last executing test programs: 15.398005149s ago: executing program 3 (id=450): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) fsync(r0) 15.28012797s ago: executing program 3 (id=453): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='ext4_free_inode\x00', r2, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1d0025bd6e00fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES64=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000a80)='kfree\x00', r9}, 0x18) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x52, 0x0, 0x0, {0x0, 0xa}, {0x3, 0x3}, @const={0x0, {0x3, 0x8, 0x4, 0xfe00}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0xb8f7) socket$nl_generic(0x10, 0x3, 0x10) 11.392716557s ago: executing program 3 (id=523): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="190000000000f34fcef9b404000000080000005ba913ab3fffd8465cc6b13e143da0bce1efcf2f99db48bc32b288f7d3d1f374cf30d316979febab9058dfbe7cf05824840e3f291ecf3add894310a56a97437d5dd8ce0b3fa171c828019addf200fc3d571f3034d4eeb3101bf00a2edcde267cd9a8c29eb3604c9863a8cf1f3d44d86f51b8c53579da5affa66053e3c97918d528773297f4ade89c2c49a41bd2f2e7ab0eaa30fec121e9c88449f8c32cc3e6371f3f1159982102d5e75aa19406467b894dd6d85d9d617d0554e430d71f92ecb77a25191b352cbf6cbacc743399e432a413a429a9f247ee622f7f0a695e3ed50f0000000000008fa479f381598b2f1710b8e215a85e6accbe58e022eb83f4db90c315f66861bf367eb23ec87f78123b97dec555a6bbfff1c5ff6c280ad52a0e6581f73c4351f19b3a7d3d7bbe655b9ac2e963182a2fa44e92e8b61a3dfeb0e6809bbda4dd49a3e3c87c97dcc0d81fc4fb0ab2f78c27e5815bd15720cdd7aca2b581ead83d2c7be33d881595a967fe4cd03e87ba862e7d9ab4bdbe13610541e032025df9ee01d0d317dbbef447e77dca1974ce075d383581a9b88ea60882cb27cae2150e749d4c38ed0b944b02534781a0855b14e81836dfafc270ba22c7589e5b02abad"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) timer_create(0x2, 0x0, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='oom_score_adj\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0xa8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000009c0)={r5, 0x1, 0x6, @random="93c7e9111c2b"}, 0x10) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000400)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x3ff, 0x2}}) connect$can_j1939(r7, &(0x7f0000000200)={0x1d, r8, 0x3, {0x2, 0x1, 0x2}}, 0x18) timer_delete(0x0) 11.239153808s ago: executing program 3 (id=524): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x200) 10.900546449s ago: executing program 3 (id=533): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x251, &(0x7f0000000080)=0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_submit(r3, 0x6, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000180)="40833cc540537c0bbee2e3d41d3eb64b92214e98ce0803186f7a5e714b6309f25ac2d30f4f9c85baab0f47a14a1790ddc8e24c9e9b621f82450ed1729507545648732b0bcb4a74414ade726761dbb06bb4208bedc84caeed282bc1ae81725ec3a6aaf74af8423b1a018ac3a9e98ac892d378af567bb97fd3c7595278975f844235b769617b51ddf53473c6bde6d61bfe6207bb5070f3a66d84e053b69f968939", 0xa0, 0xc, 0x0, 0x1, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x56, r4, &(0x7f0000000240)="be05b80ee84dc7b15573a7ed22565dce4cb4eb6168317eb60cf79c7d62c962138e9e356dfdbf8ed62723e5b5d4758df16b4e9e04c19c588c7f0cb13734162272e698db7b9087f9223db2d00986fac91ed9f373244d414c154495e6069e126d2fb0500fa21cc99ada921007e67da0d15581be849a63f916c5b957459e123e131a958e9655db0ae847100f2bab5d7ad5f255279af9862ba41877d9e6", 0x9b, 0x400, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3a, r1, &(0x7f00000003c0)="9a9200814fcaea76267df7fef250bbd0e5ee1d9179b76951e3d625a9c41cf9e612aa6f216e9ae9ab591ada8f0089b2947a4405d105cde1ad4d604b8c9a045a55dfb485ef3561a6a876129eaf7e8ad6fbde2c1a7fc63f96f6c158026f59630cf6ef51f579b1154fdf8e95c40c550ceb5202b631040283938a50200c98540ddf16bb26ad47fcc3f57c950f9b3d2f9ea35d0a98e312508c324dedc0a0ba84c44f4c76bf11762e7f8a62eb27eab02ccbecb4", 0xb0, 0x400, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="eb3e6253a7b641f37b99969d730d229d1bd6d9cad1fe9c125ba8c9e506ece13e47434ba968b0e8af91641c3c0beeee2366ea3766d03f2c37fef30278c9d1667496ad4e3c20c5ac7593", 0x49, 0x5, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x83, r0, &(0x7f0000000500)="8ba47de81d4f3e326f7b820997aa164ac7bd133b3a1b93bbcc8e6051144b73a78f642673636773cb387b348416acc58e0aaf02b06d838dfcbd02605124bbc02f0f6cf2ee7726890956a92eb43b0c97ec7f86c30eaa2134ad69299dae0f91eb5cd60e686cd938f63a98166e457b3376c35359696639c389317c72dc5980dcefd15f4c95e1d131cdbea49f5e08382255be00413c87c9f7ef9a87bdd8b4d91375112efb0645dbcea7e250cbc7baeb4f1bee324738f683dc2a51477b1e1860e174bf59d488c9b576f11de37011", 0xcb, 0x4, 0x0, 0x3, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xea74, r2, &(0x7f0000000640)="ec47c4e8c8ed1b0baf4a65c228c6cdead033f1cb4df30ed09342c5af64f60b0081d85e0818bb662f4acc3928436c4a791e3b59e9ce6d", 0x36, 0x9, 0x0, 0x3, r2}]) 10.889196449s ago: executing program 32 (id=533): syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x251, &(0x7f0000000080)=0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_submit(r3, 0x6, &(0x7f0000000700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x0, r2, &(0x7f0000000180)="40833cc540537c0bbee2e3d41d3eb64b92214e98ce0803186f7a5e714b6309f25ac2d30f4f9c85baab0f47a14a1790ddc8e24c9e9b621f82450ed1729507545648732b0bcb4a74414ade726761dbb06bb4208bedc84caeed282bc1ae81725ec3a6aaf74af8423b1a018ac3a9e98ac892d378af567bb97fd3c7595278975f844235b769617b51ddf53473c6bde6d61bfe6207bb5070f3a66d84e053b69f968939", 0xa0, 0xc, 0x0, 0x1, r0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x56, r4, &(0x7f0000000240)="be05b80ee84dc7b15573a7ed22565dce4cb4eb6168317eb60cf79c7d62c962138e9e356dfdbf8ed62723e5b5d4758df16b4e9e04c19c588c7f0cb13734162272e698db7b9087f9223db2d00986fac91ed9f373244d414c154495e6069e126d2fb0500fa21cc99ada921007e67da0d15581be849a63f916c5b957459e123e131a958e9655db0ae847100f2bab5d7ad5f255279af9862ba41877d9e6", 0x9b, 0x400, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x3a, r1, &(0x7f00000003c0)="9a9200814fcaea76267df7fef250bbd0e5ee1d9179b76951e3d625a9c41cf9e612aa6f216e9ae9ab591ada8f0089b2947a4405d105cde1ad4d604b8c9a045a55dfb485ef3561a6a876129eaf7e8ad6fbde2c1a7fc63f96f6c158026f59630cf6ef51f579b1154fdf8e95c40c550ceb5202b631040283938a50200c98540ddf16bb26ad47fcc3f57c950f9b3d2f9ea35d0a98e312508c324dedc0a0ba84c44f4c76bf11762e7f8a62eb27eab02ccbecb4", 0xb0, 0x400, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000480)="eb3e6253a7b641f37b99969d730d229d1bd6d9cad1fe9c125ba8c9e506ece13e47434ba968b0e8af91641c3c0beeee2366ea3766d03f2c37fef30278c9d1667496ad4e3c20c5ac7593", 0x49, 0x5, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x83, r0, &(0x7f0000000500)="8ba47de81d4f3e326f7b820997aa164ac7bd133b3a1b93bbcc8e6051144b73a78f642673636773cb387b348416acc58e0aaf02b06d838dfcbd02605124bbc02f0f6cf2ee7726890956a92eb43b0c97ec7f86c30eaa2134ad69299dae0f91eb5cd60e686cd938f63a98166e457b3376c35359696639c389317c72dc5980dcefd15f4c95e1d131cdbea49f5e08382255be00413c87c9f7ef9a87bdd8b4d91375112efb0645dbcea7e250cbc7baeb4f1bee324738f683dc2a51477b1e1860e174bf59d488c9b576f11de37011", 0xcb, 0x4, 0x0, 0x3, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xea74, r2, &(0x7f0000000640)="ec47c4e8c8ed1b0baf4a65c228c6cdead033f1cb4df30ed09342c5af64f60b0081d85e0818bb662f4acc3928436c4a791e3b59e9ce6d", 0x36, 0x9, 0x0, 0x3, r2}]) 8.919444459s ago: executing program 5 (id=551): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) 8.157241012s ago: executing program 0 (id=555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$9p_tcp(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 8.089769872s ago: executing program 0 (id=556): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x251, &(0x7f0000000080)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x4000}]) (fail_nth: 4) 7.996595753s ago: executing program 5 (id=559): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="8400000000000007000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x6}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000, 0xfffffffe}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xffff0001}, {}, {0xd5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x83f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x21}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7ff, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x60000881}, 0x4800) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000300)={0x5, {0xa, 0x1, 0x1, 0x40, 0x58ebf119}}) r5 = socket(0x10, 0x803, 0x0) ustat(0x1000000000000000, &(0x7f0000000340)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) fstatfs(r1, &(0x7f0000000580)=""/217) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 7.934862163s ago: executing program 5 (id=561): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES16=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES64=r5, @ANYRES8=r5, @ANYRES8=r4, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRES8=0x0, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc, 0x7ffc9ffb}]}) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x13, 0x1, 0x5f, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x6}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000004e00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaadf700082c00fe800000000000000000000000000027ff0200000000000000000000000000018100907800001081"], 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0xba, 0x2d8f, 0x0, 0x9], 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0]}, 0x8f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000000f7, &(0x7f0000000480)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC=r7, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="97da676a78459f13c593b106fc5e007cde3c7b48281f296696", @ANYRESDEC=r6], 0x28}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x7, 0x0, 0x0, 0xf15, {{0x16, 0x4, 0x1, 0x3c, 0x58, 0x64, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast1, {[@ssrr={0x89, 0x2b, 0x10, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @rand_addr=0x64010102, @broadcast, @loopback, @multicast1, @local, @remote, @dev={0xac, 0x14, 0x14, 0x1a}]}, @rr={0x7, 0x17, 0xbd, [@private=0xa010102, @empty, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x34}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0x99, 0x0, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x67, 0x0, 0x5a, 0x29, 0x0, @multicast1, @loopback}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000100"/20], 0x20}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3ddf39ec09895382, 0x300) 7.885927624s ago: executing program 0 (id=564): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000080)=0x2, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x3, 0x53e, 0x2, 0x10000, 0x4, 0x533], 0x5, &(0x7f0000000140)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006) 7.885144374s ago: executing program 5 (id=565): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) timer_create(0x2, 0x0, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='oom_score_adj\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0xa8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000009c0)={r5, 0x1, 0x6, @random="93c7e9111c2b"}, 0x10) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000400)=0x5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0xe, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x3ff, 0x2}}) connect$can_j1939(r7, &(0x7f0000000200)={0x1d, r8, 0x3, {0x2, 0x1, 0x2}}, 0x18) timer_delete(0x0) 7.736509754s ago: executing program 5 (id=566): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec0600bc0413a1f848100000005e0e0000000000000e0021001500180002", 0x29}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1182c1500060014000000001208000a0043000040a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060103000006000000000000000000"], 0x14}}, 0x0) 7.014449997s ago: executing program 0 (id=576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) timer_create(0x2, 0x0, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='oom_score_adj\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0xa8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000009c0)={r5, 0x1, 0x6, @random="93c7e9111c2b"}, 0x10) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x10d480) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 6.910461668s ago: executing program 0 (id=580): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090680000"], 0x0) 6.699171439s ago: executing program 0 (id=583): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xb03, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x9}, {0x2}, {0x0, 0x1}}}, 0x24}}, 0x0) 6.698878189s ago: executing program 33 (id=583): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xb03, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x9}, {0x2}, {0x0, 0x1}}}, 0x24}}, 0x0) 5.259714566s ago: executing program 5 (id=606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (fail_nth: 3) 5.215481566s ago: executing program 34 (id=606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) (fail_nth: 3) 3.144301676s ago: executing program 4 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000308, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) setreuid(0x0, 0xee00) 3.144112015s ago: executing program 4 (id=633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000006c0)={0x1, &(0x7f00000000c0)=[{0x40, 0xfe, 0x0, 0xce33}]}) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 3.117087926s ago: executing program 7 (id=608): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = io_uring_setup(0x2ad6, &(0x7f0000000600)={0x0, 0x400ffb4, 0x800}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) close(r3) 3.031690416s ago: executing program 6 (id=584): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x0, &(0x7f0000000240)}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x1) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x18, &(0x7f0000000600)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x6}, @map_fd={0x18, 0x5}, @ringbuf_query, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000740)='syzkaller\x00', 0x10000, 0x51, &(0x7f0000000780)=""/81, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x1, 0x7fffffff, 0xb}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x2, 0x2, 0x8, 0x7}, {0x0, 0x1, 0x4, 0x2}, {0x3, 0x1, 0x10, 0xa}], 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000002800)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2.980185606s ago: executing program 1 (id=635): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060103000006000000000000000000"], 0x14}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000340)={0x0, 0x8001}) 2.376943279s ago: executing program 1 (id=636): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = eventfd(0x800a6) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffb, 0x5) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x18) exit(0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) syz_emit_ethernet(0x1ee, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2f, '\x00', [@ra={0x5, 0x2, 0xffff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000880), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000edff00"/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000260800926d3b9772dad9cfd86e2264c9c7001b7825adf7afe33a62d15e5e6d3e4b5a760e175339d1a0379a765002b9098da33a47c9475704a2781a915541f9ae26451b87a12b3797ffe84d78e3817eeed1493ae62d211856", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) chdir(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) read$eventfd(r2, &(0x7f0000000040), 0x8) close_range(r0, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.376429249s ago: executing program 2 (id=637): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80c406, &(0x7f0000000c00)=ANY=[], 0xff, 0x2c7, &(0x7f0000000900)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, r0, 0x0, 0xfffe80) 2.326834989s