last executing test programs: 36.543380472s ago: executing program 1 (id=570): r0 = io_uring_setup(0x199c, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.513692512s ago: executing program 1 (id=571): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x8, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 36.444898892s ago: executing program 1 (id=577): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000000000000000000000000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000029d0fcc000000000000000000000000000000000000000000000000000000000000000000000000000000ecc5df5c23aeee8e0000000000000000000000000000000000000000000000000c"], 0xe0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x44}}, 0x0) 36.406324282s ago: executing program 1 (id=579): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@uprobe_multi={&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)=[0x7, 0x7, 0x5, 0x8, 0x36452216, 0x9], &(0x7f0000001380)=[0x0], 0x5, 0x6, 0x1}}, 0x40) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00cdb7d274a02346417a0be2e319c7e000cda798c6a7e92aae1d71ff4f6701eec69fe35bca5eb0efec69a096e77262e2750001747e47426dfe89bd6f1f5baf556eac6b4e20d9fdb8a918d070d6d2c9f998f1772c44281f45bfc61b6e448002f48046e45df9a98b017d4e1b465dae75b374"], 0x1, 0x35b, &(0x7f0000000000)="$eJzs3FFL81YcB+CToaO4m8HLpm/fm6AwnGw1iVgpXpWa1ri0HW2FeTnQwZhX29X8Yvt4G2mrw+msG84W9zzQntPk1/QUQv7klNMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAISoc5IkaRTKYnD+Xfz3OiejYf+J/bfH++1e88TnhhBVj1Crha3Zpq13f+7+rHraDpuzV5uhVjW1cPPJ558ev1v76Pb9TwzoVfzy681P319fX/287IEsSS8fFONh0W/38rgYD+NWs5nsn3bHcbco8/HFeJL3484ob0+Go3i382WctloHcd64GJ4PeiftMr/dePR1liTN+Kzxbd4ejYeD/bPGuHNalGUx6E0z1e4qc1SdiN8Uk3iSt/tx/MOP11cHiwZZhdLnhLJFoSzJsjTNsrR52Do8SpK1BxuSvwgPEss/aVmuF76Cw7/3+7z+AwAAAG9XNJ1jr+7/16fz8FHoFmWeLHtYAAAAwAua/vK/WTXrVW8rRO7/AQAA4K1ZvMZuYSL6KryfJd5fztrLeWK+zm+jW5R5ozMsj9Pwxd1qv8ePtj6dftgL9VmqvjFrN+4fsVal0sZxGvbCh1niw+5O1ezsPpLMnp08qJIA8NZtL6jHz6n/e2G+pjWuV8U0rNUfqayJygoAq+LuH2z+w86yvyMAcJ8qDQAAAAAAAAAAAAAAq+811v/p/INOtBrDWI3OxyGEFRjG/7Kz7CsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADz0RwAAAP//5VTRDA==") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3000000000000) 36.308703893s ago: executing program 1 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3ff, 0xf, 0x1000, 0x3140c, 0xffffffffffffffff, 0xa07, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x8, @void, @value, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r5, 0x3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002c0000fffd00119078000000000000000000004e2000189078040000000e0000000900000000000000ce664600d6a2896603ea2b5e32b38d91af845f208052a8e624c5c13466acee73a56bd321c27db02ab1ac84e7cacc8b294d3a461281b41587dc564d4e72539d2df9a3e357be51a8a0153fe0372bf1cea3b4136e0d9e1ca1939e19179814c630954be1fc3d4ac7c6726d7aeb0a54543f91af942adf196fc9d9bd3692fdb8ec9bea2c67b270b2"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c001c0000e000001190787800"/27], 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0x7, 0xffe0}, {0xa, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x5e, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xa1, 0x5031, 0x22f3, 0x0, 0x0, 0x9, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x8, 0xa, 0xb, 0x5, 0x1, 0x8001, 0x5, 0x7}}, {0x12, 0x2, [0x8001, 0x4, 0x4, 0x401b, 0x5224, 0x1, 0x9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r9, 0x1) poll(&(0x7f00000003c0), 0x0, 0xb11) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x339, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 36.098479283s ago: executing program 1 (id=591): r0 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 36.098351143s ago: executing program 32 (id=591): r0 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x28) 3.30724163s ago: executing program 0 (id=1126): unshare(0x22020400) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x8, 0x0, @fd, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x1000000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.143579974s ago: executing program 3 (id=1149): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40002, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) recvmsg$kcm(r6, 0x0, 0x40002020) 2.029224844s ago: executing program 5 (id=1151): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.953538955s ago: executing program 5 (id=1154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYRESOCT], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500), 0x0, 0x4044040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="200000000000850000006d000000189dd28200"/28, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a620e00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095e3c988c79b290be1e1ceadf623f7e12d70155e9e15ee93f015f373898464cfef2fc5925b703adcfb5a31e045b34ece1924217ea2a4083416a669ccbeeb2ac4707e029e2401bac0cd7e784a6866f05ed1d3648ab53d383acf258a6a574a1bbd396e29b10e72b4be0861de54bd31d7ff68a256a1b46bcfa59d45933ba0746c540550b7c959765259f57ce512decea99f872354d0b092b5e9f052ba8bf88b506b8d6dbded3e3d"], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.867576065s ago: executing program 0 (id=1156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008006, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x55b, &(0x7f0000002200)="$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") creat(&(0x7f00000003c0)='./file0\x00', 0xd931d3864d39ddf2) 1.839376384s ago: executing program 5 (id=1157): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000bc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200), 0x5, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x58}}], 0x60, 0x8004}, 0x0) 1.791365255s ago: executing program 3 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0x6}, 0x4ec0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000340)=0x4) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="009a750000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="180000000100"/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x8000000000000000}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 1.745371355s ago: executing program 5 (id=1162): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.474412506s ago: executing program 2 (id=1165): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x200000000000081}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003000100000005000300000000000500030000000000050003000000000005000300020000000800020002000000"], 0x50}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x8000}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="3800000003140100ef000000000000000900020073797a44000000000800410073697700140033006c6f000000001e000000000000000000"], 0x38}}, 0x0) 1.290139917s ago: executing program 0 (id=1167): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') (fail_nth: 6) 1.289624336s ago: executing program 2 (id=1168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYRESOCT], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500), 0x0, 0x4044040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="200000000000850000006d000000189dd28200"/28, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a620e00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095e3c988c79b290be1e1ceadf623f7e12d70155e9e15ee93f015f373898464cfef2fc5925b703adcfb5a31e045b34ece1924217ea2a4083416a669ccbeeb2ac4707e029e2401bac0cd7e784a6866f05ed1d3648ab53d383acf258a6a574a1bbd396e29b10e72b4be0861de54bd31d7ff68a256a1b46bcfa59d45933ba0746c540550b7c959765259f57ce512decea99f872354d0b092b5e9f052ba8bf88b506b8d6dbded3e3d"], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bf3000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.253591387s ago: executing program 5 (id=1170): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40002, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) recvmsg$kcm(r6, 0x0, 0x40002020) 1.215015707s ago: executing program 4 (id=1171): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.148058027s ago: executing program 2 (id=1172): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000bc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200), 0x5, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x58}}], 0x60, 0x8004}, 0x0) 1.134448627s ago: executing program 4 (id=1173): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x7, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x1a}, 0x60) mkdir(&(0x7f0000000040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (fail_nth: 5) 904.159878ms ago: executing program 4 (id=1174): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 903.800088ms ago: executing program 2 (id=1175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000201030000000000000000000500000808001a40000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 869.642058ms ago: executing program 0 (id=1176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) restart_syscall() 869.260558ms ago: executing program 2 (id=1177): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$sndseq(r0, &(0x7f00000003c0)=[{0x20, 0x0, 0xd, 0x0, @time={0x7, 0xfffffff7}, {0x0, 0xe}, {}, @control={0x4, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {0x6, 0x4}, {}, @raw32={[0x2, 0x80000000, 0x8]}}], 0x38) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00"}, 0x38) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000280)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14}, 0x5, 0x4, 0x9, 0x200, 0x0, 0x0, 0x85}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c80c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38) close(0xffffffffffffffff) 836.800938ms ago: executing program 0 (id=1178): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x200000000000081}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003000100000005000300000000000500030000000000050003000000000005000300020000000800020002000000"], 0x50}}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x8000}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="3800000003140100ef000000000000000900020073797a44000000000800410073697700140033006c6f000000001e000000000000000000"], 0x38}}, 0x0) 771.355798ms ago: executing program 2 (id=1179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008006, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x55b, &(0x7f0000002200)="$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") creat(&(0x7f00000003c0)='./file0\x00', 0xd931d3864d39ddf2) 770.608878ms ago: executing program 0 (id=1180): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 760.340488ms ago: executing program 5 (id=1181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 758.816788ms ago: executing program 4 (id=1182): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x100, 0x0, 0x2}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 518.169079ms ago: executing program 3 (id=1183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000740)=ANY=[@ANYRESOCT], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500), 0x0, 0x4044040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="200000000000850000006d000000189dd28200"/28, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a620e00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095e3c988c79b290be1e1ceadf623f7e12d70155e9e15ee93f015f373898464cfef2fc5925b703adcfb5a31e045b34ece1924217ea2a4083416a669ccbeeb2ac4707e029e2401bac0cd7e784a6866f05ed1d3648ab53d383acf258a6a574a1bbd396e29b10e72b4be0861de54bd31d7ff68a256a1b46bcfa59d45933ba0746c540550b7c959765259f57ce512decea99f872354d0b092b5e9f052ba8bf88b506b8d6dbded3e3d"], &(0x7f00000005c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x19, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 504.516379ms ago: executing program 4 (id=1184): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 399.69501ms ago: executing program 3 (id=1185): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000034f21250963447519a8a836d7f120fe46ba295b3a2eb601c30bfee8a3ec86e5657756a5cd7a94d6e1fcb7193f33015a5c9fa1a940ff6c350adc10c"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffbffddffffffffd, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0/file0\x00', r3, 0x4000, r2}, 0x18) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x1, 0xfffffeab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x4}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='blkio.throttle.io_serviced_recursive\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) 210.37493ms ago: executing program 3 (id=1186): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000bc"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200), 0x5, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x58}}], 0x60, 0x8004}, 0x0) 183.67042ms ago: executing program 4 (id=1187): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000200)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@nobarrier}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)="8c801290565cc086", 0x8}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x6, 0x9, 0x5}]}) unlink(&(0x7f0000000180)='./file1\x00') 0s ago: executing program 3 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000201030000000000000000000500000808001a40000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): tem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.033628][ T5714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.062522][ T5714] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.079731][ T5714] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.721: bg 0: block 367: padding at end of block bitmap is not set [ 73.104615][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 73.104629][ T29] audit: type=1400 audit(1733553244.797:2011): avc: denied { read write } for pid=5720 comm="syz.3.723" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.134928][ T29] audit: type=1400 audit(1733553244.807:2012): avc: denied { open } for pid=5720 comm="syz.3.723" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 73.135406][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.179688][ T29] audit: type=1326 audit(1733553244.877:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.203486][ T29] audit: type=1326 audit(1733553244.877:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.226962][ T29] audit: type=1326 audit(1733553244.877:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.250436][ T29] audit: type=1326 audit(1733553244.877:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.274101][ T29] audit: type=1326 audit(1733553244.877:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.297710][ T29] audit: type=1326 audit(1733553244.877:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.306904][ T5726] netlink: 'syz.0.725': attribute type 4 has an invalid length. [ 73.321104][ T29] audit: type=1326 audit(1733553244.877:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.321142][ T29] audit: type=1326 audit(1733553244.877:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.0.