T10073] RBP: 00007fd59b421090 R08: 0000000000000000 R09: 0000000000000000 [ 135.679601][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.679649][T10073] R13: 0000000000000000 R14: 00007fd59cfd5fa0 R15: 00007ffcae5b0c88 [ 135.679673][T10073] [ 135.722338][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.903591][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.911058][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.918568][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.925996][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.933459][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.941211][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.949016][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.956692][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.964288][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.971851][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.979842][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.988697][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.996297][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.004162][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.011738][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.012526][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.019343][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019380][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019405][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019524][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019550][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019585][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019618][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019646][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019673][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019697][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019802][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019827][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.019851][ T9] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 136.020337][ T9] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.01 Device [syz0] on syz1 [ 136.155381][T10088] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 136.168053][T10092] loop5: detected capacity change from 0 to 512 [ 136.178590][T10092] EXT4-fs (loop5): failed to initialize system zone (-117) [ 136.185878][T10092] EXT4-fs (loop5): mount failed [ 136.203417][T10088] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2332'. [ 136.264630][T10103] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 136.274624][T10103] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 136.283333][T10105] loop7: detected capacity change from 0 to 512 [ 136.308359][T10105] EXT4-fs (loop7): failed to initialize system zone (-117) [ 136.315917][T10105] EXT4-fs (loop7): mount failed [ 136.388596][T10113] loop5: detected capacity change from 0 to 4096 [ 136.398402][T10113] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.445951][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.453939][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.461823][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.469652][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.477218][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.484881][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.492451][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.499940][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.507470][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.514930][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.522443][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.529969][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.537419][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.545027][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.552891][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.554072][ T6277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.560392][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560497][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560519][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560551][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560577][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560602][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560627][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560658][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560684][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560709][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560735][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560758][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560789][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.560865][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 136.561272][ T9] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.01 Device [syz0] on syz1 [ 136.740896][T10126] loop7: detected capacity change from 0 to 1024 [ 136.751248][T10126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.815710][ T8956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.872276][T10117] loop4: detected capacity change from 0 to 8192 [ 136.921524][T10146] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 136.931067][T10146] FAULT_INJECTION: forcing a failure. [ 136.931067][T10146] name failslab, interval 1, probability 0, space 0, times 0 [ 136.943907][T10146] CPU: 0 UID: 0 PID: 10146 Comm: syz.7.2348 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 136.943936][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.943950][T10146] Call Trace: [ 136.943958][T10146] [ 136.943968][T10146] dump_stack_lvl+0xf2/0x150 [ 136.944012][T10146] dump_stack+0x15/0x1a [ 136.944038][T10146] should_fail_ex+0x24a/0x260 [ 136.944070][T10146] should_failslab+0x8f/0xb0 [ 136.944155][T10146] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 136.944240][T10146] ? sidtab_sid2str_get+0xb8/0x140 [ 136.944279][T10146] kmemdup_noprof+0x2b/0x70 [ 136.944313][T10146] sidtab_sid2str_get+0xb8/0x140 [ 136.944344][T10146] security_sid_to_context_core+0x1eb/0x2f0 [ 136.944487][T10146] security_sid_to_context+0x27/0x30 [ 136.944522][T10146] avc_audit_post_callback+0x9d/0x530 [ 136.944623][T10146] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 136.944664][T10146] common_lsm_audit+0x90e/0x10c0 [ 136.944690][T10146] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 136.944751][T10146] ? avc_perm_nonode+0xcf/0xe0 [ 136.944776][T10146] slow_avc_audit+0xf9/0x140 [ 136.944814][T10146] avc_has_perm+0x129/0x160 [ 136.944834][T10146] selinux_inode_setxattr+0x568/0x700 [ 136.944934][T10146] security_inode_setxattr+0x169/0x1f0 [ 136.944968][T10146] __vfs_setxattr_locked+0x88/0x1d0 [ 136.945044][T10146] vfs_setxattr+0x140/0x290 [ 136.945082][T10146] filename_setxattr+0x1a6/0x2a0 [ 136.945123][T10146] path_setxattrat+0x284/0x310 [ 136.945155][T10146] __x64_sys_lsetxattr+0x71/0x90 [ 136.945201][T10146] x64_sys_call+0x29c8/0x2dc0 [ 136.945233][T10146] do_syscall_64+0xc9/0x1c0 [ 136.945272][T10146] ? clear_bhb_loop+0x55/0xb0 [ 136.945305][T10146] ? clear_bhb_loop+0x55/0xb0 [ 136.945409][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.945442][T10146] RIP: 0033:0x7fd59cdbd169 [ 136.945459][T10146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.945480][T10146] RSP: 002b:00007fd59b421038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 136.945502][T10146] RAX: ffffffffffffffda RBX: 00007fd59cfd5fa0 RCX: 00007fd59cdbd169 [ 136.945516][T10146] RDX: 0000400000000000 RSI: 0000400000000080 RDI: 0000400000000040 [ 136.945530][T10146] RBP: 00007fd59b421090 R08: 0000000000000000 R09: 0000000000000000 [ 136.945580][T10146] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 136.945594][T10146] R13: 0000000000000000 R14: 00007fd59cfd5fa0 R15: 00007ffcae5b0c88 [ 136.945614][T10146] [ 136.951511][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 136.969352][T10117] loop4: p1 p3 p4 [ 136.972631][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 136.973289][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.975748][T10117] loop4: p1 size 3506438656 extends beyond EOD, [ 136.989268][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.993772][T10117] truncated [ 