ago: executing program 2 (id=638): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) fsync(r2) 2.283485309s ago: executing program 2 (id=639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 2.283259959s ago: executing program 4 (id=640): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/184, 0xb8}], 0x1, 0x8, 0x5, 0xf) 1.049434225s ago: executing program 1 (id=641): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x51, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000100), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000"], 0xb8}}, 0x0) dup(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0xb0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x1000000, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x5}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x3, 0x7, 0x8, 0x6, 0x3012}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x6b6d508db6ab6934}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORR={0x10, 0x1, {0x8e, 0xb661, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}]}, 0xb0}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) socket$igmp(0x2, 0x3, 0x2) 1.048971465s ago: executing program 2 (id=642): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.038001675s ago: executing program 4 (id=643): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) (fail_nth: 3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 122.874639ms ago: executing program 1 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000240)={[], [{@euid_lt}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+/8'}}, {@subj_user={'subj_user', 0x3d, ':'}}]}, 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSA/m65v5J/vtIXvlfRPz6ZcTpdH27tcWl2VKlUp7P68VIrhVri0tnrsyVZsoz5asTk5Pn3pqcePedt3sW6+sX//7u4/sfnPvq5PK3Pz88djeJ83E039Yax3O41VoZi7H8ORmK88/sON6DxvaTZK87wLYM5Hk+FNkYMBIDeda3tTKym10DdtgXWVoDfSqR/9CnmvOA5rV9j66DXxiP3l+9AFof/+DqayMx3Lg2OrycPHVllF3vjvag/ayNX/64dzdbonevQwBs6tbtiDg7OLh+/Evy8W/7znaxz7NtGP9g99zP5j9vtJv/pGvzn2gz/znSJne3Y/P8Tx/2oJmOsvnfe23nv2s3rUYH8tp/GnO+oeTylUo5G9v+GxGnYuhgVt/gfs5n6fKDlU4bW+d/2ZK135wL5v14OHjw6cdMl+ql5wq6xaPbEa+0nf8ma8c/aXP8s+fjYpdtnCjfe7XTts3j31krP0a81vb4P7mjlZWK9blO9yeLjfOh2Dwr1vvrzonfOrW/1/Fnx//wxvGPJq33a2tbb+OH4X/KnbZt9/w/kHzaKB/I190o1evz4xEHko/Wr5948thmvbl/Fv+pkxuPf+3O/0NZYncZ/53jd1p3Hd5a/Dsri396S8d/64UHH37+faf2uzv+bzZKp/I13Yx/3XbweZ47AAAAAAAA2G/SiDgaSVpYK6dpobD6/o7jcTitVGv105erC1eno/FZ2dEYSpt3ukda3g8xnr8ftlmfeKY+GRHHIuKbgUONemGqWpne6+ABAAAAAAAAAAAAAAAAAABgnzgSMdzu8/+Z3wf2unfAjtvgK7+Bl1zn/M+39OKbnoB9qTX/D+5hP4DdZ/4P/auL/E93ox/A7vP/H/qX/If+Jf+hf8l/6F9byf+fLuxgRwAAAAAAAAAAAAAAAAAAAAAAAAAAAODlcPHChWxZWX58cyqrT19fXJitXj8zXa7NFuYWpgpT1flrhZlqdaZSLkxV5zb7e5Vq9dr4RCzcKNbLtXqxtrh0aa66cLV+6cpcaaZ8qTy0K1EBAAAAAAAAAAAAAAAAAADAi6W2uDRbqlTK8woK2yoM7o9udCqk+Ym+X/rzwhT2eGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBb/BgAA//+Dkzaj") 121.327049ms ago: executing program 2 (id=645): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) timer_create(0x2, 0x0, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='oom_score_adj\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0, 0xa8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000009c0)={r5, 0x1, 0x6, @random="93c7e9111c2b"}, 0x10) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 118.123659ms ago: executing program 4 (id=646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000003c0)='\\\xce\x00', 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x800, 0xa4018, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 66.059059ms ago: executing program 1 (id=647): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000002060103000006000000000000000000"], 0x14}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000340)={0x0, 0x8001}) 65.550289ms ago: executing program 2 (id=648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000001000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 42.7828ms ago: executing program 4 (id=649): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3}}}, 0x24}}, 0x0) fsync(r2) 0s ago: executing program 1 (id=650): ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a30"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x4040850) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000280), 0xfe, 0x504, &(0x7f0000000a40)="$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") getrandom(0xfffffffffffffffc, 0x0, 0x0) r8 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001180), 0x100, 0x0) kernel console output (not intermixed with test programs): 10139][ T3834] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.920618][ T29] audit: type=1326 audit(1732605191.875:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f633f32e853 code=0x7ffc0000 [ 43.946699][ T3834] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.139: corrupted xattr block 95: invalid header [ 43.952678][ T29] audit: type=1326 audit(1732605191.875:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f633f32d2ff code=0x7ffc0000 [ 43.977365][ T3834] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 43.989142][ T29] audit: type=1326 audit(1732605191.885:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f633f32e8a7 code=0x7ffc0000 [ 44.013516][ T3834] EXT4-fs (loop4): 1 orphan inode deleted [ 44.021300][ T29] audit: type=1326 audit(1732605191.885:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3833 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f633f32d1b0 code=0x7ffc0000 [ 44.048501][ T3834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.121218][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.134998][ T3837] loop3: detected capacity change from 0 to 512 [ 44.144031][ T3837] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.140: corrupted xattr block 95: invalid header [ 44.159006][ T3837] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.140: bg 0: block 7: invalid block bitmap [ 44.172582][ T3837] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.181726][ T3837] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.140: corrupted xattr block 95: invalid header [ 44.196208][ T3837] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 44.205487][ T3837] EXT4-fs (loop3): 1 orphan inode deleted [ 44.211646][ T3837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.234808][ T3841] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 44.263287][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.308638][ T3845] loop3: detected capacity change from 0 to 512 [ 44.339278][ T3847] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 44.366807][ T3845] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.143: bg 0: block 248: padding at end of block bitmap is not set [ 44.382988][ T3845] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.143: Failed to acquire dquot type 1 [ 44.395780][ T3845] EXT4-fs (loop3): 1 truncate cleaned up [ 44.401898][ T3845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.414515][ T3845] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.440844][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.479508][ T3857] syz.3.145[3857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.479577][ T3857] syz.3.145[3857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.491162][ T3857] syz.3.145[3857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.746538][ T3871] loop4: detected capacity change from 0 to 512 [ 44.787105][ T3871] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.150: bg 0: block 248: padding at end of block bitmap is not set [ 44.802162][ T3871] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.150: Failed to acquire dquot type 1 [ 44.816804][ T3871] EXT4-fs (loop4): 1 truncate cleaned up [ 44.823172][ T3871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.836901][ T3871] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.865030][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.874402][ T3876] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 44.947582][ T3883] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 45.014903][ T3886] loop2: detected capacity change from 0 to 512 [ 45.036535][ T3883] loop4: detected capacity change from 0 to 8192 [ 45.048137][ T3886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.155: bg 0: block 248: padding at end of block bitmap is not set [ 45.088647][ T3883] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 45.097233][ T3883] FAT-fs (loop4): Filesystem has been set read-only [ 45.104380][ T3886] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.155: Failed to acquire dquot type 1 [ 45.117519][ T3883] syz.4.154: attempt to access beyond end of device [ 45.117519][ T3883] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.124009][ T3886] EXT4-fs (loop2): 1 truncate cleaned up [ 45.140593][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.153737][ T3886] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.179238][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.213267][ T3894] loop4: detected capacity change from 0 to 512 [ 45.214807][ T3896] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 45.232109][ T3894] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.158: corrupted xattr block 95: invalid header [ 45.246589][ T3894] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.158: bg 0: block 7: invalid block bitmap [ 45.259198][ T3894] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 45.269514][ T3894] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.158: corrupted xattr block 95: invalid header [ 45.277424][ T3896] loop2: detected capacity change from 0 to 8192 [ 45.284284][ T3894] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 45.298756][ T3894] EXT4-fs (loop4): 1 orphan inode deleted [ 45.301731][ T3896] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 45.304909][ T3894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.313053][ T3896] FAT-fs (loop2): Filesystem has been set read-only [ 45.316706][ T3896] syz.2.157: attempt to access beyond end of device [ 45.316706][ T3896] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 45.345969][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.380759][ T3901] loop2: detected capacity change from 0 to 128 [ 45.387413][ T3901] vfat: Unknown parameter 'ortname' [ 45.490297][ T3905] loop2: detected capacity change from 0 to 128 [ 45.497193][ T3905] vfat: Unknown parameter 'ortname' [ 45.524471][ T3910] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 45.539359][ T3910] bond0: (slave sit0): Error -95 calling set_mac_address [ 46.006471][ T3919] loop1: detected capacity change from 0 to 512 [ 46.027870][ T3919] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.168: bg 0: block 248: padding at end of block bitmap is not set [ 46.044447][ T3919] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.168: Failed to acquire dquot type 1 [ 46.059101][ T3919] EXT4-fs (loop1): 1 truncate cleaned up [ 46.065311][ T3919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.079265][ T3919] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.116283][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.123721][ T3923] syz.4.169[3923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.430992][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.450859][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.483211][ T3951] loop2: detected capacity change from 0 to 128 [ 46.489947][ T3951] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.501983][ T3951] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.684393][ T3964] loop2: detected capacity change from 0 to 512 [ 46.692850][ T3964] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.187: corrupted xattr block 95: invalid header [ 46.707788][ T3964] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.187: bg 0: block 7: invalid block bitmap [ 46.720493][ T3964] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 46.730030][ T3964] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.187: corrupted xattr block 95: invalid header [ 46.744110][ T3964] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 46.753199][ T3964] EXT4-fs (loop2): 1 orphan inode deleted [ 46.759340][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.786023][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.986466][ T3978] bpf_get_probe_write_proto: 8 callbacks suppressed [ 46.986482][ T3978] syz.1.192[3978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.993284][ T3978] syz.1.192[3978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.006161][ T3978] syz.1.192[3978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.038471][ T3980] loop1: detected capacity change from 0 to 128 [ 47.057357][ T3980] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.069382][ T3980] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.087864][ T3980] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 47.095670][ T3980] netlink: 'syz.1.193': attribute type 2 has an invalid length. [ 47.159718][ T3982] loop4: detected capacity change from 0 to 128 [ 47.166975][ T3982] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.180017][ T3982] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.263995][ T3987] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 47.315151][ T3991] syz.4.198[3991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.315386][ T3991] syz.4.198[3991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.326946][ T3991] syz.4.198[3991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.502219][ T4007] syz.4.203[4007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.515221][ T4007] syz.4.203[4007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.527742][ T4007] syz.4.203[4007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.837962][ T4014] syz.0.206[4014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.388224][ T4032] loop4: detected capacity change from 0 to 128 [ 48.406358][ T4032] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.419850][ T4032] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.429088][ T29] kauditd_printk_skb: 677 callbacks suppressed [ 48.429100][ T29] audit: type=1326 audit(1732605196.485:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.458851][ T29] audit: type=1326 audit(1732605196.485:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.482250][ T29] audit: type=1326 audit(1732605196.485:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.505734][ T29] audit: type=1326 audit(1732605196.485:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.529067][ T29] audit: type=1326 audit(1732605196.485:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.552479][ T29] audit: type=1326 audit(1732605196.485:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe09d4fd2ff code=0x7ffc0000 [ 48.575801][ T29] audit: type=1326 audit(1732605196.485:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.599147][ T29] audit: type=1326 audit(1732605196.485:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.622492][ T29] audit: type=1326 audit(1732605196.485:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.645718][ T29] audit: type=1326 audit(1732605196.485:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4033 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09d4fe819 code=0x7ffc0000 [ 48.671434][ T4032] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 48.679148][ T4032] netlink: 'syz.4.215': attribute type 2 has an invalid length. [ 48.741272][ T4041] loop3: detected capacity change from 0 to 512 [ 48.747110][ T4044] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 48.779088][ T4041] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.218: bg 0: block 248: padding at end of block bitmap is not set [ 48.798580][ T4041] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.218: Failed to acquire dquot type 1 [ 48.811719][ T4041] EXT4-fs (loop3): 1 truncate cleaned up [ 48.817933][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.831730][ T4041] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.879368][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.938698][ T4057] loop3: detected capacity change from 0 to 512 [ 48.958137][ T4057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.233: bg 0: block 248: padding at end of block bitmap is not set [ 48.973801][ T4057] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.233: Failed to acquire dquot type 1 [ 48.987998][ T4057] EXT4-fs (loop3): 1 truncate cleaned up [ 49.002425][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.022072][ T4057] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.063877][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.084515][ T4071] loop4: detected capacity change from 0 to 512 [ 49.093887][ T4071] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.228: corrupted xattr block 95: invalid header [ 49.109572][ T4071] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.228: bg 0: block 7: invalid block bitmap [ 49.122096][ T4071] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.131094][ T4071] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.228: corrupted xattr block 95: invalid header [ 49.144672][ T4071] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 49.153740][ T4071] EXT4-fs (loop4): 1 orphan inode deleted [ 49.159833][ T4071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.183677][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.528833][ T4092] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 49.540486][ T4092] bond0: (slave sit0): Error -95 calling set_mac_address [ 49.705039][ T4098] loop0: detected capacity change from 0 to 512 [ 49.717196][ T4098] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.239: bg 0: block 248: padding at end of block bitmap is not set [ 49.731646][ T4098] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.239: Failed to acquire dquot type 1 [ 49.744135][ T4098] EXT4-fs (loop0): 1 truncate cleaned up [ 49.750413][ T4098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.763106][ T4098] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.793349][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.829617][ T4104] FAULT_INJECTION: forcing a failure. [ 49.829617][ T4104] name failslab, interval 1, probability 0, space 0, times 1 [ 49.842330][ T4104] CPU: 0 UID: 0 PID: 4104 Comm: syz.0.241 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 49.852685][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.862866][ T4104] Call Trace: [ 49.866172][ T4104] [ 49.869145][ T4104] dump_stack_lvl+0xf2/0x150 [ 49.873785][ T4104] dump_stack+0x15/0x20 [ 49.878078][ T4104] should_fail_ex+0x223/0x230 [ 49.882792][ T4104] should_failslab+0x8f/0xb0 [ 49.887463][ T4104] kmem_cache_alloc_noprof+0x52/0x320 [ 49.892940][ T4104] ? getname_flags+0x81/0x3b0 [ 49.897711][ T4104] getname_flags+0x81/0x3b0 [ 49.902236][ T4104] __x64_sys_rename+0x40/0x70 [ 49.906959][ T4104] x64_sys_call+0x2b1c/0x2dc0 [ 49.911667][ T4104] do_syscall_64+0xc9/0x1c0 [ 49.916192][ T4104] ? clear_bhb_loop+0x55/0xb0 [ 49.920973][ T4104] ? clear_bhb_loop+0x55/0xb0 [ 49.925681][ T4104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.931692][ T4104] RIP: 0033:0x7ff70b46e819 [ 49.936111][ T4104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.955766][ T4104] RSP: 002b:00007ff709ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 49.964213][ T4104] RAX: ffffffffffffffda RBX: 00007ff70b625fa0 RCX: 00007ff70b46e819 [ 49.972288][ T4104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.980278][ T4104] RBP: 00007ff709ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.988326][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.996334][ T4104] R13: 0000000000000000 R14: 00007ff70b625fa0 R15: 00007ffcfeb0ff78 [ 50.004335][ T4104] [ 50.043321][ T4109] loop3: detected capacity change from 0 to 128 [ 50.051191][ T4109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.243'. [ 50.060479][ T4109] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 50.287286][ T4118] loop1: detected capacity change from 0 to 128 [ 50.293843][ T4118] vfat: Unknown parameter 'ortname' [ 50.341493][ T4122] loop4: detected capacity change from 0 to 128 [ 50.348310][ T4122] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.360742][ T4122] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.378464][ T4122] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 50.386252][ T4122] netlink: 'syz.4.248': attribute type 2 has an invalid length. [ 50.959836][ T4126] loop0: detected capacity change from 0 to 512 [ 50.971614][ T4126] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.250: corrupted xattr block 95: invalid header [ 50.977004][ T4132] loop3: detected capacity change from 0 to 512 [ 50.985931][ T4126] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.250: bg 0: block 7: invalid block bitmap [ 51.003893][ T4132] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.004082][ T4126] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 51.015618][ T4132] EXT4-fs error (device loop3): __ext4_fill_super:5505: inode #2: comm syz.3.252: casefold flag without casefold feature [ 51.023017][ T4126] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.250: corrupted xattr block 95: invalid header [ 51.035360][ T4132] EXT4-fs (loop3): get root inode failed [ 51.048928][ T4126] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 51.053369][ T4132] EXT4-fs (loop3): mount failed [ 51.062757][ T4126] EXT4-fs (loop0): 1 orphan inode deleted [ 51.073521][ T4126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.116857][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.180993][ T4143] loop1: detected capacity change from 0 to 512 [ 51.197171][ T4143] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.256: corrupted xattr block 95: invalid header [ 51.212625][ T4143] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.256: bg 0: block 7: invalid block bitmap [ 51.214285][ T4146] random: crng reseeded on system resumption [ 51.266347][ T4143] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 51.286721][ T4143] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.256: corrupted xattr block 95: invalid header [ 51.302681][ T4143] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 51.313479][ T4146] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 51.334766][ T4143] EXT4-fs (loop1): 1 orphan inode deleted [ 51.341092][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.394373][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.748341][ T4162] loop2: detected capacity change from 0 to 128 [ 51.755116][ T4162] vfat: Unknown parameter 'ortname' [ 51.871170][ T4168] loop2: detected capacity change from 0 to 512 [ 51.886960][ T4168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.899546][ T4168] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.914676][ T4166] netlink: 104 bytes leftover after parsing attributes in process `syz.2.264'. [ 51.934914][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.118002][ T4176] loop3: detected capacity change from 0 to 512 [ 52.126638][ T4176] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.266: corrupted xattr block 95: invalid header [ 52.140618][ T4176] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.266: bg 0: block 7: invalid block bitmap [ 52.153104][ T4176] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 52.161971][ T4176] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.266: corrupted xattr block 95: invalid header [ 52.175581][ T4176] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 52.184693][ T4176] EXT4-fs (loop3): 1 orphan inode deleted [ 52.190822][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.216212][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.270488][ T4181] bpf_get_probe_write_proto: 20 callbacks suppressed [ 52.270510][ T4181] syz.1.269[4181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.277605][ T4181] syz.1.269[4181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.288678][ T4183] loop0: detected capacity change from 0 to 512 [ 52.289697][ T4181] syz.1.269[4181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.323032][ T4183] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.270: corrupted xattr block 95: invalid header [ 52.330063][ T4188] loop1: detected capacity change from 0 to 128 [ 52.335989][ T4183] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.270: bg 0: block 7: invalid block bitmap [ 52.352195][ T4188] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.354370][ T4183] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 52.366840][ T4188] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.381175][ T4183] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.270: corrupted xattr block 95: invalid header [ 52.432773][ T4183] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 52.442042][ T4183] EXT4-fs (loop0): 1 orphan inode deleted [ 52.448837][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.458675][ T4191] Zero length message leads to an empty skb [ 52.479577][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.856899][ T4199] netlink: 'syz.2.275': attribute type 27 has an invalid length. [ 52.864684][ T4199] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 52.873034][ T4199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.275'. [ 53.181636][ T3323] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.191842][ T4204] FAULT_INJECTION: forcing a failure. [ 53.191842][ T4204] name failslab, interval 1, probability 0, space 0, times 0 [ 53.204571][ T4204] CPU: 0 UID: 0 PID: 4204 Comm: syz.3.276 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 53.214866][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.224920][ T4204] Call Trace: [ 53.228211][ T4204] [ 53.231137][ T4204] dump_stack_lvl+0xf2/0x150 [ 53.235777][ T4204] dump_stack+0x15/0x20 [ 53.239954][ T4204] should_fail_ex+0x223/0x230 [ 53.244666][ T4204] should_failslab+0x8f/0xb0 [ 53.249336][ T4204] __kmalloc_node_noprof+0xad/0x410 [ 53.254696][ T4204] ? __kvmalloc_node_noprof+0x72/0x170 [ 53.260199][ T4204] __kvmalloc_node_noprof+0x72/0x170 [ 53.265498][ T4204] rhashtable_init_noprof+0x312/0x450 [ 53.270883][ T4204] rhltable_init_noprof+0x1e/0x40 [ 53.275952][ T4204] nf_tables_newtable+0x556/0xf20 [ 53.281039][ T4204] nfnetlink_rcv+0xb3e/0x15d0 [ 53.285773][ T4204] ? kmem_cache_free+0xdc/0x2d0 [ 53.290661][ T4204] netlink_unicast+0x599/0x670 [ 53.295456][ T4204] netlink_sendmsg+0x5cc/0x6e0 [ 53.300232][ T4204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.305582][ T4204] __sock_sendmsg+0x140/0x180 [ 53.310418][ T4204] ____sys_sendmsg+0x312/0x410 [ 53.315232][ T4204] __sys_sendmsg+0x19d/0x230 [ 53.319908][ T4204] __x64_sys_sendmsg+0x46/0x50 [ 53.324683][ T4204] x64_sys_call+0x2734/0x2dc0 [ 53.329408][ T4204] do_syscall_64+0xc9/0x1c0 [ 53.334054][ T4204] ? clear_bhb_loop+0x55/0xb0 [ 53.338810][ T4204] ? clear_bhb_loop+0x55/0xb0 [ 53.343555][ T4204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.349472][ T4204] RIP: 0033:0x7fe09d4fe819 [ 53.353893][ T4204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.373565][ T4204] RSP: 002b:00007fe09bb77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.382036][ T4204] RAX: ffffffffffffffda RBX: 00007fe09d6b5fa0 RCX: 00007fe09d4fe819 [ 53.390014][ T4204] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 53.398057][ T4204] RBP: 00007fe09bb77090 R08: 0000000000000000 R09: 0000000000000000 [ 53.406066][ T4204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.414062][ T4204] R13: 0000000000000000 R14: 00007fe09d6b5fa0 R15: 00007fff5e4a3d78 [ 53.422046][ T4204] [ 53.449573][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 53.449591][ T29] audit: type=1326 audit(1732605201.515:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.0.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff70b46e819 code=0x7ffc0000 [ 53.511757][ T29] audit: type=1400 audit(1732605201.575:2180): avc: denied { mounton } for pid=4212 comm="syz.3.281" path="/59/file0" dev="tmpfs" ino=338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.535528][ T4216] syz.0.283[4216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.535636][ T4216] syz.0.283[4216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.542422][ T29] audit: type=1400 audit(1732605201.575:2181): avc: denied { mount } for pid=4212 comm="syz.3.281" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.558324][ T4216] syz.0.283[4216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.595789][ T29] audit: type=1400 audit(1732605201.645:2182): avc: denied { write } for pid=4212 comm="syz.3.281" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.597659][ T4213] syz.3.281 uses obsolete (PF_INET,SOCK_PACKET) [ 53.607094][ T29] audit: type=1400 audit(1732605201.645:2183): avc: denied { open } for pid=4212 comm="syz.3.281" path="/59/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.661011][ T4222] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 53.671671][ T4222] bond0: (slave sit0): Error -95 calling set_mac_address [ 53.684436][ T4213] tmpfs: Bad value for 'nr_inodes' [ 53.684591][ T29] audit: type=1400 audit(1732605201.745:2184): avc: denied { mounton } for pid=4212 comm="syz.3.281" path="/59/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.781500][ T29] audit: type=1400 audit(1732605201.845:2185): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.804060][ T29] audit: type=1326 audit(1732605201.865:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353e84e819 code=0x7ffc0000 [ 53.827624][ T29] audit: type=1326 audit(1732605201.865:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353e84e819 code=0x7ffc0000 [ 53.851910][ T29] audit: type=1326 audit(1732605201.865:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f353e84e819 code=0x7ffc0000 [ 54.525015][ T4246] loop1: detected capacity change from 0 to 512 [ 54.531920][ T4246] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.543563][ T4246] EXT4-fs (loop1): 1 truncate cleaned up [ 54.549846][ T4246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.579433][ T4246] No such timeout policy "syz1" [ 54.686831][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.763307][ T4263] FAULT_INJECTION: forcing a failure. [ 54.763307][ T4263] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.776447][ T4263] CPU: 0 UID: 0 PID: 4263 Comm: syz.1.297 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 54.786710][ T4263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.796829][ T4263] Call Trace: [ 54.800116][ T4263] [ 54.803048][ T4263] dump_stack_lvl+0xf2/0x150 [ 54.807770][ T4263] dump_stack+0x15/0x20 [ 54.811949][ T4263] should_fail_ex+0x223/0x230 [ 54.816666][ T4263] should_fail+0xb/0x10 [ 54.820964][ T4263] should_fail_usercopy+0x1a/0x20 [ 54.826013][ T4263] _copy_to_user+0x20/0xa0 [ 54.830443][ T4263] simple_read_from_buffer+0xa0/0x110 [ 54.835905][ T4263] proc_fail_nth_read+0xf9/0x140 [ 54.840935][ T4263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.846557][ T4263] vfs_read+0x1a2/0x700 [ 54.850739][ T4263] ? __rcu_read_unlock+0x4e/0x70 [ 54.855704][ T4263] ? __fget_files+0x17c/0x1c0 [ 54.860426][ T4263] ksys_read+0xe8/0x1b0 [ 54.864593][ T4263] __x64_sys_read+0x42/0x50 [ 54.869198][ T4263] x64_sys_call+0x2874/0x2dc0 [ 54.873924][ T4263] do_syscall_64+0xc9/0x1c0 [ 54.878477][ T4263] ? clear_bhb_loop+0x55/0xb0 [ 54.883307][ T4263] ? clear_bhb_loop+0x55/0xb0 [ 54.888046][ T4263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.894041][ T4263] RIP: 0033:0x7fc05856d25c [ 54.898459][ T4263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 54.918183][ T4263] RSP: 002b:00007fc056bc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.926604][ T4263] RAX: ffffffffffffffda RBX: 00007fc058726080 RCX: 00007fc05856d25c [ 54.934601][ T4263] RDX: 000000000000000f RSI: 00007fc056bc60a0 RDI: 000000000000000a [ 54.942570][ T4263] RBP: 00007fc056bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.950538][ T4263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.958505][ T4263] R13: 0000000000000000 R14: 00007fc058726080 R15: 00007fffc79daaf8 [ 54.966482][ T4263] [ 54.999177][ T4269] 9pnet_fd: Insufficient options for proto=fd [ 55.019518][ T4267] loop3: detected capacity change from 0 to 128 [ 55.028715][ T4267] vfat: Unknown parameter 'ortname' [ 55.071290][ T4279] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 55.113516][ T4279] loop1: detected capacity change from 0 to 8192 [ 55.131260][ T4279] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 55.139877][ T4279] FAT-fs (loop1): Filesystem has been set read-only [ 55.147894][ T4279] syz.1.304: attempt to access beyond end of device [ 55.147894][ T4279] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.265847][ T4292] veth0_to_team: entered promiscuous mode [ 55.271679][ T4292] veth0_to_team: entered allmulticast mode [ 55.333524][ T4298] syz.4.313[4298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.333596][ T4298] syz.4.313[4298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.346087][ T4298] syz.4.313[4298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.360769][ T4297] loop1: detected capacity change from 0 to 128 [ 55.378906][ T4297] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.391058][ T4297] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.448035][ T4303] mmap: syz.1.315 (4303) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.477836][ T4308] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 55.530361][ T4308] loop1: detected capacity change from 0 to 8192 [ 55.550337][ T4308] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 55.559074][ T4308] FAT-fs (loop1): Filesystem has been set read-only [ 55.567359][ T4308] syz.1.318: attempt to access beyond end of device [ 55.567359][ T4308] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.610521][ T4315] loop1: detected capacity change from 0 to 512 [ 55.618989][ T4315] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.321: corrupted xattr block 95: invalid header [ 55.633038][ T4315] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.321: bg 0: block 7: invalid block bitmap [ 55.645529][ T4315] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 55.654376][ T4315] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.321: corrupted xattr block 95: invalid header [ 55.668480][ T4315] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 55.677672][ T4315] EXT4-fs (loop1): 1 orphan inode deleted [ 55.683854][ T4315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.707185][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.763243][ T4327] syz.0.325[4327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.856844][ T4335] FAULT_INJECTION: forcing a failure. [ 55.856844][ T4335] name failslab, interval 1, probability 0, space 0, times 0 [ 55.880854][ T4335] CPU: 0 UID: 0 PID: 4335 Comm: syz.1.329 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 55.891137][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.901318][ T4335] Call Trace: [ 55.904618][ T4335] [ 55.907575][ T4335] dump_stack_lvl+0xf2/0x150 [ 55.912255][ T4335] dump_stack+0x15/0x20 [ 55.916473][ T4335] should_fail_ex+0x223/0x230 [ 55.921193][ T4335] ? ftrace_profile_set_filter+0x96/0x180 [ 55.922087][ T4340] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 55.927008][ T4335] should_failslab+0x8f/0xb0 [ 55.940068][ T4335] __kmalloc_cache_noprof+0x4e/0x320 [ 55.945480][ T4335] ftrace_profile_set_filter+0x96/0x180 [ 55.951138][ T4335] perf_ioctl+0xe35/0x1550 [ 55.955620][ T4335] ? get_pid_task+0x8e/0xc0 [ 55.960255][ T4335] ? ioctl_has_perm+0x2b8/0x2e0 [ 55.965213][ T4335] ? do_vfs_ioctl+0x96e/0x1530 [ 55.970109][ T4335] ? selinux_file_ioctl+0x2f7/0x380 [ 55.975364][ T4335] ? __fget_files+0x17c/0x1c0 [ 55.980149][ T4335] ? __pfx_perf_ioctl+0x10/0x10 [ 55.985083][ T4335] __se_sys_ioctl+0xc9/0x140 [ 55.989671][ T4340] loop2: detected capacity change from 0 to 8192 [ 55.996045][ T4335] __x64_sys_ioctl+0x43/0x50 [ 56.000676][ T4335] x64_sys_call+0x1690/0x2dc0 [ 56.001758][ T4340] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 56.005373][ T4335] do_syscall_64+0xc9/0x1c0 [ 56.013927][ T4340] FAT-fs (loop2): Filesystem has been set read-only [ 56.018389][ T4335] ? clear_bhb_loop+0x55/0xb0 [ 56.028402][ T4340] syz.2.332: attempt to access beyond end of device [ 56.028402][ T4340] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 56.029660][ T4335] ? clear_bhb_loop+0x55/0xb0 [ 56.047351][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.053276][ T4335] RIP: 0033:0x7fc05856e819 [ 56.057715][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.077358][ T4335] RSP: 002b:00007fc056be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.081572][ T4342] loop3: detected capacity change from 0 to 512 [ 56.085826][ T4335] RAX: ffffffffffffffda RBX: 00007fc058725fa0 RCX: 00007fc05856e819 [ 56.085916][ T4335] RDX: 00000000200001c0 RSI: 0000000040082406 RDI: 0000000000000006 [ 56.085933][ T4335] RBP: 00007fc056be7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.099186][ T4342] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.333: corrupted xattr block 95: invalid header [ 56.100120][ T4335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.100139][ T4335] R13: 0000000000000000 R14: 00007fc058725fa0 R15: 00007fffc79daaf8 [ 56.108392][ T4342] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.333: bg 0: block 7: invalid block bitmap [ 56.116072][ T4335] [ 56.169302][ T4342] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.178205][ T4342] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.333: corrupted xattr block 95: invalid header [ 56.191840][ T4342] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 56.192192][ T4344] ieee802154 phy0 wpan0: encryption failed: -22 [ 56.209187][ T4342] EXT4-fs (loop3): 1 orphan inode deleted [ 56.215419][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.240942][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.262154][ T4351] loop3: detected capacity change from 0 to 512 [ 56.269073][ T4351] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.278219][ T4351] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.392255][ T4367] loop3: detected capacity change from 0 to 512 [ 56.403209][ T4367] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.340: corrupted xattr block 95: invalid header [ 56.418504][ T4367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.340: bg 0: block 7: invalid block bitmap [ 56.431657][ T4367] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.442142][ T4367] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.340: corrupted xattr block 95: invalid header [ 56.446801][ T4371] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 56.457268][ T4367] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 56.475159][ T4367] EXT4-fs (loop3): 1 orphan inode deleted [ 56.475540][ T4371] bond0: (slave sit0): Error -95 calling set_mac_address [ 56.481938][ T4367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.522871][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.199680][ T4380] loop1: detected capacity change from 0 to 1024 [ 57.220145][ T4380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.245839][ T4384] loop4: detected capacity change from 0 to 512 [ 57.264161][ T4384] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.347: corrupted xattr block 95: invalid header [ 57.278267][ T4384] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.347: bg 0: block 7: invalid block bitmap [ 57.291326][ T4384] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.301616][ T4384] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.347: corrupted xattr block 95: invalid header [ 57.317105][ T4384] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 57.326995][ T4384] EXT4-fs (loop4): 1 orphan inode deleted [ 57.334073][ T4384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.382598][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 57.391518][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 57.401588][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 57.414207][ T4398] loop3: detected capacity change from 0 to 128 [ 57.422073][ T4398] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.434541][ T4398] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.438709][ T4400] bpf_get_probe_write_proto: 5 callbacks suppressed [ 57.438747][ T4400] syz.0.353[4400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.450502][ T4400] syz.0.353[4400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.462304][ T4400] syz.0.353[4400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.481400][ T4402] loop4: detected capacity change from 0 to 512 [ 57.501992][ T4402] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.354: corrupted xattr block 95: invalid header [ 57.523812][ T4402] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.354: bg 0: block 7: invalid block bitmap [ 57.536894][ T4409] loop0: detected capacity change from 0 to 512 [ 57.544099][ T4402] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.555114][ T4402] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.354: corrupted xattr block 95: invalid header [ 57.569887][ T4402] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 57.573100][ T4409] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.357: bg 0: block 248: padding at end of block bitmap is not set [ 57.580440][ T4402] EXT4-fs (loop4): 1 orphan inode deleted [ 57.593884][ T4409] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.357: Failed to acquire dquot type 1 [ 57.611219][ T4409] EXT4-fs (loop0): 1 truncate cleaned up [ 57.617840][ T4409] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.667715][ T4420] FAULT_INJECTION: forcing a failure. [ 57.667715][ T4420] name failslab, interval 1, probability 0, space 0, times 0 [ 57.680513][ T4420] CPU: 0 UID: 0 PID: 4420 Comm: syz.3.360 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 57.687063][ T4422] loop0: detected capacity change from 0 to 512 [ 57.690769][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.690809][ T4420] Call Trace: [ 57.690817][ T4420] [ 57.698937][ T4422] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.361: corrupted xattr block 95: invalid header [ 57.707087][ T4420] dump_stack_lvl+0xf2/0x150 [ 57.710777][ T4422] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.361: bg 0: block 7: invalid block bitmap [ 57.713321][ T4420] dump_stack+0x15/0x20 [ 57.727186][ T4422] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.731511][ T4420] should_fail_ex+0x223/0x230 [ 57.743938][ T4422] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.361: corrupted xattr block 95: invalid header [ 57.747805][ T4420] should_failslab+0x8f/0xb0 [ 57.747835][ T4420] kmem_cache_alloc_noprof+0x52/0x320 [ 57.747886][ T4420] ? skb_clone+0x154/0x1f0 [ 57.758172][ T4422] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 57.761200][ T4420] skb_clone+0x154/0x1f0 [ 57.774786][ T4422] EXT4-fs (loop0): 1 orphan inode deleted [ 57.779132][ T4420] nfnetlink_rcv+0x2de/0x15d0 [ 57.779162][ T4420] ? kmem_cache_free+0xdc/0x2d0 [ 57.817608][ T4420] ? nlmon_xmit+0x51/0x60 [ 57.821949][ T4420] ? __kfree_skb+0x102/0x150 [ 57.826575][ T4420] ? consume_skb+0x49/0x160 [ 57.831090][ T4420] ? nlmon_xmit+0x51/0x60 [ 57.835526][ T4420] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 57.840846][ T4420] ? __dev_queue_xmit+0xb6e/0x2090 [ 57.845964][ T4420] ? security_inode_alloc+0x37/0x100 [ 57.851280][ T4420] ? ref_tracker_free+0x3a5/0x410 [ 57.856334][ T4420] ? __dev_queue_xmit+0x186/0x2090 [ 57.861526][ T4420] netlink_unicast+0x599/0x670 [ 57.866298][ T4420] netlink_sendmsg+0x5cc/0x6e0 [ 57.871210][ T4420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.876528][ T4420] __sock_sendmsg+0x140/0x180 [ 57.881224][ T4420] ____sys_sendmsg+0x312/0x410 [ 57.886035][ T4420] __sys_sendmsg+0x19d/0x230 [ 57.890749][ T4420] __x64_sys_sendmsg+0x46/0x50 [ 57.895550][ T4420] x64_sys_call+0x2734/0x2dc0 [ 57.900283][ T4420] do_syscall_64+0xc9/0x1c0 [ 57.904810][ T4420] ? clear_bhb_loop+0x55/0xb0 [ 57.909514][ T4420] ? clear_bhb_loop+0x55/0xb0 [ 57.914326][ T4420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.920269][ T4420] RIP: 0033:0x7fe09d4fe819 [ 57.924683][ T4420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.944428][ T4420] RSP: 002b:00007fe09bb77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.952839][ T4420] RAX: ffffffffffffffda RBX: 00007fe09d6b5fa0 RCX: 00007fe09d4fe819 [ 57.960828][ T4420] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 57.968802][ T4420] RBP: 00007fe09bb77090 R08: 0000000000000000 R09: 0000000000000000 [ 57.976784][ T4420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.984791][ T4420] R13: 0000000000000000 R14: 00007fe09d6b5fa0 R15: 00007fff5e4a3d78 [ 57.992778][ T4420] [ 58.007623][ T4425] loop0: detected capacity change from 0 to 128 [ 58.014354][ T4425] vfat: Unknown parameter 'ortname' [ 58.030002][ T4427] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.082955][ T4435] syz.1.366[4435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.083030][ T4435] syz.1.366[4435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.094565][ T4435] syz.1.366[4435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.126448][ T4427] loop3: detected capacity change from 0 to 512 [ 58.131547][ T4442] loop1: detected capacity change from 0 to 512 [ 58.139419][ T4427] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 58.154188][ T4442] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.369: corrupted xattr block 95: invalid header [ 58.175048][ T4442] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.369: bg 0: block 7: invalid block bitmap [ 58.187639][ T4442] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 58.197438][ T4442] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.369: corrupted xattr block 95: invalid header [ 58.211575][ T4445] loop3: detected capacity change from 0 to 512 [ 58.212034][ T4442] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 58.227335][ T4442] EXT4-fs (loop1): 1 orphan inode deleted [ 58.237058][ T4445] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.370: bg 0: block 248: padding at end of block bitmap is not set [ 58.251931][ T4445] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.370: Failed to acquire dquot type 1 [ 58.264092][ T4445] EXT4-fs (loop3): 1 truncate cleaned up [ 58.271282][ T4445] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.326475][ T4453] loop1: detected capacity change from 0 to 512 [ 58.344687][ T4453] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.373: corrupted xattr block 95: invalid header [ 58.360371][ T4453] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.373: bg 0: block 7: invalid block bitmap [ 58.371197][ T4458] loop3: detected capacity change from 0 to 128 [ 58.373040][ T4453] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 58.379552][ T4458] vfat: Unknown parameter 'ortname' [ 58.393211][ T4453] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.373: corrupted xattr block 95: invalid header [ 58.408666][ T4453] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 58.417850][ T4453] EXT4-fs (loop1): 1 orphan inode deleted [ 58.503308][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 58.503326][ T29] audit: type=1326 audit(1732605206.555:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.4.