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda3897fed9 code=0x7ffc0000 [ 73.377090][ T5726] __nla_validate_parse: 2 callbacks suppressed [ 73.377111][ T5726] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.725'. [ 73.588544][ T5175] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.637733][ T5729] bond1: entered promiscuous mode [ 73.642832][ T5729] bond1: entered allmulticast mode [ 73.653566][ T5729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.684615][ T5735] lo speed is unknown, defaulting to 1000 [ 73.716463][ T5737] sctp: [Deprecated]: syz.5.726 (pid 5737) Use of int in max_burst socket option. [ 73.716463][ T5737] Use struct sctp_assoc_value instead [ 73.752219][ T5739] loop2: detected capacity change from 0 to 2048 [ 73.758850][ T5737] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.767079][ T5737] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 73.780624][ T5737] netlink: 332 bytes leftover after parsing attributes in process `syz.5.726'. [ 73.786666][ T5739] loop2: p1 < > p4 [ 73.794644][ T5739] loop2: p4 size 8388608 extends beyond EOD, truncated [ 73.822866][ T3298] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 73.859328][ T5743] FAULT_INJECTION: forcing a failure. [ 73.859328][ T5743] name failslab, interval 1, probability 0, space 0, times 0 [ 73.872031][ T5743] CPU: 1 UID: 0 PID: 5743 Comm: syz.2.731 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 73.882699][ T5743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.892834][ T5743] Call Trace: [ 73.896119][ T5743] [ 73.899056][ T5743] dump_stack_lvl+0xf2/0x150 [ 73.903675][ T5743] dump_stack+0x15/0x1a [ 73.907853][ T5743] should_fail_ex+0x223/0x230 [ 73.912592][ T5743] should_failslab+0x8f/0xb0 [ 73.917209][ T5743] kmem_cache_alloc_noprof+0x52/0x320 [ 73.922700][ T5743] ? vm_area_dup+0x98/0x130 [ 73.927288][ T5743] vm_area_dup+0x98/0x130 [ 73.931792][ T5743] __split_vma+0xf7/0x6a0 [ 73.936160][ T5743] vma_modify+0x17d/0x1e0 [ 73.940526][ T5743] vma_modify_flags+0xf1/0x120 [ 73.945411][ T5743] mlock_fixup+0x113/0x450 [ 73.949870][ T5743] apply_vma_lock_flags+0x194/0x240 [ 73.955090][ T5743] do_mlock+0x35b/0x510 [ 73.959324][ T5743] ? __secure_computing+0x9f/0x1c0 [ 73.964527][ T5743] __x64_sys_mlock2+0x72/0x90 [ 73.969264][ T5743] x64_sys_call+0x971/0x2dc0 [ 73.973898][ T5743] do_syscall_64+0xc9/0x1c0 [ 73.978409][ T5743] ? clear_bhb_loop+0x55/0xb0 [ 73.983093][ T5743] ? clear_bhb_loop+0x55/0xb0 [ 73.987815][ T5743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.993812][ T5743] RIP: 0033:0x7f65ff1bfed9 [ 73.998265][ T5743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.017942][ T5743] RSP: 002b:00007f65fd837058 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 74.026374][ T5743] RAX: ffffffffffffffda RBX: 00007f65ff385fa0 RCX: 00007f65ff1bfed9 [ 74.034352][ T5743] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 74.042329][ T5743] RBP: 00007f65fd8370a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.050308][ T5743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.058285][ T5743] R13: 0000000000000000 R14: 00007f65ff385fa0 R15: 00007ffd1ba058d8 [ 74.066276][ T5743] [ 74.159363][ T5745] batadv1: entered promiscuous mode [ 74.165468][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 74.178315][ T5754] loop4: detected capacity change from 0 to 128 [ 74.185066][ T5754] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 74.246845][ T5754] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 74.364736][ T5761] random: crng reseeded on system resumption [ 74.478067][ T5764] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 74.502243][ T5761] netlink: 'syz.4.738': attribute type 21 has an invalid length. [ 74.510123][ T5761] netlink: 16166 bytes leftover after parsing attributes in process `syz.4.738'. [ 74.572784][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 74.648550][ T5775] loop4: detected capacity change from 0 to 512 [ 74.656495][ T5775] EXT4-fs: inline encryption not supported [ 74.690117][ T5775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.703402][ T5775] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.718245][ T5775] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.744: bg 0: block 367: padding at end of block bitmap is not set [ 74.744208][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.793243][ T5780] loop4: detected capacity change from 0 to 8192 [ 74.804074][ T5780] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.987798][ T5790] batadv1: entered promiscuous mode [ 74.999503][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 75.015679][ T5795] bond3: entered promiscuous mode [ 75.020835][ T5795] bond3: entered allmulticast mode [ 75.026330][ T5795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.087953][ T5802] sctp: [Deprecated]: syz.2.749 (pid 5802) Use of int in max_burst socket option. [ 75.087953][ T5802] Use struct sctp_assoc_value instead [ 75.126689][ T5802] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.134032][ T5802] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 75.149709][ T5802] netlink: 332 bytes leftover after parsing attributes in process `syz.2.749'. [ 75.598488][ T5828] loop4: detected capacity change from 0 to 512 [ 75.631284][ T5828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.650453][ T5821] lo speed is unknown, defaulting to 1000 [ 75.658362][ T5828] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.738344][ T5833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.762: corrupted inode contents [ 75.757522][ T5833] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.762: mark_inode_dirty error [ 75.769578][ T5833] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.762: corrupted inode contents [ 75.782595][ T5833] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.762: mark_inode_dirty error [ 75.804736][ T5833] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.762: mark inode dirty (error -117) [ 75.820055][ T5833] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 75.890408][ T5837] siw: device registration error -23 [ 75.916102][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.956768][ T5845] FAULT_INJECTION: forcing a failure. [ 75.956768][ T5845] name failslab, interval 1, probability 0, space 0, times 0 [ 75.969533][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz.0.768 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 75.980182][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.990312][ T5845] Call Trace: [ 75.993594][ T5845] [ 75.996546][ T5845] dump_stack_lvl+0xf2/0x150 [ 76.001246][ T5845] dump_stack+0x15/0x1a [ 76.005420][ T5845] should_fail_ex+0x223/0x230 [ 76.010111][ T5845] should_failslab+0x8f/0xb0 [ 76.014754][ T5845] kmem_cache_alloc_node_noprof+0x59/0x320 [ 76.020573][ T5845] ? __alloc_skb+0x10b/0x310 [ 76.025202][ T5845] __alloc_skb+0x10b/0x310 [ 76.029711][ T5845] netlink_alloc_large_skb+0xad/0xe0 [ 76.035009][ T5845] netlink_sendmsg+0x3b4/0x6e0 [ 76.039791][ T5845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.045088][ T5845] __sock_sendmsg+0x140/0x180 [ 76.049782][ T5845] ____sys_sendmsg+0x312/0x410 [ 76.054630][ T5845] __sys_sendmsg+0x19d/0x230 [ 76.059298][ T5845] __x64_sys_sendmsg+0x46/0x50 [ 76.064222][ T5845] x64_sys_call+0x2734/0x2dc0 [ 76.068909][ T5845] do_syscall_64+0xc9/0x1c0 [ 76.073454][ T5845] ? clear_bhb_loop+0x55/0xb0 [ 76.078180][ T5845] ? clear_bhb_loop+0x55/0xb0 [ 76.082864][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.088797][ T5845] RIP: 0033:0x7fda3897fed9 [ 76.093215][ T5845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.112909][ T5845] RSP: 002b:00007fda36ff7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.121380][ T5845] RAX: ffffffffffffffda RBX: 00007fda38b45fa0 RCX: 00007fda3897fed9 [ 76.129388][ T5845] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 76.137420][ T5845] RBP: 00007fda36ff70a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.145427][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.153407][ T5845] R13: 0000000000000000 R14: 00007fda38b45fa0 R15: 00007ffc8f6a7be8 [ 76.161395][ T5845] [ 76.179896][ T5847] serio: Serial port pts0 [ 76.193912][ T5847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5847 comm=syz.3.769 [ 76.246075][ T5849] batadv1: entered promiscuous mode [ 76.253111][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 76.306722][ T5854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.771'. [ 76.389785][ T5865] siw: device registration error -23 [ 76.439939][ T5867] bond3: entered promiscuous mode [ 76.445128][ T5867] bond3: entered allmulticast mode [ 76.451860][ T5867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.530729][ T5867] sctp: [Deprecated]: syz.3.777 (pid 5867) Use of int in max_burst socket option. [ 76.530729][ T5867] Use struct sctp_assoc_value instead [ 76.554197][ T5873] loop4: detected capacity change from 0 to 2048 [ 76.586851][ T5867] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.594371][ T5867] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 76.641579][ T5867] netlink: 332 bytes leftover after parsing attributes in process `syz.3.777'. [ 76.647643][ T5878] FAULT_INJECTION: forcing a failure. [ 76.647643][ T5878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.663788][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: syz.0.782 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 76.674422][ T5878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.684554][ T5878] Call Trace: [ 76.687849][ T5878] [ 76.690796][ T5878] dump_stack_lvl+0xf2/0x150 [ 76.695424][ T5878] dump_stack+0x15/0x1a [ 76.699620][ T5878] should_fail_ex+0x223/0x230 [ 76.704358][ T5878] should_fail+0xb/0x10 [ 76.708543][ T5878] should_fail_usercopy+0x1a/0x20 [ 76.713624][ T5878] _copy_from_user+0x1e/0xb0 [ 76.718254][ T5878] bpf_test_init+0x105/0x170 [ 76.722873][ T5878] bpf_prog_test_run_skb+0x153/0xc00 [ 76.728239][ T5878] ? rtw8822c_dac_cal_adc+0x620/0x640 [ 76.734486][ T5878] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 76.740332][ T5878] bpf_prog_test_run+0x20f/0x3a0 [ 76.745306][ T5878] __sys_bpf+0x400/0x7a0 [ 76.749585][ T5878] __x64_sys_bpf+0x43/0x50 [ 76.754042][ T5878] x64_sys_call+0x2914/0x2dc0 [ 76.758770][ T5878] do_syscall_64+0xc9/0x1c0 [ 76.763333][ T5878] ? clear_bhb_loop+0x55/0xb0 [ 76.768031][ T5878] ? clear_bhb_loop+0x55/0xb0 [ 76.772733][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.778727][ T5878] RIP: 0033:0x7fda3897fed9 [ 76.783161][ T5878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.802819][ T5878] RSP: 002b:00007fda36ff7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 76.811334][ T5878] RAX: ffffffffffffffda RBX: 00007fda38b45fa0 RCX: 00007fda3897fed9 [ 76.819414][ T5878] RDX: 0000000000000040 RSI: 0000000020000280 RDI: 000000000000000a [ 76.827435][ T5878] RBP: 00007fda36ff70a0 R08: 0000000000000000 R09: 0000000000000000 [ 76.835429][ T5878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.843462][ T5878] R13: 0000000000000000 R14: 00007fda38b45fa0 R15: 00007ffc8f6a7be8 [ 76.851479][ T5878] [ 76.938666][ T5885] syz.4.784[5885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.938777][ T5885] syz.4.784[5885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.957142][ T5885] syz.4.784[5885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.996808][ T5886] loop4: detected capacity change from 0 to 512 [ 77.025295][ T5888] loop0: detected capacity change from 0 to 256 [ 77.032516][ T5886] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.048437][ T5888] FAT-fs (loop0): Directory bread(block 1285) failed [ 77.056919][ T5888] FAT-fs (loop0): Directory bread(block 1285) failed [ 77.064551][ T5888] FAT-fs (loop0): Directory bread(block 1285) failed [ 77.071358][ T5888] FAT-fs (loop0): Directory bread(block 1285) failed [ 77.083581][ T5886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.097319][ T5885] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.784: corrupted inode contents [ 77.114373][ T5885] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.784: mark_inode_dirty error [ 77.126707][ T5885] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.784: corrupted inode contents [ 77.142014][ T5892] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 77.172343][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.210319][ T5894] loop4: detected capacity change from 0 to 256 [ 77.232415][ T5894] FAT-fs (loop4): Directory bread(block 1285) failed [ 77.240376][ T5894] FAULT_INJECTION: forcing a failure. [ 77.240376][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 77.253049][ T5894] CPU: 0 UID: 0 PID: 5894 Comm: syz.4.787 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 77.263666][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.273794][ T5894] Call Trace: [ 77.277072][ T5894] [ 77.280000][ T5894] dump_stack_lvl+0xf2/0x150 [ 77.284635][ T5894] dump_stack+0x15/0x1a [ 77.288826][ T5894] should_fail_ex+0x223/0x230 [ 77.293524][ T5894] should_failslab+0x8f/0xb0 [ 77.298151][ T5894] kmem_cache_alloc_noprof+0x52/0x320 [ 77.303604][ T5894] ? alloc_empty_file+0xd0/0x200 [ 77.308695][ T5894] alloc_empty_file+0xd0/0x200 [ 77.313514][ T5894] path_openat+0x6a/0x1fa0 [ 77.317985][ T5894] ? _parse_integer_limit+0x167/0x180 [ 77.323415][ T5894] ? _parse_integer+0x27/0x30 [ 77.328092][ T5894] ? kstrtoull+0x110/0x140 [ 77.332509][ T5894] ? kstrtouint+0x77/0xc0 [ 77.336843][ T5894] ? kstrtouint_from_user+0xb0/0xe0 [ 77.342197][ T5894] do_filp_open+0x107/0x230 [ 77.346883][ T5894] do_sys_openat2+0xab/0x120 [ 77.351487][ T5894] __x64_sys_openat+0xf3/0x120 [ 77.356418][ T5894] x64_sys_call+0x2b30/0x2dc0 [ 77.361161][ T5894] do_syscall_64+0xc9/0x1c0 [ 77.365723][ T5894] ? clear_bhb_loop+0x55/0xb0 [ 77.370405][ T5894] ? clear_bhb_loop+0x55/0xb0 [ 77.375155][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.381168][ T5894] RIP: 0033:0x7f351ca1fed9 [ 77.385682][ T5894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.405374][ T5894] RSP: 002b:00007f351b097058 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.413795][ T5894] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351ca1fed9 [ 77.421810][ T5894] RDX: 000000000000275a RSI: 0000000020000080 RDI: ffffffffffffff9c [ 77.429827][ T5894] RBP: 00007f351b0970a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.437834][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.446138][ T5894] R13: 0000000000000000 R14: 00007f351cbe5fa0 R15: 00007ffe19e2b038 [ 77.454287][ T5894] [ 77.490978][ T5902] FAULT_INJECTION: forcing a failure. [ 77.490978][ T5902] name failslab, interval 1, probability 0, space 0, times 