136.997561][T10117] loop4: p3 start 218103808 is beyond EOD, [ 137.027960][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.031707][T10117] truncated [ 137.031716][T10117] loop4: p4 size 50331648 extends beyond EOD, [ 137.039354][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.042687][T10117] truncated [ 137.101795][T10157] Dead loop on virtual device ip6_vti0, fix it urgently! [ 137.101972][T10157] Dead loop on virtual device ip6_vti0, fix it urgently! [ 137.102250][T10157] Dead loop on virtual device ip6_vti0, fix it urgently! [ 137.102420][T10157] Dead loop on virtual device ip6_vti0, fix it urgently! [ 137.108879][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.112446][T10157] Dead loop on virtual device ip6_vti0, fix it urgently! [ 137.118271][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.121545][T10157] Dead loop on virtual device ip6_vti0, fix it urgently! [ 137.126092][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.143574][T10158] loop7: detected capacity change from 0 to 512 [ 137.160479][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.167596][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 137.167613][ T29] audit: type=1326 audit(2000000003.730:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cdbd169 code=0x7ffc0000 [ 137.167668][ T29] audit: type=1326 audit(2000000003.730:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd59cdbd169 code=0x7ffc0000 [ 137.167704][ T29] audit: type=1326 audit(2000000003.740:8194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd59cdbd169 code=0x7ffc0000 [ 137.167810][ T29] audit: type=1326 audit(2000000003.740:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd59cdbd1a3 code=0x7ffc0000 [ 137.167842][ T29] audit: type=1326 audit(2000000003.740:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd59cdbbc1f code=0x7ffc0000 [ 137.167897][ T29] audit: type=1326 audit(2000000003.740:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd59cdbd1f7 code=0x7ffc0000 [ 137.167931][ T29] audit: type=1326 audit(2000000003.740:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd59cdbbad0 code=0x7ffc0000 [ 137.168001][ T29] audit: type=1326 audit(2000000003.740:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd59cdbcd6b code=0x7ffc0000 [ 137.169288][ T29] audit: type=1326 audit(2000000003.770:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd59cdbbdca code=0x7ffc0000 [ 137.178538][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.185360][ T29] audit: type=1326 audit(2000000003.780:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.7.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd59cdbbdca code=0x7ffc0000 [ 137.194976][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.214071][T10158] EXT4-fs (loop7): failed to initialize system zone (-117) [ 137.215255][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.223663][T10158] EXT4-fs (loop7): mount failed [ 137.689606][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.698475][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.706131][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.714929][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.723798][ T35] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x0 [ 137.740931][ T35] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 137.741338][T10161] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 137.776796][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 137.804252][T10161] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 137.951860][T10178] loop3: detected capacity change from 0 to 2048 [ 137.952958][T10176] loop4: detected capacity change from 0 to 1024 [ 137.975969][T10176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.999284][T10178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.021510][T10187] loop5: detected capacity change from 0 to 128 [ 138.030517][T10187] EXT4-fs: Ignoring removed nobh option [ 138.034941][T10178] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.2359: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 138.053900][T10178] EXT4-fs (loop3): Remounting filesystem read-only [ 138.063001][T10187] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.078419][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.079758][T10178] IPv6: Can't replace route, no match found [ 138.088245][T10187] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.119795][T10194] loop4: detected capacity change from 0 to 512 [ 138.140321][ T6277] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.140510][T10194] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2363: bg 0: block 248: padding at end of block bitmap is not set [ 138.165003][T10194] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.2363: Failed to acquire dquot type 1 [ 138.178058][T10194] EXT4-fs (loop4): 1 truncate cleaned up [ 138.184585][T10194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.198782][T10194] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.214120][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.228068][T10194] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2363: deleted inode referenced: 12 [ 138.240375][T10194] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz.4.2363: deleted inode referenced: 12 [ 138.283195][T10200] loop5: detected capacity change from 0 to 512 [ 138.292453][T10200] EXT4-fs (loop5): failed to initialize system zone (-117) [ 138.300266][T10200] EXT4-fs (loop5): mount failed [ 138.320401][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.336372][T10203] loop3: detected capacity change from 0 to 128 [ 138.343025][T10203] EXT4-fs: Ignoring removed nobh option [ 138.351287][T10203] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.366092][T10203] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.400476][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.451227][T10208] loop3: detected capacity change from 0 to 512 [ 138.459389][T10208] EXT4-fs: inline encryption not supported [ 138.488548][T10208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.512708][T10208] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.604354][T10208] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2366: corrupted inode contents [ 138.670581][T10208] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2366: mark_inode_dirty error [ 138.698065][T10227] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2374'. [ 138.707281][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2374'. [ 138.707979][T10208] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2366: corrupted inode contents [ 138.716365][T10227] netlink: 'syz.7.2374': attribute type 1 has an invalid length. [ 138.724780][T10225] loop6: detected capacity change from 0 to 1024 [ 138.742675][T10208] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2366: mark_inode_dirty error [ 138.758012][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2374'. [ 138.804277][T10225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.855749][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.894580][T10235] loop3: detected capacity change from 0 to 512 [ 138.958475][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.989141][T10240] FAULT_INJECTION: forcing a failure. [ 138.989141][T10240] name failslab, interval 1, probability 0, space 0, times 0 [ 139.001889][T10240] CPU: 0 UID: 0 PID: 10240 Comm: +}[@ Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 139.001920][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.001936][T10240] Call Trace: [ 139.001945][T10240] [ 139.001954][T10240] dump_stack_lvl+0xf2/0x150 [ 139.001999][T10240] dump_stack+0x15/0x1a [ 139.002020][T10240] should_fail_ex+0x24a/0x260 [ 139.002052][T10240] should_failslab+0x8f/0xb0 [ 139.002116][T10240] __kmalloc_node_noprof+0xad/0x410 [ 139.002144][T10240] ? __kvmalloc_node_noprof+0x72/0x170 [ 139.002253][T10240] __kvmalloc_node_noprof+0x72/0x170 [ 139.002290][T10240] io_alloc_cache_init+0x33/0xa0 [ 139.002324][T10240] io_ring_ctx_alloc+0x311/0x730 [ 139.002435][T10240] io_uring_create+0x40/0x6d0 [ 139.002474][T10240] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 139.002523][T10240] __x64_sys_io_uring_setup+0x31/0x40 [ 139.002546][T10240] x64_sys_call+0x270c/0x2dc0 [ 139.002572][T10240] do_syscall_64+0xc9/0x1c0 [ 139.002603][T10240] ? clear_bhb_loop+0x55/0xb0 [ 