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633f32e819 code=0x7ffc0000 [ 58.538442][ T4467] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 58.549862][ T29] audit: type=1326 audit(1732605206.615:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.4.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f633f32e819 code=0x0 [ 58.802736][ T29] audit: type=1326 audit(1732605206.865:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 58.826530][ T4475] loop1: detected capacity change from 0 to 512 [ 58.827422][ T29] audit: type=1326 audit(1732605206.865:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 58.850202][ T4475] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.382: corrupted xattr block 95: invalid header [ 58.856199][ T29] audit: type=1326 audit(1732605206.865:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 58.872822][ T4475] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.382: bg 0: block 7: invalid block bitmap [ 58.893190][ T29] audit: type=1326 audit(1732605206.865:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 58.893217][ T29] audit: type=1326 audit(1732605206.865:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 58.893240][ T29] audit: type=1326 audit(1732605206.865:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc05856e853 code=0x7ffc0000 [ 58.906791][ T4475] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 58.928691][ T29] audit: type=1326 audit(1732605206.865:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc05856d2ff code=0x7ffc0000 [ 58.952855][ T4475] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.382: corrupted xattr block 95: invalid header [ 58.975250][ T29] audit: type=1326 audit(1732605206.865:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc05856e8a7 code=0x7ffc0000 [ 58.998949][ T4475] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 59.019459][ T4479] loop0: detected capacity change from 0 to 512 [ 59.041473][ T4475] EXT4-fs (loop1): 1 orphan inode deleted [ 59.057267][ T4479] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.383: bg 0: block 248: padding at end of block bitmap is not set [ 59.081422][ T4479] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.383: Failed to acquire dquot type 1 [ 59.093233][ T4479] EXT4-fs (loop0): 1 truncate cleaned up [ 59.099329][ T4479] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.191437][ T4496] loop1: detected capacity change from 0 to 128 [ 59.212953][ T4496] vfat: Unknown parameter 'ortname' [ 59.264100][ T4505] veth0_to_team: entered promiscuous mode [ 59.269947][ T4505] veth0_to_team: entered allmulticast mode [ 59.339659][ T4512] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 59.363096][ T4511] loop0: detected capacity change from 0 to 512 [ 59.371980][ T4511] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.394: corrupted xattr block 95: invalid header [ 59.391907][ T4511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.394: bg 0: block 7: invalid block bitmap [ 59.415830][ T4511] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.431826][ T4511] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.394: corrupted xattr block 95: invalid header [ 59.448024][ T4511] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 59.457176][ T4511] EXT4-fs (loop0): 1 orphan inode deleted [ 59.496104][ T4517] loop4: detected capacity change from 0 to 512 [ 59.518565][ T4519] loop0: detected capacity change from 0 to 512 [ 59.538658][ T4517] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.396: bg 0: block 248: padding at end of block bitmap is not set [ 59.555003][ T4517] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.396: Failed to acquire dquot type 1 [ 59.563601][ T4519] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.397: corrupted xattr block 95: invalid header [ 59.569492][ T4517] EXT4-fs (loop4): 1 truncate cleaned up [ 59.586351][ T4517] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.596746][ T4519] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.397: bg 0: block 7: invalid block bitmap [ 59.612914][ T4519] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.621973][ T4519] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.397: corrupted xattr block 95: invalid header [ 59.637445][ T4519] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 59.646573][ T4519] EXT4-fs (loop0): 1 orphan inode deleted [ 59.721878][ T4531] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=61 sclass=netlink_xfrm_socket pid=4531 comm=syz.4.398 [ 59.767991][ T4531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.398'. [ 59.828053][ T4531] can0: slcan on ttyS3. [ 59.865298][ T4531] can0 (unregistered): slcan off ttyS3. [ 59.871112][ T4531] Falling back ldisc for ttyS3. [ 60.049073][ T4544] syz.4.404[4544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.049427][ T4544] syz.4.404[4544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.060826][ T4544] syz.4.404[4544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.095459][ T4544] FAULT_INJECTION: forcing a failure. [ 60.095459][ T4544] name failslab, interval 1, probability 0, space 0, times 0 [ 60.119504][ T4544] CPU: 0 UID: 0 PID: 4544 Comm: syz.4.404 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 60.129772][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.139932][ T4544] Call Trace: [ 60.143239][ T4544] [ 60.146179][ T4544] dump_stack_lvl+0xf2/0x150 [ 60.150843][ T4544] dump_stack+0x15/0x20 [ 60.155091][ T4544] should_fail_ex+0x223/0x230 [ 60.159830][ T4544] ? alloc_fs_context+0x44/0x4e0 [ 60.164838][ T4544] should_failslab+0x8f/0xb0 [ 60.169534][ T4544] __kmalloc_cache_noprof+0x4e/0x320 [ 60.174866][ T4544] alloc_fs_context+0x44/0x4e0 [ 60.179644][ T4544] ? strncmp+0x34/0x70 [ 60.183740][ T4544] fs_context_for_mount+0x21/0x30 [ 60.188808][ T4544] do_new_mount+0xf3/0x690 [ 60.193266][ T4544] path_mount+0x49b/0xb30 [ 60.197716][ T4544] __se_sys_mount+0x27c/0x2d0 [ 60.202449][ T4544] __x64_sys_mount+0x67/0x80 [ 60.207079][ T4544] x64_sys_call+0x2c84/0x2dc0 [ 60.211792][ T4544] do_syscall_64+0xc9/0x1c0 [ 60.216389][ T4544] ? clear_bhb_loop+0x55/0xb0 [ 60.221110][ T4544] ? clear_bhb_loop+0x55/0xb0 [ 60.225822][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.228316][ T4549] loop1: detected capacity change from 0 to 512 [ 60.231726][ T4544] RIP: 0033:0x7f633f32e819 [ 60.242413][ T4544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.257991][ T4549] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.407: corrupted xattr block 95: invalid header [ 60.262276][ T4544] RSP: 002b:00007f633d9a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.284429][ T4544] RAX: ffffffffffffffda RBX: 00007f633f4e5fa0 RCX: 00007f633f32e819 [ 60.292420][ T4544] RDX: 0000000020001440 RSI: 0000000020001400 RDI: 00000000200013c0 [ 60.300472][ T4544] RBP: 00007f633d9a7090 R08: 0000000020000080 R09: 0000000000000000 [ 60.300723][ T4549] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.407: bg 0: block 7: invalid block bitmap [ 60.308457][ T4544] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 60.308476][ T4544] R13: 0000000000000000 R14: 00007f633f4e5fa0 R15: 00007ffc77b315c8 [ 60.336632][ T4544] [ 60.350017][ T4549] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 60.362720][ T4549] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.407: corrupted xattr block 95: invalid header [ 60.425231][ T4549] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 60.441839][ T4553] loop4: detected capacity change from 0 to 512 [ 60.445228][ T4549] EXT4-fs (loop1): 1 orphan inode deleted [ 60.670107][ T4553] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.409: bg 0: block 248: padding at end of block bitmap is not set [ 60.702093][ T4553] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.409: Failed to acquire dquot type 1 [ 60.714531][ T4553] EXT4-fs (loop4): 1 truncate cleaned up [ 60.720913][ T4553] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.774178][ T4567] syz.2.414[4567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.865306][ T4569] loop1: detected capacity change from 0 to 2048 [ 60.930833][ T4569] Alternate GPT is invalid, using primary GPT. [ 60.937249][ T4569] loop1: p2 p3 p7 [ 61.099708][ T4594] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 61.179124][ T4591] loop1: detected capacity change from 0 to 512 [ 61.210476][ T4597] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 61.271938][ T4599] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 61.320402][ T4591] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.426: bg 0: block 248: padding at end of block bitmap is not set [ 61.374367][ T4594] loop2: detected capacity change from 0 to 8192 [ 61.405875][ T4591] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.426: Failed to acquire dquot type 1 [ 61.490690][ T4591] EXT4-fs (loop1): 1 truncate cleaned up [ 61.535390][ T4594] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 61.543970][ T4594] FAT-fs (loop2): Filesystem has been set read-only [ 61.551142][ T4591] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.640923][ T4605] syz.2.425: attempt to access beyond end of device [ 61.640923][ T4605] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 61.860078][ T4613] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 61.995298][ T4613] loop2: detected capacity change from 0 to 8192 [ 62.117373][ T4613] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 62.126049][ T4613] FAT-fs (loop2): Filesystem has been set read-only [ 62.154491][ T4613] syz.2.429: attempt to access beyond end of device [ 62.154491][ T4613] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.457908][ T4648] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 62.562847][ T4653] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.444'. [ 62.973392][ T4666] loop0: detected capacity change from 0 to 128 [ 62.980142][ T4666] vfat: Unknown parameter 'ortname' [ 63.017510][ T4668] loop0: detected capacity change from 0 to 1024 [ 63.024600][ T4668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.056744][ T4673] loop3: detected capacity change from 0 to 512 [ 63.065072][ T4673] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.450: corrupted xattr block 95: invalid header [ 63.079782][ T4673] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.450: bg 0: block 7: invalid block bitmap [ 63.092695][ T4673] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.101896][ T4673] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.450: corrupted xattr block 95: invalid header [ 63.116586][ T4673] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 63.125794][ T4673] EXT4-fs (loop3): 1 orphan inode deleted [ 63.155907][ T4680] loop2: detected capacity change from 0 to 512 [ 63.168377][ T4680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.454: bg 0: block 248: padding at end of block bitmap is not set [ 63.183447][ T4680] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.454: Failed to acquire dquot type 1 [ 63.196712][ T4680] EXT4-fs (loop2): 1 truncate cleaned up [ 63.199955][ T4686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4686 comm=syz.0.455 [ 63.203568][ T4680] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.297512][ T4694] bpf_get_probe_write_proto: 5 callbacks suppressed [ 63.297535][ T4694] syz.2.459[4694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.304253][ T4694] syz.2.459[4694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.315827][ T4694] syz.2.459[4694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.344273][ T4697] syz.2.460[4697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.355654][ T4697] syz.2.460[4697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.367215][ T4697] syz.2.460[4697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.431243][ T4703] loop1: detected capacity change from 0 to 512 [ 63.455566][ T4703] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.462: corrupted xattr block 95: invalid header [ 63.469765][ T4703] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.462: bg 0: block 7: invalid block bitmap [ 63.483158][ T4703] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.492088][ T4703] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.462: corrupted xattr block 95: invalid header [ 63.506206][ T4703] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 63.515573][ T4703] EXT4-fs (loop1): 1 orphan inode deleted [ 63.522032][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 63.522049][ T29] audit: type=1326 audit(1732605211.585:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05856d1b0 code=0x7ffc0000 [ 63.551926][ T29] audit: type=1326 audit(1732605211.585:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc05856d597 code=0x7ffc0000 [ 63.575431][ T29] audit: type=1326 audit(1732605211.585:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05856d1b0 code=0x7ffc0000 [ 63.579177][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.598751][ T29] audit: type=1326 audit(1732605211.585:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.608522][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.630479][ T29] audit: type=1326 audit(1732605211.585:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.650514][ T4689] loop0: detected capacity change from 0 to 512 [ 63.663177][ T29] audit: type=1326 audit(1732605211.585:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.684050][ T4709] loop1: detected capacity change from 0 to 512 [ 63.692035][ T29] audit: type=1326 audit(1732605211.585:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.692068][ T29] audit: type=1326 audit(1732605211.585:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.692093][ T29] audit: type=1326 audit(1732605211.585:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4702 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.702132][ T4709] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.464: corrupted xattr block 95: invalid header [ 63.724395][ T29] audit: type=1326 audit(1732605211.735:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 63.747006][ T4689] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.768964][ T4709] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.464: bg 0: block 7: invalid block bitmap [ 63.784853][ T4689] EXT4-fs (loop0): mount failed [ 63.808429][ T4709] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.846640][ T4709] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.464: corrupted xattr block 95: invalid header [ 63.857325][ T4689] dvmrp0: entered allmulticast mode [ 63.861400][ T4709] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 63.874549][ T4709] EXT4-fs (loop1): 1 orphan inode deleted [ 63.894596][ T4716] loop4: detected capacity change from 0 to 512 [ 63.911881][ T4720] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 63.916877][ T4716] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.466: bg 0: block 248: padding at end of block bitmap is not set [ 63.932519][ T4716] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.466: Failed to acquire dquot type 1 [ 63.944246][ T4716] EXT4-fs (loop4): 1 truncate cleaned up [ 63.950459][ T4716] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.961870][ T4724] loop1: detected capacity change from 0 to 512 [ 63.970375][ T4724] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.478: corrupted xattr block 95: invalid header [ 63.984667][ T4724] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.478: bg 0: block 7: invalid block bitmap [ 63.998029][ T4724] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.006883][ T4724] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.478: corrupted xattr block 95: invalid header [ 64.020633][ T4724] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 64.029927][ T4724] EXT4-fs (loop1): 1 orphan inode deleted [ 64.070596][ T4731] syz.1.471[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.070704][ T4731] syz.1.471[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.082373][ T4731] syz.1.471[4731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.212448][ T4736] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 64.234206][ T4736] bond0: (slave sit0): Error -95 calling set_mac_address [ 64.887806][ T4749] loop4: detected capacity change from 0 to 512 [ 64.896324][ T4749] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.480: corrupted xattr block 95: invalid header [ 64.911182][ T4749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.480: bg 0: block 7: invalid block bitmap [ 64.927441][ T4749] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.936371][ T4749] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.480: corrupted xattr block 95: invalid header [ 64.951277][ T4749] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 64.960728][ T4749] EXT4-fs (loop4): 1 orphan inode deleted [ 65.013592][ T4757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'. [ 65.039236][ T4761] syz.1.484[4761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.138484][ T4767] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.486'. [ 65.375730][ T4781] loop2: detected capacity change from 0 to 512 [ 65.384064][ T4781] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.492: corrupted xattr block 95: invalid header [ 65.398476][ T4781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.492: bg 0: block 7: invalid block bitmap [ 65.410850][ T4781] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 65.419780][ T4781] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.492: corrupted xattr block 95: invalid header [ 65.433299][ T4781] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 65.442439][ T4781] EXT4-fs (loop2): 1 orphan inode deleted [ 65.522568][ T4791] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 65.533098][ T4791] bond0: (slave sit0): Error -95 calling set_mac_address [ 65.569983][ T4792] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 66.054201][ T4801] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.500'. [ 66.093750][ T4803] bond_slave_0: entered promiscuous mode [ 66.099486][ T4803] bond_slave_1: entered promiscuous mode [ 66.118769][ T4803] macvlan2: entered allmulticast mode [ 66.124200][ T4803] bond0: entered allmulticast mode [ 66.129494][ T4803] bond_slave_0: entered allmulticast mode [ 66.135337][ T4803] bond_slave_1: entered allmulticast mode [ 66.142049][ T4803] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.151353][ T4803] bond0: left allmulticast mode [ 66.156313][ T4803] bond_slave_0: left allmulticast mode [ 66.161808][ T4803] bond_slave_1: left allmulticast mode [ 66.167337][ T4803] bond_slave_0: left promiscuous mode [ 66.172733][ T4803] bond_slave_1: left promiscuous mode [ 66.260497][ T4810] wireguard0: entered promiscuous mode [ 66.266083][ T4810] wireguard0: entered allmulticast mode [ 66.283723][ T4814] loop4: detected capacity change from 0 to 512 [ 66.302555][ T4814] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.505: corrupted xattr block 95: invalid header [ 66.317469][ T4814] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.505: bg 0: block 7: invalid block bitmap [ 66.328356][ T4818] bridge0: port 3(gretap0) entered blocking state [ 66.330252][ T4814] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 66.336221][ T4818] bridge0: port 3(gretap0) entered disabled state [ 66.344886][ T4814] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.505: corrupted xattr block 95: invalid header [ 66.352719][ T4818] gretap0: entered allmulticast mode [ 66.365125][ T4814] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 66.372813][ T4818] gretap0: entered promiscuous mode [ 66.379205][ T4814] EXT4-fs (loop4): 1 orphan inode deleted [ 66.385008][ T4818] bridge0: port 3(gretap0) entered blocking state [ 66.396741][ T4818] bridge0: port 3(gretap0) entered forwarding state [ 66.407384][ T4820] gretap0: left allmulticast mode [ 66.412445][ T4820] gretap0: left promiscuous mode [ 66.417619][ T4820] bridge0: port 3(gretap0) entered disabled state [ 66.493879][ T4830] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 66.527084][ T4836] SELinux: policydb string SE LinuQ does not match my string SE Linux [ 66.535809][ T4836] SELinux: failed to load policy [ 66.556630][ T4836] capability: warning: `syz.2.513' uses 32-bit capabilities (legacy support in use) [ 66.621232][ T4844] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.516'. [ 66.899403][ T4851] loop0: detected capacity change from 0 to 8192 [ 66.907684][ T4851] vfat: Unknown parameter '00000000000000000007' [ 67.027376][ T4856] loop0: detected capacity change from 0 to 512 [ 67.059118][ T4856] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.520: corrupted xattr block 95: invalid header [ 67.095755][ T4856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.520: bg 0: block 7: invalid block bitmap [ 67.130158][ T4862] loop6: detected capacity change from 0 to 7 [ 67.137652][ T4862] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.145738][ T4862] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.153641][ T4862] loop6: unable to read partition table [ 67.159385][ T4862] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 67.159385][ T4862] ) failed (rc=-5) [ 67.186366][ T4856] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.206248][ T4856] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.520: corrupted xattr block 95: invalid header [ 67.229141][ T4856] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 67.240899][ T4856] EXT4-fs (loop0): 1 orphan inode deleted [ 67.247159][ T4856] EXT4-fs mount: 50 callbacks suppressed [ 67.247175][ T4856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.292468][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.581082][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.619597][ T4896] loop0: detected capacity change from 0 to 512 [ 67.640243][ T4896] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.536: corrupted xattr block 95: invalid header [ 67.640308][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.664691][ T4896] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.536: bg 0: block 7: invalid block bitmap [ 67.679083][ T4896] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 67.688363][ T4896] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.536: corrupted xattr block 95: invalid header [ 67.703442][ T4896] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 67.713149][ T4896] EXT4-fs (loop0): 1 orphan inode deleted [ 67.720031][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.733023][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.747247][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.778576][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.792751][ T4891] chnl_net:caif_netlink_parms(): no params data found [ 67.851864][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.856695][ T4915] loop0: detected capacity change from 0 to 128 [ 67.858986][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.865626][ T4915] vfat: Unknown parameter 'ortname' [ 67.873812][ T4891] bridge_slave_0: entered allmulticast mode [ 67.884765][ T4891] bridge_slave_0: entered promiscuous mode [ 67.905103][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.912277][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.919909][ T4891] bridge_slave_1: entered allmulticast mode [ 67.926444][ T4891] bridge_slave_1: entered promiscuous mode [ 67.932868][ T36] bridge_slave_1: left allmulticast mode [ 67.938612][ T36] bridge_slave_1: left promiscuous mode [ 67.944315][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.952165][ T36] bridge_slave_0: left allmulticast mode [ 67.958083][ T36] bridge_slave_0: left promiscuous mode [ 67.963703][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.013052][ T36] dvmrp0 (unregistering): left allmulticast mode [ 68.077015][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.086890][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.096393][ T36] bond0 (unregistering): Released all slaves [ 68.115010][ T4891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.126306][ T4891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.146792][ T36] hsr_slave_0: left promiscuous mode [ 68.152534][ T36] hsr_slave_1: left promiscuous mode [ 68.158419][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.165856][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.173478][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.180934][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.190754][ T36] veth1_macvtap: left promiscuous mode [ 68.196346][ T36] veth0_macvtap: left promiscuous mode [ 68.201923][ T36] veth1_vlan: left promiscuous mode [ 68.207202][ T36] veth0_vlan: left promiscuous mode [ 68.214579][ T4923] loop1: detected capacity change from 0 to 164 [ 68.221887][ T4923] Unable to read rock-ridge attributes [ 68.223478][ T4917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.232235][ T4923] Unable to read rock-ridge attributes [ 68.236522][ T4917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.258614][ T4917] loop0: detected capacity change from 0 to 512 [ 68.276937][ T4917] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.291964][ T4917] EXT4-fs (loop0): mount failed [ 68.353960][ T4891] team0: Port device team_slave_0 added [ 68.360983][ T4891] team0: Port device team_slave_1 added [ 68.377715][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.384698][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.410723][ T4891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.421913][ T4891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.428975][ T4891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.454936][ T4891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.480962][ T4891] hsr_slave_0: entered promiscuous mode [ 68.487202][ T4891] hsr_slave_1: entered promiscuous mode [ 68.493118][ T4891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.500740][ T4891] Cannot create hsr debugfs directory [ 68.561893][ T4891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 68.570679][ T4891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 68.579013][ T4891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 68.587768][ T4891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 68.623695][ T4891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.636343][ T4891] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.646053][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.653132][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.663650][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.670769][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.691359][ T4891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.701741][ T4891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.753889][ T4891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.864781][ T4891] veth0_vlan: entered promiscuous mode [ 68.872526][ T4891] veth1_vlan: entered promiscuous mode [ 68.890687][ T4891] veth0_macvtap: entered promiscuous mode [ 68.897796][ T4891] veth1_macvtap: entered promiscuous mode [ 68.907957][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.918526][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.928377][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.938916][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.948779][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.959250][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.969070][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.979594][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.990303][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.000849][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.011477][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.021405][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.031900][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.041773][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.049499][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 69.049517][ T29] audit: type=1400 audit(1732605217.115:3819): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 69.052285][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.088886][ T4891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.099373][ T4891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.109743][ T4891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.120724][ T4891] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.129508][ T4891] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.138434][ T4891] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.147233][ T4891] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.160822][ T4952] loop1: detected capacity change from 0 to 128 [ 69.169535][ T4952] vfat: Unknown parameter 'ortname' [ 69.179691][ T29] audit: type=1400 audit(1732605217.245:3820): avc: denied { mount } for pid=4891 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.204132][ T29] audit: type=1400 audit(1732605217.245:3821): avc: denied { mounton } for pid=4891 comm="syz-executor" path="/root/syzkaller.oz8CAZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.250322][ T4955] loop5: detected capacity change from 0 to 512 [ 69.277743][ T4955] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.534: bg 0: block 248: padding at end of block bitmap is not set [ 69.293266][ T4955] Quota error (device loop5): write_blk: dquota write failed [ 69.300720][ T4955] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 69.310803][ T4955] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.534: Failed to acquire dquot type 1 [ 69.312437][ T29] audit: type=1326 audit(1732605217.375:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 69.347921][ T29] audit: type=1326 audit(1732605217.385:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 69.348853][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.371215][ T29] audit: type=1326 audit(1732605217.385:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 69.399354][ T4965] loop1: detected capacity change from 0 to 2048 [ 69.402888][ T29] audit: type=1326 audit(1732605217.385:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 69.412172][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.432590][ T29] audit: type=1326 audit(1732605217.385:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 69.466589][ T4955] EXT4-fs (loop5): 1 truncate cleaned up [ 69.467532][ T4949] loop0: detected capacity change from 0 to 512 [ 69.472759][ T4955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.492717][ T4955] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.503563][ T4965] loop1: p1 < > p4 [ 69.508084][ T4949] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.518386][ T4965] loop1: p4 size 8388608 extends beyond EOD, truncated [ 69.522959][ T4949] EXT4-fs (loop0): mount failed [ 69.532026][ T4891] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.205410][ T4978] bpf_get_probe_write_proto: 2 callbacks suppressed [ 70.205429][ T4978] syz.0.554[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.212294][ T4978] syz.0.554[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.223694][ T4978] syz.0.554[4978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.252587][ T4980] syz.0.555[4980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.263970][ T4980] syz.0.555[4980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.275501][ T4980] syz.0.555[4980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.327922][ T4982] loop0: detected capacity change from 0 to 2048 [ 70.355032][ T4984] loop2: detected capacity change from 