0 [ 77.503656][ T5902] CPU: 0 UID: 0 PID: 5902 Comm: syz.4.791 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 77.514317][ T5902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.524421][ T5902] Call Trace: [ 77.527707][ T5902] [ 77.530667][ T5902] dump_stack_lvl+0xf2/0x150 [ 77.535342][ T5902] dump_stack+0x15/0x1a [ 77.539545][ T5902] should_fail_ex+0x223/0x230 [ 77.544239][ T5902] ? __se_sys_acct+0xd5/0x420 [ 77.548971][ T5902] should_failslab+0x8f/0xb0 [ 77.553647][ T5902] __kmalloc_cache_noprof+0x4e/0x320 [ 77.558994][ T5902] __se_sys_acct+0xd5/0x420 [ 77.563510][ T5902] __x64_sys_acct+0x1f/0x30 [ 77.568066][ T5902] x64_sys_call+0x273e/0x2dc0 [ 77.572768][ T5902] do_syscall_64+0xc9/0x1c0 [ 77.577336][ T5902] ? clear_bhb_loop+0x55/0xb0 [ 77.582018][ T5902] ? clear_bhb_loop+0x55/0xb0 [ 77.586774][ T5902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.592716][ T5902] RIP: 0033:0x7f351ca1fed9 [ 77.597134][ T5902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.616758][ T5902] RSP: 002b:00007f351b097058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 77.625247][ T5902] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351ca1fed9 [ 77.633254][ T5902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 77.641260][ T5902] RBP: 00007f351b0970a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.649240][ T5902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.657242][ T5902] R13: 0000000000000000 R14: 00007f351cbe5fa0 R15: 00007ffe19e2b038 [ 77.665313][ T5902] [ 77.748330][ T5911] FAULT_INJECTION: forcing a failure. [ 77.748330][ T5911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.761478][ T5911] CPU: 0 UID: 0 PID: 5911 Comm: syz.3.793 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 77.772099][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.782271][ T5911] Call Trace: [ 77.785566][ T5911] [ 77.788580][ T5911] dump_stack_lvl+0xf2/0x150 [ 77.793286][ T5911] dump_stack+0x15/0x1a [ 77.797551][ T5911] should_fail_ex+0x223/0x230 [ 77.802267][ T5911] should_fail+0xb/0x10 [ 77.806507][ T5911] should_fail_usercopy+0x1a/0x20 [ 77.811644][ T5911] _copy_from_user+0x1e/0xb0 [ 77.816275][ T5911] do_sock_getsockopt+0xd3/0x260 [ 77.821251][ T5911] __x64_sys_getsockopt+0x18c/0x200 [ 77.826460][ T5911] x64_sys_call+0x1288/0x2dc0 [ 77.831194][ T5911] do_syscall_64+0xc9/0x1c0 [ 77.835713][ T5911] ? clear_bhb_loop+0x55/0xb0 [ 77.840415][ T5911] ? clear_bhb_loop+0x55/0xb0 [ 77.845091][ T5911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.851058][ T5911] RIP: 0033:0x7f7968c2fed9 [ 77.855490][ T5911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.875107][ T5911] RSP: 002b:00007f7967286058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 77.883572][ T5911] RAX: ffffffffffffffda RBX: 00007f7968df6080 RCX: 00007f7968c2fed9 [ 77.891555][ T5911] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 77.899539][ T5911] RBP: 00007f79672860a0 R08: 0000000020003600 R09: 0000000000000000 [ 77.907521][ T5911] R10: 0000000020003380 R11: 0000000000000246 R12: 0000000000000001 [ 77.915496][ T5911] R13: 0000000000000001 R14: 00007f7968df6080 R15: 00007ffda2a50b88 [ 77.923481][ T5911] [ 78.009138][ T5922] loop4: detected capacity change from 0 to 512 [ 78.053250][ T5924] lo speed is unknown, defaulting to 1000 [ 78.053980][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.071896][ T5922] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.135578][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 78.135597][ T29] audit: type=1326 audit(1733553249.827:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.166616][ T29] audit: type=1326 audit(1733553249.827:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.201261][ T29] audit: type=1326 audit(1733553249.847:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.224666][ T29] audit: type=1326 audit(1733553249.847:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.248148][ T29] audit: type=1326 audit(1733553249.847:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.252324][ T5942] netlink: 'syz.4.798': attribute type 9 has an invalid length. [ 78.271066][ T29] audit: type=1326 audit(1733553249.847:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.302289][ T29] audit: type=1326 audit(1733553249.847:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.325871][ T29] audit: type=1326 audit(1733553249.867:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.326390][ T5944] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 78.348777][ T29] audit: type=1326 audit(1733553249.867:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.356091][ T5944] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 78.361104][ T5944] netlink: 332 bytes leftover after parsing attributes in process `syz.2.803'. [ 78.379759][ T29] audit: type=1326 audit(1733553249.867:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 78.441121][ T5933] bond4: entered promiscuous mode [ 78.446279][ T5933] bond4: entered allmulticast mode [ 78.452733][ T5933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 78.463820][ T5949] FAULT_INJECTION: forcing a failure. [ 78.463820][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.477594][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.0.807 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 78.488220][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.498347][ T5949] Call Trace: [ 78.501638][ T5949] [ 78.504604][ T5949] dump_stack_lvl+0xf2/0x150 [ 78.509356][ T5949] dump_stack+0x15/0x1a [ 78.513609][ T5949] should_fail_ex+0x223/0x230 [ 78.518366][ T5949] should_fail+0xb/0x10 [ 78.522618][ T5949] should_fail_usercopy+0x1a/0x20 [ 78.527680][ T5949] _copy_to_user+0x20/0xa0 [ 78.532285][ T5949] simple_read_from_buffer+0xa0/0x110 [ 78.537771][ T5949] proc_fail_nth_read+0xf9/0x140 [ 78.542750][ T5949] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.548413][ T5949] vfs_read+0x1a2/0x700 [ 78.552607][ T5949] ? __rcu_read_unlock+0x4e/0x70 [ 78.557585][ T5949] ? __fget_files+0x17c/0x1c0 [ 78.562298][ T5949] ksys_read+0xe8/0x1b0 [ 78.566553][ T5949] __x64_sys_read+0x42/0x50 [ 78.571072][ T5949] x64_sys_call+0x2874/0x2dc0 [ 78.575774][ T5949] do_syscall_64+0xc9/0x1c0 [ 78.580282][ T5949] ? clear_bhb_loop+0x55/0xb0 [ 78.585047][ T5949] ? clear_bhb_loop+0x55/0xb0 [ 78.589793][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.595748][ T5949] RIP: 0033:0x7fda3897e8ec [ 78.600247][ T5949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.619887][ T5949] RSP: 002b:00007fda36ff7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.628330][ T5949] RAX: ffffffffffffffda RBX: 00007fda38b45fa0 RCX: 00007fda3897e8ec [ 78.636303][ T5949] RDX: 000000000000000f RSI: 00007fda36ff70b0 RDI: 0000000000000008 [ 78.644275][ T5949] RBP: 00007fda36ff70a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.652248][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.660284][ T5949] R13: 0000000000000000 R14: 00007fda38b45fa0 R15: 00007ffc8f6a7be8 [ 78.668318][ T5949] [ 78.678654][ T5953] FAULT_INJECTION: forcing a failure. [ 78.678654][ T5953] name failslab, interval 1, probability 0, space 0, times 0 [ 78.691329][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.3.809 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 78.701979][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.712044][ T5953] Call Trace: [ 78.715330][ T5953] [ 78.718269][ T5953] dump_stack_lvl+0xf2/0x150 [ 78.722932][ T5953] dump_stack+0x15/0x1a [ 78.727125][ T5953] should_fail_ex+0x223/0x230 [ 78.731843][ T5953] should_failslab+0x8f/0xb0 [ 78.736537][ T5953] __kmalloc_noprof+0xab/0x3f0 [ 78.741392][ T5953] ? iovec_from_user+0x84/0x210 [ 78.746272][ T5953] ? __rcu_read_unlock+0x34/0x70 [ 78.751265][ T5953] iovec_from_user+0x84/0x210 [ 78.756051][ T5953] __import_iovec+0xf0/0x560 [ 78.760749][ T5953] import_iovec+0xbc/0xd0 [ 78.765116][ T5953] copy_msghdr_from_user+0x24e/0x2a0 [ 78.770455][ T5953] do_recvmmsg+0x256/0x6d0 [ 78.774957][ T5953] __x64_sys_recvmmsg+0xe2/0x170 [ 78.779926][ T5953] x64_sys_call+0x2a9a/0x2dc0 [ 78.784699][ T5953] do_syscall_64+0xc9/0x1c0 [ 78.789346][ T5953] ? clear_bhb_loop+0x55/0xb0 [ 78.794040][ T5953] ? clear_bhb_loop+0x55/0xb0 [ 78.798755][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.804680][ T5953] RIP: 0033:0x7f7968c2fed9 [ 78.809160][ T5953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.828883][ T5953] RSP: 002b:00007f7967286058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 78.837307][ T5953] RAX: ffffffffffffffda RBX: 00007f7968df6080 RCX: 00007f7968c2fed9 [ 78.845283][ T5953] RDX: 0000000000000004 RSI: 0000000020003e40 RDI: 0000000000000003 [ 78.853258][ T5953] RBP: 00007f79672860a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.861232][ T5953] R10: 0000000040000121 R11: 0000000000000246 R12: 0000000000000001 [ 78.869208][ T5953] R13: 0000000000000000 R14: 00007f7968df6080 R15: 00007ffda2a50b88 [ 78.877269][ T5953] [ 78.909049][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.078249][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 79.133885][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.813'. [ 79.180652][ T5970] loop2: detected capacity change from 0 to 2048 [ 79.257061][ T5970] loop2: p1 < > p4 [ 79.276234][ T5970] loop2: p4 size 8388608 extends beyond EOD, truncated [ 79.293275][ T5980] loop3: detected capacity change from 0 to 128 [ 79.387561][ T2998] loop2: p1 < > p4 [ 79.406194][ T2998] loop2: p4 size 8388608 extends beyond EOD, truncated [ 79.441742][ T5980] syz.3.816: attempt to access beyond end of device [ 79.441742][ T5980] loop3: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 79.537308][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 79.551345][ T5998] loop2: detected capacity change from 0 to 512 [ 79.567614][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 79.591143][ T5998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.602913][ T6006] loop4: detected capacity change from 0 to 512 [ 79.628323][ T5998] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.629856][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 79.658772][ T5994] loop0: detected capacity change from 0 to 512 [ 79.662916][ T6014] loop3: detected capacity change from 0 to 764 [ 79.673540][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 79.688110][ T6001] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.708128][ T6014] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.716565][ T5998] tmpfs: Unknown parameter 'PL' [ 79.748526][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.759266][ T6001] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.770323][ T6006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.787715][ T6006] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.819776][ T6020] bond3: entered promiscuous mode [ 79.824863][ T6020] bond3: entered allmulticast mode [ 79.833071][ T6020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.844947][ T6001] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.859572][ T6020] sctp: [Deprecated]: syz.0.824 (pid 6020) Use of int in max_burst socket option. [ 79.859572][ T6020] Use struct sctp_assoc_value instead [ 79.919306][ T6020] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.931843][ T6020] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 79.945620][ T6020] netlink: 332 bytes leftover after parsing attributes in process `syz.0.824'. [ 79.956606][ T6001] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.963661][ T6037] loop3: detected capacity change from 0 to 2048 [ 80.000719][ T6037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.019004][ T6038] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.820: corrupted inode contents [ 80.042388][ T6038] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.820: mark_inode_dirty error [ 80.057232][ T6038] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #19: comm syz.4.820: corrupted inode contents [ 80.071410][ T6038] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #19: comm syz.4.820: mark_inode_dirty error [ 80.084981][ T6038] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #19: comm syz.4.820: mark inode dirty (error -117) [ 80.099489][ T6038] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 80.117271][ T6001] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.129676][ T6001] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.141086][ T6001] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.150525][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.155375][ T6001] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.170164][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.282921][ T6061] batadv1: entered promiscuous mode [ 80.290427][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.531897][ T6112] loop3: detected capacity change from 0 to 512 [ 80.571055][ T6112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.594258][ T6112] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.599290][ T6119] syz.4.844[6119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.605321][ T6119] syz.4.844[6119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.617529][ T6119] syz.4.844[6119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.696908][ T6112] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.841: corrupted inode contents [ 80.742559][ T6112] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.841: mark_inode_dirty error [ 80.754807][ T6129] FAULT_INJECTION: forcing a failure. [ 80.754807][ T6129] name failslab, interval 1, probability 0, space 0, times 0 [ 80.767635][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: \ Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 80.778074][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.788152][ T6129] Call Trace: [ 80.791443][ T6129] [ 80.794393][ T6129] dump_stack_lvl+0xf2/0x150 [ 80.799123][ T6129] dump_stack+0x15/0x1a [ 80.803394][ T6129] should_fail_ex+0x223/0x230 [ 80.808177][ T6129] should_failslab+0x8f/0xb0 [ 80.812810][ T6129] __kmalloc_node_noprof+0xad/0x410 [ 80.818038][ T6129] ? __kvmalloc_node_noprof+0x72/0x170 [ 80.823587][ T6129] __kvmalloc_node_noprof+0x72/0x170 [ 80.828937][ T6129] xt_alloc_table_info+0x3d/0x80 [ 80.834063][ T6129] do_ip6t_set_ctl+0x678/0x8c0 [ 80.838914][ T6129] ? kstrtouint+0x77/0xc0 [ 80.843304][ T6129] nf_setsockopt+0x195/0x1b0 [ 80.847982][ T6129] ipv6_setsockopt+0x10f/0x130 [ 80.852897][ T6129] tcp_setsockopt+0x93/0xb0 [ 80.857426][ T6129] sock_common_setsockopt+0x64/0x80 [ 80.862659][ T6129] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 80.868639][ T6129] __sys_setsockopt+0x187/0x200 [ 80.873552][ T6129] __x64_sys_setsockopt+0x66/0x80 [ 80.878586][ T6129] x64_sys_call+0x282e/0x2dc0 [ 80.883273][ T6129] do_syscall_64+0xc9/0x1c0 [ 80.887782][ T6129] ? clear_bhb_loop+0x55/0xb0 [ 80.892465][ T6129] ? clear_bhb_loop+0x55/0xb0 [ 80.897152][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.903072][ T6129] RIP: 0033:0x7fc74dc4fed9 [ 80.907520][ T6129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.927144][ T6129] RSP: 002b:00007fc74c2c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.935615][ T6129] RAX: ffffffffffffffda RBX: 00007fc74de15fa0 RCX: 00007fc74dc4fed9 [ 80.943672][ T6129] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 80.951663][ T6129] RBP: 00007fc74c2c70a0 R08: 0000000000000468 R09: 0000000000000000 [ 80.959641][ T6129] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000001 [ 80.967649][ T6129] R13: 0000000000000000 R14: 00007fc74de15fa0 R15: 00007ffe71b3e438 [ 80.975683][ T6129] [ 80.981732][ T6112] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.841: corrupted inode contents [ 80.990480][ T6138] loop0: detected capacity change from 0 to 512 [ 81.010399][ T6138] EXT4-fs: inline encryption not supported [ 81.016739][ T6112] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.841: mark_inode_dirty error [ 81.032189][ T6112] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.841: mark inode dirty (error -117) [ 81.052649][ T6112] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 81.104867][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.127416][ T6148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=6148 comm=syz.4.851 [ 81.141881][ T6138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.164710][ T6160] loop3: detected capacity change from 0 to 128 [ 81.172903][ T6138] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.187252][ T6138] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.847: bg 0: block 367: padding at end of block bitmap is not set [ 81.199168][ T6163] batadv1: entered promiscuous mode [ 81.209913][ T6160] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.226620][ T6160] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.262740][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 81.279297][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.301210][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.322165][ T6168] loop4: detected capacity change from 0 to 2048 [ 81.334184][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.852'. [ 81.394138][ T6178] bond4: entered promiscuous mode [ 81.399395][ T6178] bond4: entered allmulticast mode [ 81.434485][ T6178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 81.481979][ T6189] loop5: detected capacity change from 0 to 128 [ 81.494150][ T6178] sctp: [Deprecated]: syz.3.855 (pid 6178) Use of int in max_burst socket option. [ 81.494150][ T6178] Use struct sctp_assoc_value instead [ 81.553300][ T6189] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.568422][ T6178] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 81.575756][ T6178] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 81.597328][ T6189] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.632812][ T6178] netlink: 332 bytes leftover after parsing attributes in process `syz.3.855'. [ 81.670558][ T6189] FAULT_INJECTION: forcing a failure. [ 81.670558][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 81.683236][ T6189] CPU: 1 UID: 0 PID: 6189 Comm: syz.5.858 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 81.693854][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.703933][ T6189] Call Trace: [ 81.707312][ T6189] [ 81.710332][ T6189] dump_stack_lvl+0xf2/0x150 [ 81.714960][ T6189] dump_stack+0x15/0x1a [ 81.719170][ T6189] should_fail_ex+0x223/0x230 [ 81.723873][ T6189] should_failslab+0x8f/0xb0 [ 81.728501][ T6189] __kmalloc_noprof+0xab/0x3f0 [ 81.733281][ T6189] ? ext4_find_extent+0x172/0x7c0 [ 81.738343][ T6189] ext4_find_extent+0x172/0x7c0 [ 81.743242][ T6189] ext4_move_extents+0x361/0x6b0 [ 81.748210][ T6189] ext4_ioctl+0x1e10/0x2dd0 [ 81.752797][ T6189] ? ioctl_has_perm+0x286/0x2e0 [ 81.757681][ T6189] ? do_vfs_ioctl+0x1166/0x1530 [ 81.762705][ T6189] ? selinux_file_ioctl+0x2f7/0x380 [ 81.767930][ T6189] ? __fget_files+0x17c/0x1c0 [ 81.772765][ T6189] ? __pfx_ext4_ioctl+0x10/0x10 [ 81.777641][ T6189] __se_sys_ioctl+0xc9/0x140 [ 81.782439][ T6189] __x64_sys_ioctl+0x43/0x50 [ 81.787095][ T6189] x64_sys_call+0x1690/0x2dc0 [ 81.791811][ T6189] do_syscall_64+0xc9/0x1c0 [ 81.796336][ T6189] ? clear_bhb_loop+0x55/0xb0 [ 81.801075][ T6189] ? clear_bhb_loop+0x55/0xb0 [ 81.805762][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.811738][ T6189] RIP: 0033:0x7fc74dc4fed9 [ 81.816217][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.835848][ T6189] RSP: 002b:00007fc74c2c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.844297][ T6189] RAX: ffffffffffffffda RBX: 00007fc74de15fa0 RCX: 00007fc74dc4fed9 [ 81.852289][ T6189] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000004 [ 81.860346][ T6189] RBP: 00007fc74c2c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.868395][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.876381][ T6189] R13: 0000000000000000 R14: 00007fc74de15fa0 R15: 00007ffe71b3e438 [ 81.884434][ T6189] [ 81.900420][ T6217] loop0: detected capacity change from 0 to 512 [ 81.912775][ T5175] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.922145][ T6219] lo speed is unknown, defaulting to 1000 [ 81.926349][ T6217] EXT4-fs: inline encryption not supported [ 81.986228][ T6217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.013445][ T6217] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.036924][ T6217] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.865: bg 0: block 367: padding at end of block bitmap is not set [ 82.121625][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.162902][ T6230] batadv1: entered promiscuous mode [ 82.178655][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.356924][ T6241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.874'. [ 82.448888][ T6245] lo speed is unknown, defaulting to 1000 [ 82.484089][ T6251] capability: warning: `syz.3.878' uses deprecated v2 capabilities in a way that may be insecure [ 82.519626][ T6251] loop3: detected capacity change from 0 to 512 [ 82.584253][ T6251] loop3: detected capacity change from 0 to 128 [ 82.594594][ T6258] bond5: entered promiscuous mode [ 82.599772][ T6258] bond5: entered allmulticast mode [ 82.650234][ T6258] 8021q: adding VLAN 0 to HW filter on device bond5 [ 82.711972][ T6258] sctp: [Deprecated]: syz.2.881 (pid 6258) Use of int in max_burst socket option. [ 82.711972][ T6258] Use struct sctp_assoc_value instead [ 82.766768][ T6258] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.780989][ T6264] batadv1: entered promiscuous mode [ 82.787528][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.796171][ T6258] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 82.814263][ T6258] netlink: 332 bytes leftover after parsing attributes in process `syz.2.881'. [ 82.979086][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.987906][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.043862][ T6302] loop4: detected capacity change from 0 to 2048 [ 83.089346][ T6302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.112342][ T6302] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.208179][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 83.208197][ T29] audit: type=1400 audit(1733553254.907:2343): avc: denied { recv } for pid=3298 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.128 dest=45036 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 83.240921][ T29] audit: type=1400 audit(1733553254.907:2344): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.252911][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.260802][ T29] audit: type=1400 audit(1733553254.947:2345): avc: denied { append } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.294949][ T29] audit: type=1400 audit(1733553254.987:2346): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.319221][ T29] audit: type=1400 audit(1733553254.987:2347): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.343441][ T29] audit: type=1400 audit(1733553254.987:2348): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.370327][ T29] audit: type=1400 audit(1733553255.017:2349): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 83.392397][ T29] audit: type=1400 audit(1733553255.017:2350): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.414164][ T29] audit: type=1400 audit(1733553255.017:2351): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.436738][ T29] audit: type=1400 audit(1733553255.017:2352): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.694893][ T6333] bond4: entered promiscuous mode [ 83.700029][ T6333] bond4: entered allmulticast mode [ 83.705708][ T6333] 8021q: adding VLAN 0 to HW filter on device bond4 [ 83.730281][ T6333] bond4 (unregistering): Released all slaves [ 83.751296][ T6325] loop4: detected capacity change from 0 to 1024 [ 83.758178][ T6325] EXT4-fs: Ignoring removed orlov option [ 83.770707][ T6325] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 83.791195][ T6342] sctp: [Deprecated]: syz.0.910 (pid 6342) Use of int in max_burst socket option. [ 83.791195][ T6342] Use struct sctp_assoc_value instead [ 83.832934][ T6344] bond6: entered promiscuous mode [ 83.838734][ T6344] bond6: entered allmulticast mode [ 83.843992][ T6344] 8021q: adding VLAN 0 to HW filter on device bond6 [ 83.857446][ T6333] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.858441][ T6325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.864919][ T6333] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 83.881877][ T6325] smc: net device wg0 applied user defined pnetid SYZ0 [ 83.895600][ T6325] netlink: 'syz.4.907': attribute type 39 has an invalid length. [ 83.909908][ T6347] sctp: [Deprecated]: syz.2.912 (pid 6347) Use of int in max_burst socket option. [ 83.909908][ T6347] Use struct sctp_assoc_value instead [ 83.926044][ T6340] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 83.933943][ T6340] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 83.949818][ T6325] smc: removing net device wg0 with user defined pnetid SYZ0 [ 83.957689][ T6340] netlink: 332 bytes leftover after parsing attributes in process `syz.2.912'. [ 83.969635][ T6353] loop5: detected capacity change from 0 to 512 [ 83.984222][ T6353] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.915: corrupted in-inode xattr: invalid ea_ino [ 83.999088][ T6353] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.915: couldn't read orphan inode 15 (err -117) [ 84.011637][ T6353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.034815][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.055343][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.067125][ T6360] loop3: detected capacity change from 0 to 512 [ 84.073917][ T6360] EXT4-fs: inline encryption not supported [ 84.094169][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.104221][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.118288][ T6360] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.132377][ T6360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.918: bg 0: block 367: padding at end of block bitmap is not set [ 84.139259][ T6364] syz.4.919[6364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.147610][ T6364] syz.4.919[6364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.159359][ T6364] syz.4.919[6364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.172849][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.239498][ T6368] loop4: detected capacity change from 0 to 512 [ 84.257955][ T6368] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.921: corrupted in-inode xattr: invalid ea_ino [ 84.272471][ T6368] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.921: couldn't read orphan inode 15 (err -117) [ 84.276863][ T6370] batadv1: entered promiscuous mode [ 84.285487][ T6368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.290540][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 84.439261][ T6377] loop3: detected capacity change from 0 to 512 [ 84.448331][ T6377] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.924: corrupted in-inode xattr: invalid ea_ino [ 84.589071][ T6381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.925'. [ 84.632903][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.765672][ T6385] FAULT_INJECTION: forcing a failure. [ 84.765672][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 84.778351][ T6385] CPU: 1 UID: 0 PID: 6385 Comm: syz.0.927 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 84.789113][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.799190][ T6385] Call Trace: [ 84.802474][ T6385] [ 84.805452][ T6385] dump_stack_lvl+0xf2/0x150 [ 84.810085][ T6385] dump_stack+0x15/0x1a [ 84.814274][ T6385] should_fail_ex+0x223/0x230 [ 84.819045][ T6385] should_failslab+0x8f/0xb0 [ 84.823875][ T6385] kmem_cache_alloc_noprof+0x52/0x320 [ 84.829270][ T6385] ? radix_tree_node_alloc+0x8b/0x1e0 [ 84.834698][ T6385] ? terminate_walk+0x260/0x280 [ 84.839623][ T6385] radix_tree_node_alloc+0x8b/0x1e0 [ 84.845001][ T6385] idr_get_free+0x1f5/0x550 [ 84.849532][ T6385] idr_alloc_u32+0xcb/0x180 [ 84.854065][ T6385] idr_alloc_cyclic+0x85/0x140 [ 84.858942][ T6385] bpf_map_alloc_id+0x41/0xf0 [ 84.863659][ T6385] map_create+0xaec/0xb70 [ 84.868013][ T6385] __sys_bpf+0x667/0x7a0 [ 84.872328][ T6385] __x64_sys_bpf+0x43/0x50 [ 84.876768][ T6385] x64_sys_call+0x2914/0x2dc0 [ 84.881567][ T6385] do_syscall_64+0xc9/0x1c0 [ 84.886101][ T6385] ? clear_bhb_loop+0x55/0xb0 [ 84.890788][ T6385] ? clear_bhb_loop+0x55/0xb0 [ 84.895474][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.901465][ T6385] RIP: 0033:0x7fda3897fed9 [ 84.905922][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.925599][ T6385] RSP: 002b:00007fda36ff7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 84.934022][ T6385] RAX: ffffffffffffffda RBX: 00007fda38b45fa0 RCX: 00007fda3897fed9 [ 84.941999][ T6385] RDX: 0000000000000048 RSI: 0000000020000640 RDI: 0000000000000000 [ 84.949973][ T6385] RBP: 00007fda36ff70a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.957996][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.965971][ T6385] R13: 0000000000000001 R14: 00007fda38b45fa0 R15: 00007ffc8f6a7be8 [ 84.974128][ T6385] [ 84.981521][ T6377] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.924: couldn't read orphan inode 15 (err -117) [ 85.016770][ T6377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.084793][ T6391] loop5: detected capacity change from 0 to 2048 [ 85.093849][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 85.116823][ T6397] loop2: detected capacity change from 0 to 2048 [ 85.156315][ T6391] loop5: p1 < > p4 [ 85.161288][ T6391] loop5: p4 size 8388608 extends beyond EOD, truncated [ 85.206286][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.218825][ T2998] loop5: p1 < > p4 [ 85.223517][ T2998] loop5: p4 size 8388608 extends beyond EOD, truncated [ 85.277145][ T6405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.935'. [ 85.302612][ T6406] FAULT_INJECTION: forcing a failure. [ 85.302612][ T6406] name failslab, interval 1, probability 0, space 0, times 0 [ 85.315998][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: syz.3.924 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 85.326620][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 85.336689][ T6406] Call Trace: [ 85.339981][ T6406] [ 85.342923][ T6406] dump_stack_lvl+0xf2/0x150 [ 85.347562][ T6406] dump_stack+0x15/0x1a [ 85.351827][ T6406] should_fail_ex+0x223/0x230 [ 85.356532][ T6406] should_failslab+0x8f/0xb0 [ 85.361220][ T6406] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 85.367096][ T6406] ? __d_alloc+0x3d/0x340 [ 85.371453][ T6406] __d_alloc+0x3d/0x340 [ 85.375746][ T6406] d_alloc_parallel+0x54/0xc60 [ 85.380546][ T6406] ? __schedule+0x6fa/0x930 [ 85.385165][ T6406] ? __cond_resched+0x28/0x50 [ 85.389880][ T6406] ? down_read+0x171/0x4b0 [ 85.394387][ T6406] __lookup_slow+0x8d/0x250 [ 85.398903][ T6406] lookup_slow+0x3c/0x60 [ 85.403236][ T6406] walk_component+0x1f5/0x230 [ 85.407935][ T6406] ? path_lookupat+0xfd/0x2b0 [ 85.412672][ T6406] path_lookupat+0x10a/0x2b0 [ 85.417316][ T6406] filename_lookup+0x150/0x340 [ 85.422106][ T6406] user_path_at+0x3c/0x120 [ 85.426562][ T6406] do_fchownat+0x92/0x1a0 [ 85.430997][ T6406] __x64_sys_chown+0x47/0x60 [ 85.435727][ T6406] x64_sys_call+0x7e0/0x2dc0 [ 85.440339][ T6406] do_syscall_64+0xc9/0x1c0 [ 85.444853][ T6406] ? clear_bhb_loop+0x55/0xb0 [ 85.449548][ T6406] ? clear_bhb_loop+0x55/0xb0 [ 85.454237][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.460168][ T6406] RIP: 0033:0x7f7968c2fed9 [ 85.464591][ T6406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.484265][ T6406] RSP: 002b:00007f7967265058 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 85.492762][ T6406] RAX: ffffffffffffffda RBX: 00007f7968df6160 RCX: 00007f7968c2fed9 [ 85.500749][ T6406] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000020000340 [ 85.508780][ T6406] RBP: 00007f79672650a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.516765][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.524859][ T6406] R13: 0000000000000001 R14: 00007f7968df6160 R15: 00007ffda2a50b88 [ 85.532849][ T6406] [ 85.634412][ T3375] udevd[3375]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 85.634527][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 85.672565][ T6403] loop5: detected capacity change from 0 to 2048 [ 85.703719][ T6410] syz.4.937[6410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.703824][ T6410] syz.4.937[6410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.707365][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 85.715381][ T6410] syz.4.937[6410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.730142][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 85.772922][ T6403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.785648][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.801632][ T6403] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.839875][ T6419] netlink: 268 bytes leftover after parsing attributes in process `syz.0.940'. [ 85.848959][ T6419] unsupported nla_type 65024 [ 85.962210][ T6430] batadv1: entered promiscuous mode [ 85.962961][ T6427] loop0: detected capacity change from 0 to 2048 [ 85.968972][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 85.976141][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.046094][ T6427] loop0: p1 < > p4 [ 86.157181][ T6427] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.182506][ T2998] loop0: p1 < > p4 [ 86.187912][ T2998] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.300876][ T2998] loop0: p1 < > p4 [ 86.305320][ T2998] loop0: p4 size 8388608 extends beyond EOD, truncated [ 86.338866][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 86.348120][ T6443] loop3: detected capacity change from 0 to 128 [ 86.355773][ T6440] FAULT_INJECTION: forcing a failure. [ 86.355773][ T6440] name failslab, interval 1, probability 0, space 0, times 0 [ 86.369205][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.2.949 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 86.379838][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.389903][ T6440] Call Trace: [ 86.393183][ T6440] [ 86.396144][ T6440] dump_stack_lvl+0xf2/0x150 [ 86.400828][ T6440] dump_stack+0x15/0x1a [ 86.404999][ T6440] should_fail_ex+0x223/0x230 [ 86.409731][ T6440] should_failslab+0x8f/0xb0 [ 86.414432][ T6440] __kmalloc_noprof+0xab/0x3f0 [ 86.419269][ T6440] ? bpf_test_init+0xc7/0x170 [ 86.423954][ T6440] bpf_test_init+0xc7/0x170 [ 86.428471][ T6440] bpf_prog_test_run_xdp+0x321/0x8b0 [ 86.433825][ T6440] ? rtw8822c_dac_cal_adc+0x620/0x640 [ 86.439318][ T6440] ? __rcu_read_unlock+0x4e/0x70 [ 86.444290][ T6440] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 86.450106][ T6440] bpf_prog_test_run+0x20f/0x3a0 [ 86.455189][ T6440] __sys_bpf+0x400/0x7a0 [ 86.459472][ T6440] __x64_sys_bpf+0x43/0x50 [ 86.463952][ T6440] x64_sys_call+0x2914/0x2dc0 [ 86.468763][ T6440] do_syscall_64+0xc9/0x1c0 [ 86.473273][ T6440] ? clear_bhb_loop+0x55/0xb0 [ 86.477959][ T6440] ? clear_bhb_loop+0x55/0xb0 [ 86.482644][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.488604][ T6440] RIP: 0033:0x7f65ff1bfed9 [ 86.493024][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.512806][ T6440] RSP: 002b:00007f65fd837058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 86.521301][ T6440] RAX: ffffffffffffffda RBX: 00007f65ff385fa0 RCX: 00007f65ff1bfed9 [ 86.529333][ T6440] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 86.537308][ T6440] RBP: 00007f65fd8370a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.545295][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.553275][ T6440] R13: 0000000000000000 R14: 00007f65ff385fa0 R15: 00007ffd1ba058d8 [ 86.561262][ T6440] [ 86.568082][ T6453] netlink: 'syz.4.951': attribute type 10 has an invalid length. [ 86.573995][ T6454] bond4: entered promiscuous mode [ 86.575807][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.4.951'. [ 86.580888][ T6454] bond4: entered allmulticast mode [ 86.581095][ T6454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.601068][ T6443] raw_sendmsg: syz.3.950 forgot to set AF_INET. Fix it! [ 86.620707][ T6454] bond4 (unregistering): Released all slaves [ 86.641808][ T6452] lo speed is unknown, defaulting to 1000 [ 86.674642][ T6454] sctp: [Deprecated]: syz.0.953 (pid 6454) Use of int in max_burst socket option. [ 86.674642][ T6454] Use struct sctp_assoc_value instead [ 86.701684][ T6460] loop3: detected capacity change from 0 to 2048 [ 86.717182][ T6449] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.725706][ T6449] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 86.758221][ T6460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.774528][ T6449] netlink: 356 bytes leftover after parsing attributes in process `syz.0.953'. [ 86.792024][ T6458] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.065186][ T6474] FAULT_INJECTION: forcing a failure. [ 87.065186][ T6474] name failslab, interval 1, probability 0, space 0, times 0 [ 87.078591][ T6474] CPU: 0 UID: 0 PID: 6474 Comm: syz.5.959 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 87.089253][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.099485][ T6474] Call Trace: [ 87.102765][ T6474] [ 87.105692][ T6474] dump_stack_lvl+0xf2/0x150 [ 87.110375][ T6474] dump_stack+0x15/0x1a [ 87.114639][ T6474] should_fail_ex+0x223/0x230 [ 87.119347][ T6474] should_failslab+0x8f/0xb0 [ 87.124050][ T6474] kmem_cache_alloc_noprof+0x52/0x320 [ 87.129464][ T6474] ? alloc_empty_file+0xd0/0x200 [ 87.134600][ T6474] ? mntput+0x49/0x70 [ 87.138647][ T6474] alloc_empty_file+0xd0/0x200 [ 87.143415][ T6474] path_openat+0x6a/0x1fa0 [ 87.147867][ T6474] ? _parse_integer_limit+0x167/0x180 [ 87.153304][ T6474] ? _parse_integer+0x27/0x30 [ 87.158070][ T6474] ? kstrtoull+0x110/0x140 [ 87.162491][ T6474] ? kstrtouint+0x77/0xc0 [ 87.166828][ T6474] ? kstrtouint_from_user+0xb0/0xe0 [ 87.172030][ T6474] ? rtw8822c_dac_cal_adc+0x620/0x640 [ 87.177490][ T6474] do_filp_open+0x107/0x230 [ 87.182075][ T6474] do_sys_openat2+0xab/0x120 [ 87.186674][ T6474] __x64_sys_open+0xe6/0x110 [ 87.191270][ T6474] x64_sys_call+0x13e1/0x2dc0 [ 87.195956][ T6474] do_syscall_64+0xc9/0x1c0 [ 87.200541][ T6474] ? clear_bhb_loop+0x55/0xb0 [ 87.205226][ T6474] ? clear_bhb_loop+0x55/0xb0 [ 87.209938][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.215930][ T6474] RIP: 0033:0x7fc74dc4fed9 [ 87.220364][ T6474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.240098][ T6474] RSP: 002b:00007fc74c2c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 87.248686][ T6474] RAX: ffffffffffffffda RBX: 00007fc74de15fa0 RCX: 00007fc74dc4fed9 [ 87.256671][ T6474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 87.264781][ T6474] RBP: 00007fc74c2c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.272787][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.280782][ T6474] R13: 0000000000000000 R14: 00007fc74de15fa0 R15: 00007ffe71b3e438 [ 87.288766][ T6474] [ 87.297435][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.447782][ T6483] lo speed is unknown, defaulting to 1000 [ 87.462695][ T6481] batadv1: entered promiscuous mode [ 87.480397][ T6481] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.679373][ T6502] loop2: detected capacity change from 0 to 2048 [ 87.714168][ T6511] xt_TCPMSS: Only works on TCP SYN packets [ 87.721315][ T6502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.737230][ T6507] bond4: entered promiscuous mode [ 87.742332][ T6507] bond4: entered allmulticast mode [ 87.751782][ T6502] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.753574][ T6507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 87.778430][ T6507] bond4 (unregistering): Released all slaves [ 87.802897][ T6516] sctp: [Deprecated]: syz.0.973 (pid 6516) Use of int in max_burst socket option. [ 87.802897][ T6516] Use struct sctp_assoc_value instead [ 87.847364][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.975'. [ 87.857017][ T6507] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.864406][ T6507] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 87.873338][ T6519] lo speed is unknown, defaulting to 1000 [ 87.888266][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 87.897118][ T6507] netlink: 356 bytes leftover after parsing attributes in process `syz.0.973'. [ 87.968481][ T6528] loop4: detected capacity change from 0 to 2048 [ 87.975257][ T6528] ext4: Unknown parameter 'fsuuid' [ 88.032626][ T6530] loop4: detected capacity change from 0 to 2048 [ 88.193163][ T6534] batadv1: entered promiscuous mode [ 88.199336][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.297925][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 88.297944][ T29] audit: type=1400 audit(1733553259.997:2727): avc: denied { create } for pid=6536 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.332118][ T6537] loop4: detected capacity change from 0 to 1024 [ 88.339086][ T29] audit: type=1400 audit(1733553260.017:2728): avc: denied { write } for pid=6536 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.359485][ T29] audit: type=1400 audit(1733553260.017:2729): avc: denied { read } for pid=6536 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.379762][ T29] audit: type=1400 audit(1733553260.027:2730): avc: denied { ioctl } for pid=6536 comm="syz.4.981" path="socket:[14742]" dev="sockfs" ino=14742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.405447][ T29] audit: type=1400 audit(1733553260.027:2731): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.427524][ T29] audit: type=1400 audit(1733553260.027:2732): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.449282][ T29] audit: type=1400 audit(1733553260.027:2733): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.472056][ T29] audit: type=1400 audit(1733553260.027:2734): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.508891][ T6537] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.528335][ T6537] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.981: bg 0: block 393: padding at end of block bitmap is not set [ 88.545157][ T29] audit: type=1400 audit(1733553260.227:2735): avc: denied { ioctl } for pid=6536 comm="syz.4.981" path="/208/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.576223][ T6537] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 88.589077][ T6537] EXT4-fs (loop4): This should not happen!! Data will be lost [ 88.589077][ T6537] [ 88.599347][ T6537] EXT4-fs (loop4): Total free blocks count 0 [ 88.605362][ T6537] EXT4-fs (loop4): Free/Dirty block details [ 88.611294][ T6537] EXT4-fs (loop4): free_blocks=0 [ 88.616359][ T6537] EXT4-fs (loop4): dirty_blocks=16 [ 88.621480][ T6537] EXT4-fs (loop4): Block reservation details [ 88.627489][ T6537] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 88.664244][ T29] audit: type=1400 audit(1733553260.357:2736): avc: denied { open } for pid=6544 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 88.694523][ T6546] loop3: detected capacity change from 0 to 512 [ 88.697465][ T6545] loop5: detected capacity change from 0 to 2048 [ 88.703244][ T6546] EXT4-fs: Ignoring removed oldalloc option [ 88.728900][ T6550] syz.4.984[6550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.729005][ T6550] syz.4.984[6550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.749264][ T6546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.760757][ T6550] syz.4.984[6550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.776653][ T6546] EXT4-fs (loop3): 1 truncate cleaned up [ 88.893792][ T6561] lo speed is unknown, defaulting to 1000 [ 88.909163][ T3303] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 88.968333][ T6568] loop3: detected capacity change from 0 to 512 [ 88.978805][ T6568] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 88.992544][ T6566] bond2: entered promiscuous mode [ 88.997783][ T6566] bond2: entered allmulticast mode [ 89.004084][ T6566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.042333][ T6579] netlink: 'syz.3.994': attribute type 21 has an invalid length. [ 89.065734][ T6566] sctp: [Deprecated]: syz.5.992 (pid 6566) Use of int in max_burst socket option. [ 89.065734][ T6566] Use struct sctp_assoc_value instead [ 89.114955][ T6585] bond5: entered promiscuous