139.002635][T10240] ? clear_bhb_loop+0x55/0xb0 [ 139.002671][T10240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.002703][T10240] RIP: 0033:0x7f99205cd169 [ 139.002722][T10240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.002776][T10240] RSP: 002b:00007f991ec30fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 139.002859][T10240] RAX: ffffffffffffffda RBX: 00007f99207e5fa0 RCX: 00007f99205cd169 [ 139.002874][T10240] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000002c0c [ 139.002888][T10240] RBP: 0000400000000400 R08: 0000000000000000 R09: 0000000000000000 [ 139.002903][T10240] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 139.002917][T10240] R13: 0000000000000000 R14: 0000000000002c0c R15: 0000000000000000 [ 139.002966][T10240] [ 139.195632][T10235] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2376: bg 0: block 248: padding at end of block bitmap is not set [ 139.216868][T10235] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.2376: Failed to acquire dquot type 1 [ 139.229173][T10235] EXT4-fs (loop3): 1 truncate cleaned up [ 139.235337][T10235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.266371][T10235] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.291231][T10235] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.2376: deleted inode referenced: 12 [ 139.303940][T10235] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.2376: deleted inode referenced: 12 [ 139.452174][T10251] FAULT_INJECTION: forcing a failure. [ 139.452174][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 139.467599][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.6.2381 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 139.467631][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.467647][T10251] Call Trace: [ 139.467655][T10251] [ 139.467665][T10251] dump_stack_lvl+0xf2/0x150 [ 139.467698][T10251] dump_stack+0x15/0x1a [ 139.467723][T10251] should_fail_ex+0x24a/0x260 [ 139.467760][T10251] should_failslab+0x8f/0xb0 [ 139.467798][T10251] kmem_cache_alloc_noprof+0x52/0x320 [ 139.467824][T10251] ? vm_area_alloc+0xac/0x130 [ 139.467855][T10251] vm_area_alloc+0xac/0x130 [ 139.467878][T10251] mmap_region+0x819/0x1620 [ 139.467926][T10251] do_mmap+0x98a/0xc30 [ 139.467967][T10251] vm_mmap_pgoff+0x16d/0x2d0 [ 139.468008][T10251] ksys_mmap_pgoff+0xd0/0x330 [ 139.468038][T10251] ? fpregs_assert_state_consistent+0x83/0xa0 [ 139.468062][T10251] x64_sys_call+0x1940/0x2dc0 [ 139.468091][T10251] do_syscall_64+0xc9/0x1c0 [ 139.468130][T10251] ? clear_bhb_loop+0x55/0xb0 [ 139.468163][T10251] ? clear_bhb_loop+0x55/0xb0 [ 139.468197][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.468224][T10251] RIP: 0033:0x7f99205cd1a3 [ 139.468240][T10251] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 139.468258][T10251] RSP: 002b:00007f991ec30e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 139.468278][T10251] RAX: ffffffffffffffda RBX: 00000000000006af RCX: 00007f99205cd1a3 [ 139.468293][T10251] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 139.468307][T10251] RBP: 0000400000001f82 R08: 00000000ffffffff R09: 0000000000000000 [ 139.468322][T10251] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 139.468337][T10251] R13: 00007f991ec30ef0 R14: 00007f991ec30eb0 R15: 0000400000000b40 [ 139.468359][T10251] [ 139.720801][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.733458][T10259] FAULT_INJECTION: forcing a failure. [ 139.733458][T10259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.746712][T10257] loop7: detected capacity change from 0 to 164 [ 139.747442][T10257] Unable to read rock-ridge attributes [ 139.761004][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.6.2386 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 139.761032][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.761044][T10259] Call Trace: [ 139.761052][T10259] [ 139.761060][T10259] dump_stack_lvl+0xf2/0x150 [ 139.761149][T10259] dump_stack+0x15/0x1a [ 139.761173][T10259] should_fail_ex+0x24a/0x260 [ 139.761204][T10259] should_fail+0xb/0x10 [ 139.761288][T10259] should_fail_usercopy+0x1a/0x20 [ 139.761322][T10259] _copy_from_user+0x1c/0xa0 [ 139.761380][T10259] copy_msghdr_from_user+0x54/0x2a0 [ 139.761414][T10259] ? __fget_files+0x17c/0x1c0 [ 139.761487][T10259] __sys_sendmsg+0x13e/0x230 [ 139.761529][T10259] __x64_sys_sendmsg+0x46/0x50 [ 139.761555][T10259] x64_sys_call+0x2734/0x2dc0 [ 139.761583][T10259] do_syscall_64+0xc9/0x1c0 [ 139.761681][T10259] ? clear_bhb_loop+0x55/0xb0 [ 139.761759][T10259] ? clear_bhb_loop+0x55/0xb0 [ 139.761788][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.761816][T10259] RIP: 0033:0x7f99205cd169 [ 139.761832][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.761865][T10259] RSP: 002b:00007f991ec31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.761883][T10259] RAX: ffffffffffffffda RBX: 00007f99207e5fa0 RCX: 00007f99205cd169 [ 139.761924][T10259] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 139.762012][T10259] RBP: 00007f991ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 139.762026][T10259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.762113][T10259] R13: 0000000000000000 R14: 00007f99207e5fa0 R15: 00007fffaae4aad8 [ 139.762137][T10259] [ 140.014049][T10265] loop7: detected capacity change from 0 to 1024 [ 140.035609][T10265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.055813][T10267] loop3: detected capacity change from 0 to 1024 [ 140.063122][T10267] EXT4-fs: Ignoring removed nobh option [ 140.079869][T10267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.098287][T10267] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.2388: inode #1027213879: comm syz.3.2388: iget: illegal inode # [ 140.123663][T10267] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.2388: error while reading EA inode 1027213879 err=-117 [ 140.137965][ T8956] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.176626][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.208025][T10282] loop3: detected capacity change from 0 to 1024 [ 140.215653][T10282] EXT4-fs: Ignoring removed nobh option [ 140.221332][T10282] EXT4-fs: Ignoring removed bh option [ 140.244766][T10287] loop5: detected capacity change from 0 to 512 [ 140.248958][T10282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.280083][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.290637][T10287] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2394: bg 0: block 248: padding at end of block bitmap is not set [ 140.305257][T10287] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2394: Failed to acquire dquot type 1 [ 140.318014][T10287] EXT4-fs (loop5): 1 truncate cleaned up [ 140.324212][T10287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.337931][T10287] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.350182][T10287] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.2394: deleted inode referenced: 12 [ 140.363658][T10287] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.2394: deleted inode referenced: 12 [ 140.388774][ T6277] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.518863][T10305] FAULT_INJECTION: forcing a failure. [ 140.518863][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 140.531598][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.3.2400 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 140.531628][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.531643][T10305] Call Trace: [ 140.531652][T10305] [ 140.531660][T10305] dump_stack_lvl+0xf2/0x150 [ 140.531691][T10305] dump_stack+0x15/0x1a [ 140.531712][T10305] should_fail_ex+0x24a/0x260 [ 140.531741][T10305] should_failslab+0x8f/0xb0 [ 140.531775][T10305] kmem_cache_alloc_noprof+0x52/0x320 [ 140.531801][T10305] ? vm_area_dup+0x2c/0x130 [ 140.531830][T10305] vm_area_dup+0x2c/0x130 [ 140.531857][T10305] __split_vma+0xf7/0x6a0 [ 140.531883][T10305] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 140.531928][T10305] mmap_region+0x464/0x1620 [ 140.531951][T10305] ? __rcu_read_unlock+0x4e/0x70 [ 140.531978][T10305] ? mntput_no_expire+0x70/0x3d0 [ 140.532008][T10305] ? mntput+0x49/0x70 [ 140.532032][T10305] ? terminate_walk+0x260/0x280 [ 140.532082][T10305] do_mmap+0x98a/0xc30 [ 140.532119][T10305] vm_mmap_pgoff+0x16d/0x2d0 [ 140.532159][T10305] ksys_mmap_pgoff+0x286/0x330 [ 140.532198][T10305] x64_sys_call+0x1940/0x2dc0 [ 140.532234][T10305] do_syscall_64+0xc9/0x1c0 [ 140.532271][T10305] ? clear_bhb_loop+0x55/0xb0 [ 140.532298][T10305] ? clear_bhb_loop+0x55/0xb0 [ 140.532325][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.532357][T10305] RIP: 0033:0x7f016099d169 [ 140.532375][T10305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.532394][T10305] RSP: 002b:00007f015f007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.532412][T10305] RAX: ffffffffffffffda RBX: 00007f0160bb5fa0 RCX: 00007f016099d169 [ 140.532424][T10305] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000400000000000 [ 140.532435][T10305] RBP: 00007f015f007090 R08: 0000000000000003 R09: 0000000000000000 [ 140.532446][T10305] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 140.532457][T10305] R13: 0000000000000000 R14: 00007f0160bb5fa0 R15: 00007fffea35f848 [ 140.532478][T10305] [ 140.853424][T10321] loop6: detected capacity change from 0 to 1024 [ 140.862353][T10321] EXT4-fs: Ignoring removed nobh option [ 140.869470][T10321] EXT4-fs: Ignoring removed bh option [ 140.881952][T10322] loop4: detected capacity change from 0 to 1024 [ 140.888919][T10322] EXT4-fs: Ignoring removed nobh option [ 140.907033][T10321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.921480][T10322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.939768][T10322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2404: inode #1027213879: comm syz.4.2404: iget: illegal inode # [ 140.954008][T10322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.2404: error while reading EA inode 1027213879 err=-117 [ 140.980595][ T8203] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.023365][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.032536][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.041334][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.065146][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.072651][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.081641][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.090414][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.099299][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.108102][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.115514][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.124699][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.133727][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.142615][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.152144][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.164932][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.173848][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.182749][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.191982][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.201023][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.208494][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.215934][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.224750][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.233517][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.242285][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.251023][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.260074][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.268869][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.277767][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.285241][ T35] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 141.294362][ T35] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.01 Device [syz0] on syz1 [ 141.360759][T10347] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.411079][T10347] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.451369][T10347] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.531956][T10347] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.593563][T10347] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.604947][T10347] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.620350][T10347] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.639714][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.651221][T10347] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.694139][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.703143][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.710652][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.719995][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.728903][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.738021][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.744292][T10379] sd 0:0:1:0: device reset [ 141.745637][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.760350][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.769015][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.777631][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.785040][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.793780][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.802492][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.811075][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.819332][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.826871][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.834520][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.842028][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.849651][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.858432][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.866063][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.874568][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.883172][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.891748][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.900571][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.909157][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.917771][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.925244][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.933916][ T35] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 141.943389][ T35] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.01 Device [syz0] on syz1 [ 142.064363][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2431'. [ 142.073500][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2431'. [ 142.296136][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 142.296153][ T29] audit: type=1326 audit(2000000008.890:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.327801][ T29] audit: type=1326 audit(2000000008.890:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.353174][ T29] audit: type=1326 audit(2000000008.930:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.378135][ T29] audit: type=1326 audit(2000000008.930:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.402448][ T29] audit: type=1326 audit(2000000008.930:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.427958][ T29] audit: type=1326 audit(2000000008.950:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.453449][ T29] audit: type=1326 audit(2000000008.950:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.478457][ T29] audit: type=1326 audit(2000000008.950:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.503706][ T29] audit: type=1326 audit(2000000009.030:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.544255][T10404] loop5: detected capacity change from 0 to 1024 [ 142.552503][T10404] EXT4-fs: Ignoring removed nobh option [ 142.559418][T10404] EXT4-fs: Ignoring removed bh option [ 142.565128][ T29] audit: type=1326 audit(2000000009.030:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10399 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016099d169 code=0x7ffc0000 [ 142.743058][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.750671][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.758118][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.769747][T10415] loop4: detected capacity change from 0 to 1024 [ 142.777929][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.785491][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.793128][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.800621][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.808075][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.815479][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.822991][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.830475][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.838060][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.845475][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.852916][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.871577][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.875624][T10413] loop5: detected capacity change from 0 to 1024 [ 142.879193][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879222][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879249][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879273][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879307][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879332][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879359][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879387][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879410][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879437][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879462][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879485][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879559][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.879581][ T9] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 142.927544][ T9] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.01 Device [syz0] on syz1 [ 142.952151][T10413] EXT4-fs: Ignoring removed nobh option [ 143.071415][T10413] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.2435: inode #1027213879: comm syz.5.2435: iget: illegal inode # [ 143.090553][T10413] EXT4-fs error (device loop5): ext4_xattr_inode_iget:445: comm syz.5.2435: error while reading EA inode 1027213879 err=-117 [ 143.278928][T10436] loop3: detected capacity change from 0 to 1024 [ 143.350947][T10449] loop3: detected capacity change from 0 to 1024 [ 143.359159][T10449] EXT4-fs: Ignoring removed nobh option [ 143.364726][T10449] EXT4-fs: Ignoring removed bh option [ 143.390129][T10454] FAULT_INJECTION: forcing a failure. [ 143.390129][T10454] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 143.404907][T10454] CPU: 1 UID: 0 PID: 10454 Comm: syz.6.2446 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 143.404940][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 143.404955][T10454] Call Trace: [ 143.405014][T10454] [ 143.405025][T10454] dump_stack_lvl+0xf2/0x150 [ 143.405059][T10454] dump_stack+0x15/0x1a [ 143.405083][T10454] should_fail_ex+0x24a/0x260 [ 143.405119][T10454] should_fail_alloc_page+0xfd/0x110 [ 143.405163][T10454] __alloc_frozen_pages_noprof+0x109/0x340 [ 143.405261][T10454] alloc_pages_mpol+0xb4/0x260 [ 143.405356][T10454] vma_alloc_folio_noprof+0x1a0/0x310 [ 143.405384][T10454] handle_mm_fault+0xdd7/0x2ac0 [ 143.405418][T10454] exc_page_fault+0x296/0x650 [ 143.405452][T10454] asm_exc_page_fault+0x26/0x30 [ 143.405561][T10454] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 143.405621][T10454] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 143.405643][T10454] RSP: 0018:ffffc9000b0d7d58 EFLAGS: 00050246 [ 143.405701][T10454] RAX: 0000000000000000 RBX: 0000400000019688 RCX: 0000000000000008 [ 143.405717][T10454] RDX: 0000000000000000 RSI: ffffc9000b0d7da0 RDI: 0000400000019680 [ 143.405731][T10454] RBP: ffff888136bc59c0 R08: 0000000080000000 R09: 0000000000000000 [ 143.405744][T10454] R10: 0001c9000b0d7da0 R11: 0001c9000b0d7da7 R12: 0000000000000008 [ 143.405756][T10454] R13: 00007ffffffff000 R14: 0000400000019680 R15: ffffc9000b0d7da0 [ 143.405788][T10454] _copy_to_user+0x7c/0xa0 [ 143.405810][T10454] msr_read+0xf5/0x170 [ 143.405837][T10454] ? __pfx_msr_read+0x10/0x10 [ 143.405862][T10454] vfs_read+0x19b/0x6f0 [ 143.405942][T10454] ? __rcu_read_unlock+0x4e/0x70 [ 143.405970][T10454] ? __fget_files+0x17c/0x1c0 [ 143.406078][T10454] ksys_read+0xe8/0x1b0 [ 143.406106][T10454] __x64_sys_read+0x42/0x50 [ 143.406135][T10454] x64_sys_call+0x2874/0x2dc0 [ 143.406165][T10454] do_syscall_64+0xc9/0x1c0 [ 143.406216][T10454] ? clear_bhb_loop+0x55/0xb0 [ 143.406248][T10454] ? clear_bhb_loop+0x55/0xb0 [ 143.406333][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.406364][T10454] RIP: 0033:0x7f99205cd169 [ 143.406381][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.406399][T10454] RSP: 002b:00007f991ec31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.406416][T10454] RAX: ffffffffffffffda RBX: 00007f99207e5fa0 RCX: 00007f99205cd169 [ 143.406429][T10454] RDX: 0000000000018ff8 RSI: 0000400000019680 RDI: 0000000000000007 [ 143.406486][T10454] RBP: 00007f991ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 143.406497][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.406509][T10454] R13: 0000000000000000 R14: 00007f99207e5fa0 R15: 00007fffaae4aad8 [ 143.406595][T10454] [ 143.410289][T10458] loop5: detected capacity change from 0 to 512 [ 143.710873][T10458] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2447: bg 0: block 248: padding at end of block bitmap is not set [ 143.727087][T10458] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.2447: Failed to acquire dquot type 1 [ 143.739974][T10458] EXT4-fs (loop5): 1 truncate cleaned up [ 143.747043][T10458] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.763795][T10458] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.2447: deleted inode referenced: 12 [ 143.766514][T10465] loop3: detected capacity change from 0 to 1024 [ 143.776519][T10458] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.2447: deleted inode referenced: 12 [ 143.782060][T10465] EXT4-fs: Ignoring removed orlov option [ 143.958827][T10472] loop5: detected capacity change from 0 to 512 [ 143.969828][T10470] xt_CT: No such helper "pptp" [ 143.970684][T10472] EXT4-fs: inline encryption not supported [ 143.990701][T10472] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.009750][T10472] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2452: corrupted inode contents [ 144.032870][T10472] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2452: mark_inode_dirty error [ 144.089267][T10472] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2452: corrupted inode contents [ 144.104068][T10480] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2452: corrupted inode contents [ 144.128048][T10480] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2452: mark_inode_dirty error [ 144.139843][T10480] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2452: corrupted inode contents [ 144.152973][T10480] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2452: mark_inode_dirty error [ 144.173680][T10480] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.2452: corrupted inode contents [ 144.193678][T10480] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.2452: mark_inode_dirty error [ 144.313799][T10487] FAULT_INJECTION: forcing a failure. [ 144.313799][T10487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.328418][T10487] CPU: 1 UID: 0 PID: 10487 Comm: syz.7.2456 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 144.328499][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.328515][T10487] Call Trace: [ 144.328523][T10487] [ 144.328533][T10487] dump_stack_lvl+0xf2/0x150 [ 144.328623][T10487] dump_stack+0x15/0x1a [ 144.328650][T10487] should_fail_ex+0x24a/0x260 [ 144.328750][T10487] should_fail+0xb/0x10 [ 144.328783][T10487] should_fail_usercopy+0x1a/0x20 [ 144.328821][T10487] _copy_from_user+0x1c/0xa0 [ 144.328844][T10487] __sys_bpf+0x14e/0x7a0 [ 144.328885][T10487] __x64_sys_bpf+0x43/0x50 [ 144.328911][T10487] x64_sys_call+0x2914/0x2dc0 [ 144.328943][T10487] do_syscall_64+0xc9/0x1c0 [ 144.329001][T10487] ? clear_bhb_loop+0x55/0xb0 [ 144.329029][T10487] ? clear_bhb_loop+0x55/0xb0 [ 144.329055][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.329086][T10487] RIP: 0033:0x7fd59cdbd169 [ 144.329174][T10487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.329196][T10487] RSP: 002b:00007fd59b421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.329214][T10487] RAX: ffffffffffffffda RBX: 00007fd59cfd5fa0 RCX: 00007fd59cdbd169 [ 144.329226][T10487] RDX: 0000000000000090 RSI: 0000400000000880 RDI: 0000000000000005 [ 144.329237][T10487] RBP: 00007fd59b421090 R08: 0000000000000000 R09: 0000000000000000 [ 144.329248][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.329259][T10487] R13: 0000000000000000 