0 to 128 [ 70.363109][ T4984] vfat: Unknown parameter 'ortname' [ 70.386710][ T4982] loop0: p1 < > p4 [ 70.389611][ T4986] syz.2.558[4986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.390764][ T4986] syz.2.558[4986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.391231][ T4982] loop0: p4 size 8388608 extends beyond EOD, [ 70.402610][ T4986] syz.2.558[4986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.413437][ T4982] truncated [ 70.450691][ T4988] veth0_to_team: entered promiscuous mode [ 70.456579][ T4988] veth0_to_team: entered allmulticast mode [ 70.521924][ T4995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.563'. [ 70.571862][ T5001] loop6: detected capacity change from 0 to 7 [ 70.578246][ T5001] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.599126][ T5001] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.607090][ T5001] loop6: unable to read partition table [ 70.646392][ T5001] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 70.646392][ T5001] ) failed (rc=-5) [ 70.895861][ T5017] loop2: detected capacity change from 0 to 128 [ 70.902344][ T5017] vfat: Unknown parameter 'ortname' [ 70.931429][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.939066][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.946567][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.954255][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.961746][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.969316][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.976819][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.984324][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.991738][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 70.999169][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.006648][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.014142][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.021543][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.029085][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.036604][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.044038][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.051490][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.058256][ T5021] netlink: 96 bytes leftover after parsing attributes in process `syz.2.570'. [ 71.058941][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.075212][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.082609][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.090007][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.097435][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.104833][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.112285][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.119683][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.127097][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.134539][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.141953][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.149352][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.156791][ T4918] hid-generic FFFC:0000:0000.0001: unknown main item tag 0x0 [ 71.165137][ T4918] hid-generic FFFC:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 71.195569][ T5024] loop2: detected capacity change from 0 to 512 [ 71.204403][ T5024] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.571: corrupted xattr block 95: invalid header [ 71.218503][ T5024] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.571: bg 0: block 7: invalid block bitmap [ 71.230923][ T5024] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.237203][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.240080][ T5024] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.571: corrupted xattr block 95: invalid header [ 71.248447][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.262917][ T5024] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 71.278433][ T5024] EXT4-fs (loop2): 1 orphan inode deleted [ 71.281174][ T5015] loop1: detected capacity change from 0 to 512 [ 71.284673][ T5024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.317396][ T5015] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.332422][ T5015] EXT4-fs (loop1): mount failed [ 71.332596][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.378950][ T5032] loop4: detected capacity change from 0 to 512 [ 71.385635][ T5032] EXT4-fs: Ignoring removed oldalloc option [ 71.391864][ T5032] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.423167][ T5032] EXT4-fs (loop4): 1 truncate cleaned up [ 71.434184][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.453450][ T5041] loop6: detected capacity change from 0 to 7 [ 71.465755][ T5041] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.475636][ T5041] Buffer I/O error on dev loop6, logical block 0, async page read [ 71.485922][ T5041] loop6: unable to read partition table [ 71.491665][ T5041] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 71.491665][ T5041] ) failed (rc=-5) [ 71.542057][ T5046] loop2: detected capacity change from 0 to 512 [ 71.552320][ T5046] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.579: corrupted xattr block 95: invalid header [ 71.567706][ T5046] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.579: bg 0: block 7: invalid block bitmap [ 71.580476][ T5046] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 71.589422][ T5046] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.579: corrupted xattr block 95: invalid header [ 71.604294][ T5046] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 71.613480][ T5046] EXT4-fs (loop2): 1 orphan inode deleted [ 71.619950][ T5046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.644702][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.686287][ T5051] netlink: 32 bytes leftover after parsing attributes in process `syz.2.582'. [ 71.723451][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.787680][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.838242][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.888797][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.890318][ T5073] FAULT_INJECTION: forcing a failure. [ 71.890318][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 71.911845][ T5073] CPU: 1 UID: 0 PID: 5073 Comm: syz.1.590 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 71.922102][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.932151][ T5073] Call Trace: [ 71.935430][ T5073] [ 71.938459][ T5073] dump_stack_lvl+0xf2/0x150 [ 71.943189][ T5073] dump_stack+0x15/0x20 [ 71.947388][ T5073] should_fail_ex+0x223/0x230 [ 71.952192][ T5073] should_failslab+0x8f/0xb0 [ 71.956846][ T5073] kmem_cache_alloc_noprof+0x52/0x320 [ 71.962342][ T5073] ? skb_clone+0x154/0x1f0 [ 71.966784][ T5073] skb_clone+0x154/0x1f0 [ 71.971103][ T5073] __netlink_deliver_tap+0x2bd/0x4f0 [ 71.976500][ T5073] netlink_unicast+0x64a/0x670 [ 71.981289][ T5073] netlink_sendmsg+0x5cc/0x6e0 [ 71.986193][ T5073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.991570][ T5073] __sock_sendmsg+0x140/0x180 [ 71.996271][ T5073] __sys_sendto+0x1a8/0x230 [ 72.000818][ T5073] __x64_sys_sendto+0x78/0x90 [ 72.005514][ T5073] x64_sys_call+0x29fa/0x2dc0 [ 72.010213][ T5073] do_syscall_64+0xc9/0x1c0 [ 72.014723][ T5073] ? clear_bhb_loop+0x55/0xb0 [ 72.019430][ T5073] ? clear_bhb_loop+0x55/0xb0 [ 72.024173][ T5073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.030152][ T5073] RIP: 0033:0x7fc0585706ac [ 72.034609][ T5073] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 72.054219][ T5073] RSP: 002b:00007fc056be5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 72.062650][ T5073] RAX: ffffffffffffffda RBX: 00007fc056be5fc0 RCX: 00007fc0585706ac [ 72.070618][ T5073] RDX: 0000000000000020 RSI: 00007fc056be6010 RDI: 0000000000000005 [ 72.078675][ T5073] RBP: 0000000000000000 R08: 00007fc056be5f14 R09: 000000000000000c [ 72.086693][ T5073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 72.094671][ T5073] R13: 00007fc056be5f68 R14: 00007fc056be6010 R15: 0000000000000000 [ 72.102704][ T5073] [ 72.178501][ T50] bridge_slave_1: left allmulticast mode [ 72.184194][ T50] bridge_slave_1: left promiscuous mode [ 72.189871][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.221507][ T50] bridge_slave_0: left allmulticast mode [ 72.227363][ T50] bridge_slave_0: left promiscuous mode [ 72.233027][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.266614][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.312319][ T5089] program syz.4.594 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.354422][ T50] dvmrp0 (unregistering): left allmulticast mode [ 72.374845][ T5092] loop1: detected capacity change from 0 to 128 [ 72.399838][ T5092] vfat: Unknown parameter 'ortname' [ 72.452612][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.481937][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.512550][ T50] bond0 (unregistering): Released all slaves [ 72.548915][ T5102] loop4: detected capacity change from 0 to 128 [ 72.568434][ T5102] vfat: Unknown parameter 'ortname' [ 72.602326][ T50] hsr_slave_0: left promiscuous mode [ 72.622100][ T50] hsr_slave_1: left promiscuous mode [ 72.635755][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.636382][ T5104] loop1: detected capacity change from 0 to 512 [ 72.643175][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.658154][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.665621][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.674718][ T50] veth1_macvtap: left promiscuous mode [ 72.680266][ T50] veth0_macvtap: left promiscuous mode [ 72.685832][ T50] veth1_vlan: left promiscuous mode [ 72.691128][ T50] veth0_vlan: left promiscuous mode [ 72.703204][ T5104] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.600: corrupted xattr block 95: invalid header [ 72.730300][ T5104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.600: bg 0: block 7: invalid block bitmap [ 72.768368][ T5104] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.809545][ T5104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.600: corrupted xattr block 95: invalid header [ 72.866968][ T5104] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 72.878474][ T5104] EXT4-fs (loop1): 1 orphan inode deleted [ 72.884902][ T5104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.021928][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.057983][ T5119] xt_hashlimit: size too large, truncated to 1048576 [ 73.091592][ T5055] chnl_net:caif_netlink_parms(): no params data found [ 73.170139][ T5122] loop1: detected capacity change from 0 to 512 [ 73.198293][ T5122] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.231423][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.238608][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.257314][ T5122] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 73.265385][ T5055] bridge_slave_0: entered allmulticast mode [ 73.272331][ T5055] bridge_slave_0: entered promiscuous mode [ 73.315283][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.322417][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.335545][ T5055] bridge_slave_1: entered allmulticast mode [ 73.342020][ T5055] bridge_slave_1: entered promiscuous mode [ 73.369519][ T5055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.387719][ T5055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.395797][ T5122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 73.404800][ T5122] System zones: 1-12 [ 73.410011][ T5122] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.604: corrupted in-inode xattr: e_value size too large [ 73.433673][ T5122] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.604: couldn't read orphan inode 15 (err -117) [ 73.449207][ T5122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.464685][ T5055] team0: Port device team_slave_0 added [ 73.471361][ T5055] team0: Port device team_slave_1 added [ 73.480206][ T28] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.525906][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.532900][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.558964][ T5055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.570355][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.577363][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.603386][ T5055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.630430][ T28] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.651608][ T5055] hsr_slave_0: entered promiscuous mode [ 73.658201][ T5055] hsr_slave_1: entered promiscuous mode [ 73.664687][ T5055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.674719][ T5055] Cannot create hsr debugfs directory [ 73.688241][ T28] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.700363][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.738211][ T28] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.739568][ T5143] loop1: detected capacity change from 0 to 512 [ 73.763223][ T5143] EXT4-fs: Ignoring removed bh option [ 73.769640][ T5143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.784866][ T5143] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 73.806083][ T5143] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 73.814161][ T5143] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.844053][ T5143] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.609: Failed to acquire dquot type 1 [ 73.877514][ T5143] EXT4-fs (loop1): Remounting filesystem read-only [ 73.884243][ T5143] EXT4-fs (loop1): 1 orphan inode deleted [ 73.918000][ T5130] chnl_net:caif_netlink_parms(): no params data found [ 73.927169][ T5143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.943712][ T28] bridge_slave_1: left allmulticast mode [ 73.949445][ T28] bridge_slave_1: left promiscuous mode [ 73.955540][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.967705][ T5143] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 73.974609][ T5143] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.988196][ T28] bridge_slave_0: left allmulticast mode [ 73.993847][ T28] bridge_slave_0: left promiscuous mode [ 73.999686][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.098771][ T5154] loop6: detected capacity change from 0 to 7 [ 74.106826][ T5154] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.116446][ T5155] loop1: detected capacity change from 0 to 128 [ 74.122935][ T5154] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.130885][ T5154] loop6: unable to read partition table [ 74.136898][ T5155] vfat: Unknown parameter 'ortname' [ 74.147809][ T5154] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 74.147809][ T5154] ) failed (rc=-5) [ 74.161313][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.176536][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.187919][ T28] bond0 (unregistering): Released all slaves [ 74.204550][ T5055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 74.256518][ T5055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 74.288712][ T5055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 74.304802][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 74.304830][ T29] audit: type=1326 audit(1732605222.366:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 74.338826][ T5161] loop1: detected capacity change from 0 to 512 [ 74.388951][ T29] audit: type=1326 audit(1732605222.396:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 74.412435][ T29] audit: type=1326 audit(1732605222.396:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 74.436094][ T29] audit: type=1326 audit(1732605222.396:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 74.459498][ T29] audit: type=1326 audit(1732605222.396:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 74.483058][ T29] audit: type=1326 audit(1732605222.396:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc05856e819 code=0x7ffc0000 [ 74.506533][ T29] audit: type=1326 audit(1732605222.396:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc05856e853 code=0x7ffc0000 [ 74.529876][ T29] audit: type=1326 audit(1732605222.406:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc05856d2ff code=0x7ffc0000 [ 74.553167][ T29] audit: type=1326 audit(1732605222.406:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc05856e8a7 code=0x7ffc0000 [ 74.576494][ T29] audit: type=1326 audit(1732605222.406:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5160 comm="syz.1.