mode [ 89.120116][ T6585] bond5: entered allmulticast mode [ 89.125361][ T6585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 89.132878][ T6566] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.140802][ T6566] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 89.152218][ T6585] bond5 (unregistering): Released all slaves [ 89.155168][ T6566] netlink: 332 bytes leftover after parsing attributes in process `syz.5.992'. [ 89.221143][ T6585] sctp: [Deprecated]: syz.3.996 (pid 6585) Use of int in max_burst socket option. [ 89.221143][ T6585] Use struct sctp_assoc_value instead [ 89.237253][ T6585] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.244705][ T6585] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 89.629780][ T6591] loop0: detected capacity change from 0 to 2048 [ 89.725740][ T6595] syz.0.1001[6595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.726261][ T6595] syz.0.1001[6595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.737916][ T6595] syz.0.1001[6595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.829510][ T6597] lo speed is unknown, defaulting to 1000 [ 89.918855][ T6603] loop5: detected capacity change from 0 to 128 [ 89.988373][ T6609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6609 comm=syz.5.1006 [ 90.001125][ T6609] FAULT_INJECTION: forcing a failure. [ 90.001125][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 90.013924][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.5.1006 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 90.024730][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.034829][ T6609] Call Trace: [ 90.038127][ T6609] [ 90.041120][ T6609] dump_stack_lvl+0xf2/0x150 [ 90.045752][ T6609] dump_stack+0x15/0x1a [ 90.050052][ T6609] should_fail_ex+0x223/0x230 [ 90.054837][ T6609] should_failslab+0x8f/0xb0 [ 90.059547][ T6609] kmem_cache_alloc_noprof+0x52/0x320 [ 90.064936][ T6609] ? skb_clone+0x154/0x1f0 [ 90.069384][ T6609] skb_clone+0x154/0x1f0 [ 90.073677][ T6609] __netlink_deliver_tap+0x2bd/0x4f0 [ 90.079043][ T6609] netlink_unicast+0x64a/0x670 [ 90.083838][ T6609] netlink_sendmsg+0x5cc/0x6e0 [ 90.088634][ T6609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.093966][ T6609] __sock_sendmsg+0x140/0x180 [ 90.098685][ T6609] ____sys_sendmsg+0x312/0x410 [ 90.103605][ T6609] __sys_sendmsg+0x19d/0x230 [ 90.108229][ T6609] __x64_sys_sendmsg+0x46/0x50 [ 90.113041][ T6609] x64_sys_call+0x2734/0x2dc0 [ 90.117826][ T6609] do_syscall_64+0xc9/0x1c0 [ 90.122392][ T6609] ? clear_bhb_loop+0x55/0xb0 [ 90.127089][ T6609] ? clear_bhb_loop+0x55/0xb0 [ 90.131822][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.137792][ T6609] RIP: 0033:0x7fc74dc4fed9 [ 90.142219][ T6609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.161854][ T6609] RSP: 002b:00007fc74c2c7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.170313][ T6609] RAX: ffffffffffffffda RBX: 00007fc74de15fa0 RCX: 00007fc74dc4fed9 [ 90.178345][ T6609] RDX: 0000000000000840 RSI: 0000000020000140 RDI: 0000000000000003 [ 90.186350][ T6609] RBP: 00007fc74c2c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.194362][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.202416][ T6609] R13: 0000000000000000 R14: 00007fc74de15fa0 R15: 00007ffe71b3e438 [ 90.210419][ T6609] [ 90.274775][ T6614] block device autoloading is deprecated and will be removed. [ 90.282725][ T6614] syz.4.1008: attempt to access beyond end of device [ 90.282725][ T6614] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.309053][ T6616] loop5: detected capacity change from 0 to 512 [ 90.315931][ T6616] ext4: Unknown parameter 'nouser_xattr' [ 90.368815][ T6620] loop3: detected capacity change from 0 to 2048 [ 90.399190][ T6628] syz.4.1014[6628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.399329][ T6628] syz.4.1014[6628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.409451][ T6625] bond3: entered promiscuous mode [ 90.427084][ T6625] bond3: entered allmulticast mode [ 90.432973][ T6625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.433250][ T6628] syz.4.1014[6628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.447556][ T6626] lo speed is unknown, defaulting to 1000 [ 90.499920][ T6633] sctp: [Deprecated]: syz.5.1013 (pid 6633) Use of int in max_burst socket option. [ 90.499920][ T6633] Use struct sctp_assoc_value instead [ 90.536396][ T6633] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.543741][ T6633] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 90.556962][ T6633] __nla_validate_parse: 2 callbacks suppressed [ 90.556979][ T6633] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1013'. [ 90.565045][ T6631] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 90.683026][ T6646] bond4: entered promiscuous mode [ 90.688235][ T6646] bond4: entered allmulticast mode [ 90.697179][ T6646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.709528][ T6646] bond4 (unregistering): Released all slaves [ 90.768038][ T6653] sctp: [Deprecated]: syz.0.1021 (pid 6653) Use of int in max_burst socket option. [ 90.768038][ T6653] Use struct sctp_assoc_value instead [ 90.783126][ T6653] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 90.792274][ T6653] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 90.804307][ T6653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 90.813285][ T6653] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1021'. [ 91.026785][ T6664] loop2: detected capacity change from 0 to 2048 [ 91.262847][ T6668] lo speed is unknown, defaulting to 1000 [ 91.427373][ T6675] geneve0: entered allmulticast mode [ 91.632704][ T6677] IPVS: Error connecting to the multicast addr [ 91.854112][ T6685] Cannot find del_set index 0 as target [ 91.917967][ T6685] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.964566][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.024101][ T6696] loop3: detected capacity change from 0 to 2048 [ 92.060907][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.131144][ T6691] loop0: detected capacity change from 0 to 1024 [ 92.158559][ T6691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f042c01c, mo2=0002] [ 92.167210][ T6691] System zones: 0-1, 3-36 [ 92.185351][ T6701] loop3: detected capacity change from 0 to 2048 [ 92.197084][ T6698] bond3: entered promiscuous mode [ 92.202244][ T6698] bond3: entered allmulticast mode [ 92.208320][ T6698] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.223341][ T6691] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 92.234332][ T6704] lo speed is unknown, defaulting to 1000 [ 92.270129][ T6709] sctp: [Deprecated]: syz.4.1038 (pid 6709) Use of int in max_burst socket option. [ 92.270129][ T6709] Use struct sctp_assoc_value instead [ 92.287338][ T6691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f042c01c, mo2=0002] [ 92.304113][ T6691] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 92.317064][ T6709] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.324417][ T6709] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 92.337095][ T6709] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1038'. [ 92.360365][ T6716] FAULT_INJECTION: forcing a failure. [ 92.360365][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 92.366451][ T6713] loop5: detected capacity change from 0 to 512 [ 92.373067][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.3.1041 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 92.389921][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.400260][ T6716] Call Trace: [ 92.403563][ T6716] [ 92.406547][ T6716] dump_stack_lvl+0xf2/0x150 [ 92.411238][ T6716] dump_stack+0x15/0x1a [ 92.415498][ T6716] should_fail_ex+0x223/0x230 [ 92.420199][ T6716] should_failslab+0x8f/0xb0 [ 92.424832][ T6716] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 92.431316][ T6716] ? sidtab_sid2str_get+0xb8/0x140 [ 92.436471][ T6716] kmemdup_noprof+0x2a/0x60 [ 92.441035][ T6716] sidtab_sid2str_get+0xb8/0x140 [ 92.446054][ T6716] security_sid_to_context_core+0x1eb/0x2f0 [ 92.451963][ T6716] security_sid_to_context+0x27/0x30 [ 92.457341][ T6716] avc_audit_post_callback+0x9d/0x530 [ 92.462735][ T6716] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.468735][ T6716] common_lsm_audit+0x90f/0x1010 [ 92.473793][ T6716] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 92.479873][ T6716] ? avc_denied+0xf1/0x110 [ 92.484391][ T6716] slow_avc_audit+0xf9/0x140 [ 92.489011][ T6716] avc_has_perm+0x129/0x160 [ 92.493573][ T6716] selinux_socket_sendmsg+0x185/0x1c0 [ 92.498972][ T6716] security_socket_sendmsg+0x47/0x80 [ 92.504351][ T6716] __sock_sendmsg+0x2d/0x180 [ 92.509027][ T6716] ____sys_sendmsg+0x312/0x410 [ 92.513863][ T6716] __sys_sendmsg+0x19d/0x230 [ 92.518480][ T6716] __x64_sys_sendmsg+0x46/0x50 [ 92.523321][ T6716] x64_sys_call+0x2734/0x2dc0 [ 92.528010][ T6716] do_syscall_64+0xc9/0x1c0 [ 92.532516][ T6716] ? clear_bhb_loop+0x55/0xb0 [ 92.537231][ T6716] ? clear_bhb_loop+0x55/0xb0 [ 92.541910][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.547920][ T6716] RIP: 0033:0x7f7968c2fed9 [ 92.552341][ T6716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.571962][ T6716] RSP: 002b:00007f79672a7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.580406][ T6716] RAX: ffffffffffffffda RBX: 00007f7968df5fa0 RCX: 00007f7968c2fed9 [ 92.588383][ T6716] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 92.596443][ T6716] RBP: 00007f79672a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.604505][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.612487][ T6716] R13: 0000000000000000 R14: 00007f7968df5fa0 R15: 00007ffda2a50b88 [ 92.620510][ T6716] [ 92.635934][ T6716] rdma_op ffff88811726d180 conn xmit_rdma 0000000000000000 [ 92.644153][ T6711] SELinux: syz.5.1042 (6711) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 92.667769][ T6718] bond7: entered promiscuous mode [ 92.672857][ T6718] bond7: entered allmulticast mode [ 92.679431][ T6718] 8021q: adding VLAN 0 to HW filter on device bond7 [ 92.698012][ T6718] bond7 (unregistering): Released all slaves [ 92.716223][ T6724] FAULT_INJECTION: forcing a failure. [ 92.716223][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 92.728977][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.5.1046 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 92.739671][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.749894][ T6724] Call Trace: [ 92.753177][ T6724] [ 92.756115][ T6724] dump_stack_lvl+0xf2/0x150 [ 92.760716][ T6724] dump_stack+0x15/0x1a [ 92.764966][ T6724] should_fail_ex+0x223/0x230 [ 92.769650][ T6724] should_failslab+0x8f/0xb0 [ 92.774264][ T6724] kmem_cache_alloc_noprof+0x52/0x320 [ 92.779636][ T6724] ? skb_clone+0x154/0x1f0 [ 92.784110][ T6724] ? should_fail_ex+0xd7/0x230 [ 92.789039][ T6724] skb_clone+0x154/0x1f0 [ 92.793397][ T6724] packet_rcv+0x3a3/0x990 [ 92.797741][ T6724] ? __pfx_packet_rcv+0x10/0x10 [ 92.802623][ T6724] dev_queue_xmit_nit+0x3e2/0x680 [ 92.807659][ T6724] dev_hard_start_xmit+0xcc/0x3f0 [ 92.812752][ T6724] ? validate_xmit_skb+0x645/0x830 [ 92.817866][ T6724] __dev_queue_xmit+0x100a/0x2090 [ 92.822894][ T6724] ? __dev_queue_xmit+0x186/0x2090 [ 92.828015][ T6724] ? __skb_clone+0x2d0/0x2f0 [ 92.832630][ T6724] __netlink_deliver_tap+0x3be/0x4f0 [ 92.838060][ T6724] netlink_unicast+0x64a/0x670 [ 92.842966][ T6724] netlink_sendmsg+0x5cc/0x6e0 [ 92.847809][ T6724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.853100][ T6724] __sock_sendmsg+0x140/0x180 [ 92.857923][ T6724] ____sys_sendmsg+0x312/0x410 [ 92.862758][ T6724] __sys_sendmsg+0x19d/0x230 [ 92.867380][ T6724] __x64_sys_sendmsg+0x46/0x50 [ 92.872226][ T6724] x64_sys_call+0x2734/0x2dc0 [ 92.876921][ T6724] do_syscall_64+0xc9/0x1c0 [ 92.881511][ T6724] ? clear_bhb_loop+0x55/0xb0 [ 92.886209][ T6724] ? clear_bhb_loop+0x55/0xb0 [ 92.890973][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.896898][ T6724] RIP: 0033:0x7fc74dc4fed9 [ 92.901327][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.921007][ T6724] RSP: 002b:00007fc74c2c7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.929425][ T6724] RAX: ffffffffffffffda RBX: 00007fc74de15fa0 RCX: 00007fc74dc4fed9 [ 92.937443][ T6724] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 92.945412][ T6724] RBP: 00007fc74c2c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.953381][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.961355][ T6724] R13: 0000000000000000 R14: 00007fc74de15fa0 R15: 00007ffe71b3e438 [ 92.969376][ T6724] [ 92.974783][ T6729] sctp: [Deprecated]: syz.2.1044 (pid 6729) Use of int in max_burst socket option. [ 92.974783][ T6729] Use struct sctp_assoc_value instead [ 92.989695][ T6729] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.997191][ T6729] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 93.010374][ T6729] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1044'. [ 93.095334][ T6735] loop0: detected capacity change from 0 to 2048 [ 93.117181][ T6734] loop5: detected capacity change from 0 to 1024 [ 93.123987][ T6734] EXT4-fs: Ignoring removed nobh option [ 93.129673][ T6734] EXT4-fs: Ignoring removed orlov option [ 93.177102][ T6745] loop4: detected capacity change from 0 to 1024 [ 93.189270][ T6745] EXT4-fs: Ignoring removed nobh option [ 93.194955][ T6745] EXT4-fs: Ignoring removed orlov option [ 93.212143][ T6749] loop0: detected capacity change from 0 to 1024 [ 93.215275][ T6748] lo speed is unknown, defaulting to 1000 [ 93.237703][ T6745] FAULT_INJECTION: forcing a failure. [ 93.237703][ T6745] name failslab, interval 1, probability 0, space 0, times 0 [ 93.250495][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.4.1052 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 93.255241][ T6749] EXT4-fs: Ignoring removed nobh option [ 93.261179][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.261198][ T6745] Call Trace: [ 93.261207][ T6745] [ 93.261216][ T6745] dump_stack_lvl+0xf2/0x150 [ 93.267517][ T6749] EXT4-fs: Ignoring removed orlov option [ 93.276847][ T6745] dump_stack+0x15/0x1a [ 93.297489][ T6745] should_fail_ex+0x223/0x230 [ 93.302231][ T6745] ? __iomap_dio_rw+0x144/0x1110 [ 93.307285][ T6745] should_failslab+0x8f/0xb0 [ 93.311904][ T6745] __kmalloc_cache_noprof+0x4e/0x320 [ 93.317270][ T6745] ? mod_objcg_state+0x2ea/0x4f0 [ 93.322227][ T6745] __iomap_dio_rw+0x144/0x1110 [ 93.327017][ T6745] ? should_fail_ex+0x31/0x230 [ 93.331927][ T6745] ? __rcu_read_unlock+0x4e/0x70 [ 93.336994][ T6745] iomap_dio_rw+0x40/0x90 [ 93.341398][ T6745] ext4_file_write_iter+0xb71/0xf20 [ 93.346627][ T6745] do_iter_readv_writev+0x394/0x450 [ 93.351864][ T6745] vfs_writev+0x2d4/0x880 [ 93.356216][ T6745] ? proc_fail_nth_write+0x12a/0x150 [ 93.361544][ T6745] __se_sys_pwritev2+0x100/0x1c0 [ 93.366579][ T6745] __x64_sys_pwritev2+0x78/0x90 [ 93.371457][ T6745] x64_sys_call+0x2afe/0x2dc0 [ 93.376246][ T6745] do_syscall_64+0xc9/0x1c0 [ 93.380838][ T6745] ? clear_bhb_loop+0x55/0xb0 [ 93.385528][ T6745] ? clear_bhb_loop+0x55/0xb0 [ 93.390227][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.396149][ T6745] RIP: 0033:0x7f351ca1fed9 [ 93.400645][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.420451][ T6745] RSP: 002b:00007f351b097058 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 93.428927][ T6745] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351ca1fed9 [ 93.436906][ T6745] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 93.444908][ T6745] RBP: 00007f351b0970a0 R08: 0000000000000000 R09: 0000000000000003 [ 93.452890][ T6745] R10: 0000000000001200 R11: 0000000000000246 R12: 0000000000000001 [ 93.460891][ T6745] R13: 0000000000000000 R14: 00007f351cbe5fa0 R15: 00007ffe19e2b038 [ 93.468892][ T6745] [ 93.515556][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 93.515574][ T29] audit: type=1326 audit(1733553265.207:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7968c2fed9 code=0x7ffc0000 [ 93.545449][ T29] audit: type=1326 audit(1733553265.207:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7968c2fed9 code=0x7ffc0000 [ 93.570390][ T29] audit: type=1326 audit(1733553265.257:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f7968c2fed9 code=0x7ffc0000 [ 93.594130][ T29] audit: type=1326 audit(1733553265.257:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7968c2fed9 code=0x7ffc0000 [ 93.617799][ T29] audit: type=1326 audit(1733553265.257:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6756 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7968c2fed9 code=0x7ffc0000 [ 93.651772][ T6758] hsr_slave_0: left promiscuous mode [ 93.666177][ T6758] hsr_slave_1: left promiscuous mode [ 93.678430][ T29] audit: type=1400 audit(1733553265.377:3132): avc: denied { ioctl } for pid=6761 comm="syz.2.1060" path="socket:[15260]" dev="sockfs" ino=15260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.794675][ T6762] loop2: detected capacity change from 0 to 1024 [ 93.828888][ T6771] syz.0.1059[6771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.829106][ T6771] syz.0.1059[6771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.841932][ T6772] sctp: [Deprecated]: syz.3.1058 (pid 6772) Use of int in max_burst socket option. [ 93.841932][ T6772] Use struct sctp_assoc_value instead [ 93.845290][ T6771] syz.0.1059[6771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.897696][ T6772] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.916961][ T6772] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 93.929674][ T6772] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1058'. [ 93.951738][ T6776] FAULT_INJECTION: forcing a failure. [ 93.951738][ T6776] name failslab, interval 1, probability 0, space 0, times 0 [ 93.964468][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.5.1061 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 93.975183][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.985283][ T6776] Call Trace: [ 93.988592][ T6776] [ 93.991588][ T6776] dump_stack_lvl+0xf2/0x150 [ 93.996272][ T6776] dump_stack+0x15/0x1a [ 94.000466][ T6776] should_fail_ex+0x223/0x230 [ 94.005178][ T6776] should_failslab+0x8f/0xb0 [ 94.009879][ T6776] __kmalloc_noprof+0xab/0x3f0 [ 94.014656][ T6776] ? security_shm_alloc+0x44/0x100 [ 94.019800][ T6776] security_shm_alloc+0x44/0x100 [ 94.024821][ T6776] newseg+0x1fd/0x690 [ 94.028825][ T6776] ? bpf_probe_read_compat_str+0xf8/0x130 [ 94.034579][ T6776] ipcget+0x318/0x4c0 [ 94.038601][ T6776] ? __bpf_trace_sys_enter+0x10/0x30 [ 94.043938][ T6776] __x64_sys_shmget+0xa6/0xd0 [ 94.048668][ T6776] x64_sys_call+0x28ec/0x2dc0 [ 94.053360][ T6776] do_syscall_64+0xc9/0x1c0 [ 94.057917][ T6776] ? clear_bhb_loop+0x55/0xb0 [ 94.062669][ T6776] ? clear_bhb_loop+0x55/0xb0 [ 94.067384][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.073320][ T6776] RIP: 0033:0x7fc74dc4fed9 [ 94.077761][ T6776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.097400][ T6776] RSP: 002b:00007fc74c2c7058 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 94.105893][ T6776] RAX: ffffffffffffffda RBX: 00007fc74de15fa0 RCX: 00007fc74dc4fed9 [ 94.113899][ T6776] RDX: 0000000000000800 RSI: 0000000000001000 RDI: 0000000000000000 [ 94.121928][ T6776] RBP: 00007fc74c2c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.129908][ T6776] R10: 00000000202a2000 R11: 0000000000000246 R12: 0000000000000001 [ 94.137906][ T6776] R13: 0000000000000000 R14: 00007fc74de15fa0 R15: 00007ffe71b3e438 [ 94.145909][ T6776] [ 94.154833][ T6764] bond5: entered promiscuous mode [ 94.159922][ T6764] bond5: entered allmulticast mode [ 94.165329][ T6764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.207126][ T29] audit: type=1400 audit(1733553265.867:3133): avc: denied { create } for pid=6778 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.227643][ T29] audit: type=1400 audit(1733553265.867:3134): avc: denied { write } for pid=6778 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.248193][ T29] audit: type=1400 audit(1733553265.867:3135): avc: denied { nlmsg_read } for pid=6778 comm="syz.4.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 94.269111][ T29] audit: type=1326 audit(1733553265.877:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6778 comm="syz.4.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f351ca1fed9 code=0x7ffc0000 [ 94.538453][ T6762] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.746222][ T6789] loop3: detected capacity change from 0 to 1024 [ 94.760717][ T36] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 393: padding at end of block bitmap is not set [ 94.787183][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 94.787212][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 94.787212][ T36] [ 94.787225][ T36] EXT4-fs (loop2): Total free blocks count 0 [ 94.787237][ T36] EXT4-fs (loop2): Free/Dirty block details [ 94.787251][ T36] EXT4-fs (loop2): free_blocks=0 [ 94.787263][ T36] EXT4-fs (loop2): dirty_blocks=16 [ 94.787284][ T36] EXT4-fs (loop2): Block reservation details [ 94.787294][ T36] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 94.799616][ T6790] loop5: detected capacity change from 0 to 2048 [ 94.840613][ T6796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1066'. [ 94.841611][ T6795] loop2: detected capacity change from 0 to 2048 [ 94.880389][ T6798] lo speed is unknown, defaulting to 1000 [ 94.968300][ T6805] loop3: detected capacity change from 0 to 2048 [ 95.013914][ T6805] loop3: p1 < > p4 [ 95.018385][ T6805] loop3: p4 size 8388608 extends beyond EOD, truncated [ 95.018621][ T6806] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.044589][ T6806] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 95.057832][ T6806] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.057832][ T6806] [ 95.067624][ T6806] EXT4-fs (loop2): Total free blocks count 0 [ 95.073621][ T6806] EXT4-fs (loop2): Free/Dirty block details [ 95.079642][ T6806] EXT4-fs (loop2): free_blocks=2415919104 [ 95.085444][ T6806] EXT4-fs (loop2): dirty_blocks=2080 [ 95.091472][ T6806] EXT4-fs (loop2): Block reservation details [ 95.097541][ T6806] EXT4-fs (loop2): i_reserved_data_blocks=130 [ 95.150521][ T2998] loop3: p1 < > p4 [ 95.151897][ T6812] loop4: detected capacity change from 0 to 2048 [ 95.161321][ T2998] loop3: p4 size 8388608 extends beyond EOD, truncated [ 95.215748][ T6821] loop0: detected capacity change from 0 to 512 [ 95.231161][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2034 with error 28 [ 95.244399][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 95.244399][ T11] [ 95.265109][ T6821] EXT4-fs: inline encryption not supported [ 95.267789][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 95.282232][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 95.352801][ T6812] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.360161][ T6834] loop5: detected capacity change from 0 to 512 [ 95.374253][ T6834] EXT4-fs: inline encryption not supported [ 95.378546][ T6821] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.400757][ T6821] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1077: bg 0: block 367: padding at end of block bitmap is not set [ 95.451872][ T6834] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.479719][ T6834] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1081: bg 0: block 367: padding at end of block bitmap is not set [ 95.486949][ T6843] loop2: detected capacity change from 0 to 2048 [ 95.516945][ T6836] bond6: entered promiscuous mode [ 95.522024][ T6836] bond6: entered allmulticast mode [ 95.527442][ T6836] 8021q: adding VLAN 0 to HW filter on device bond6 [ 95.554788][ T6836] sctp: [Deprecated]: syz.3.1082 (pid 6836) Use of int in max_burst socket option. [ 95.554788][ T6836] Use struct sctp_assoc_value instead [ 95.616539][ T6836] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.623867][ T6836] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 95.647707][ T6850] lo speed is unknown, defaulting to 1000 [ 95.648909][ T6852] loop4: detected capacity change from 0 to 2048 [ 95.669389][ T6836] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1082'. [ 95.707579][ T6857] syz.5.1089[6857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.707668][ T6857] syz.5.1089[6857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.719654][ T6852] loop4: p1 < > p4 [ 95.737813][ T6852] loop4: p4 size 8388608 extends beyond EOD, truncated [ 95.769470][ T2998] loop4: p1 < > p4 [ 95.774694][ T6857] syz.5.1089[6857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.781755][ T2998] loop4: p4 size 8388608 extends beyond EOD, truncated [ 95.850208][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 95.850516][ T6864] loop4: detected capacity change from 0 to 512 [ 95.868912][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 95.895470][ T6864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 95.903694][ T6864] System zones: 1-12 [ 95.908799][ T6864] EXT4-fs (loop4): orphan cleanup on readonly fs [ 95.918476][ T6864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1091: bg 0: block 328: padding at end of block bitmap is not set [ 95.937092][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 95.937204][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 95.960988][ T6864] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 95.972258][ T6864] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1091: invalid indirect mapped block 65280 (level 0) [ 95.989395][ T6864] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1091: attempt to clear invalid blocks 33619980 len 1 [ 96.006191][ T6864] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1091: invalid indirect mapped block 1819239214 (level 0) [ 96.028636][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1093'. [ 96.053337][ T6864] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1091: invalid indirect mapped block 1819239214 (level 1) [ 96.076625][ T6864] EXT4-fs (loop4): 1 orphan inode deleted [ 96.138884][ T6864] FAULT_INJECTION: forcing a failure. [ 96.138884][ T6864] name failslab, interval 1, probability 0, space 0, times 0 [ 96.151613][ T6864] CPU: 0 UID: 0 PID: 6864 Comm: syz.4.1091 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 96.160391][ T6873] loop5: detected capacity change from 0 to 512 [ 96.162371][ T6864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.162390][ T6864] Call Trace: [ 96.182065][ T6864] [ 96.185030][ T6864] dump_stack_lvl+0xf2/0x150 [ 96.189655][ T6864] dump_stack+0x15/0x1a [ 96.193831][ T6864] should_fail_ex+0x223/0x230 [ 96.198534][ T6864] ? __se_sys_mount+0xf7/0x2d0 [ 96.203331][ T6864] should_failslab+0x8f/0xb0 [ 96.207961][ T6864] __kmalloc_cache_noprof+0x4e/0x320 [ 96.213260][ T6864] ? memdup_user+0x9f/0xc0 [ 96.217741][ T6864] __se_sys_mount+0xf7/0x2d0 [ 96.222618][ T6864] __x64_sys_mount+0x67/0x80 [ 96.227303][ T6864] x64_sys_call+0x2c84/0x2dc0 [ 96.232042][ T6864] do_syscall_64+0xc9/0x1c0 [ 96.236555][ T6864] ? clear_bhb_loop+0x55/0xb0 [ 96.241367][ T6864] ? clear_bhb_loop+0x55/0xb0 [ 96.246050][ T6864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.251962][ T6864] RIP: 0033:0x7f351ca2167a [ 96.256386][ T6864] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.276120][ T6864] RSP: 002b:00007f351b096e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 96.284567][ T6864] RAX: ffffffffffffffda RBX: 00007f351b096f10 RCX: 00007f351ca2167a [ 96.292552][ T6864] RDX: 0000000020000f40 RSI: 0000000020000f00 RDI: 0000000000000000 [ 96.300600][ T6864] RBP: 0000000020000f40 R08: 00007f351b096f10 R09: 0000000001a4a438 [ 96.308581][ T6864] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000000020000f00 [ 96.316694][ T6864] R13: 00007f351b096ed0 R14: 0000000000000000 R15: 00000000200008c0 [ 96.324683][ T6864] [ 96.336155][ T6873] EXT4-fs: inline encryption not supported [ 96.367060][ T6873] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.381577][ T6878] loop3: detected capacity change from 0 to 256 [ 96.405414][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 96.417741][ T6873] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1095: bg 0: block 367: padding at end of block bitmap is not set [ 96.440697][ T6880] loop4: detected capacity change from 0 to 2048 [ 96.502944][ T6886] loop5: detected capacity change from 0 to 512 [ 96.509574][ T6886] EXT4-fs: inline encryption not supported [ 96.567643][ T6886] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.585367][ T6888] loop3: detected capacity change from 0 to 2048 [ 96.596673][ T6886] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1100: bg 0: block 367: padding at end of block bitmap is not set [ 96.649422][ T6894] lo speed is unknown, defaulting to 1000 [ 96.662211][ T6888] loop3: p1 < > p4 [ 96.676812][ T6888] loop3: p4 size 8388608 extends beyond EOD, truncated [ 96.704218][ T6899] loop5: detected capacity change from 0 to 256 [ 96.718482][ T6897] syz.4.1104[6897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.718611][ T6897] syz.4.1104[6897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.786009][ T6897] syz.4.1104[6897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.869980][ T6904] bond7: entered promiscuous mode [ 96.887303][ T6904] bond7: entered allmulticast mode [ 96.933510][ T6904] 8021q: adding VLAN 0 to HW filter on device bond7 [ 96.957984][ T6910] sctp: [Deprecated]: syz.3.1106 (pid 6910) Use of int in max_burst socket option. [ 96.957984][ T6910] Use struct sctp_assoc_value instead [ 97.005404][ T6904] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.012916][ T6904] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 97.035309][ T6904] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1106'. [ 97.081815][ T6916] loop4: detected capacity change from 0 to 512 [ 97.143672][ T6922] loop2: detected capacity change from 0 to 2048 [ 97.150727][ T6916] EXT4-fs: inline encryption not supported [ 97.171604][ T6916] EXT4-fs mount: 35 callbacks suppressed [ 97.171622][ T6916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.210942][ T6916] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.248747][ T6927] loop5: detected capacity change from 0 to 512 [ 97.263543][ T6927] EXT4-fs: inline encryption not supported [ 97.280189][ T6916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1111: bg 0: block 367: padding at end of block bitmap is not set [ 97.310573][ T6933] loop2: detected capacity change from 0 to 1764 [ 97.321301][ T6933] ISOFS: unable to read i-node block [ 97.321665][ T6927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.326671][ T6933] isofs_fill_super: get root inode failed [ 97.344182][ T6927] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.356483][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.376966][ T6933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'. [ 97.381040][ T6927] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1115: bg 0: block 367: padding at end of block bitmap is not set [ 97.394265][ T6933] xt_policy: output policy not valid in PREROUTING and INPUT [ 97.439998][ T6942] FAULT_INJECTION: forcing a failure. [ 97.439998][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 97.452718][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.4.1119 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 97.463429][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.473532][ T6942] Call Trace: [ 97.476820][ T6942] [ 97.479757][ T6942] dump_stack_lvl+0xf2/0x150 [ 97.484385][ T6942] dump_stack+0x15/0x1a [ 97.488557][ T6942] should_fail_ex+0x223/0x230 [ 97.493356][ T6942] ? audit_log_d_path+0x96/0x250 [ 97.498391][ T6942] should_failslab+0x8f/0xb0 [ 97.503005][ T6942] __kmalloc_cache_noprof+0x4e/0x320 [ 97.508304][ T6942] audit_log_d_path+0x96/0x250 [ 97.513112][ T6942] ? __rcu_read_unlock+0x4e/0x70 [ 97.518212][ T6942] audit_log_d_path_exe+0x42/0x70 [ 97.523379][ T6942] audit_log_task+0x192/0x1c0 [ 97.528064][ T6942] audit_seccomp+0x68/0x130 [ 97.532601][ T6942] __seccomp_filter+0x6fa/0x1180 [ 97.537559][ T6942] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 97.543263][ T6942] ? vfs_write+0x596/0x920 [ 97.547691][ T6942] ? __schedule+0x6fa/0x930 [ 97.552211][ T6942] __secure_computing+0x9f/0x1c0 [ 97.557168][ T6942] syscall_trace_enter+0xd1/0x1f0 [ 97.562284][ T6942] do_syscall_64+0xaa/0x1c0 [ 97.566794][ T6942] ? clear_bhb_loop+0x55/0xb0 [ 97.571477][ T6942] ? clear_bhb_loop+0x55/0xb0 [ 97.576176][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.582144][ T6942] RIP: 0033:0x7f351ca1fed9 [ 97.586562][ T6942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.606202][ T6942] RSP: 002b:00007f351b097058 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 97.614622][ T6942] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351ca1fed9 [ 97.622619][ T6942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 97.630597][ T6942] RBP: 00007f351b0970a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.638612][ T6942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.646596][ T6942] R13: 0000000000000000 R14: 00007f351cbe5fa0 R15: 00007ffe19e2b038 [ 97.654618][ T6942] [ 97.662290][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.679678][ T6945] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1122'. [ 97.784355][ T6957] loop4: detected capacity change from 0 to 2048 [ 97.827476][ T6957] loop4: p1 < > p4 [ 97.832069][ T6957] loop4: p4 size 8388608 extends beyond EOD, truncated [ 97.867060][ T6962] loop5: detected capacity change from 0 to 2048 [ 97.962217][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 97.973125][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 98.022474][ T6971] loop5: detected capacity change from 0 to 2048 [ 98.040778][ T6973] lo speed is unknown, defaulting to 1000 [ 98.067747][ T6971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.097545][ T6975] bond7: entered promiscuous mode [ 98.102625][ T6975] bond7: entered allmulticast mode [ 98.138313][ T6975] 8021q: adding VLAN 0 to HW filter on device bond7 [ 98.164047][ T6984] sctp: [Deprecated]: syz.2.1135 (pid 6984) Use of int in max_burst socket option. [ 98.164047][ T6984] Use struct sctp_assoc_value instead [ 98.206587][ T6975] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.224567][ T6975] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 98.246285][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.265247][ T6984] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1135'. [ 98.300482][ T6989] loop4: detected capacity change from 0 to 512 [ 98.307188][ T6991] siw: device registration error -23 [ 98.317744][ T6989] EXT4-fs: inline encryption not supported [ 98.376859][ T6989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.391047][ T6997] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1142'. [ 98.407014][ T6989] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.419278][ T6995] loop3: detected capacity change from 0 to 2048 [ 98.428605][ T6989] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1140: bg 0: block 367: padding at end of block bitmap is not set [ 98.457654][ T6995] loop3: p1 < > p4 [ 98.479089][ T6995] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.503441][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.548246][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 98.548262][ T29] audit: type=1400 audit(1733553270.247:3362): avc: denied { mounton } for pid=6992 comm="syz.3.1141" path="/218/bus" dev="tmpfs" ino=1172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.581269][ T2998] loop3: p1 < > p4 [ 98.602507][ T2998] loop3: p4 size 8388608 extends beyond EOD, truncated [ 98.664067][ T29] audit: type=1400 audit(1733553270.357:3363): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 98.682528][ T7005] loop5: detected capacity change from 0 to 2048 [ 98.712604][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 98.718693][ T4304] udevd[4304]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 98.754789][ T29] audit: type=1400 audit(1733553270.447:3364): avc: denied { create } for pid=7006 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.833177][ T29] audit: type=1400 audit(1733553270.467:3365): avc: denied { bind } for pid=7006 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.853233][ T29] audit: type=1400 audit(1733553270.467:3366): avc: denied { write } for pid=7006 comm="syz.3.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.930539][ T29] audit: type=1400 audit(1733553270.537:3367): avc: denied { egress } for pid=7002 comm="syz.4.1144" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 98.954169][ T29] audit: type=1400 audit(1733553270.537:3368): avc: denied { sendto } for pid=7002 comm="syz.4.1144" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 98.977611][ T29] audit: type=1326 audit(1733553270.607:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74dc4fed9 code=0x7ffc0000 [ 99.001126][ T29] audit: type=1326 audit(1733553270.607:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74dc4fed9 code=0x7ffc0000 [ 99.024592][ T29] audit: type=1326 audit(1733553270.607:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7010 comm="syz.5.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc74dc4fed9 code=0x7ffc0000 [ 99.058601][ T7013] loop3: detected capacity change from 0 to 2048 [ 99.081764][ T7021] siw: device registration error -23 [ 99.115445][ T7013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.137309][ T7013] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.137621][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1154'. [ 99.185256][ T7022] lo speed is unknown, defaulting to 1000 [ 99.280684][ T7038] loop0: detected capacity change from 0 to 512 [ 99.296172][ T7038] EXT4-fs: inline encryption not supported [ 99.303113][ T7036] loop2: detected capacity change from 0 to 2048 [ 99.321433][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.410735][ T7038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.451800][ T7046] bond8: entered promiscuous mode [ 99.456894][ T7046] bond8: entered allmulticast mode [ 99.462242][ T7046] 8021q: adding VLAN 0 to HW filter on device bond8 [ 99.475088][ T7038] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.516688][ T7038] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1156: bg 0: block 367: padding at end of block bitmap is not set [ 99.541283][ T7053] sctp: [Deprecated]: syz.3.1160 (pid 7053) Use of int in max_burst socket option. [ 99.541283][ T7053] Use struct sctp_assoc_value instead [ 99.588456][ T7046] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.608139][ T7055] siw: device registration error -23 [ 99.616519][ T7046] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 99.640934][ T7046] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1160'. [ 99.776101][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.820363][ T7066] loop0: detected capacity change from 0 to 512 [ 99.828452][ T7066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.859582][ T7064] loop5: detected capacity change from 0 to 2048 [ 99.861887][ T7069] lo speed is unknown, defaulting to 1000 [ 99.878686][ T7066] EXT4-fs (loop0): 1 truncate cleaned up [ 99.884747][ T7066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.931106][ T7064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.939025][ T7076] FAULT_INJECTION: forcing a failure. [ 99.939025][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 99.956755][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.4.1173 Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 99.967505][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.977729][ T7076] Call Trace: [ 99.981014][ T7076] [ 99.983947][ T7076] dump_stack_lvl+0xf2/0x150 [ 99.988584][ T7076] dump_stack+0x15/0x1a [ 99.992765][ T7076] should_fail_ex+0x223/0x230 [ 99.997502][ T7076] should_failslab+0x8f/0xb0 [ 100.002136][ T7076] kmem_cache_alloc_noprof+0x52/0x320 [ 100.007523][ T7076] ? getname_flags+0x81/0x3b0 [ 100.012275][ T7076] getname_flags+0x81/0x3b0 [ 100.016842][ T7076] user_path_at+0x26/0x120 [ 100.021366][ T7076] __se_sys_mount+0x248/0x2d0 [ 100.026069][ T7076] __x64_sys_mount+0x67/0x80 [ 100.030677][ T7076] x64_sys_call+0x2c84/0x2dc0 [ 100.035361][ T7076] do_syscall_64+0xc9/0x1c0 [ 100.039887][ T7076] ? clear_bhb_loop+0x55/0xb0 [ 100.044567][ T7076] ? clear_bhb_loop+0x55/0xb0 [ 100.049313][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.055228][ T7076] RIP: 0033:0x7f351ca1fed9 [ 100.059645][ T7076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.079351][ T7076] RSP: 002b:00007f351b097058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.087843][ T7076] RAX: ffffffffffffffda RBX: 00007f351cbe5fa0 RCX: 00007f351ca1fed9 [ 100.095900][ T7076] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 100.103874][ T7076] RBP: 00007f351b0970a0 R08: 0000000020000080 R09: 0000000000000000 [ 100.111848][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.119894][ T7076] R13: 0000000000000000 R14: 00007f351cbe5fa0 R15: 00007ffe19e2b038 [ 100.127920][ T7076] [ 100.168402][ T7064] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.188383][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.235197][ T7081] loop4: detected capacity change from 0 to 2048 [ 100.239251][ T7086] siw: device registration error -23 [ 100.305347][ T7090] loop2: detected capacity change from 0 to 512 [ 100.312083][ T7090] EXT4-fs: inline encryption not supported [ 100.392700][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.603772][ T7098] lo speed is unknown, defaulting to 1000 [ 100.901646][ T7105] loop4: detected capacity change from 0 to 512 [ 100.936438][ T7105] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.946512][ T7105] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 101.063198][ T7090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.086292][ T7090] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.121146][ T7105] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.128066][ T5175] ================================================================== [ 101.136246][ T5175] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 101.143567][ T5175] [ 101.145919][ T5175] read-write to 0xffff888237d2ba28 of 8 bytes by task 7107 on cpu 1: [ 101.154004][ T5175] __find_get_block+0x434/0x8a0 [ 101.158975][ T5175] bdev_getblk+0x30/0x3b0 [ 101.163355][ T5175] __ext4_get_inode_loc+0x2f7/0x910 [ 101.168585][ T5175] ext4_reserve_inode_write+0xb0/0x200 [ 101.174091][ T5175] __ext4_mark_inode_dirty+0x8e/0x440 [ 101.179496][ T5175] ext4_dirty_inode+0x91/0xb0 [ 101.184218][ T5175] __mark_inode_dirty+0x166/0x7e0 [ 101.189266][ T5175] file_update_time+0x285/0x2b0 [ 101.194148][ T5175] ext4_page_mkwrite+0x19e/0xb70 [ 101.198729][ T7090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1179: bg 0: block 367: padding at end of block bitmap is not set [ 101.199092][ T5175] handle_mm_fault+0x12f7/0x2ac0 [ 101.218276][ T5175] exc_page_fault+0x3b9/0x650 [ 101.222993][ T5175] asm_exc_page_fault+0x26/0x30 [ 101.227925][ T5175] [ 101.230264][ T5175] read to 0xffff888237d2ba28 of 8 bytes by task 5175 on cpu 0: [ 101.237830][ T5175] has_bh_in_lru+0x35/0x1f0 [ 101.242368][ T5175] smp_call_function_many_cond+0x2d5/0xc20 [ 101.248202][ T5175] on_each_cpu_cond_mask+0x3c/0x90 [ 101.253374][ T5175] invalidate_bh_lrus+0x2a/0x30 [ 101.258246][ T5175] blkdev_flush_mapping+0x9b/0x1a0 [ 101.263369][ T5175] bdev_release+0x2f9/0x420 [ 101.267880][ T5175] blkdev_release+0x15/0x20 [ 101.272435][ T5175] __fput+0x17a/0x6d0 [ 101.276425][ T5175] ____fput+0x1c/0x30 [ 101.280415][ T5175] task_work_run+0x13a/0x1a0 [ 101.285012][ T5175] syscall_exit_to_user_mode+0xa8/0x120 [ 101.290577][ T5175] do_syscall_64+0xd6/0x1c0 [ 101.295082][ T5175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.301012][ T5175] [ 101.303337][ T5175] value changed: 0x0000000000000000 -> 0xffff8881064cd2d8 [ 101.310460][ T5175] [ 101.312790][ T5175] Reported by Kernel Concurrency Sanitizer on: [ 101.318938][ T5175] CPU: 0 UID: 0 PID: 5175 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00239-g9a6e8c7c3a02 #0 [ 101.329796][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.339857][ T5175] ================================================================== [ 101.349777][ T7116] siw: device registration error -23 [ 101.393702][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.