R14: 00007fd59cfd5fa0 R15: 00007ffcae5b0c88 [ 144.329286][T10487] [ 144.569726][T10486] loop5: detected capacity change from 0 to 1024 [ 144.661313][T10497] loop3: detected capacity change from 0 to 1024 [ 144.683030][T10497] EXT4-fs: Ignoring removed nobh option [ 144.688822][T10497] EXT4-fs: Ignoring removed bh option [ 144.862715][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.870221][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.877750][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.896329][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.903824][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.911412][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.918922][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.926461][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.933930][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.941378][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.948899][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.956321][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.963801][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.971256][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.984433][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.991963][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 144.999541][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.006965][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.014376][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.021876][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.029443][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.036891][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.044317][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.051807][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.052555][T10529] loop3: detected capacity change from 0 to 1024 [ 145.059232][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.059258][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.059283][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.059308][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.059361][ T3375] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 145.061436][ T3375] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.01 Device [syz0] on syz1 [ 145.195832][T10543] loop5: detected capacity change from 0 to 1024 [ 145.203109][T10543] EXT4-fs: Ignoring removed nobh option [ 145.208897][T10543] EXT4-fs: Ignoring removed bh option [ 145.257176][T10552] FAULT_INJECTION: forcing a failure. [ 145.257176][T10552] name failslab, interval 1, probability 0, space 0, times 0 [ 145.269862][T10552] CPU: 0 UID: 0 PID: 10552 Comm: syz.6.2478 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 145.269889][T10552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.269904][T10552] Call Trace: [ 145.269913][T10552] [ 145.269922][T10552] dump_stack_lvl+0xf2/0x150 [ 145.269993][T10552] dump_stack+0x15/0x1a [ 145.270084][T10552] should_fail_ex+0x24a/0x260 [ 145.270120][T10552] should_failslab+0x8f/0xb0 [ 145.270151][T10552] kmem_cache_alloc_noprof+0x52/0x320 [ 145.270226][T10552] ? security_inode_alloc+0x37/0x100 [ 145.270287][T10552] security_inode_alloc+0x37/0x100 [ 145.270312][T10552] inode_init_always_gfp+0x4a2/0x4f0 [ 145.270349][T10552] ? __pfx_proc_alloc_inode+0x10/0x10 [ 145.270382][T10552] alloc_inode+0x82/0x160 [ 145.270448][T10552] new_inode+0x1e/0x100 [ 145.270496][T10552] proc_pid_make_inode+0x1d/0xd0 [ 145.270575][T10552] proc_pident_instantiate+0x44/0x180 [ 145.270605][T10552] proc_pident_lookup+0x11d/0x190 [ 145.270635][T10552] proc_tgid_base_lookup+0x2b/0x40 [ 145.270681][T10552] __lookup_slow+0x18a/0x250 [ 145.270729][T10552] lookup_slow+0x3c/0x60 [ 145.270754][T10552] link_path_walk+0x668/0x830 [ 145.270861][T10552] path_openat+0x1af/0x1fc0 [ 145.270892][T10552] ? _parse_integer_limit+0x167/0x180 [ 145.270963][T10552] ? kstrtouint_from_user+0xb0/0xe0 [ 145.270993][T10552] do_filp_open+0x107/0x230 [ 145.271018][T10552] ? __pfx_kfree_link+0x10/0x10 [ 145.271056][T10552] do_sys_openat2+0xab/0x120 [ 145.271124][T10552] __x64_sys_openat+0xf3/0x120 [ 145.271145][T10552] x64_sys_call+0x2b30/0x2dc0 [ 145.271185][T10552] do_syscall_64+0xc9/0x1c0 [ 145.271220][T10552] ? clear_bhb_loop+0x55/0xb0 [ 145.271247][T10552] ? clear_bhb_loop+0x55/0xb0 [ 145.271277][T10552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.271379][T10552] RIP: 0033:0x7f99205cbad0 [ 145.271394][T10552] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 145.271412][T10552] RSP: 002b:00007f991ec30f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 145.271432][T10552] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f99205cbad0 [ 145.271444][T10552] RDX: 0000000000000000 RSI: 00007f992064e3b8 RDI: 00000000ffffff9c [ 145.271456][T10552] RBP: 00007f992064e3b8 R08: 0000000000000000 R09: 0000000000000000 [ 145.271540][T10552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 145.271551][T10552] R13: 0000000000000000 R14: 00007f99207e5fa0 R15: 00007fffaae4aad8 [ 145.271568][T10552] [ 145.560755][T10561] loop7: detected capacity change from 0 to 512 [ 145.576688][T10561] EXT4-fs: inline encryption not supported [ 145.601214][T10561] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.678824][T10561] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2483: corrupted inode contents [ 145.704949][T10580] loop4: detected capacity change from 0 to 512 [ 145.714470][T10582] loop5: detected capacity change from 0 to 128 [ 145.726698][T10561] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2483: mark_inode_dirty error [ 145.762785][T10561] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2483: corrupted inode contents [ 145.779503][T10580] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.792658][T10588] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2483: corrupted inode contents [ 145.798033][T10579] loop3: detected capacity change from 0 to 1024 [ 145.807568][T10588] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2483: mark_inode_dirty error [ 145.829110][T10588] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2483: corrupted inode contents [ 145.841403][T10588] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2483: mark_inode_dirty error [ 145.870356][T10588] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.2483: corrupted inode contents [ 145.883596][T10588] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.2483: mark_inode_dirty error [ 145.887755][T10597] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 145.887755][T10597] The task syz.5.2489 (10597) triggered the difference, watch for misbehavior. [ 145.980993][T10600] loop7: detected capacity change from 0 to 1024 [ 146.010471][T10600] EXT4-fs: Ignoring removed nobh option [ 146.017564][T10600] EXT4-fs: Ignoring removed bh option [ 146.047995][T10607] FAULT_INJECTION: forcing a failure. [ 146.047995][T10607] name failslab, interval 1, probability 0, space 0, times 0 [ 146.060713][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.3.2495 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 146.060743][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.060764][T10607] Call Trace: [ 146.060773][T10607] [ 146.060782][T10607] dump_stack_lvl+0xf2/0x150 [ 146.060816][T10607] dump_stack+0x15/0x1a [ 146.060842][T10607] should_fail_ex+0x24a/0x260 [ 146.060874][T10607] should_failslab+0x8f/0xb0 [ 146.060904][T10607] kmem_cache_alloc_noprof+0x52/0x320 [ 146.060925][T10607] ? mas_alloc_nodes+0x1e3/0x490 [ 146.060964][T10607] ? __mod_memcg_state+0x122/0x280 [ 146.061003][T10607] mas_alloc_nodes+0x1e3/0x490 [ 146.061042][T10607] mas_preallocate+0x44a/0x650 [ 146.061082][T10607] vma_link+0x93/0x370 [ 146.061104][T10607] insert_vm_struct+0x17b/0x210 [ 146.061146][T10607] alloc_bprm+0x439/0x680 [ 146.061180][T10607] do_execveat_common+0x12b/0x7e0 [ 146.061216][T10607] ? getname_flags+0x15a/0x3b0 [ 146.061256][T10607] __x64_sys_execveat+0x75/0x90 [ 146.061283][T10607] x64_sys_call+0x291e/0x2dc0 [ 146.061312][T10607] do_syscall_64+0xc9/0x1c0 [ 146.061349][T10607] ? clear_bhb_loop+0x55/0xb0 [ 146.061374][T10607] ? clear_bhb_loop+0x55/0xb0 [ 146.061401][T10607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.061431][T10607] RIP: 0033:0x7f016099d169 [ 146.061449][T10607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.061471][T10607] RSP: 