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05856d1b0 code=0x7ffc0000 [ 74.644102][ T5176] FAULT_INJECTION: forcing a failure. [ 74.644102][ T5176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.657383][ T5176] CPU: 0 UID: 0 PID: 5176 Comm: syz.1.621 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 74.657414][ T5176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.657487][ T5176] Call Trace: [ 74.657495][ T5176] [ 74.657504][ T5176] dump_stack_lvl+0xf2/0x150 [ 74.657543][ T5176] dump_stack+0x15/0x20 [ 74.657587][ T5176] should_fail_ex+0x223/0x230 [ 74.657619][ T5176] should_fail+0xb/0x10 [ 74.657644][ T5176] should_fail_usercopy+0x1a/0x20 [ 74.657683][ T5176] _copy_from_user+0x1e/0xb0 [ 74.657721][ T5176] perf_copy_attr+0x146/0x5c0 [ 74.657746][ T5176] ? selinux_file_permission+0x22a/0x360 [ 74.657797][ T5176] ? __rcu_read_unlock+0x4e/0x70 [ 74.657822][ T5176] __se_sys_perf_event_open+0x6d/0x2230 [ 74.657861][ T5176] ? proc_fail_nth_write+0x12a/0x150 [ 74.657895][ T5176] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.657986][ T5176] ? vfs_write+0x596/0x920 [ 74.658016][ T5176] ? putname+0xcf/0xf0 [ 74.658044][ T5176] __x64_sys_perf_event_open+0x67/0x80 [ 74.658087][ T5176] x64_sys_call+0x1deb/0x2dc0 [ 74.658117][ T5176] do_syscall_64+0xc9/0x1c0 [ 74.658215][ T5176] ? clear_bhb_loop+0x55/0xb0 [ 74.658256][ T5176] ? clear_bhb_loop+0x55/0xb0 [ 74.658353][ T5176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.658393][ T5176] RIP: 0033:0x7fc05856e819 [ 74.658444][ T5176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.658466][ T5176] RSP: 002b:00007fc056be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 74.658560][ T5176] RAX: ffffffffffffffda RBX: 00007fc058725fa0 RCX: 00007fc05856e819 [ 74.823113][ T5176] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000020000000 [ 74.831099][ T5176] RBP: 00007fc056be7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.839093][ T5176] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 74.839114][ T5176] R13: 0000000000000000 R14: 00007fc058725fa0 R15: 00007fffc79daaf8 [ 74.855066][ T5176] [ 74.864087][ T28] hsr_slave_0: left promiscuous mode [ 74.871878][ T28] hsr_slave_1: left promiscuous mode [ 74.874889][ T5181] FAULT_INJECTION: forcing a failure. [ 74.874889][ T5181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.890349][ T5181] CPU: 0 UID: 0 PID: 5181 Comm: syz.1.623 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 74.900680][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.910736][ T5181] Call Trace: [ 74.914017][ T5181] [ 74.916975][ T5181] dump_stack_lvl+0xf2/0x150 [ 74.921712][ T5181] dump_stack+0x15/0x20 [ 74.925974][ T5181] should_fail_ex+0x223/0x230 [ 74.930740][ T5181] should_fail+0xb/0x10 [ 74.934982][ T5181] should_fail_usercopy+0x1a/0x20 [ 74.940089][ T5181] _copy_from_user+0x1e/0xb0 [ 74.944814][ T5181] memdup_user+0x64/0xc0 [ 74.949115][ T5181] strndup_user+0x68/0xa0 [ 74.953464][ T5181] __se_sys_mount+0x4e/0x2d0 [ 74.958060][ T5181] ? fput+0x1c4/0x200 [ 74.962075][ T5181] ? ksys_write+0x176/0x1b0 [ 74.966654][ T5181] __x64_sys_mount+0x67/0x80 [ 74.971258][ T5181] x64_sys_call+0x2c84/0x2dc0 [ 74.976030][ T5181] do_syscall_64+0xc9/0x1c0 [ 74.980556][ T5181] ? clear_bhb_loop+0x55/0xb0 [ 74.985248][ T5181] ? clear_bhb_loop+0x55/0xb0 [ 74.990093][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.995995][ T5181] RIP: 0033:0x7fc05856e819 [ 75.000417][ T5181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.020035][ T5181] RSP: 002b:00007fc056be7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.028603][ T5181] RAX: ffffffffffffffda RBX: 00007fc058725fa0 RCX: 00007fc05856e819 [ 75.036606][ T5181] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 0000000000000000 [ 75.044661][ T5181] RBP: 00007fc056be7090 R08: 0000000020000540 R09: 0000000000000000 [ 75.052633][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.060606][ T5181] R13: 0000000000000000 R14: 00007fc058725fa0 R15: 00007fffc79daaf8 [ 75.068609][ T5181] [ 75.072556][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.080048][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.087747][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.095348][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.106178][ T28] veth1_macvtap: left promiscuous mode [ 75.111731][ T28] veth0_macvtap: left promiscuous mode [ 75.117490][ T28] veth1_vlan: left promiscuous mode [ 75.122739][ T28] veth0_vlan: left promiscuous mode [ 75.222475][ T28] team0 (unregistering): Port device team_slave_1 removed [ 75.231846][ T28] team0 (unregistering): Port device team_slave_0 removed [ 75.757994][ T28] bridge_slave_1: left allmulticast mode [ 75.763667][ T28] bridge_slave_1: left promiscuous mode [ 75.769369][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.777364][ T28] bridge_slave_0: left allmulticast mode [ 75.783014][ T28] bridge_slave_0: left promiscuous mode [ 75.788848][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.906918][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.916444][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.926141][ T28] bond0 (unregistering): Released all slaves [ 75.934031][ T28] bond0 (unregistering): Released all slaves [ 75.989619][ T28] hsr_slave_0: left promiscuous mode [ 75.995284][ T28] hsr_slave_1: left promiscuous mode [ 76.001152][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.008994][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.039527][ T28] team0 (unregistering): Port device team_slave_1 removed [ 76.049174][ T28] team0 (unregistering): Port device team_slave_0 removed [ 77.466291][ T5248] FAULT_INJECTION: forcing a failure. [ 77.466291][ T5248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.479439][ T5248] CPU: 1 UID: 0 PID: 5248 Comm: syz.4.643 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 77.489719][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.499847][ T5248] Call Trace: [ 77.503247][ T5248] [ 77.506229][ T5248] dump_stack_lvl+0xf2/0x150 [ 77.510980][ T5248] dump_stack+0x15/0x20 [ 77.515232][ T5248] should_fail_ex+0x223/0x230 [ 77.519963][ T5248] should_fail+0xb/0x10 [ 77.524165][ T5248] should_fail_usercopy+0x1a/0x20 [ 77.529211][ T5248] _copy_from_user+0x1e/0xb0 [ 77.533842][ T5248] restore_altstack+0x48/0xd0 [ 77.538615][ T5248] __do_sys_rt_sigreturn+0xd7/0x160 [ 77.543902][ T5248] x64_sys_call+0x2982/0x2dc0 [ 77.548656][ T5248] do_syscall_64+0xc9/0x1c0 [ 77.553262][ T5248] ? clear_bhb_loop+0x55/0xb0 [ 77.557973][ T5248] ? clear_bhb_loop+0x55/0xb0 [ 77.562704][ T5248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.568612][ T5248] RIP: 0033:0x7f633f2ca1a9 [ 77.573025][ T5248] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 77.592638][ T5248] RSP: 002b:00007f633d9a6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 77.601160][ T5248] RAX: ffffffffffffffda RBX: 00007f633f4e5fa0 RCX: 00007f633f2ca1a9 [ 77.609133][ T5248] RDX: 00007f633d9a6a80 RSI: 00007f633d9a6bb0 RDI: 0000000000000021 [ 77.617103][ T5248] RBP: 00007f633d9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 77.625095][ T5248] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 77.633075][ T5248] R13: 0000000000000000 R14: 00007f633f4e5fa0 R15: 00007ffc77b315c8 [ 77.641068][ T5248] [ 78.925331][ C1] ================================================================== [ 78.933444][ C1] BUG: KCSAN: data-race in __tmigr_cpu_deactivate / tmigr_handle_remote [ 78.941790][ C1] [ 78.944104][ C1] write to 0xffff888237c205dc of 1 bytes by task 0 on cpu 0: [ 78.951462][ C1] __tmigr_cpu_deactivate+0xa1/0x410 [ 78.956751][ C1] tmigr_cpu_deactivate+0x66/0x180 [ 78.961874][ C1] __get_next_timer_interrupt+0x137/0x530 [ 78.967604][ C1] timer_base_try_to_set_idle+0x54/0x60 [ 78.973158][ C1] tick_nohz_idle_stop_tick+0x15b/0x650 [ 78.978705][ C1] do_idle+0x175/0x230 [ 78.982773][ C1] cpu_startup_entry+0x25/0x30 [ 78.987533][ C1] rest_init+0xef/0xf0 [ 78.991598][ C1] start_kernel+0x586/0x5e0 [ 78.996106][ C1] x86_64_start_reservations+0x2a/0x30 [ 79.001572][ C1] x86_64_start_kernel+0x9a/0xa0 [ 79.006536][ C1] common_startup_64+0x12c/0x137 [ 79.011493][ C1] [ 79.013893][ C1] read to 0xffff888237c205dc of 1 bytes by interrupt on cpu 1: [ 79.021429][ C1] tmigr_handle_remote+0x26e/0x940 [ 79.026561][ C1] run_timer_softirq+0x5f/0x70 [ 79.031340][ C1] handle_softirqs+0xbf/0x280 [ 79.036011][ C1] __irq_exit_rcu+0x3a/0xc0 [ 79.040508][ C1] sysvec_apic_timer_interrupt+0x73/0x80 [ 79.046143][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 79.052128][ C1] acpi_safe_halt+0x21/0x30 [ 79.056631][ C1] acpi_idle_do_entry+0x1d/0x30 [ 79.061492][ C1] acpi_idle_enter+0x96/0xb0 [ 79.066086][ C1] cpuidle_enter_state+0xc5/0x260 [ 79.071109][ C1] cpuidle_enter+0x40/0x70 [ 79.075523][ C1] do_idle+0x192/0x230 [ 79.079580][ C1] cpu_startup_entry+0x25/0x30 [ 79.084344][ C1] start_secondary+0x96/0xa0 [ 79.088936][ C1] common_startup_64+0x12c/0x137 [ 79.093866][ C1] [ 79.096178][ C1] value changed: 0x01 -> 0x00 [ 79.100841][ C1] [ 79.103154][ C1] Reported by Kernel Concurrency Sanitizer on: [ 79.109295][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 79.119277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.129337][ C1] ================================================================== [ 80.041503][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 80.041520][ T29] audit: type=1400 audit(1732605228.106:4606): avc: denied { execmem } for pid=5281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 80.067132][ T29] audit: type=1400 audit(1732605228.106:4607): avc: denied { prog_load } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.086177][ T29] audit: type=1400 audit(1732605228.106:4608): avc: denied { map_create } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.105327][ T29] audit: type=1400 audit(1732605228.106:4609): avc: denied { prog_load } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 Nov 26 07:13:48 syzkaller auth.info sshd[3307]: Received disconnect from 10.128.0.163 port 43240:11: disconnected by user Nov 26 07:13:48 syzkaller auth.info s[ 80.156487][ T29] audit: type=1400 audit(1732605228.106:4610): avc: denied { create } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 shd[3307]: Disco[ 80.176388][ T29] audit: type=1400 audit(1732605228.106:4611): avc: denied { create } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 nnected from use[ 80.197979][ T29] audit: type=1400 audit(1732605228.106:4612): avc: denied { create } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 r root 10.128.0.[ 80.219663][ T29] audit: type=1400 audit(1732605228.106:4613): avc: denied { create } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=0 163 port 43240 [ 80.241340][ T29] audit: type=1400 audit(1732605228.116:4614): avc: denied { create } for pid=5282 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 80.262187][ T29] audit: type=1400 audit(1732605228.126:4615): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.318900][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.417471][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.488202][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.547263][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.616909][ T28] bridge_slave_1: left allmulticast mode [ 80.622629][ T28] bridge_slave_1: left promiscuous mode [ 80.628288][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.635967][ T28] bridge_slave_0: left allmulticast mode [ 80.641675][ T28] bridge_slave_0: left promiscuous mode [ 80.647352][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.688510][ T28] dvmrp0 (unregistering): left allmulticast mode [ 80.747289][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.757105][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.766494][ T28] bond0 (unregistering): Released all slaves [ 80.818804][ T28] hsr_slave_0: left promiscuous mode [ 80.824515][ T28] hsr_slave_1: left promiscuous mode [ 80.830127][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.837567][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.845032][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.852691][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.861454][ T28] veth1_macvtap: left promiscuous mode [ 80.866968][ T28] veth0_macvtap: left promiscuous mode [ 80.872537][ T28] veth1_vlan: left promiscuous mode [ 80.877764][ T28] veth0_vlan: left promiscuous mode [ 81.239383][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.287997][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.327391][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.387795][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.488629][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.557566][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.627581][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.677352][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.757844][ T28] bridge_slave_1: left allmulticast mode [ 81.763553][ T28] bridge_slave_1: left promiscuous mode [ 81.769352][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.777119][ T28] bridge_slave_0: left allmulticast mode [ 81.782765][ T28] bridge_slave_0: left promiscuous mode [ 81.788529][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.796601][ T28] bridge_slave_1: left allmulticast mode [ 81.802281][ T28] bridge_slave_1: left promiscuous mode [ 81.808011][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.815687][ T28] bridge_slave_0: left allmulticast mode [ 81.821355][ T28] bridge_slave_0: left promiscuous mode [ 81.827159][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.905341][ T28] dvmrp0 (unregistering): left allmulticast mode [ 82.047135][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.056772][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.066076][ T28] bond0 (unregistering): Released all slaves [ 82.074442][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.084377][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.093992][ T28] bond0 (unregistering): Released all slaves [ 82.150396][ T28] hsr_slave_0: left promiscuous mode [ 82.156219][ T28] hsr_slave_1: left promiscuous mode [ 82.161983][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.169471][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.176978][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.184390][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.193454][ T28] hsr_slave_0: left promiscuous mode [ 82.199321][ T28] hsr_slave_1: left promiscuous mode [ 82.204909][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.212452][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.220099][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.227566][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.237962][ T28] veth1_macvtap: left promiscuous mode [ 82.243474][ T28] veth0_macvtap: left promiscuous mode [ 82.249302][ T28] veth1_vlan: left promiscuous mode [ 82.254536][ T28] veth0_vlan: left promiscuous mode [ 82.260195][ T28] veth1_macvtap: left promiscuous mode [ 82.265699][ T28] veth0_macvtap: left promiscuous mode [ 82.271249][ T28] veth1_vlan: left promiscuous mode [ 82.276554][ T28] veth0_vlan: left promiscuous mode