002b:00007f015f007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 146.061493][T10607] RAX: ffffffffffffffda RBX: 00007f0160bb5fa0 RCX: 00007f016099d169 [ 146.061507][T10607] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 146.061521][T10607] RBP: 00007f015f007090 R08: 0000000000001000 R09: 0000000000000000 [ 146.061533][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.061545][T10607] R13: 0000000000000000 R14: 00007f0160bb5fa0 R15: 00007fffea35f848 [ 146.061566][T10607] [ 146.342807][T10612] vlan2: entered allmulticast mode [ 146.352496][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.361430][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.370299][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.402198][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.411014][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.419868][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.428668][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.436162][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.444960][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.453378][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.460838][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.468385][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.475797][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.484675][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.508651][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.516110][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.524995][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.532649][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.541515][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.550447][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.559253][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.567995][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.575470][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.584374][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.593366][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.602309][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.609904][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.618606][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.626257][ T3377] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 146.679833][ T3377] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.01 Device [syz0] on syz1 [ 146.784906][T10638] tmpfs: Bad value for 'mpol' [ 146.822505][T10638] loop5: detected capacity change from 0 to 512 [ 146.829618][T10641] binfmt_misc: register: failed to install interpreter file ./file2 [ 146.848830][T10638] EXT4-fs: Ignoring removed bh option [ 146.856391][T10639] loop7: detected capacity change from 0 to 1024 [ 146.893224][T10638] EXT4-fs error (device loop5): ext4_quota_enable:7101: comm syz.5.2505: inode #33554432: comm syz.5.2505: iget: illegal inode # [ 146.912813][T10638] EXT4-fs (loop5): Remounting filesystem read-only [ 146.919422][T10638] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 146.935739][T10638] EXT4-fs (loop5): mount failed [ 146.964042][T10638] Invalid ELF header type: 2 != 1 [ 147.017549][ T3299] block device autoloading is deprecated and will be removed. [ 147.272624][T10680] FAULT_INJECTION: forcing a failure. [ 147.272624][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 147.285369][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.6.2519 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 147.285396][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.285489][T10680] Call Trace: [ 147.285498][T10680] [ 147.285507][T10680] dump_stack_lvl+0xf2/0x150 [ 147.285606][T10680] dump_stack+0x15/0x1a [ 147.285627][T10680] should_fail_ex+0x24a/0x260 [ 147.285677][T10680] should_failslab+0x8f/0xb0 [ 147.285715][T10680] kmem_cache_alloc_noprof+0x52/0x320 [ 147.285737][T10680] ? sk_prot_alloc+0x41/0x190 [ 147.285765][T10680] sk_prot_alloc+0x41/0x190 [ 147.285794][T10680] sk_alloc+0x33/0x360 [ 147.285899][T10680] ? inet_create+0x39c/0x750 [ 147.285937][T10680] inet_create+0x3b8/0x750 [ 147.286032][T10680] __sock_create+0x2e9/0x5a0 [ 147.286117][T10680] sock_create_kern+0x38/0x50 [ 147.286166][T10680] udp_sock_create4+0x67/0x2a0 [ 147.286191][T10680] fou_nl_add_doit+0xf2/0x420 [ 147.286232][T10680] genl_rcv_msg+0x620/0x6d0 [ 147.286261][T10680] ? __pfx_fou_nl_add_doit+0x10/0x10 [ 147.286329][T10680] ? __dev_queue_xmit+0xb6e/0x2090 [ 147.286363][T10680] netlink_rcv_skb+0x12c/0x230 [ 147.286437][T10680] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.286468][T10680] genl_rcv+0x28/0x40 [ 147.286492][T10680] netlink_unicast+0x599/0x670 [ 147.286532][T10680] netlink_sendmsg+0x5cc/0x6e0 [ 147.286575][T10680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.286615][T10680] __sock_sendmsg+0x140/0x180 [ 147.286685][T10680] ____sys_sendmsg+0x326/0x4b0 [ 147.286726][T10680] __sys_sendmsg+0x19d/0x230 [ 147.286767][T10680] __x64_sys_sendmsg+0x46/0x50 [ 147.286796][T10680] x64_sys_call+0x2734/0x2dc0 [ 147.286858][T10680] do_syscall_64+0xc9/0x1c0 [ 147.286893][T10680] ? clear_bhb_loop+0x55/0xb0 [ 147.287004][T10680] ? clear_bhb_loop+0x55/0xb0 [ 147.287034][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.287093][T10680] RIP: 0033:0x7f99205cd169 [ 147.287110][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.287132][T10680] RSP: 002b:00007f991ec31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.287152][T10680] RAX: ffffffffffffffda RBX: 00007f99207e5fa0 RCX: 00007f99205cd169 [ 147.287167][T10680] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 147.287180][T10680] RBP: 00007f991ec31090 R08: 0000000000000000 R09: 0000000000000000 [ 147.287266][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.287280][T10680] R13: 0000000000000000 R14: 00007f99207e5fa0 R15: 00007fffaae4aad8 [ 147.287300][T10680] [ 147.574876][T10685] netlink: 'syz.4.2521': attribute type 7 has an invalid length. [ 147.587571][T10663] xt_connbytes: Forcing CT accounting to be enabled [ 147.594505][T10663] xt_bpf: check failed: parse error [ 147.626079][T10682] loop7: detected capacity change from 0 to 1024 [ 147.647377][T10690] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2523'. [ 147.667762][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 147.667838][ T29] audit: type=1326 audit(2000000014.270:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.698872][ T29] audit: type=1326 audit(2000000014.270:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.706297][T10690] netlink: 'syz.6.2523': attribute type 4 has an invalid length. [ 147.723882][ T29] audit: type=1326 audit(2000000014.270:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.839377][T10692] loop3: detected capacity change from 0 to 2048 [ 147.845984][T10692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.867731][ T29] audit: type=1326 audit(2000000014.270:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.891470][ T29] audit: type=1326 audit(2000000014.270:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.915019][ T29] audit: type=1326 audit(2000000014.270:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.938612][ T29] audit: type=1326 audit(2000000014.270:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.962222][ T29] audit: type=1326 audit(2000000014.270:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 147.985824][ T29] audit: type=1326 audit(2000000014.300:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 148.000058][T10703] tipc: Started in network mode [ 148.009407][ T29] audit: type=1326 audit(2000000014.300:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10689 comm="syz.6.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99205cd169 code=0x7ffc0000 [ 148.039915][T10703] tipc: Node identity ac14140f, cluster identity 4711 [ 148.109014][T10716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10716 comm=syz.4.2525 [ 148.125789][T10703] tipc: New replicast peer: 10.1.1.2 [ 148.132563][T10703] tipc: Enabled bearer , priority 10 [ 148.316707][T10734] loop7: detected capacity change from 0 to 512 [ 148.350631][T10732] IPv6: Can't replace route, no match found [ 148.389993][T10737] loop3: detected capacity change from 0 to 512 [ 148.397215][T10737] EXT4-fs: inline encryption not supported [ 148.408236][T10737] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.422058][T10737] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2538: corrupted inode contents [ 148.434187][T10737] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2538: mark_inode_dirty error [ 148.446584][T10737] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2538: corrupted inode contents [ 148.475730][T10737] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2538: corrupted inode contents [ 148.505929][T10737] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2538: mark_inode_dirty error [ 148.523292][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.530796][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.538268][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.546796][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.550920][T10737] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2538: corrupted inode contents [ 148.554258][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.573579][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.581158][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.588653][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.596093][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.603588][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.611110][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.619003][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.619094][T10737] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2538: mark_inode_dirty error [ 148.626584][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.626616][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.661321][T10737] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.2538: corrupted inode contents [ 148.673507][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673604][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673630][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673653][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673677][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673703][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673728][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673753][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673809][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673832][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673878][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.673980][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.674006][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.674029][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.674081][ T3374] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 148.674324][ T3374] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.01 Device [syz0] on syz1 [ 148.801432][T10754] loop4: detected capacity change from 0 to 512 [ 148.824418][T10754] EXT4-fs (loop4): failed to initialize system zone (-117) [ 148.834758][T10737] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.2538: mark_inode_dirty error [ 148.835676][T10754] EXT4-fs (loop4): mount failed [ 149.044932][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.052572][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.060124][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.067752][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.071382][T10776] loop3: detected capacity change from 0 to 1024 [ 149.075157][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.089677][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.097275][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.104739][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.106297][T10776] EXT4-fs: Ignoring removed nobh option [ 149.112192][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.117744][T10776] EXT4-fs: Ignoring removed bh option [ 149.125375][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.125401][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.145768][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.153399][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.154736][T10781] loop6: detected capacity change from 0 to 512 [ 149.160858][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161142][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161170][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161196][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161293][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161319][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161404][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161427][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161452][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161496][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161517][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161550][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161575][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161598][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161664][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.161767][ T3374] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 149.162049][ T3374] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.01 Device [syz0] on syz1 [ 149.267135][T10787] loop4: detected capacity change from 0 to 1024 [ 149.267511][T10787] EXT4-fs: Ignoring removed orlov option [ 149.328337][ T3377] tipc: Node number set to 2886997007 [ 149.378402][T10781] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.2556: casefold flag without casefold feature [ 149.409502][T10797] xt_CT: No such helper "pptp" [ 149.410972][T10781] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.2556: couldn't read orphan inode 15 (err -117) [ 149.622599][T10794] ================================================================== [ 149.630770][T10794] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 149.640311][T10794] [ 149.642652][T10794] read-write to 0xffff8881066b6eb8 of 4 bytes by task 10787 on cpu 0: [ 149.650824][T10794] __writeback_single_inode+0x1f4/0x850 [ 149.656386][T10794] writeback_single_inode+0x16c/0x3f0 [ 149.661905][T10794] sync_inode_metadata+0x5c/0x90 [ 149.666863][T10794] generic_buffers_fsync_noflush+0xd8/0x120 [ 149.672769][T10794] ext4_sync_file+0x1ff/0x6c0 [ 149.677470][T10794] vfs_fsync_range+0x116/0x130 [ 149.682270][T10794] ext4_buffered_write_iter+0x358/0x3c0 [ 149.687833][T10794] ext4_file_write_iter+0x383/0xf20 [ 149.693079][T10794] iter_file_splice_write+0x5f1/0x980 [ 149.698550][T10794] direct_splice_actor+0x160/0x2c0 [ 149.703673][T10794] splice_direct_to_actor+0x302/0x670 [ 149.709073][T10794] do_splice_direct+0xd7/0x150 [ 149.713851][T10794] do_sendfile+0x398/0x660 [ 149.718274][T10794] __x64_sys_sendfile64+0x110/0x150 [ 149.723494][T10794] x64_sys_call+0xfbd/0x2dc0 [ 149.728110][T10794] do_syscall_64+0xc9/0x1c0 [ 149.732641][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.738549][T10794] [ 149.740886][T10794] read to 0xffff8881066b6eb8 of 4 bytes by task 10794 on cpu 1: [ 149.748529][T10794] generic_buffers_fsync_noflush+0x83/0x120 [ 149.754438][T10794] ext4_sync_file+0x1ff/0x6c0 [ 149.759149][T10794] vfs_fsync_range+0x116/0x130 [ 149.763928][T10794] ext4_buffered_write_iter+0x358/0x3c0 [ 149.769491][T10794] ext4_file_write_iter+0x383/0xf20 [ 149.774707][T10794] iter_file_splice_write+0x5f1/0x980 [ 149.780098][T10794] direct_splice_actor+0x160/0x2c0 [ 149.785219][T10794] splice_direct_to_actor+0x302/0x670 [ 149.790605][T10794] do_splice_direct+0xd7/0x150 [ 149.795378][T10794] do_sendfile+0x398/0x660 [ 149.799802][T10794] __x64_sys_sendfile64+0x110/0x150 [ 149.805018][T10794] x64_sys_call+0xfbd/0x2dc0 [ 149.809631][T10794] do_syscall_64+0xc9/0x1c0 [ 149.814162][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.820080][T10794] [ 149.822407][T10794] value changed: 0x00000022 -> 0x00000000 [ 149.828126][T10794] [ 149.830451][T10794] Reported by Kernel Concurrency Sanitizer on: [ 149.836686][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.4.2558 Not tainted 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 149.847455][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.857514][T10794] ================================================================== [ 149.981723][T10812] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2564'.